
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
File: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft (raw, json)
Hash identifier: 8FjcAkltemyk2Ln7qQ+uyQO+rK8OHzgKLiSfiRkeaFY=
Subject key identifier: 56:69:88:B6:6A:F2:0E:8B:6A:25:36:71:13:6B:54:FA:2B:AF:0E:F1
Authority key identifier: 7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
Certificate issuer: /CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Certificate serial: 3A0A5819FFD47D8FDBD2A18D90ABECA3DC1A4E9C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
Manifest number: FE
Signing time: Tue 28 Jul 2026 18:02:26 +0000
Manifest this update: Tue 28 Jul 2026 17:57:26 +0000
Manifest next update: Wed 29 Jul 2026 20:26:26 +0000
Files and hashes: 1: 3135372e36362e34332e302f32342d3234203d3e20323131333932.roa (hash: QVpa/t5BrPmcaniN6fTC6mn2Hc337ptuGpqO+9pbZUI=)
2: 3135372e36362e34322e302f32332d3233203d3e20313436383036.roa (hash: TrX91umpUF20olN9d51b5mXoqNwu+IRPH9g8P9Ni2l8=)
3: 3135372e36362e34322e302f32332d3233203d3e20343031313630.roa (hash: uUSbmt/DFa4HyDl5SAFGT6+xVlP2TqhsgzRQhrjcsGw=)
4: 3135372e36362e34332e302f32342d3234203d3e20313436383036.roa (hash: ZdAJvwbevxcTChu0/ksJ8GMgEReQH9B3GrE13G0F5YI=)
5: 3135372e36362e34322e302f32332d3233203d3e20323039323432.roa (hash: HIHD4+vJEqN67iNJaPRj3O/8PeBUKrUaC2/UlqKhO0A=)
6: 7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl (hash: KOjFf+OLMykQMoBaAkwSLW7RWhrOmNgPhHJhVxuadYY=)
7: 3135372e36362e34322e302f32342d3234203d3e20313436383036.roa (hash: 5BjffqQuLoy9KdB4KbETMrKfZtQLhtqGMgjq8dyw6sU=)
8: 3135372e36362e34322e302f32342d3234203d3e20323131333932.roa (hash: kxd6F4bEyBxVrM29SgCibt07AVmkF+UBKK4h7nsIEYw=)
9: 3135372e36362e34322e302f32332d3233203d3e20323131333932.roa (hash: VYTt+hHm1Z1epaMQlhdt9T6x0ohGsGgds18dnOlsrdo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 20:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:0a:58:19:ff:d4:7d:8f:db:d2:a1:8d:90:ab:ec:a3:dc:1a:4e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FC5418B4A590DF15355E167B7AFC0FF7C905516
Validity
Not Before: Jul 28 17:57:26 2026 GMT
Not After : Jul 29 20:26:26 2026 GMT
Subject: CN=566988B66AF20E8B6A253671136B54FA2BAF0EF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ae:bd:c2:bf:cb:dd:2e:5e:d5:60:59:3e:5e:
1f:a2:07:5a:07:bd:1a:8c:1d:cc:7d:08:05:cc:48:
88:06:4e:03:d1:f6:cc:30:63:a2:3c:ce:da:63:4c:
f8:ea:30:5c:9e:e6:e4:09:93:fc:78:0d:51:f9:52:
95:15:b8:77:03:ea:7f:7f:1d:a2:d1:d3:03:29:c2:
64:48:d0:c8:32:da:61:f0:c5:ee:2f:10:c0:f3:a8:
90:9a:6c:e3:c5:30:a8:cc:6a:c0:32:34:b5:1f:43:
fe:11:8c:60:a8:b3:94:f3:34:c1:30:db:f5:52:88:
7b:a1:42:bd:4e:53:c5:2c:02:39:be:c6:e7:de:32:
5f:a9:61:e6:79:4e:db:4d:41:ef:2f:c8:4d:c5:a8:
2f:31:49:cb:dd:cc:54:fc:0c:61:a3:86:91:6c:3d:
a2:37:3c:e6:6b:37:7e:0c:3d:b9:d1:9e:5b:b5:2b:
da:7a:bb:7b:fd:f9:b0:ff:60:60:79:e1:63:1f:a6:
01:6d:ba:ff:14:a6:72:e1:2c:2e:75:cf:cb:be:7b:
a4:1f:22:e1:42:da:a1:20:cd:b5:8a:2e:2c:99:78:
9e:01:5f:13:f0:cc:04:93:37:54:23:14:96:65:45:
75:8e:1f:df:b8:cc:25:4b:0d:4e:97:8b:40:33:fd:
33:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:69:88:B6:6A:F2:0E:8B:6A:25:36:71:13:6B:54:FA:2B:AF:0E:F1
X509v3 Authority Key Identifier:
keyid:7F:C5:41:8B:4A:59:0D:F1:53:55:E1:67:B7:AF:C0:FF:7C:90:55:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061972994/0/7FC5418B4A590DF15355E167B7AFC0FF7C905516.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:2e:d5:29:fb:bd:62:19:5c:5a:38:46:04:f1:e2:92:27:e1:
ba:52:4c:f6:73:ad:17:ed:eb:db:94:ab:7b:37:71:88:3c:ad:
f2:56:78:05:8c:f7:90:80:b4:72:75:ef:74:44:36:34:07:a0:
9b:ae:ed:37:eb:05:0b:43:94:6f:91:50:2c:d6:91:5c:ce:dd:
aa:65:98:2d:b8:cf:c0:ae:85:af:4b:56:1f:92:22:2b:9c:07:
78:cf:c0:98:1c:b2:e4:94:b9:ec:35:ef:99:66:2c:5d:4d:43:
6e:69:cc:45:66:ed:32:2a:3e:73:26:2a:cf:5e:f1:48:78:20:
46:75:47:86:4b:7a:ef:cb:70:d8:da:4a:fb:7c:61:8c:4f:f8:
c2:0f:8f:43:1e:bf:f6:fa:98:41:ed:67:13:ef:f6:ff:8a:07:
03:c4:03:8d:7d:92:ca:02:2a:85:59:86:ef:64:ce:b2:d4:73:
cb:de:7e:35:9e:d8:19:ae:6c:a2:5b:b2:2a:c1:a3:5c:99:ef:
c0:3a:93:e8:93:65:e7:38:22:ae:ed:41:f7:e2:d3:7c:ed:5f:
e3:ed:97:ba:13:de:a9:74:ac:fc:fa:f8:d4:5d:41:b7:36:c1:
69:0c:88:cd:6d:20:f5:10:fe:cc:9c:4f:38:a5:f7:80:fa:5b:
ad:9e:e1:9d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUOgpYGf/UfY/b0qGNkKvso9waTpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3
QzkwNTUxNjAeFw0yNjA3MjgxNzU3MjZaFw0yNjA3MjkyMDI2MjZaMDMxMTAvBgNV
BAMTKDU2Njk4OEI2NkFGMjBFOEI2QTI1MzY3MTEzNkI1NEZBMkJBRjBFRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSrr3Cv8vdLl7VYFk+Xh+iB1oH
vRqMHcx9CAXMSIgGTgPR9swwY6I8ztpjTPjqMFye5uQJk/x4DVH5UpUVuHcD6n9/
HaLR0wMpwmRI0Mgy2mHwxe4vEMDzqJCabOPFMKjMasAyNLUfQ/4RjGCos5TzNMEw
2/VSiHuhQr1OU8UsAjm+xufeMl+pYeZ5TttNQe8vyE3FqC8xScvdzFT8DGGjhpFs
PaI3POZrN34MPbnRnlu1K9p6u3v9+bD/YGB54WMfpgFtuv8UpnLhLC51z8u+e6Qf
IuFC2qEgzbWKLiyZeJ4BXxPwzASTN1QjFJZlRXWOH9+4zCVLDU6Xi0Az/TOTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUVmmItmryDotqJTZxE2tU+iuvDvEwHwYDVR0j
BBgwFoAUf8VBi0pZDfFTVeFnt6/A/3yQVRYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTY4MzA2MTk3Mjk5NC8wLzdGQzU0MThCNEE1OTBERjE1MzU1RTE2N0I3QUZD
MEZGN0M5MDU1MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvN0ZDNTQxOEI0QTU5MERGMTUzNTVFMTY3QjdBRkMwRkY3QzkwNTUxNi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE5NzI5OTQvMC83RkM1NDE4QjRBNTkw
REYxNTM1NUUxNjdCN0FGQzBGRjdDOTA1NTE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAry7VKfu9Yhlc
WjhGBPHikifhulJM9nOtF+3r25SrezdxiDyt8lZ4BYz3kIC0cnXvdEQ2NAegm67t
N+sFC0OUb5FQLNaRXM7dqmWYLbjPwK6Fr0tWH5IiK5wHeM/AmByy5JS57DXvmWYs
XU1DbmnMRWbtMio+cyYqz17xSHggRnVHhkt678tw2NpK+3xhjE/4wg+PQx6/9vqY
Qe1nE+/2/4oHA8QDjX2SygIqhVmG72TOstRzy95+NZ7YGa5soluyKsGjXJnvwDqT
6JNl5zgiru1B9+LTfO1f4+2XuhPeqXSs/Pr41F1BtzbBaQyIzW0g9RD+zJxPOKX3
gPpbrZ7hnQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:41:43 2026 by rpki-client