
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
File: A5A7A22B773557BAF9107F52071E43CB56973E0C.mft (raw, json)
Hash identifier: P1VORuIlV9Fa3PS0Kl4gl6zPoYH74QcXMPYjqnMwNzw=
Subject key identifier: E7:C9:C4:CA:BE:93:7D:83:2C:EB:54:CC:70:45:0B:F7:CD:16:A6:CA
Authority key identifier: A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C
Certificate issuer: /CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
Certificate serial: 3E99E3339BF005200901194F7417377FD59C066B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
Manifest number: D7
Signing time: Thu 15 Oct 2026 07:11:29 +0000
Manifest this update: Thu 15 Oct 2026 07:06:29 +0000
Manifest next update: Sun 18 Oct 2026 18:01:29 +0000
Files and hashes: 1: 3130332e3131302e3133322e302f32322d3232203d3e2039383038.roa (hash: 9YRxcxYb/rcS3Fre/vxl+OluswVsgxbVE+vIx1aWSuc=)
2: A5A7A22B773557BAF9107F52071E43CB56973E0C.crl (hash: WK9hWXsajxSeN5UkmNRNk5j4z8wJQiTYGY/zu7WpiC4=)
3: 3130332e3131302e3133322e302f32322d3232203d3e203338303139.roa (hash: qBnUcpTKG6VeUEPGz1MimxCSD4Q6edLlreoj3tdS5ps=)
4: 3130332e3131302e3133322e302f32322d3232203d3e2034383337.roa (hash: sFd6ssXxC/BDyv1b99yz/NjXY9YA0f3bLOEKaZDzcTc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl
rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 17:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:99:e3:33:9b:f0:05:20:09:01:19:4f:74:17:37:7f:d5:9c:06:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5A7A22B773557BAF9107F52071E43CB56973E0C
Validity
Not Before: Oct 15 07:06:29 2026 GMT
Not After : Oct 18 18:01:29 2026 GMT
Subject: CN=E7C9C4CABE937D832CEB54CC70450BF7CD16A6CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7e:2e:8c:ec:0c:34:1f:8c:0a:9e:5e:b7:ac:
bd:93:90:f3:ef:80:43:c2:f6:04:0b:14:8e:c7:21:
f1:e0:88:24:38:03:79:7a:79:b6:8a:5d:4b:9b:20:
e0:f3:c1:06:63:ff:e6:2e:b1:74:d7:4d:ad:32:74:
f7:99:86:53:3e:9a:40:dc:35:13:b9:cd:71:20:67:
9b:2c:7f:39:27:d1:06:a1:43:64:d0:12:9f:86:7f:
0a:d6:76:bf:6c:5f:39:da:fc:fe:72:a6:75:4a:50:
3c:34:1c:9d:66:da:d1:9b:f9:4a:d0:3d:e7:73:60:
67:46:3a:2a:f5:bb:bd:67:12:94:a2:9f:09:8f:43:
c7:91:0a:0f:32:76:c6:9f:34:b0:1e:95:8b:4f:9c:
e6:17:ea:58:8b:22:07:19:08:55:5a:9a:59:7c:2c:
0c:ba:9f:e8:87:86:ed:b1:4a:c7:fe:98:af:bc:fd:
95:f4:dc:5c:45:ea:c2:e3:29:21:14:fc:2d:6b:e1:
b6:6a:c8:b2:91:7c:cb:3a:b9:53:19:a3:f5:35:33:
36:87:21:a7:18:c6:1b:ed:34:e9:03:06:24:ab:e9:
76:ac:49:28:e6:c0:71:e2:fe:11:90:3d:48:e2:43:
aa:87:1d:3c:fe:c0:ed:d0:b4:b8:dc:ed:95:21:ab:
02:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C9:C4:CA:BE:93:7D:83:2C:EB:54:CC:70:45:0B:F7:CD:16:A6:CA
X509v3 Authority Key Identifier:
keyid:A5:A7:A2:2B:77:35:57:BA:F9:10:7F:52:07:1E:43:CB:56:97:3E:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5A7A22B773557BAF9107F52071E43CB56973E0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094855333483905026/0/A5A7A22B773557BAF9107F52071E43CB56973E0C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6f:c7:3a:4c:64:67:ac:76:ec:95:af:4c:91:30:1b:7a:af:
87:12:e9:41:97:83:7c:9e:e1:d8:9a:f4:99:f2:7e:02:e2:a6:
04:2e:79:c7:e0:42:5e:f7:61:cb:5a:57:e8:de:2e:3b:15:e5:
be:c6:cb:4c:47:1a:08:7f:d1:56:a0:3c:4b:d9:3b:ae:60:bc:
96:0b:e1:71:b7:69:ac:86:00:cd:a8:6b:ca:d8:18:06:f0:ea:
ed:73:f7:e3:b6:8e:02:bc:06:5a:15:dc:73:1e:76:7a:b5:0a:
6c:fc:25:fc:42:16:1e:c3:b5:85:bc:08:02:b2:17:8f:bf:cc:
e6:ba:6f:50:4a:32:98:09:2a:6d:4c:f5:80:e9:5a:19:6b:6d:
d5:bb:5d:98:b5:ab:11:a8:9f:6e:ea:25:85:d1:c0:96:b9:45:
be:c6:fe:b1:f9:49:6c:d9:6b:60:da:80:de:0b:c2:46:9e:ff:
1b:f6:69:2a:b8:91:5c:64:5b:b2:24:44:1d:f8:15:ac:84:a2:
60:3e:a6:08:10:20:29:a1:d5:16:2f:f8:02:c0:58:01:46:5e:
41:1c:41:b4:43:e0:4b:35:42:a5:a8:3e:91:d2:8c:db:d4:98:
f9:65:8a:c8:8c:c6:b2:9a:70:e6:64:2c:12:f7:32:d1:d7:4a:
2a:53:e6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:31:40 2026 by rpki-client