
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
File: 7F04F6FCE22750607E54E558E039E0F551D3135D.mft (raw, json)
Hash identifier: IMR1m+Hx05NijkWXgcYRdr5MYk9FL6Eyoie/OZ1wRb8=
Subject key identifier: 01:38:F5:E2:72:C7:CC:86:82:64:76:53:BA:98:41:89:02:56:64:D9
Authority key identifier: 7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D
Certificate issuer: /CN=7F04F6FCE22750607E54E558E039E0F551D3135D
Certificate serial: 7483CC7DBEA426E26DB9527702318A1135EE580F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
Manifest number: 7B
Signing time: Tue 14 Jul 2026 16:51:43 +0000
Manifest this update: Tue 14 Jul 2026 16:46:43 +0000
Manifest next update: Wed 15 Jul 2026 17:05:43 +0000
Files and hashes: 1: 7F04F6FCE22750607E54E558E039E0F551D3135D.crl (hash: qWs/L/SUOdco7UQ/V3RMaUMTz/JVobukNLWJOwLJY6I=)
2: 323430313a636130303a3a2f33322d3332203d3e203233383431.roa (hash: Su8W1ryH6AcZbU5mbEZVZDmU61kG94jGmfhPCm2jvgw=)
3: 3130332e312e32302e302f32322d3232203d3e203233383431.roa (hash: VysPkdD4l/g9blPW2SJoFaVCrMMxGsdFC4KZtokwYps=)
4: 3232312e3132392e302e302f31362d3136203d3e203233383431.roa (hash: LXzAf6+hhsdt/TNw4PFtDGl7SS8I2bBwjZ8Gp200CMo=)
5: 3231312e3134382e3136302e302f31392d3139203d3e203233383431.roa (hash: bMsjW1jbE0mk/8BJ/0nz3O3UXsGlGA3e6jddE9uPDS4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 17:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:83:cc:7d:be:a4:26:e2:6d:b9:52:77:02:31:8a:11:35:ee:58:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F04F6FCE22750607E54E558E039E0F551D3135D
Validity
Not Before: Jul 14 16:46:43 2026 GMT
Not After : Jul 15 17:05:43 2026 GMT
Subject: CN=0138F5E272C7CC8682647653BA984189025664D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:6b:23:c1:25:1e:87:bb:c3:2e:1a:c5:11:
8d:6c:90:6f:55:1a:14:b3:80:35:40:7e:f6:28:b2:
7c:9f:6d:a5:05:98:51:30:15:fc:c2:0a:93:ee:24:
cc:29:99:4f:0a:ad:90:d2:55:7c:49:15:b0:78:f7:
b2:60:ed:84:3a:78:65:c2:12:ec:8a:7d:d2:a7:e1:
85:79:f9:4c:6b:ac:32:0f:5f:2d:29:19:bd:4a:81:
7f:1e:73:c2:a7:c8:b6:78:75:e8:d9:41:a9:e8:fb:
7c:b0:2f:28:c8:ce:7e:7b:11:f8:d3:69:9b:0e:1d:
f7:0d:19:9d:e2:ed:0d:05:55:6c:3c:8e:92:b7:7d:
20:18:68:fe:c8:ce:65:6c:bb:55:61:f2:d5:75:b5:
3f:69:4e:11:ee:a6:55:7e:21:cc:3b:0c:9f:47:cb:
42:88:63:55:4a:09:c8:53:97:c1:24:de:ae:f1:2f:
ed:41:ec:00:03:0b:f2:58:6b:33:69:07:f3:ce:21:
bf:23:9c:33:3f:29:26:18:4d:77:3d:ea:83:70:fc:
45:71:cd:4e:45:d4:fa:76:aa:00:9d:46:db:e2:bf:
01:d6:56:36:7e:d4:f5:ca:12:a1:f1:85:3e:4a:4a:
50:a9:32:cf:b4:9a:36:b7:86:5a:f9:26:23:f5:81:
3f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:38:F5:E2:72:C7:CC:86:82:64:76:53:BA:98:41:89:02:56:64:D9
X509v3 Authority Key Identifier:
keyid:7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:61:28:8c:53:33:ca:24:d5:4d:60:de:87:78:83:c8:24:a7:
ce:df:21:34:ae:ce:03:34:d4:be:d8:d4:cd:fa:d4:bc:7a:0a:
de:ec:04:5b:9a:1b:bc:29:7b:ca:5b:c5:cc:8a:65:0e:a2:d4:
09:af:e8:5e:15:26:49:ea:3c:41:79:1a:9f:f0:b9:b1:ed:0d:
cc:17:ef:11:0f:66:5d:1a:f1:ca:4c:95:2d:f5:6e:ee:31:6c:
b5:f9:bf:24:7a:6d:31:60:be:30:c1:8a:36:3a:52:80:3f:07:
a2:12:42:f4:5d:69:c7:ad:03:b1:f0:5e:68:d1:80:e4:88:cc:
30:f8:a2:90:8e:25:9c:5e:94:81:30:78:b9:00:00:e3:67:cf:
0d:cd:64:78:ca:e7:49:2c:d8:9e:b8:46:e4:bd:d5:c7:86:a5:
9a:df:fc:1f:2f:11:d1:7c:c5:95:f8:33:4f:aa:53:66:63:b7:
ea:8d:30:e5:31:d5:6e:42:45:81:ef:ad:b4:0f:db:2f:20:7d:
cc:fe:92:7e:66:af:66:71:8b:70:54:89:24:7d:ad:ce:71:73:
5e:2f:28:94:86:da:53:de:23:18:b8:71:62:f9:4d:94:37:02:
25:7d:19:92:8f:2c:32:ec:92:f5:6e:73:56:bd:d5:08:85:44:
8c:c8:a8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:07:43 2026 by rpki-client