
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft
File: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft (raw, json)
Hash identifier: v70dwWoCn02HEqswGP1Xoj4tRgMKqZQSdNb4G82lYYM=
Subject key identifier: B8:25:52:CC:FB:B7:1D:49:5C:98:C3:1B:4E:38:1C:F0:DD:1C:74:96
Authority key identifier: 7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08
Certificate issuer: /CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608
Certificate serial: 1C00FA8AF07E002CCDF945033367359F06EB6387
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft
Manifest number: 7F
Signing time: Tue 14 Jul 2026 02:50:15 +0000
Manifest this update: Tue 14 Jul 2026 02:45:15 +0000
Manifest next update: Wed 15 Jul 2026 03:18:15 +0000
Files and hashes: 1: 3130332e33362e3230342e302f32322d3232203d3e203233363530.roa (hash: Nz+r/dZKAwE/9JB0MxhKtZjDSMYb6nHSikzBbLCS+DM=)
2: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl (hash: SbrqpQtSVgoj7wWjrRtkqXwSmHvuEXh5Z1eQERzXce8=)
3: 3130332e33362e3139322e302f32322d3232203d3e203233363530.roa (hash: M765CopqZf6j7SPn53UaW0BZUmGFf3AOcTsTTNyVaoA=)
4: 3130332e33362e3230302e302f32322d3232203d3e203233363530.roa (hash: 8dDfwQ79qdpVpYeaUnX/qx0QM5Ju+lrPZd8Vtd9vWpk=)
5: 3130332e33362e3139362e302f32322d3232203d3e203233363530.roa (hash: IZ4XVYgqKmGtS8wgseXWsX65eKc4WUGyUyoHldRsixk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl
rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 03:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:00:fa:8a:f0:7e:00:2c:cd:f9:45:03:33:67:35:9f:06:eb:63:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608
Validity
Not Before: Jul 14 02:45:15 2026 GMT
Not After : Jul 15 03:18:15 2026 GMT
Subject: CN=B82552CCFBB71D495C98C31B4E381CF0DD1C7496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4d:22:8d:27:92:e0:1c:2e:e7:b9:49:27:18:
79:c9:e3:bd:31:c1:82:23:4c:d2:36:76:6b:f8:3e:
ca:45:18:38:90:68:ea:d2:94:0b:47:1e:28:90:89:
e8:0d:68:3d:24:6f:f5:9d:b4:0f:4f:af:1a:2d:a9:
15:fd:74:fa:e0:39:aa:79:50:5e:0d:cb:0f:27:2e:
65:71:b8:6b:e1:49:42:da:08:28:72:97:38:d3:0c:
16:cd:b3:76:a6:4c:12:31:b4:5d:1f:fa:f1:9d:f7:
3a:1b:b1:02:0b:41:8d:e8:a8:bd:98:29:0d:a7:d6:
bf:8a:11:ef:b4:54:20:5b:b3:13:8e:65:5a:f1:81:
31:42:43:2c:26:0e:6a:e3:33:f9:e7:e5:5f:23:cf:
99:43:8f:d5:6c:f8:5b:bc:11:62:7a:89:8d:ba:f1:
a7:b1:8d:2d:66:7d:fa:a6:f7:c8:33:ba:bc:f6:a7:
1b:0e:a6:b9:e4:42:f2:fc:bd:8f:22:1b:83:d3:b8:
2d:c7:c6:b0:de:c1:fc:dd:e0:d9:69:e9:1a:e4:2a:
d2:56:46:6e:79:8f:99:bd:61:fe:73:5a:b3:79:fb:
b6:7c:54:f1:68:9f:73:29:2d:37:7f:76:48:47:16:
0c:33:40:7a:38:6d:6f:4d:36:c9:d9:c2:df:90:e8:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:52:CC:FB:B7:1D:49:5C:98:C3:1B:4E:38:1C:F0:DD:1C:74:96
X509v3 Authority Key Identifier:
keyid:7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:21:b8:2c:01:dc:c8:00:7f:91:f3:4b:3e:d9:6e:1f:45:84:
ca:ac:08:d6:29:26:fe:1b:42:37:c5:f6:58:ed:72:b8:f6:42:
fd:68:e9:22:55:30:e7:53:a0:12:6b:be:ec:31:0f:ee:53:7f:
96:53:2b:31:2f:dc:b7:82:c6:bb:cd:80:f5:8b:0c:85:3d:b0:
1b:04:da:af:b1:55:43:92:a6:d7:99:49:4b:65:f5:27:b2:fb:
17:52:bb:54:b6:0c:09:eb:fd:84:56:46:4d:14:ea:8b:70:2b:
1a:a8:7b:5e:d1:9b:9d:07:48:13:68:06:3a:d9:67:cd:bc:b6:
0b:02:5f:dd:ef:54:c8:93:e1:ae:2f:81:ed:69:87:1d:7c:77:
c7:1e:e9:c8:aa:a8:35:e3:6c:ed:47:11:97:78:02:23:35:ff:
d2:fd:c6:c4:6e:d1:3d:96:fa:0f:c2:66:15:1c:44:53:18:b3:
ef:65:ff:8f:99:71:57:38:fe:b2:50:ea:8c:f3:0d:45:b4:07:
05:27:ad:be:9d:1b:3b:25:d0:19:2b:66:2c:54:83:65:4f:76:
b4:5e:e8:0b:ca:b9:8f:a4:e1:db:70:a1:12:40:99:79:2e:4e:
7a:a7:c4:86:d1:1c:bb:0c:a7:e0:f8:b4:44:d8:11:fc:26:d0:
1c:42:d0:75
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUHAD6ivB+ACzN+UUDM2c1nwbrY4cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4
OUZFNzYwODAeFw0yNjA3MTQwMjQ1MTVaFw0yNjA3MTUwMzE4MTVaMDMxMTAvBgNV
BAMTKEI4MjU1MkNDRkJCNzFENDk1Qzk4QzMxQjRFMzgxQ0YwREQxQzc0OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiTSKNJ5LgHC7nuUknGHnJ470x
wYIjTNI2dmv4PspFGDiQaOrSlAtHHiiQiegNaD0kb/WdtA9PrxotqRX9dPrgOap5
UF4Nyw8nLmVxuGvhSULaCChylzjTDBbNs3amTBIxtF0f+vGd9zobsQILQY3oqL2Y
KQ2n1r+KEe+0VCBbsxOOZVrxgTFCQywmDmrjM/nn5V8jz5lDj9Vs+Fu8EWJ6iY26
8aexjS1mffqm98gzurz2pxsOprnkQvL8vY8iG4PTuC3HxrDewfzd4Nlp6RrkKtJW
Rm55j5m9Yf5zWrN5+7Z8VPFon3MpLTd/dkhHFgwzQHo4bW9NNsnZwt+Q6OFLAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUuCVSzPu3HUlcmMMbTjgc8N0cdJYwHwYDVR0j
BBgwFoAUeikWuaL+UH6f+oEYgcK3gYn+dggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMxOTk3OTEwNTY4MTQxMS8wLzdBMjkxNkI5QTJGRTUwN0U5RkZBODExODgxQzJC
NzgxODlGRTc2MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4OUZFNzYwOC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTYzMTk5NzkxMDU2ODE0MTEvMC83QTI5MTZCOUEyRkU1
MDdFOUZGQTgxMTg4MUMyQjc4MTg5RkU3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCG4LAHcyAB/
kfNLPtluH0WEyqwI1ikm/htCN8X2WO1yuPZC/WjpIlUw51OgEmu+7DEP7lN/llMr
MS/ct4LGu82A9YsMhT2wGwTar7FVQ5Km15lJS2X1J7L7F1K7VLYMCev9hFZGTRTq
i3ArGqh7XtGbnQdIE2gGOtlnzby2CwJf3e9UyJPhri+B7WmHHXx3xx7pyKqoNeNs
7UcRl3gCIzX/0v3GxG7RPZb6D8JmFRxEUxiz72X/j5lxVzj+slDqjPMNRbQHBSet
vp0bOyXQGStmLFSDZU92tF7oC8q5j6Th23ChEkCZeS5OeqfEhtEcuwyn4Pi0RNgR
/CbQHELQdQ==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:07:43 2026 by rpki-client