
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
File: 7F04F6FCE22750607E54E558E039E0F551D3135D.mft (raw, json)
Hash identifier: hJFwxQoUsDqbchpofX4kXAW+aVdN875spY/3SFcABB8=
Subject key identifier: 32:B7:54:88:83:5A:FC:73:94:68:7C:28:F2:A2:21:0A:D5:22:79:29
Authority key identifier: 7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D
Certificate issuer: /CN=7F04F6FCE22750607E54E558E039E0F551D3135D
Certificate serial: 4EDAA84D945DA158BF7B2919ACD94B35421FAF49
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
Manifest number: B7
Signing time: Fri 28 Aug 2026 06:47:42 +0000
Manifest this update: Fri 28 Aug 2026 06:42:42 +0000
Manifest next update: Mon 31 Aug 2026 07:52:42 +0000
Files and hashes: 1: 3130332e312e32302e302f32322d3232203d3e203233383431.roa (hash: VysPkdD4l/g9blPW2SJoFaVCrMMxGsdFC4KZtokwYps=)
2: 3232312e3132392e302e302f31362d3136203d3e203233383431.roa (hash: LXzAf6+hhsdt/TNw4PFtDGl7SS8I2bBwjZ8Gp200CMo=)
3: 3231312e3134382e3136302e302f31392d3139203d3e203233383431.roa (hash: bMsjW1jbE0mk/8BJ/0nz3O3UXsGlGA3e6jddE9uPDS4=)
4: 323430313a636130303a3a2f33322d3332203d3e203233383431.roa (hash: Su8W1ryH6AcZbU5mbEZVZDmU61kG94jGmfhPCm2jvgw=)
5: 7F04F6FCE22750607E54E558E039E0F551D3135D.crl (hash: enZeEMxaWctQ5n3idSFesfB3f/K16sMjJuhaTJeMtnc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 07:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:da:a8:4d:94:5d:a1:58:bf:7b:29:19:ac:d9:4b:35:42:1f:af:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F04F6FCE22750607E54E558E039E0F551D3135D
Validity
Not Before: Aug 28 06:42:42 2026 GMT
Not After : Aug 31 07:52:42 2026 GMT
Subject: CN=32B75488835AFC7394687C28F2A2210AD5227929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:39:72:a2:d7:af:12:09:f6:88:cd:91:2c:e5:
13:09:aa:a5:b9:c9:64:e9:08:d0:98:92:a3:57:14:
c3:d6:12:4a:3c:05:de:49:fe:9c:ff:9d:d6:ff:4b:
06:d6:34:f5:85:96:da:69:7b:72:76:e3:8c:0d:89:
d3:87:af:8c:bb:c3:61:bd:f0:69:05:b0:0e:31:0f:
52:47:d3:99:d0:56:20:b4:b2:46:f3:60:74:e4:94:
33:77:17:10:d5:6e:e6:1b:fd:c1:f7:e7:23:59:c7:
02:30:bf:04:62:20:37:e7:46:14:66:6a:ae:51:ea:
75:7a:66:b6:11:ae:9a:d7:c5:49:47:7d:6a:3a:08:
7f:fc:50:91:6a:83:b3:43:01:f6:b0:fe:d6:1f:a9:
91:f4:ce:7f:34:32:27:32:97:6e:82:c6:53:90:29:
70:ec:c2:3f:ef:80:ec:91:52:07:3a:3f:27:1f:36:
91:2f:64:1c:be:40:f8:54:3c:dd:c9:0a:1a:6e:7d:
d2:ea:bf:54:dc:97:c7:35:d9:50:44:11:d8:5f:69:
65:1b:ca:38:05:3c:de:e4:bb:d1:e4:21:7e:26:54:
2a:c6:fb:d0:30:b5:04:5a:b8:d8:9a:d8:8e:b7:6a:
84:74:47:80:a2:1e:14:c6:df:4f:9c:23:74:b2:33:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B7:54:88:83:5A:FC:73:94:68:7C:28:F2:A2:21:0A:D5:22:79:29
X509v3 Authority Key Identifier:
keyid:7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:a1:53:17:92:25:bf:ec:4f:73:4c:32:a6:fb:d0:46:b3:4c:
c5:f5:13:be:d1:0e:f7:0a:6c:16:23:99:b2:31:60:19:17:c4:
dd:58:60:88:10:8a:18:b5:73:5d:fc:29:27:fa:2a:9c:36:bd:
10:d6:59:94:65:10:02:94:6b:41:f7:d8:cf:86:3e:07:34:49:
06:25:7a:44:bf:38:dd:ec:ef:43:6c:e5:f4:27:77:0a:ce:83:
77:e9:bc:3b:78:c2:52:b0:4d:ab:f8:4f:60:a3:4e:82:2e:86:
20:8d:d4:d6:9d:2a:b3:13:b4:6b:55:83:63:0e:70:c4:23:8a:
4c:0d:55:b6:2d:4e:6a:f0:59:e9:c1:f1:d1:57:6b:2b:fa:28:
d9:ab:a6:f3:bd:b2:59:ac:43:5e:c2:0e:ca:1f:7f:8b:1b:b5:
b4:b0:b9:59:f1:2f:30:23:1e:26:5b:9c:8a:01:7c:3b:43:28:
4b:fb:47:06:2d:4e:b8:c9:70:0e:a0:4d:f9:fe:6e:e2:99:88:
db:fe:b0:cb:17:36:fb:62:ae:29:af:7b:d1:c8:5c:f6:cf:82:
2e:82:06:77:48:cf:55:f0:14:c7:6f:7d:e3:5c:2a:35:aa:77:
28:c6:c5:04:21:2d:74:3f:2e:cb:2c:89:23:ab:ca:2b:d5:c5:
a5:a0:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:06:41 2026 by rpki-client