
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
File: 7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft (raw, json)
Hash identifier: Hq572hlD5rKjnzCqyfzKm1BKx/dAvaoiZifO+kys7JY=
Subject key identifier: 8F:71:7B:5F:58:33:5E:B7:50:AC:E7:6B:6D:81:10:8A:C5:B8:13:97
Authority key identifier: 7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
Certificate issuer: /CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Certificate serial: 288FBE37E009589FA39DAFC8FF5D67818BD2201D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
Manifest number: 012F
Signing time: Wed 07 Oct 2026 22:36:54 +0000
Manifest this update: Wed 07 Oct 2026 22:31:54 +0000
Manifest next update: Sun 11 Oct 2026 05:33:54 +0000
Files and hashes: 1: AS24138.roa (hash: xSgs8vwIbJkUWCN+zWjeD8FAFwkeRsci8W14DDMVWls=)
2: AS38341.roa (hash: RJkDZXApQMPiDZRPX5V1FKULI7lsgYxE3qOhphaxQ2o=)
3: 7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl (hash: 9jy2eAv0KWFv+MO6IS7k7mlZKRhIqBiuBBtObs7uo0c=)
4: AS9808.roa (hash: FzsvtcBSjmSmgRghpx9UXPmCwJmLz5tkNAGrDrSE8pQ=)
5: AS45057.roa (hash: RyQnZ1SR5WSmk7o4bJ4b2E+nALl68m6SIg/3qHEnzWU=)
6: AS56040.roa (hash: oZCKJU4dh/Nt+eYpzB9lsNE9+wplWvOn3SxADhCFxk8=)
7: AS9394.roa (hash: tPZUbO4SI48PQycQ05C83hNK59q9QmDob6L9igI/O+s=)
8: AS56046.roa (hash: VoU1Yy8W9X5nBLouynhmB8TLBSuAgEwO4Sk7DuHC2Ak=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 05:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:8f:be:37:e0:09:58:9f:a3:9d:af:c8:ff:5d:67:81:8b:d2:20:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Validity
Not Before: Oct 7 22:31:54 2026 GMT
Not After : Oct 11 05:33:54 2026 GMT
Subject: CN=8F717B5F58335EB750ACE76B6D81108AC5B81397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:17:26:8e:29:0b:64:de:28:5f:f8:08:99:
c8:2e:14:51:f6:99:01:08:6f:7e:fb:e5:69:69:45:
c5:13:f8:6e:0e:98:a8:a6:58:7f:ae:84:80:b8:2b:
ab:74:89:c5:52:7e:e5:76:4b:b1:73:c9:a9:7b:3f:
76:fe:af:4c:c7:e6:51:ce:d8:a5:6b:a4:6d:4b:29:
4c:a0:d0:91:6d:64:73:47:b0:56:58:f4:ad:f1:8d:
68:88:61:b5:1f:f5:5d:b2:e8:34:5b:62:d5:13:67:
aa:c7:85:35:96:a5:45:b3:e6:71:54:6f:7f:27:22:
cf:2c:50:7d:ed:69:18:fb:b8:b9:5c:94:de:69:f6:
ac:b2:62:42:b1:fb:12:02:a2:58:60:d5:0c:34:df:
39:3c:f8:07:f2:89:f9:85:8a:4b:b0:b4:50:f0:24:
f6:3f:13:3f:cf:c7:cc:04:8a:3d:48:74:dc:88:cf:
2b:60:51:2d:7c:72:fc:5f:bc:09:56:ef:97:80:4f:
4a:ab:8d:74:3e:9d:ae:32:ef:9b:f6:89:34:5d:d4:
b7:84:19:8b:a4:1b:07:d4:47:ca:b6:80:59:70:6c:
36:37:2c:69:96:a2:85:76:05:a3:64:a2:d1:22:65:
b0:7c:db:f2:b8:66:5f:12:b7:d8:63:ff:ce:21:18:
38:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:71:7B:5F:58:33:5E:B7:50:AC:E7:6B:6D:81:10:8A:C5:B8:13:97
X509v3 Authority Key Identifier:
keyid:7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a2:23:dd:ea:fa:da:d3:2e:63:4b:82:02:6c:4d:c9:46:23:
e7:e6:7c:f7:d9:b5:5d:6d:c3:42:42:0f:e5:f3:98:ed:e5:b6:
30:ed:cc:f2:d5:73:e8:c3:d2:ba:c3:bf:3d:29:4a:b4:c5:8d:
00:f4:3f:9f:0c:8e:01:66:64:0c:81:77:1b:4c:63:20:03:fe:
fe:bf:5b:de:eb:dd:29:d2:a1:74:fd:52:ed:56:33:48:43:f2:
c8:9c:96:45:dd:b7:f6:00:f6:35:45:9e:60:e0:98:09:98:dc:
22:4b:93:78:ba:5c:fc:4f:08:ae:38:a9:7e:30:cc:23:b1:5b:
ef:c3:81:70:02:a1:57:8e:22:2d:70:2e:5d:5f:90:2d:82:75:
69:87:6d:3f:53:67:3b:c6:42:2c:28:88:f6:c2:96:d4:15:b2:
cd:a6:bd:cf:d4:73:d4:9c:aa:2d:a9:ce:02:06:96:1d:78:63:
6e:20:7e:b0:63:e5:58:e5:68:5e:2b:c0:da:2a:cc:d9:fa:b6:
76:5f:68:c3:0a:a9:bd:40:50:ec:0f:70:04:49:f8:55:a6:e1:
cd:a6:71:dc:64:55:40:ef:36:47:7b:7d:60:41:9f:27:50:4c:
c3:e1:9b:a7:e1:7e:f8:8c:11:10:19:0e:61:62:6b:b6:74:25:
99:a4:78:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 02:04:14 2026 by rpki-client