
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
File: 7F04F6FCE22750607E54E558E039E0F551D3135D.mft (raw, json)
Hash identifier: n2LvPvr/Agm9jTl6AxyIUA52WQtr0TFJWNNYDW+loo4=
Subject key identifier: 7A:6F:E5:D5:70:A3:E9:BE:B7:3C:31:B9:6C:EA:67:F8:9A:DC:67:9E
Authority key identifier: 7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D
Certificate issuer: /CN=7F04F6FCE22750607E54E558E039E0F551D3135D
Certificate serial: 4F7A59743D753DEBDC4AE16B0389951EBF9E4B2A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
Manifest number: CC
Signing time: Thu 15 Oct 2026 02:46:10 +0000
Manifest this update: Thu 15 Oct 2026 02:41:10 +0000
Manifest next update: Sun 18 Oct 2026 12:52:10 +0000
Files and hashes: 1: 3130332e312e32302e302f32322d3232203d3e203233383431.roa (hash: VysPkdD4l/g9blPW2SJoFaVCrMMxGsdFC4KZtokwYps=)
2: 3231312e3134382e3136302e302f31392d3139203d3e203233383431.roa (hash: bMsjW1jbE0mk/8BJ/0nz3O3UXsGlGA3e6jddE9uPDS4=)
3: 7F04F6FCE22750607E54E558E039E0F551D3135D.crl (hash: o66XZ9pVkM9UNrUX/eHmi2tDyWYGS72tMgNt3Re8wTE=)
4: 3232312e3132392e302e302f31362d3136203d3e203233383431.roa (hash: LXzAf6+hhsdt/TNw4PFtDGl7SS8I2bBwjZ8Gp200CMo=)
5: 323430313a636130303a3a2f33322d3332203d3e203233383431.roa (hash: Su8W1ryH6AcZbU5mbEZVZDmU61kG94jGmfhPCm2jvgw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 12:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:7a:59:74:3d:75:3d:eb:dc:4a:e1:6b:03:89:95:1e:bf:9e:4b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F04F6FCE22750607E54E558E039E0F551D3135D
Validity
Not Before: Oct 15 02:41:10 2026 GMT
Not After : Oct 18 12:52:10 2026 GMT
Subject: CN=7A6FE5D570A3E9BEB73C31B96CEA67F89ADC679E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:72:ee:e0:89:b2:52:f5:69:46:43:39:08:
91:2a:63:5f:67:f9:37:d8:a0:92:00:37:96:ff:fc:
3e:b3:3e:2c:ee:b4:b1:84:7e:06:6c:ab:fd:1f:22:
a5:54:37:5b:7f:fa:8e:99:e8:85:59:d9:e0:e0:d0:
f3:85:e9:1c:ad:26:c2:4d:f0:df:79:3b:a6:25:50:
14:fd:ea:98:18:aa:10:e4:d4:74:61:a7:09:03:5f:
44:e5:9e:0c:77:dc:e8:26:64:e1:a2:15:bd:6f:19:
e0:8d:ef:bb:95:98:cc:07:e5:6d:f3:3c:a7:6d:4a:
8d:3d:87:d7:b3:03:c8:cc:2c:b0:2d:bb:be:89:27:
69:2e:a7:13:96:7d:66:df:91:33:f6:8d:f4:a8:d1:
f1:9c:1c:02:8c:3b:f0:76:e3:76:2d:8f:45:12:a4:
8b:53:b4:f7:3b:76:bd:86:c2:77:e8:fd:e0:f7:c5:
85:58:7c:67:39:82:82:2f:70:a1:d5:f7:5e:3b:9e:
2e:d9:cf:63:71:fa:b8:9f:2b:a2:e0:45:57:fe:cd:
83:9a:9a:11:8f:10:37:18:2f:1e:a3:4d:63:a8:3e:
98:2f:4f:e0:51:43:05:d8:48:d5:39:b5:45:b3:6f:
e3:3f:b4:cd:95:20:b9:25:01:02:16:58:ee:fc:da:
3d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6F:E5:D5:70:A3:E9:BE:B7:3C:31:B9:6C:EA:67:F8:9A:DC:67:9E
X509v3 Authority Key Identifier:
keyid:7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6e:af:5c:86:ee:83:88:df:2a:84:df:28:f7:07:ff:f5:e2:
e0:92:d1:bb:c5:c7:94:01:14:e8:b9:c7:e6:27:4a:2e:b3:ef:
c8:e3:39:66:36:51:dd:c6:bb:3c:82:e8:18:05:4b:25:b4:48:
52:ad:5c:a0:e6:77:1a:ce:c3:f1:f4:3c:69:0c:7a:28:fc:24:
36:95:2a:1a:58:77:db:eb:f8:d8:04:5a:29:cd:b2:7f:aa:4a:
23:10:b3:3a:90:68:48:16:6a:df:0c:da:4a:00:61:06:9b:af:
cb:21:67:88:ab:87:70:1e:1d:8e:66:dd:af:95:b5:0a:ed:6c:
63:69:4a:86:09:01:4f:ad:af:eb:6a:76:90:96:53:48:d2:51:
a9:7a:85:0d:d1:39:a0:26:0a:c1:05:0e:61:bf:a8:8d:bf:86:
1c:12:04:81:8e:4c:dd:a6:15:51:32:9e:c8:a1:f8:11:bb:ae:
c8:64:ae:93:21:af:62:93:8c:28:d6:08:62:82:42:90:c9:04:
76:e3:07:77:d3:fb:ed:14:36:8a:f0:30:2d:6a:6f:5a:90:d9:
d9:1b:68:9d:ee:e7:c5:33:60:1c:1f:53:27:94:91:a3:c5:e0:
6a:80:66:64:ab:30:22:3e:fb:41:45:83:43:1d:b5:af:87:70:
f5:c5:e6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:43:46 2026 by rpki-client