
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft
File: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft (raw, json)
Hash identifier: D7VZ90WPFhKI/Bu1cQp7h7ZnvCrR0Cuum0GWKHi40x0=
Subject key identifier: 54:A4:F9:35:5D:FE:25:2E:DB:31:18:A1:8F:A4:93:EF:30:E4:31:37
Authority key identifier: 7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08
Certificate issuer: /CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608
Certificate serial: 1AE13E85B8C993B8E069E6A899804D40CB020B9E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft
Manifest number: 56
Signing time: Sat 13 Jun 2026 15:16:53 +0000
Manifest this update: Sat 13 Jun 2026 15:11:53 +0000
Manifest next update: Sun 14 Jun 2026 15:53:53 +0000
Files and hashes: 1: 3130332e33362e3230342e302f32322d3232203d3e203233363530.roa (hash: Nz+r/dZKAwE/9JB0MxhKtZjDSMYb6nHSikzBbLCS+DM=)
2: 3130332e33362e3230302e302f32322d3232203d3e203233363530.roa (hash: 8dDfwQ79qdpVpYeaUnX/qx0QM5Ju+lrPZd8Vtd9vWpk=)
3: 3130332e33362e3139322e302f32322d3232203d3e203233363530.roa (hash: M765CopqZf6j7SPn53UaW0BZUmGFf3AOcTsTTNyVaoA=)
4: 3130332e33362e3139362e302f32322d3232203d3e203233363530.roa (hash: IZ4XVYgqKmGtS8wgseXWsX65eKc4WUGyUyoHldRsixk=)
5: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl (hash: 6zUtZ5B+0U791jDRFUnADJHzZzk6oD8qHELc7SKx5zk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl
rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 15:53:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e1:3e:85:b8:c9:93:b8:e0:69:e6:a8:99:80:4d:40:cb:02:0b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608
Validity
Not Before: Jun 13 15:11:53 2026 GMT
Not After : Jun 14 15:53:53 2026 GMT
Subject: CN=54A4F9355DFE252EDB3118A18FA493EF30E43137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:63:1b:42:6e:55:d9:db:97:51:c3:62:3b:
c7:99:d7:f5:00:38:34:89:ac:9b:65:0e:a0:da:a5:
9d:53:5f:b5:e4:25:87:ba:79:9f:4f:94:3d:ca:9e:
bd:3f:cf:4d:64:a4:6d:a0:f4:b7:fc:bd:ef:5c:77:
60:f8:bc:61:62:ba:00:04:a9:18:96:56:8a:da:f0:
06:56:1f:c1:7a:a7:29:b5:7e:4b:5d:7a:cd:30:6e:
e5:47:a8:2d:52:37:e8:da:d3:f1:1b:9d:ff:fe:44:
ef:14:4c:8f:76:43:98:71:4e:22:dc:0f:9a:e6:73:
25:97:6b:4a:81:49:c5:17:30:ff:65:bc:ea:a2:3b:
b2:5b:b6:83:12:e4:cc:bf:3e:42:21:27:f8:20:9d:
5a:07:17:82:81:8b:09:c7:61:a2:ee:5b:2f:94:6f:
8e:bb:d3:65:cc:7c:71:99:1c:35:7c:61:06:9a:e2:
0a:86:18:1f:ee:47:c2:f5:c4:0f:75:21:4d:4f:81:
69:c0:87:d7:3a:50:54:d8:92:a9:2d:5e:38:1d:dd:
81:9f:1d:af:27:06:21:53:75:f9:0d:01:a3:6b:40:
5d:c1:6f:05:f8:e8:4d:10:27:cf:c3:18:62:6a:3c:
af:40:78:08:86:31:8d:f7:00:e4:46:d7:82:e3:04:
83:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A4:F9:35:5D:FE:25:2E:DB:31:18:A1:8F:A4:93:EF:30:E4:31:37
X509v3 Authority Key Identifier:
keyid:7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:98:e6:07:d0:57:86:f1:f4:d9:8a:1a:f3:af:20:30:50:bf:
a2:45:48:c5:50:db:9c:f1:4e:c7:b8:02:c6:7d:c3:30:ab:b4:
af:85:df:84:49:6d:89:13:c6:6e:3f:d4:eb:57:ef:43:e5:5e:
e8:35:a5:24:36:53:17:49:fc:f8:1d:d9:21:ff:8f:ac:c1:79:
64:58:0b:db:e4:1d:f8:f1:0b:43:a4:4d:9f:5b:67:9a:1f:07:
6e:96:bc:b0:b5:2d:a3:51:69:e4:9f:78:04:42:1a:40:aa:39:
64:20:82:fa:45:dd:86:74:62:42:bd:04:52:4b:b9:cd:82:38:
a2:95:20:69:45:32:83:4e:f7:23:0b:af:de:f6:13:57:1b:b7:
09:08:f8:9b:4f:c1:7d:75:39:f5:50:e9:a1:2b:c2:b1:df:cf:
73:49:80:e7:d1:c8:bb:8d:6b:d4:48:31:f6:a1:9b:17:36:74:
cd:20:9d:45:c4:3d:19:2e:b7:64:69:c5:55:ad:48:e5:ac:9a:
bf:fa:e1:93:b1:93:54:61:d9:60:2e:6e:ff:dc:2c:de:4c:f0:
2d:a6:2a:a7:80:4f:57:1e:df:e2:af:57:9a:00:ba:81:80:c3:
96:c0:58:3d:be:30:ba:d3:f3:03:55:14:7f:59:97:d0:7a:7a:
22:bc:ed:e9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUGuE+hbjJk7jgaeaomYBNQMsCC54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4
OUZFNzYwODAeFw0yNjA2MTMxNTExNTNaFw0yNjA2MTQxNTUzNTNaMDMxMTAvBgNV
BAMTKDU0QTRGOTM1NURGRTI1MkVEQjMxMThBMThGQTQ5M0VGMzBFNDMxMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8oWMbQm5V2duXUcNiO8eZ1/UA
ODSJrJtlDqDapZ1TX7XkJYe6eZ9PlD3Knr0/z01kpG2g9Lf8ve9cd2D4vGFiugAE
qRiWVora8AZWH8F6pym1fktdes0wbuVHqC1SN+ja0/Ebnf/+RO8UTI92Q5hxTiLc
D5rmcyWXa0qBScUXMP9lvOqiO7JbtoMS5My/PkIhJ/ggnVoHF4KBiwnHYaLuWy+U
b46702XMfHGZHDV8YQaa4gqGGB/uR8L1xA91IU1PgWnAh9c6UFTYkqktXjgd3YGf
Ha8nBiFTdfkNAaNrQF3BbwX46E0QJ8/DGGJqPK9AeAiGMY33AORG14LjBINLAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUVKT5NV3+JS7bMRihj6ST7zDkMTcwHwYDVR0j
BBgwFoAUeikWuaL+UH6f+oEYgcK3gYn+dggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMxOTk3OTEwNTY4MTQxMS8wLzdBMjkxNkI5QTJGRTUwN0U5RkZBODExODgxQzJC
NzgxODlGRTc2MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4OUZFNzYwOC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTYzMTk5NzkxMDU2ODE0MTEvMC83QTI5MTZCOUEyRkU1
MDdFOUZGQTgxMTg4MUMyQjc4MTg5RkU3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpjmB9BXhvH0
2Yoa868gMFC/okVIxVDbnPFOx7gCxn3DMKu0r4XfhEltiRPGbj/U61fvQ+Ve6DWl
JDZTF0n8+B3ZIf+PrMF5ZFgL2+Qd+PELQ6RNn1tnmh8Hbpa8sLUto1Fp5J94BEIa
QKo5ZCCC+kXdhnRiQr0EUku5zYI4opUgaUUyg073Iwuv3vYTVxu3CQj4m0/BfXU5
9VDpoSvCsd/Pc0mA59HIu41r1Egx9qGbFzZ0zSCdRcQ9GS63ZGnFVa1I5ayav/rh
k7GTVGHZYC5u/9ws3kzwLaYqp4BPVx7f4q9XmgC6gYDDlsBYPb4wutPzA1UUf1mX
0Hp6Irzt6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:24:11 2026 by rpki-client