
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
File: 1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft (raw, json)
Hash identifier: RFINA/aoMuwXTkGyI2kWdTJcpg/hO+/LFWarLfj/O44=
Subject key identifier: F7:EB:E1:2D:05:67:5B:A8:3F:06:31:08:8E:37:3D:15:B4:03:CD:08
Authority key identifier: 1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1
Certificate issuer: /CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
Certificate serial: 0D1CC86BF09B846AE27AE1F41464438D9D9C1F70
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
Manifest number: 78
Signing time: Tue 14 Jul 2026 02:45:15 +0000
Manifest this update: Tue 14 Jul 2026 02:40:15 +0000
Manifest next update: Wed 15 Jul 2026 05:05:15 +0000
Files and hashes: 1: 34332e3234322e39362e302f32322d3332203d3e20313339313138.roa (hash: VDMcp5l8FistRmUvRq8PMpiAPTDY6t5oa9rYeoWoY2o=)
2: 34332e3234322e39362e302f32322d3232203d3e2034383132.roa (hash: Zxv6uhIxhx7VGTPbbGyRLQcjWlJZ2Al9jL46q3enaIw=)
3: 1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl (hash: nweRP2Hy/cRUyWyyeU9kQXiyZFHNnVKzipuT1QzZLdg=)
4: 3130332e3135362e36382e302f32332d3233203d3e2034383132.roa (hash: 7bejjbNQ3v0uT78boBdtD0q+BBCNI2h6V6F6ctkt6zc=)
5: 3130332e3135362e36382e302f32332d3332203d3e20313339313138.roa (hash: JJeH7/e0S+vcP9rIL80aRLn8d98yMXZivh1TWBvd1eg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl
rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 05:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:1c:c8:6b:f0:9b:84:6a:e2:7a:e1:f4:14:64:43:8d:9d:9c:1f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
Validity
Not Before: Jul 14 02:40:15 2026 GMT
Not After : Jul 15 05:05:15 2026 GMT
Subject: CN=F7EBE12D05675BA83F0631088E373D15B403CD08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:b8:93:b7:92:84:67:d5:a3:19:c7:f5:d4:
3e:86:bb:f3:5b:26:60:b9:e2:ff:22:97:2d:6d:0a:
f1:13:80:2d:09:4b:86:27:74:9f:d6:98:10:6e:b0:
cf:ea:9b:40:67:2b:86:70:86:0c:f4:df:47:c5:1e:
ee:03:9f:9b:4f:bb:e2:80:48:c3:7a:e9:49:88:0f:
f1:d9:0e:d2:e2:d4:70:a2:dc:ae:a5:2b:50:cd:4b:
05:ff:cf:1e:f3:49:a6:e0:5a:86:97:e3:d6:3e:28:
fe:04:2b:81:62:9d:18:bd:d4:9e:06:fc:a1:98:64:
8c:17:9b:8c:59:eb:28:62:1e:f5:95:8e:09:ca:09:
c1:d3:8a:5e:ae:c0:31:85:1a:b6:cb:79:66:72:cf:
1d:cb:02:38:7d:8c:26:48:41:00:b9:7b:38:c6:ef:
76:d0:4a:c8:36:3f:71:a6:ea:0e:46:69:fc:f8:4b:
14:18:e4:70:96:de:14:7d:37:8b:0a:ff:02:42:56:
54:1a:b9:f5:e5:7a:2f:8b:26:c3:18:33:dd:59:3f:
6f:73:77:77:52:11:1d:9b:e0:53:c9:db:e5:35:92:
98:6e:68:ec:23:45:87:d9:0a:77:7b:c2:bc:38:f2:
a0:06:9e:51:c9:25:5e:6b:64:7c:2e:c2:55:39:f0:
bc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EB:E1:2D:05:67:5B:A8:3F:06:31:08:8E:37:3D:15:B4:03:CD:08
X509v3 Authority Key Identifier:
keyid:1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5a:5c:ae:85:1f:b5:77:57:6d:c7:4d:06:c5:eb:8f:46:27:
81:40:66:83:07:f5:a4:f4:05:ac:3c:6f:c4:90:64:bd:2f:56:
ac:d8:98:ff:d5:37:a4:b7:b2:f1:99:db:7b:4c:84:fb:dc:be:
0e:e9:6e:f5:0f:91:d0:4b:12:53:56:fd:16:6d:f1:39:f8:65:
4c:64:7e:8a:41:1c:61:74:5d:b1:28:eb:cb:a3:f1:e0:93:13:
bd:45:cf:e7:b5:1c:c8:76:db:9b:31:7b:90:a4:07:f0:dc:fb:
a3:8b:6d:3a:13:e2:41:7c:ff:52:a1:41:8a:48:4b:50:88:12:
dd:b0:35:d2:3c:4e:24:66:c4:87:92:a0:b4:03:2d:e2:99:b8:
ca:90:ad:1b:81:20:51:1a:81:6a:e6:fa:22:bb:79:c4:12:cb:
98:e2:4e:9d:6b:39:95:5c:43:ed:3f:39:28:dc:62:42:4f:a1:
fc:80:90:bc:18:0f:95:5d:33:34:e8:40:40:e1:17:ea:43:e3:
fa:34:db:1f:84:b3:95:7f:d4:c3:06:dd:a2:e2:fd:37:04:dd:
c6:f1:a0:e5:4b:35:55:5d:0b:0e:f1:39:dc:be:86:d5:2d:f5:
5d:c8:a4:62:6a:9c:39:cd:e9:b9:25:11:49:3d:0f:62:bf:6a:
49:ff:ef:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:00:41 2026 by rpki-client