
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft
File: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft (raw, json)
Hash identifier: moTAGi8YLMQMZkcRzq+miVpe6uklQu25ortHrG/k5j4=
Subject key identifier: FF:EB:92:DF:F3:2B:41:39:02:8E:8C:67:34:D3:8E:42:4D:8B:67:42
Authority key identifier: E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7
Certificate issuer: /CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7
Certificate serial: 798810E4A815B3B6CD96DBDD856FD003B84F214E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft
Manifest number: 6B
Signing time: Tue 07 Jul 2026 00:43:04 +0000
Manifest this update: Tue 07 Jul 2026 00:38:04 +0000
Manifest next update: Wed 08 Jul 2026 04:31:04 +0000
Files and hashes: 1: 3130332e39352e36382e302f32322d3232203d3e203234313338.roa (hash: Gs4UB+TPYIvje+ANsbEoWpB+Qg7CtAqNzOXWq42RpGc=)
2: E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl (hash: KSzLQyxqfJw4j0yX/RVq23DrZzLnlAneFljgVQ7ggl8=)
3: 3130332e3131392e32382e302f32322d3232203d3e2030.roa (hash: OhggVO6V+L8Uq4dwZzxkFnjLxTIYUZIlj0+gjoYhKf0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl
rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 04:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:88:10:e4:a8:15:b3:b6:cd:96:db:dd:85:6f:d0:03:b8:4f:21:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E7EA938C86FDA24E24495F1950FD888F94B0B7E7
Validity
Not Before: Jul 7 00:38:04 2026 GMT
Not After : Jul 8 04:31:04 2026 GMT
Subject: CN=FFEB92DFF32B4139028E8C6734D38E424D8B6742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:58:4d:89:db:d1:f9:ed:30:55:ee:d6:1a:
05:dc:14:a7:14:b0:d8:97:39:a5:ec:10:d5:a9:29:
b2:37:16:49:4a:9a:25:25:3b:d6:22:55:4c:1f:2d:
42:b8:40:b7:82:67:00:23:2e:23:d8:f4:ca:b8:a8:
95:64:e3:9d:f9:d0:ac:0b:f1:22:28:8d:ed:de:f9:
a6:17:7e:ec:e7:89:c4:4a:21:15:63:72:73:bf:c7:
c1:f7:35:86:58:12:5f:82:c1:6d:b8:49:bb:9f:48:
ab:39:72:b7:61:1f:83:2f:fd:ea:75:c2:fe:0a:54:
ee:dd:e1:d5:dd:fb:10:49:63:59:3f:1b:7c:fd:97:
95:4a:1c:b8:dc:2c:2e:d5:a1:eb:98:d8:b3:a7:ab:
6f:63:88:25:c4:00:9f:65:4f:c8:1e:df:90:d8:57:
da:ee:75:f2:80:23:ad:71:b4:27:77:2c:42:49:fb:
6e:bc:94:7b:fe:db:08:f9:e8:81:ed:40:1b:3a:1d:
63:67:41:0f:08:b5:cc:e3:96:77:85:84:34:d8:b7:
2d:5f:f2:e1:0f:26:81:3b:40:b4:8f:1a:59:a7:29:
6a:fa:53:6f:16:dd:a4:6b:30:53:16:87:db:21:3c:
40:83:4f:49:6e:c7:ba:35:f2:77:a4:1f:aa:26:94:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EB:92:DF:F3:2B:41:39:02:8E:8C:67:34:D3:8E:42:4D:8B:67:42
X509v3 Authority Key Identifier:
keyid:E7:EA:93:8C:86:FD:A2:4E:24:49:5F:19:50:FD:88:8F:94:B0:B7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098524737883078659/0/E7EA938C86FDA24E24495F1950FD888F94B0B7E7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:06:0c:07:ea:bd:28:a9:91:ab:97:fd:d4:d8:46:b2:c0:60:
fe:f8:7e:35:cf:ee:29:5c:b0:99:b9:b1:c9:2b:ab:e1:c8:8d:
2e:83:e1:78:f9:5f:3c:f2:b5:b9:c9:bb:da:37:29:93:f7:4f:
d6:78:4c:76:2b:01:b5:05:c9:86:be:5b:e2:c5:46:f9:10:87:
af:07:3b:ac:17:df:70:0b:e5:3b:df:71:75:79:f8:b1:5d:3d:
d5:1a:f4:d5:b0:2a:6e:71:0e:d2:97:48:fc:1a:3b:c2:88:e4:
c9:e1:f3:7c:06:39:91:36:9c:48:cc:23:8c:71:be:58:b7:dc:
d2:13:8c:c6:f8:28:f7:f1:33:f4:dd:d7:25:b7:75:62:8b:1c:
bb:97:96:a4:2d:bf:98:b8:3e:48:92:e1:1c:02:d7:31:2b:fc:
6f:ad:18:ef:21:1d:a3:f9:b8:e0:54:11:d0:12:8b:56:21:42:
ed:8b:8f:0f:f9:64:93:0d:f3:03:ac:93:56:47:f2:77:29:bd:
c1:39:51:34:6c:a9:68:7d:66:30:a5:a5:04:f5:5b:fa:77:71:
b3:a1:50:6f:3b:03:30:99:a0:5c:2b:8a:03:a5:d6:70:6b:2f:
e6:f0:9a:ba:ac:06:8d:b8:98:e3:4e:02:8a:00:5b:bf:36:98:
d5:d9:d8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:45:53 2026 by rpki-client