
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
File: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft (raw, json)
Hash identifier: VwSak1UkBwuNA0/Tj61pWEaTnU7F4RDbP3tv9qoqesw=
Subject key identifier: 15:88:D0:8B:4A:6D:4B:D1:3F:DB:16:54:21:99:16:44:F4:67:B1:C2
Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
Certificate issuer: /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Certificate serial: 0BF7A4D203D99B7DBD31A0F4A90D7C1E6362F0F3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
Manifest number: FF
Signing time: Wed 29 Jul 2026 10:24:07 +0000
Manifest this update: Wed 29 Jul 2026 10:19:07 +0000
Manifest next update: Thu 30 Jul 2026 10:33:07 +0000
Files and hashes: 1: 3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa (hash: pP2K3HiVYBHdGBjx/LhUqM1IgWlPl0rSVXLA0eShH2g=)
2: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl (hash: Lx8cSCyaetr0f39/CYMYwVw2hJMIR7N+mgCXG67WlFw=)
3: 3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa (hash: 5JsD0wX1QDBSopdnoRNZCwKiwO2b9FDGs7UbU+U0hhI=)
4: 3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa (hash: GZ2WOW7JsZPc5s/Q2qJ2w1atwdfDkqEf0lhuZ8+9zHo=)
5: 3130332e3131362e3135312e302f32342d3332203d3e203138313836.roa (hash: t4rYVjYfVv+8FXJ3wpB9gzjdLdiETsT5N2UFAEaCOnM=)
6: 3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa (hash: d4N+6+ZvyPWMnoQuXQvtFWn2iecqQr50dVgRsFkdfMk=)
7: 3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa (hash: 1Ufsi2cApRq4VzMpVC5wUXBntzWTIoNYV52b6m40FTU=)
8: 3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa (hash: zKTHFw5A/5A4GJfDVGwpemfdwlWQX4xJwt4nMBMvrMw=)
9: 3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa (hash: Pq91xvCrN3/5zWnvVJSEMqoONxXt9OWTFN9DsvUS+cs=)
10: 3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa (hash: IgDPyqOj/L0PxUnz7eU6yhqxHUKS38LqOYL7vjB0wuA=)
11: 3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa (hash: VlVCVPXjjW4YexrI/H0GFGSpaR7DLmyFK6sA+2KWcH0=)
12: 3130332e3131362e3134382e302f32342d3234203d3e203231383539.roa (hash: hb8LpnbbXDFD6nnVASx9otFeKHSuMrRCIYTSzaGK/QY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:33:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f7:a4:d2:03:d9:9b:7d:bd:31:a0:f4:a9:0d:7c:1e:63:62:f0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Validity
Not Before: Jul 29 10:19:07 2026 GMT
Not After : Jul 30 10:33:07 2026 GMT
Subject: CN=1588D08B4A6D4BD13FDB165421991644F467B1C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d0:ce:f8:c8:02:b9:ac:25:20:25:4d:5f:72:
5e:88:9e:54:a0:34:84:c7:76:7d:81:de:60:c2:34:
56:d1:86:d1:64:eb:73:59:a0:90:94:22:15:c6:67:
2b:31:76:6f:5c:b3:48:f9:29:a9:5f:fa:1c:3d:c6:
b3:5a:a9:a0:78:75:49:71:ff:78:e4:ec:67:6d:bf:
c9:c1:0c:fb:b4:36:d8:d9:ce:dd:13:a2:80:a0:cf:
2c:be:ab:7f:8b:66:31:c4:e7:7a:17:41:bb:36:3c:
37:bf:c0:c9:70:30:a2:ba:20:92:f0:0d:d4:fc:dd:
ad:3f:87:e9:12:80:56:23:57:0d:f7:bc:8b:a3:ed:
4e:9a:f0:0c:75:a6:7b:f8:f6:8b:2b:05:48:a9:3d:
65:98:05:74:2a:5c:ab:25:4b:70:70:c4:3d:2b:03:
fc:c7:6f:5e:b5:93:a9:b6:0f:74:c1:6b:c6:f8:10:
b0:09:8c:0e:3d:30:41:94:22:63:31:55:31:e2:58:
8e:ad:b6:60:f0:b7:d7:0a:d4:5f:6a:c5:bb:c9:20:
1d:9d:b7:d8:95:43:f8:04:d3:7b:65:66:a8:3f:28:
cf:c5:f1:ef:04:eb:b5:bb:e8:c5:a3:9a:1f:af:ab:
0d:03:5f:c8:b7:8f:e7:2a:23:5c:ab:60:17:c6:18:
83:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:88:D0:8B:4A:6D:4B:D1:3F:DB:16:54:21:99:16:44:F4:67:B1:C2
X509v3 Authority Key Identifier:
keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:8a:bd:b0:42:71:98:c4:f4:1f:3e:30:2c:12:2a:45:ac:4a:
5c:3d:c0:8e:4e:1e:19:89:f6:f9:67:94:2b:37:a3:20:49:e8:
c4:ba:18:0e:8e:6a:b0:bc:f4:c3:b5:da:50:d6:e0:34:db:94:
b7:e3:47:8b:1b:7f:55:a7:94:f8:a9:21:e5:69:5d:09:6b:40:
11:a3:39:69:6b:85:89:ff:25:6f:b4:e6:fa:c8:e0:ee:d8:c2:
55:f3:a4:c3:7f:18:08:55:ee:be:45:21:98:7c:bd:e4:fd:c3:
e5:98:a0:db:15:16:60:f5:2c:8b:bb:58:0c:47:00:dd:09:a1:
01:35:cc:2e:fa:d7:11:40:27:5e:92:cd:84:42:5c:64:ab:f3:
72:d0:25:53:03:e8:92:f3:77:43:c6:b3:3c:eb:b4:e4:42:d8:
09:f4:0f:1b:bc:4d:d1:8e:13:03:c1:df:1f:b9:da:c7:14:5f:
19:1b:d1:d6:5b:e0:e5:04:b7:a6:1a:ed:24:90:6a:56:59:86:
d4:23:37:f8:70:4c:c7:7c:8f:06:46:f5:80:cf:44:59:d7:26:
28:c7:a0:5b:ce:76:3a:bd:a3:ef:bc:c5:a1:24:86:4a:a7:19:
ec:8a:d6:14:a7:66:35:2f:dc:85:cc:cd:de:55:77:0a:8b:5e:
1b:4d:af:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:03:46 2026 by rpki-client