
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft
File: 8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft (raw, json)
Hash identifier: hUaS3qmbPGKhqEaVDL4qvI7Pz7AWKVY/o3cKIxcXf3o=
Subject key identifier: C3:78:75:D7:47:AA:86:59:9B:B8:9E:32:B9:4B:6C:6A:BA:C6:77:54
Authority key identifier: 8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62
Certificate issuer: /CN=A91A58AA0001/serialNumber=8C0965B62E08A9FD16FB7F9A185FAD4438547162
Certificate serial: 2A7D87CC18D2B8307F9E54A35E64695D6328715D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft
Manifest number: 7E
Signing time: Fri 17 Jul 2026 17:51:21 +0000
Manifest this update: Fri 17 Jul 2026 17:46:21 +0000
Manifest next update: Sat 18 Jul 2026 18:20:21 +0000
Files and hashes: 1: 8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl (hash: tev2sMvUNVIOWM4YcGd1yrJ7R9KSF02eDE5S4r7SOko=)
2: AS7497.roa (hash: Y/zfyPennx+DRI8BGLvU/n1ZQD1T1L8KB7R1aNj5vzE=)
3: AS3460.roa (hash: 4+sYZc5isl8CSbCgD53in0pt+eKcGW6HRYe6bgqwhLQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl
rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 18:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:7d:87:cc:18:d2:b8:30:7f:9e:54:a3:5e:64:69:5d:63:28:71:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A58AA0001, serialNumber=8C0965B62E08A9FD16FB7F9A185FAD4438547162
Validity
Not Before: Jul 17 17:46:21 2026 GMT
Not After : Jul 18 18:20:21 2026 GMT
Subject: CN=C37875D747AA86599BB89E32B94B6C6ABAC67754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:d0:ed:fc:07:aa:d9:8e:7c:fe:57:ad:cd:
8b:35:84:30:7c:3b:88:56:6d:fe:83:2c:6c:3e:d5:
c7:1a:69:5f:35:a3:70:02:0f:55:1c:43:9e:08:83:
83:23:80:b0:b5:f5:75:9d:aa:36:f0:84:9a:48:75:
fd:65:1b:ee:24:aa:a6:2f:c2:25:1c:d2:4d:e2:0e:
2b:10:0f:ec:68:a0:0a:cd:c5:57:63:e2:d7:5c:7f:
e3:a2:db:94:fb:8d:a3:e5:e6:6c:2e:d8:76:5e:1f:
58:d0:54:e2:d1:b7:da:b1:14:a3:aa:11:b9:55:c6:
be:b3:db:af:1e:25:fb:61:b3:15:1f:75:3d:3f:54:
10:5f:dc:17:d9:94:73:c0:a7:92:b9:fd:36:f2:83:
bf:87:4e:b8:ca:d4:13:7c:34:9b:69:40:53:1e:b8:
d4:ff:1e:18:6a:a0:0f:99:63:50:92:f2:05:22:f4:
64:e3:2b:74:7c:dd:5e:47:df:4b:dc:c8:0a:a1:6f:
fc:ef:78:f3:1e:df:4e:c8:fa:e5:3d:bb:96:8d:41:
43:8d:3c:5d:4c:53:58:12:c6:42:99:5f:51:1c:8f:
91:58:57:87:01:c6:43:ec:d9:a1:af:6a:b8:e1:a3:
b0:52:e5:ec:65:0d:a2:a3:7b:63:87:a9:43:bb:70:
55:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:78:75:D7:47:AA:86:59:9B:B8:9E:32:B9:4B:6C:6A:BA:C6:77:54
X509v3 Authority Key Identifier:
keyid:8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:05:b5:d8:4d:d1:79:da:43:d5:e2:72:9e:76:18:d0:f4:59:
29:a9:c3:ec:09:38:59:ee:69:81:98:30:b8:53:8d:d9:c0:c4:
30:dc:74:fb:f6:3d:33:e1:4f:d3:38:b0:31:c5:6a:59:5c:08:
e2:64:72:5d:77:a8:be:df:91:3c:68:8b:a4:63:94:3f:37:e2:
98:30:8e:a6:1b:aa:d8:89:ab:ef:f5:86:9d:b0:8e:57:e5:05:
a4:1c:03:5d:88:20:8a:8b:59:54:64:49:80:4d:66:af:a8:db:
54:d4:ae:8c:42:9b:fb:13:a8:a0:dd:2c:a0:b5:8f:8a:f0:27:
87:f9:55:d7:41:75:9b:ce:fd:bd:3d:a0:dd:4f:e2:2a:ed:52:
75:18:b9:06:40:19:9e:f4:8b:a4:8c:86:45:31:9c:c5:cd:1d:
a7:a9:13:1f:ba:be:fa:84:ee:16:88:b1:b9:e7:bb:d7:58:77:
cb:0e:39:c9:6f:0f:86:d9:9e:c8:b3:66:24:41:13:c5:3b:85:
26:f3:9d:61:72:1c:3a:d1:ff:1d:d9:1e:90:d4:16:7c:ef:3a:
de:d2:7d:c5:b9:23:f7:4e:3c:eb:f6:37:7e:2f:43:82:58:a1:
ce:18:5e:8d:0d:7d:c6:03:e9:b1:aa:a5:21:0a:46:1c:ba:7d:
3c:69:35:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:17:58 2026 by rpki-client