
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft
File: 7E97B2869243296A265D98767FC04F1998D143DE.mft (raw, json)
Hash identifier: y+iRCqpOLzkP0fAB07QH0mSzZ4pFnkDD2UCO8D5NQt8=
Subject key identifier: 1B:9A:BB:3C:AE:AF:29:4F:64:BA:FB:74:3A:A7:11:B3:31:0F:45:69
Authority key identifier: 7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE
Certificate issuer: /CN=7E97B2869243296A265D98767FC04F1998D143DE
Certificate serial: 5D0660E613330430417A2D2230918EEDBDF86087
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft
Manifest number: 7E
Signing time: Wed 29 Jul 2026 09:34:01 +0000
Manifest this update: Wed 29 Jul 2026 09:29:01 +0000
Manifest next update: Thu 30 Jul 2026 12:44:01 +0000
Files and hashes: 1: 3130332e3233332e3133362e302f32342d3234203d3e203633363936.roa (hash: RfspFMxmIvUaZoDDu4Mh9YLmEtrO/QrKQVLqrxLFw3U=)
2: 3130332e3233332e3133382e302f32342d3234203d3e203633363937.roa (hash: rm3DnKUZiRzyrB9MIhtg+3yts5DolytZ1bDtJ/yPMew=)
3: 3130332e3233332e3133362e302f32332d3233203d3e203633363936.roa (hash: KQvWBZXWCR3Q1jOkECmr3kjMcu1iG3s8aIgIPbrTDHI=)
4: 7E97B2869243296A265D98767FC04F1998D143DE.crl (hash: aa4orLSywForxH3w2N8xTJbQe/w+8+Q6A4gYkQChJFw=)
5: 3130332e3233332e3133382e302f32332d3233203d3e203633363937.roa (hash: uOCqEKaImN5wNlAYjTqBY4smG8MJ0enpKts3XJnKdC4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl
rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 12:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:06:60:e6:13:33:04:30:41:7a:2d:22:30:91:8e:ed:bd:f8:60:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E97B2869243296A265D98767FC04F1998D143DE
Validity
Not Before: Jul 29 09:29:01 2026 GMT
Not After : Jul 30 12:44:01 2026 GMT
Subject: CN=1B9ABB3CAEAF294F64BAFB743AA711B3310F4569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:72:31:31:29:2a:40:b1:a6:bb:43:f0:58:
5d:d8:02:f0:40:98:4d:f9:24:e2:93:3c:73:3d:ee:
8e:f8:08:31:a9:51:0b:c7:bf:be:f1:06:5a:50:86:
18:31:5d:1b:df:39:e7:58:8f:a4:ae:51:39:ec:0d:
e7:e2:6b:9e:04:f4:64:9b:4b:05:2e:ff:77:7d:54:
9a:c5:8d:f7:06:62:35:d7:d4:a4:12:83:8d:5b:41:
85:d5:5c:35:e5:78:da:36:b7:dd:33:c4:f6:63:6c:
02:19:c0:2c:f6:1b:78:01:0d:d4:63:db:34:83:04:
b7:24:82:d9:da:55:96:c0:0b:40:16:35:f0:1d:36:
8b:c3:1c:1a:f2:82:46:19:67:c6:d7:0c:9a:4a:66:
13:8e:9d:10:35:e9:41:6c:22:e8:aa:48:e2:90:ea:
4d:58:84:6d:b1:0d:21:54:40:17:10:65:ea:4c:77:
5d:4a:2f:7a:0a:93:4f:b4:3f:56:16:5b:c0:3f:4c:
68:0b:c4:af:b1:ec:47:6f:e3:c9:c5:ac:6e:33:01:
07:77:d8:43:6a:c4:f3:60:60:a5:8d:b7:d5:c2:11:
b7:31:d6:4f:8b:28:06:da:91:2f:81:3c:97:1a:9d:
9d:49:76:17:92:3f:25:b5:fe:1d:66:67:3a:31:0c:
a9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9A:BB:3C:AE:AF:29:4F:64:BA:FB:74:3A:A7:11:B3:31:0F:45:69
X509v3 Authority Key Identifier:
keyid:7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:93:a2:69:ab:0c:78:b9:73:19:d6:9d:1c:c9:df:ea:af:48:
85:fb:63:ae:be:86:d4:a8:4d:fc:d7:53:94:d2:f4:d7:2d:dd:
ec:9f:8f:2b:e1:2e:47:07:e0:05:47:c6:9a:d8:a9:be:cf:55:
71:91:da:73:56:9f:09:79:21:2a:d7:10:06:f2:32:df:5b:24:
0f:a5:12:2e:00:91:54:fe:e5:84:c7:c1:49:71:6b:1e:62:af:
d6:a7:28:8b:92:5a:27:b5:43:bc:81:5b:87:0b:b0:27:d9:47:
de:36:8a:78:b3:84:25:d4:e7:a2:61:71:f9:42:08:a4:06:ce:
e4:c2:45:ec:b7:bc:10:4f:96:c9:c0:cf:4e:57:d3:11:d5:32:
2b:5d:15:a7:93:cd:58:98:6e:57:eb:0d:b9:0a:dd:73:02:ad:
ae:d3:3e:57:54:04:4b:d2:12:89:3d:31:55:99:29:76:6b:f9:
c6:76:59:f3:50:65:b3:a9:6f:6a:f8:54:2c:82:06:5c:7c:cd:
9b:fb:81:f0:1b:ea:ff:6d:21:87:f3:e2:12:38:df:7d:14:72:
74:7b:31:17:15:24:74:26:9f:38:07:0f:ec:e0:41:3a:e5:e7:
63:7a:66:29:97:5a:33:d6:ed:9d:ef:b0:96:2f:9b:2b:db:1d:
80:a2:d0:e4
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUXQZg5hMzBDBBei0iMJGO7b34YIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5
OEQxNDNERTAeFw0yNjA3MjkwOTI5MDFaFw0yNjA3MzAxMjQ0MDFaMDMxMTAvBgNV
BAMTKDFCOUFCQjNDQUVBRjI5NEY2NEJBRkI3NDNBQTcxMUIzMzEwRjQ1NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTJnIxMSkqQLGmu0PwWF3YAvBA
mE35JOKTPHM97o74CDGpUQvHv77xBlpQhhgxXRvfOedYj6SuUTnsDefia54E9GSb
SwUu/3d9VJrFjfcGYjXX1KQSg41bQYXVXDXleNo2t90zxPZjbAIZwCz2G3gBDdRj
2zSDBLckgtnaVZbAC0AWNfAdNovDHBrygkYZZ8bXDJpKZhOOnRA16UFsIuiqSOKQ
6k1YhG2xDSFUQBcQZepMd11KL3oKk0+0P1YWW8A/TGgLxK+x7Edv48nFrG4zAQd3
2ENqxPNgYKWNt9XCEbcx1k+LKAbakS+BPJcanZ1JdheSPyW1/h1mZzoxDKljAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUG5q7PK6vKU9kuvt0OqcRszEPRWkwHwYDVR0j
BBgwFoAUfpeyhpJDKWomXZh2f8BPGZjRQ94wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MTAxMjU4MTgzOTAxMTg0My8wLzdFOTdCMjg2OTI0MzI5NkEyNjVEOTg3NjdGQzA0
RjE5OThEMTQzREUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5OEQxNDNERS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDEwMTI1ODE4MzkwMTE4NDMvMC83RTk3QjI4NjkyNDMy
OTZBMjY1RDk4NzY3RkMwNEYxOTk4RDE0M0RFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJOiaasMeLlz
GdadHMnf6q9Ihftjrr6G1KhN/NdTlNL01y3d7J+PK+EuRwfgBUfGmtipvs9VcZHa
c1afCXkhKtcQBvIy31skD6USLgCRVP7lhMfBSXFrHmKv1qcoi5JaJ7VDvIFbhwuw
J9lH3jaKeLOEJdTnomFx+UIIpAbO5MJF7Le8EE+WycDPTlfTEdUyK10Vp5PNWJhu
V+sNuQrdcwKtrtM+V1QES9ISiT0xVZkpdmv5xnZZ81Bls6lvavhULIIGXHzNm/uB
8Bvq/20hh/PiEjjffRRydHsxFxUkdCafOAcP7OBBOuXnY3pmKZdaM9btne+wli+b
K9sdgKLQ5A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 23:12:44 2026 by rpki-client