
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft
File: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft (raw, json)
Hash identifier: OQFzn+ZBW7/eQT1UYqjdBPLNP97MH0F5gjt3jEWnsbg=
Subject key identifier: CE:BE:F0:94:07:DA:95:B8:84:49:74:94:FA:39:D5:86:41:8F:89:0A
Authority key identifier: 7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF
Certificate issuer: /CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF
Certificate serial: 390D2BCF19719A51BA1386BB26CE0F6E10785DE0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft
Manifest number: F1
Signing time: Fri 02 Oct 2026 17:35:41 +0000
Manifest this update: Fri 02 Oct 2026 17:30:41 +0000
Manifest next update: Mon 05 Oct 2026 18:14:41 +0000
Files and hashes: 1: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl (hash: E7JBFcaQ6y12nCcn/dxhG0ZcqwT6BYkvMnGylldagAQ=)
2: 3136372e3138392e302e302f31362d3332203d3e203536303438.roa (hash: MrzEn6klYHxiYP4rtuuhkZhxDGTxHKj05TDsKOfntVs=)
3: 3136372e3138392e302e302f31362d3234203d3e2030.roa (hash: MXf+SARmeNUqmxYlPN54Ktu2L7cV6EQdIwRkz23xCxM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl
rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 06:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:0d:2b:cf:19:71:9a:51:ba:13:86:bb:26:ce:0f:6e:10:78:5d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF
Validity
Not Before: Oct 2 17:30:41 2026 GMT
Not After : Oct 5 18:14:41 2026 GMT
Subject: CN=CEBEF09407DA95B884497494FA39D586418F890A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4a:9d:d1:b5:08:bd:7c:db:04:cb:ff:db:44:
cb:23:05:6c:45:68:38:49:7a:9e:ee:b3:4f:b6:1e:
ea:f8:9f:5f:b7:5a:6c:f6:98:08:9c:6d:43:26:bb:
5f:32:98:41:2b:10:99:33:ff:73:dc:de:c5:a1:01:
f7:78:4f:c8:36:63:55:54:0f:6f:05:4b:a8:8e:21:
4b:50:24:ae:4d:e2:2c:71:fd:b7:cb:77:b1:05:57:
7c:f3:9e:ff:17:5f:be:7f:3a:ba:9b:d2:de:0d:ad:
08:79:57:e5:37:49:2d:8f:3a:a0:a9:6d:aa:25:d6:
99:b8:34:73:db:f3:1e:a1:23:5e:25:2b:20:01:a3:
1e:7c:b9:ba:f4:4d:ab:34:eb:63:21:13:91:54:60:
8a:9e:9f:9a:4f:f7:b5:1a:2c:93:13:b2:d2:dc:d6:
0a:d3:b0:51:81:01:c0:64:f7:15:9f:ee:25:f6:49:
87:5d:61:d4:d6:d2:e2:65:8e:ba:48:2d:ad:d9:da:
0f:57:e7:a5:f6:ca:15:e5:d4:bd:27:bb:40:66:13:
8d:3a:24:54:6a:d9:47:20:b2:25:0a:6a:97:a5:56:
9a:a5:66:5e:85:43:75:b4:2c:0e:8b:fb:54:6c:be:
33:77:94:0b:9d:7c:12:6b:3e:80:fb:19:e9:3e:a2:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BE:F0:94:07:DA:95:B8:84:49:74:94:FA:39:D5:86:41:8F:89:0A
X509v3 Authority Key Identifier:
keyid:7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:bc:d5:85:b2:21:aa:bd:3c:ad:ef:b6:f1:20:45:45:cb:52:
40:a1:21:4a:5e:76:e6:b4:7f:38:ad:c1:23:25:2a:22:6d:fc:
2b:1b:3f:92:2b:63:ce:f0:2a:9b:ab:1c:d4:66:f9:92:62:43:
c8:1d:98:23:f5:0e:29:68:fd:9b:df:cd:65:7f:82:53:08:21:
2f:85:72:88:02:d9:e2:d1:6e:85:3c:d1:46:a5:dd:88:75:16:
12:52:aa:f5:ef:59:ba:2e:9b:1c:bb:16:29:5e:65:de:6c:cd:
36:a2:74:b4:90:50:9d:9f:05:a5:f4:89:8d:17:41:b2:43:8e:
4b:37:fa:49:56:3a:fa:b7:5b:81:cf:d0:0e:b0:7c:09:89:c5:
1b:6e:5d:45:1e:11:2d:8e:3b:1e:cf:84:e9:aa:02:80:80:71:
ce:3c:c1:ad:12:47:e0:ae:f9:91:1b:43:76:ee:bf:e5:8e:cb:
2a:2f:8e:91:74:42:ff:fb:ab:6f:14:13:45:82:9c:48:c1:6c:
c0:78:00:d7:5a:12:c5:2b:0f:da:4d:d5:e7:fd:3b:93:f9:35:
0a:3f:f2:9b:13:3b:52:26:02:90:a2:6d:80:0c:ce:ed:2f:a9:
1c:dd:9d:2f:3b:ad:3f:df:1e:bb:dd:e0:06:1f:14:05:ab:c6:
b8:a5:1c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 04:31:52 2026 by rpki-client