
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft
File: C1686602F57C97BDB7058DB5F05623F79F733F08.mft (raw, json)
Hash identifier: F7NQdTgLlFdUE8JOqcLrwAZdy4UyEDqVMChwm904Wjg=
Subject key identifier: D8:B4:7F:61:75:68:79:C0:9E:1A:5A:B7:E7:E1:A2:AE:8A:36:C6:C8
Authority key identifier: C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08
Certificate issuer: /CN=C1686602F57C97BDB7058DB5F05623F79F733F08
Certificate serial: 7B72FA572BA30A3252C19F5AFEB8081612CED2B2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft
Manifest number: 55
Signing time: Tue 14 Jul 2026 04:40:29 +0000
Manifest this update: Tue 14 Jul 2026 04:35:29 +0000
Manifest next update: Wed 15 Jul 2026 04:50:29 +0000
Files and hashes: 1: 35392e3135332e3131362e302f32322d3232203d3e203633363230.roa (hash: 7R0HqxHOl8psiPTmoioP+yiWqxO71oxXvgRWvUwoxqQ=)
2: 3130332e37302e3232302e302f32322d3232203d3e203633363230.roa (hash: 3qFSuhseOlQYOClfmoRUWVSL78nGJzbZToh19IkyDe0=)
3: C1686602F57C97BDB7058DB5F05623F79F733F08.crl (hash: bykW68Rbq/Rus63b4vygtMmn/PJiqRdn0uptDAS+fAM=)
4: 323430363a336438303a3a2f33322d3332203d3e203633363230.roa (hash: S7ogy1GUCLHfddt1QMmppgk2+axfyM/l/Np8aUOiq9M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl
rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 04:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:72:fa:57:2b:a3:0a:32:52:c1:9f:5a:fe:b8:08:16:12:ce:d2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1686602F57C97BDB7058DB5F05623F79F733F08
Validity
Not Before: Jul 14 04:35:29 2026 GMT
Not After : Jul 15 04:50:29 2026 GMT
Subject: CN=D8B47F61756879C09E1A5AB7E7E1A2AE8A36C6C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7d:aa:9f:72:33:0a:16:8a:bc:2b:8a:e3:cc:
23:b7:01:1c:a1:62:fc:b4:90:15:a3:b9:5b:6a:d9:
14:21:01:b3:23:db:06:28:34:68:57:ff:55:01:4b:
c0:f9:ba:8f:ba:a0:56:82:10:6a:9b:2e:14:5a:ee:
d5:ea:46:b6:c1:d1:75:13:a7:41:20:a4:1d:9d:9b:
87:a7:d2:a4:cf:ce:85:da:1a:ac:7e:b3:40:5b:7a:
34:11:81:e5:a4:6e:8f:fb:74:68:86:f9:bd:2a:b8:
ac:9f:21:60:98:28:6f:7b:c8:59:77:4b:ad:f2:4e:
d2:34:31:b0:1b:4b:71:8c:6e:b0:dd:b5:a7:50:f4:
c7:bd:66:bb:a5:28:14:51:27:fe:b1:05:d7:7c:64:
5b:ac:03:1d:1a:bb:9f:a9:db:76:e5:8d:91:88:27:
19:b6:f9:69:26:a4:08:21:9c:95:fb:96:60:e6:f5:
69:ef:31:54:ca:30:4b:d0:25:d0:54:a0:ca:89:92:
b2:d0:7d:b4:87:6d:d4:80:c1:d9:9e:38:d7:e1:b6:
96:82:42:58:36:14:67:f2:47:77:cf:c6:eb:33:72:
0c:0f:17:c7:d7:bc:c0:45:2f:e7:4e:87:e0:82:51:
68:12:b7:82:f3:04:05:3a:e1:52:e4:49:16:a0:61:
a5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B4:7F:61:75:68:79:C0:9E:1A:5A:B7:E7:E1:A2:AE:8A:36:C6:C8
X509v3 Authority Key Identifier:
keyid:C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b9:6d:f2:23:e1:d8:a5:53:d7:4d:f1:5a:93:28:5e:1d:06:
12:05:b9:86:af:cf:a4:e1:3b:7f:11:5d:cf:c8:87:31:65:6c:
2e:04:4c:35:03:89:05:30:f0:59:42:c0:7f:b0:bf:c9:7a:94:
77:57:5e:a5:7b:3e:c1:bf:85:0d:5d:02:64:e1:87:2b:6f:6a:
35:6e:2e:f4:a3:8b:eb:28:b3:7d:16:17:b4:54:26:84:dc:c0:
a8:af:3f:af:21:04:b2:e6:a6:1f:17:48:f7:d4:1c:43:63:c8:
85:fa:75:1d:c6:94:9a:57:a5:a0:45:79:07:a3:4f:6e:0a:03:
16:96:65:03:a1:1c:64:21:84:40:30:f3:38:64:6a:54:38:24:
b1:ba:87:a8:cc:af:52:11:db:53:05:65:69:89:29:e2:42:6f:
58:44:69:51:8e:7c:75:a6:b0:9b:2b:07:82:3b:28:f3:60:c4:
f6:0a:54:44:cc:d8:12:27:41:af:0f:9f:68:be:98:78:df:92:
b8:02:97:e2:f3:a6:6d:65:d6:79:cd:90:28:5f:a9:19:19:33:
12:4e:fa:e1:1b:a5:55:48:48:b5:cb:7e:5c:a7:da:af:c4:d9:
36:47:01:49:df:13:1d:37:26:8a:61:06:ac:72:5b:a8:1b:33:
b1:82:86:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 19:57:39 2026 by rpki-client