
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft
File: 7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft (raw, json)
Hash identifier: 3Xuzn9JRjJ/LuEwjRiZ3866P3FZ7yDw3sT5ETVEn6o8=
Subject key identifier: FA:6A:0F:48:71:65:B8:36:D7:FC:41:30:0F:DC:55:36:50:16:CC:AA
Authority key identifier: 7D:76:05:9D:BE:0A:9C:07:7B:DF:FB:87:3A:EF:8E:C8:B6:8C:23:AF
Certificate issuer: /CN=7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF
Certificate serial: 4436951ADB8532B026B908B67A35595934965FF4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft
Manifest number: 92
Signing time: Fri 28 Aug 2026 06:48:07 +0000
Manifest this update: Fri 28 Aug 2026 06:43:07 +0000
Manifest next update: Mon 31 Aug 2026 14:38:07 +0000
Files and hashes: 1: 7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.crl (hash: Plqu//X2dHxIIgFGeHSBzN3zv7jlxtHM+rd6mGHw4rI=)
2: 323430303a373365303a3a2f33332d3333203d3e20313436383136.roa (hash: Uu05feJs1kWzCBhqECtGwkD39rOIoNraYpyXK3xfyc0=)
3: 323430303a373365303a383030303a3a2f33332d3333203d3e20313436383136.roa (hash: ZWxdCtb8Xvi/p2unJ2mHQCYiEmf8lT8LOVcl0OEHQYU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.crl
rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 14:38:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:36:95:1a:db:85:32:b0:26:b9:08:b6:7a:35:59:59:34:96:5f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF
Validity
Not Before: Aug 28 06:43:07 2026 GMT
Not After : Aug 31 14:38:07 2026 GMT
Subject: CN=FA6A0F487165B836D7FC41300FDC55365016CCAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3c:9c:bc:6d:f8:b8:54:a3:2c:90:4c:b9:19:
53:c4:4d:8f:eb:5e:8b:27:01:1c:0e:ba:8c:ed:2d:
56:04:ec:75:9b:a1:83:a7:3a:96:5c:e7:96:29:d0:
ec:63:a6:e1:9b:a4:e2:24:f0:c4:f2:e3:0d:d4:dd:
25:e2:6c:6a:ee:97:f6:d9:e7:d0:eb:b9:c7:ea:e1:
e4:c1:3a:52:06:b8:5a:6f:af:99:61:49:ed:26:5f:
2c:17:1e:e4:15:3c:18:43:f8:01:07:71:e4:59:9f:
3b:43:c9:04:20:64:2e:aa:80:aa:c5:0e:2c:d4:a9:
7f:68:12:1c:4b:df:4d:ae:c2:0b:19:1f:1d:13:92:
01:46:31:c3:51:0d:e6:44:6b:09:9c:2d:c1:2a:d0:
9c:64:8d:53:01:d5:19:cb:bb:ab:3e:c9:84:3c:c5:
2b:0f:ad:05:f3:d1:d8:fe:40:fe:8a:fd:a0:d9:ff:
fe:29:6f:9a:9f:4b:1c:6b:6c:4d:f6:03:99:e4:64:
84:f7:1d:6f:7e:e1:c6:9d:cb:a7:22:d1:74:1f:4d:
4e:94:dd:de:0f:07:2a:bb:a5:3c:f2:5a:e7:ac:18:
d7:62:12:bb:cc:04:2a:69:c8:b0:15:91:f9:4b:3b:
43:6e:54:f6:cf:41:9a:32:b0:7e:1c:75:9a:b5:15:
f1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6A:0F:48:71:65:B8:36:D7:FC:41:30:0F:DC:55:36:50:16:CC:AA
X509v3 Authority Key Identifier:
keyid:7D:76:05:9D:BE:0A:9C:07:7B:DF:FB:87:3A:EF:8E:C8:B6:8C:23:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0d:2c:93:b2:83:d9:d8:c1:13:51:49:62:94:54:7e:d0:53:
67:ac:17:b7:c0:09:bb:d3:a5:05:67:95:50:d5:cb:39:85:23:
8b:c1:d9:f2:3f:76:b6:89:c7:d8:e2:74:81:03:e9:47:5c:98:
77:8b:ad:40:ab:70:b7:35:11:d5:2d:9a:81:a8:e4:74:18:2a:
1b:8e:b9:4f:e3:f1:93:82:0f:2a:87:1e:45:6e:2f:ca:76:17:
5d:93:eb:3b:07:4d:fc:f9:af:03:20:cc:bf:15:2d:d2:5d:25:
5c:ec:9b:9b:e0:1e:e5:15:cf:9b:46:7d:9c:24:a2:2e:54:eb:
85:62:93:12:b3:65:17:e6:fb:4b:b8:bc:54:76:89:69:09:78:
c6:51:87:e8:a9:68:5e:3d:5a:ca:7d:67:34:c1:9b:1c:8e:6c:
79:4d:ba:20:43:8b:43:59:be:35:7c:17:c5:54:a1:81:80:41:
20:a1:09:e8:ac:cb:9c:72:ab:b8:84:9c:38:65:40:53:2e:25:
1d:34:60:b4:06:1b:02:8f:53:6c:f7:9a:5a:80:19:3d:a7:c9:
3f:e8:cc:c6:b5:e4:55:2e:d1:88:81:51:a8:f9:92:3b:c7:ac:
83:99:04:48:2f:bc:ac:99:cb:17:73:55:35:aa:23:c6:14:4b:
78:58:25:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:03:25 2026 by rpki-client