
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
File: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft (raw, json)
Hash identifier: VMl9O0a6MwPD9U+i2agejYSh2EVyyPhS/73TPgDwGcc=
Subject key identifier: 5F:AF:9B:20:CD:8E:65:50:59:E5:1D:F9:66:64:F5:71:0D:CE:FF:1B
Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
Certificate issuer: /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Certificate serial: 3CFED3ECDD714FC5D898071A47239B4ABEC4A669
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
Manifest number: 0137
Signing time: Sat 03 Oct 2026 17:12:06 +0000
Manifest this update: Sat 03 Oct 2026 17:07:06 +0000
Manifest next update: Wed 07 Oct 2026 02:55:06 +0000
Files and hashes: 1: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl (hash: Zl4nVC5H1t2GNHKx28BBf/NZJieZxnuFAhs9jQ7lm90=)
2: 3135372e36362e34322e302f32332d3233203d3e20323039323432.roa (hash: HIHD4+vJEqN67iNJaPRj3O/8PeBUKrUaC2/UlqKhO0A=)
3: 3135372e36362e34322e302f32332d3233203d3e20323131333932.roa (hash: VYTt+hHm1Z1epaMQlhdt9T6x0ohGsGgds18dnOlsrdo=)
4: 3135372e36362e34322e302f32332d3233203d3e20343031313630.roa (hash: uUSbmt/DFa4HyDl5SAFGT6+xVlP2TqhsgzRQhrjcsGw=)
5: 3135372e36362e34332e302f32342d3234203d3e20313436383036.roa (hash: ZdAJvwbevxcTChu0/ksJ8GMgEReQH9B3GrE13G0F5YI=)
6: 3135372e36362e34322e302f32332d3233203d3e20313436383036.roa (hash: TrX91umpUF20olN9d51b5mXoqNwu+IRPH9g8P9Ni2l8=)
7: 3135372e36362e34332e302f32342d3234203d3e20323131333932.roa (hash: QVpa/t5BrPmcaniN6fTC6mn2Hc337ptuGpqO+9pbZUI=)
8: 3135372e36362e34322e302f32342d3234203d3e20323131333932.roa (hash: kxd6F4bEyBxVrM29SgCibt07AVmkF+UBKK4h7nsIEYw=)
9: 3135372e36362e34322e302f32342d3234203d3e20313436383036.roa (hash: 5BjffqQuLoy9KdB4KbETMrKfZtQLhtqGMgjq8dyw6sU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 02:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:fe:d3:ec:dd:71:4f:c5:d8:98:07:1a:47:23:9b:4a:be:c4:a6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Validity
Not Before: Oct 3 17:07:06 2026 GMT
Not After : Oct 7 02:55:06 2026 GMT
Subject: CN=5FAF9B20CD8E655059E51DF96664F5710DCEFF1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:35:16:3a:1e:0e:b0:f9:c8:3b:39:71:5a:
f0:5b:0a:2d:aa:bf:98:58:81:2a:77:93:14:98:6f:
d7:1a:92:40:af:31:1b:bf:9e:12:51:01:7a:34:e1:
cb:0e:fc:94:97:d3:d0:8c:a8:08:f7:55:62:ec:52:
1c:cd:86:1a:d3:a7:b2:a7:16:80:3d:f4:95:44:8c:
63:f6:f8:af:89:19:33:fe:e0:4c:7b:70:2e:46:e5:
52:30:13:80:52:a4:49:64:01:78:ee:96:85:51:d1:
e1:7a:a2:e0:6f:9a:d9:70:69:c9:07:87:76:f2:a0:
97:be:34:8f:f7:e4:bc:26:51:2a:2f:e3:41:cf:05:
72:cb:5e:a4:73:09:5f:6b:dc:49:4d:8b:c3:8c:77:
f3:3e:42:cb:d2:5a:26:1c:56:e5:49:05:f3:81:60:
4a:ad:19:af:96:b7:2e:da:80:99:83:cf:94:25:e2:
72:8b:53:17:71:32:93:ee:6e:c2:1d:fe:d3:4a:b2:
e2:20:1b:47:48:94:b4:38:ef:4d:bf:c2:1d:e8:92:
db:71:58:b5:09:63:96:03:81:93:ee:f2:71:62:13:
ea:7b:05:9e:a5:fc:d4:80:04:74:d9:a9:1c:38:d8:
eb:bd:54:0b:55:38:42:4a:7f:d8:96:5c:bf:84:2a:
5c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AF:9B:20:CD:8E:65:50:59:E5:1D:F9:66:64:F5:71:0D:CE:FF:1B
X509v3 Authority Key Identifier:
keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e5:cd:34:4f:4f:f7:01:c5:4f:50:20:fa:0b:33:13:d7:a5:
71:43:3a:f2:5d:ad:09:30:aa:53:a8:a6:bb:b1:10:01:b8:27:
2b:88:9d:3a:7c:9c:26:b3:fe:78:c3:f1:d3:1f:da:ea:bf:66:
1e:2b:d6:6b:fb:45:09:60:06:d9:9c:85:5d:0f:2c:e4:21:72:
78:0c:3d:56:ee:1b:1c:70:5a:22:69:ab:56:58:5c:a5:57:a2:
b1:bb:0a:c6:74:31:07:79:04:26:97:66:06:24:28:19:61:ce:
84:4b:04:c1:17:b5:c4:b5:d0:4a:9a:66:f5:51:32:28:56:7e:
8e:f0:59:b0:1b:25:81:17:75:a0:f5:97:0d:f0:49:52:95:09:
17:73:e5:13:34:b7:10:a3:f1:12:97:5f:50:5f:c3:05:2d:08:
74:88:05:94:ae:cf:c9:9d:37:03:ec:ac:f5:ae:82:80:ad:fd:
41:a3:6d:00:23:1b:2d:9a:d5:0e:e5:b7:44:10:c3:f7:3a:db:
b1:81:08:cb:6f:9d:3b:db:91:69:81:b3:27:27:cc:e7:75:0a:
ea:1c:6e:89:1b:e9:89:63:a1:b7:33:21:a3:2f:d2:13:38:48:
9e:69:e5:b5:f2:d3:5e:36:ba:e3:84:3a:35:68:1a:82:7b:cd:
bd:5c:f1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:33:09 2026 by rpki-client