
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.mft
File: 7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.mft (raw, json)
Hash identifier: ivihSP6WEt4odCUwdFiEIZiNf9NBoRPwuexpPJH7zDw=
Subject key identifier: 7F:A6:2D:DD:7E:21:91:BC:90:D4:28:D5:C3:07:BD:BC:75:B8:6A:C6
Authority key identifier: 7F:15:19:3C:DE:87:FB:C5:25:A7:E7:A1:5C:D5:2D:DB:22:65:1E:4D
Certificate issuer: /CN=7F15193CDE87FBC525A7E7A15CD52DDB22651E4D
Certificate serial: 531D55B3BD888C1B9F2F1DADB376B458847FE3C7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.mft
Manifest number: 69
Signing time: Fri 28 Aug 2026 06:48:21 +0000
Manifest this update: Fri 28 Aug 2026 06:43:21 +0000
Manifest next update: Mon 31 Aug 2026 09:13:21 +0000
Files and hashes: 1: 7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.crl (hash: EyzrVwMI3Eath35GhsbtI/QUWslV5sIXc++20mAmLck=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.crl
rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 09:13:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:1d:55:b3:bd:88:8c:1b:9f:2f:1d:ad:b3:76:b4:58:84:7f:e3:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F15193CDE87FBC525A7E7A15CD52DDB22651E4D
Validity
Not Before: Aug 28 06:43:21 2026 GMT
Not After : Aug 31 09:13:21 2026 GMT
Subject: CN=7FA62DDD7E2191BC90D428D5C307BDBC75B86AC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1e:35:79:64:3a:80:5c:0c:0a:e7:ee:f4:b1:
bc:c4:78:f5:9d:18:0c:b3:5a:60:e0:af:be:f7:3a:
df:4e:fa:14:f5:6c:5e:dd:69:ea:c7:3d:14:76:bd:
42:e9:1f:91:4d:90:75:ab:12:b0:aa:97:1e:7f:05:
be:18:c5:ed:41:6a:f3:ae:8e:57:ca:d4:8e:38:dd:
3e:ff:90:5b:ef:c5:cd:92:7f:3a:b2:a2:87:2e:5a:
e6:8e:0f:e0:58:7b:46:69:90:dc:02:1b:cf:9d:bd:
af:12:e4:55:47:c7:dc:66:d2:94:13:21:89:cf:ef:
4f:4d:13:c6:e7:4d:3c:3b:eb:8b:84:7f:79:59:c5:
2b:bc:9a:e9:83:b2:1d:d9:9c:2c:88:ec:d9:22:e2:
4a:0c:d6:ac:4d:d3:5d:94:df:8d:c0:0c:d7:f1:e2:
2c:1c:4a:b4:37:91:22:78:3a:57:c1:ac:4a:74:b9:
d3:ec:23:68:5f:0c:0c:c1:16:ea:90:64:b9:0c:e7:
3b:34:80:dd:69:61:95:6e:cc:38:00:cb:0b:9a:5e:
50:f8:16:13:b3:de:91:e9:57:83:ad:6a:3e:4a:02:
bd:9e:4e:1a:44:a8:23:68:ae:d7:7b:1e:21:9e:56:
1d:c0:34:b6:c3:6b:f6:e0:86:3c:cf:86:12:53:26:
76:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A6:2D:DD:7E:21:91:BC:90:D4:28:D5:C3:07:BD:BC:75:B8:6A:C6
X509v3 Authority Key Identifier:
keyid:7F:15:19:3C:DE:87:FB:C5:25:A7:E7:A1:5C:D5:2D:DB:22:65:1E:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/1/7F15193CDE87FBC525A7E7A15CD52DDB22651E4D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0b:c4:3f:d7:66:19:83:e2:68:a7:fc:23:d7:e4:8e:98:0a:
ec:67:b3:48:1b:98:ef:0c:7b:9f:a5:68:a5:c8:74:6c:b3:38:
6d:d0:65:0d:68:8c:4b:ca:85:93:d9:da:e0:88:23:34:aa:66:
2c:61:c7:b3:5a:43:9d:02:22:5f:52:32:8a:60:00:07:c4:e3:
06:d2:1b:db:17:31:e8:1d:d6:27:6f:fa:f3:1c:ad:be:95:f2:
b8:d6:b5:29:3c:fc:1b:ce:3d:ea:50:3a:52:af:e8:cd:79:ab:
91:eb:26:3d:38:2d:08:27:95:2f:eb:31:76:3b:5b:54:75:53:
91:20:5c:8c:1a:9a:77:db:4d:54:85:f9:d7:1b:d2:cd:13:6f:
5a:86:37:6d:9a:41:b9:70:64:86:94:f7:91:b2:58:33:6b:61:
a6:53:bb:39:bc:96:fe:5d:f2:1a:33:d3:a9:d5:7b:ab:c2:26:
71:48:31:2c:eb:f1:92:7c:c9:47:ef:63:83:9e:2a:9c:ac:59:
f3:6f:3f:9d:ce:fe:ce:e9:01:1c:10:6b:06:8e:c8:a7:21:ba:
40:0a:06:48:25:ab:71:00:09:69:ef:4d:38:fd:e6:36:fa:7c:
6d:94:14:a2:bb:dd:fe:9c:9c:e5:ca:8a:a5:fb:ac:71:03:67:
3b:c5:23:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:54:56 2026 by rpki-client