
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
File: 7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft (raw, json)
Hash identifier: KmLgHtgFNdwfRo+cc44yGezLyOj2MubyiBLZQ/0J9E8=
Subject key identifier: D0:B6:4C:D8:6F:AC:0D:93:E6:72:C2:2A:5F:08:10:77:6D:FD:8D:E6
Authority key identifier: 7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
Certificate issuer: /CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Certificate serial: 1D1E25B506BE92FE1D22533ABE35BB92BF7DBB41
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
Manifest number: B8
Signing time: Sat 13 Jun 2026 06:11:19 +0000
Manifest this update: Sat 13 Jun 2026 06:06:19 +0000
Manifest next update: Sun 14 Jun 2026 09:00:19 +0000
Files and hashes: 1: AS24138.roa (hash: xSgs8vwIbJkUWCN+zWjeD8FAFwkeRsci8W14DDMVWls=)
2: 7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl (hash: +WLE5YkK/JGRpr6/xlTHVLvH9nA8HFYZr1y5L7FArNo=)
3: AS56040.roa (hash: oZCKJU4dh/Nt+eYpzB9lsNE9+wplWvOn3SxADhCFxk8=)
4: AS9394.roa (hash: tPZUbO4SI48PQycQ05C83hNK59q9QmDob6L9igI/O+s=)
5: AS9808.roa (hash: FzsvtcBSjmSmgRghpx9UXPmCwJmLz5tkNAGrDrSE8pQ=)
6: AS45057.roa (hash: RyQnZ1SR5WSmk7o4bJ4b2E+nALl68m6SIg/3qHEnzWU=)
7: AS38341.roa (hash: RJkDZXApQMPiDZRPX5V1FKULI7lsgYxE3qOhphaxQ2o=)
8: AS56046.roa (hash: VoU1Yy8W9X5nBLouynhmB8TLBSuAgEwO4Sk7DuHC2Ak=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:1e:25:b5:06:be:92:fe:1d:22:53:3a:be:35:bb:92:bf:7d:bb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Validity
Not Before: Jun 13 06:06:19 2026 GMT
Not After : Jun 14 09:00:19 2026 GMT
Subject: CN=D0B64CD86FAC0D93E672C22A5F0810776DFD8DE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:17:fe:7c:57:18:2f:8f:48:97:67:71:f8:8c:
aa:d9:48:3b:02:7a:40:99:b1:18:4f:6a:d3:8a:84:
bf:a7:56:75:ea:34:77:b8:fc:b5:ba:ed:65:64:4a:
25:f2:17:0f:c5:b6:c9:5e:46:0f:b5:47:d1:49:da:
f9:0a:3c:4b:97:03:e8:a2:39:38:b8:a8:18:09:d4:
25:60:e5:d3:56:5d:af:91:2d:66:bb:03:7f:87:f5:
4f:f2:b3:07:15:5c:17:2a:b9:83:68:32:13:b3:b9:
a1:fd:e2:75:28:7b:5e:b0:30:60:f4:fa:78:cb:45:
21:79:a6:6d:f8:2f:ef:e0:25:a9:0e:d2:9f:da:6b:
12:aa:69:a9:42:7c:a8:5c:d4:c7:f3:4c:47:73:2c:
58:02:6c:9c:bd:1b:a0:54:9a:e8:b2:0f:20:06:50:
43:05:84:3f:81:b9:4c:b7:a9:b1:f1:34:87:f0:1b:
14:f9:9c:99:a0:08:83:38:f4:1c:31:34:4b:a3:47:
de:66:a1:db:65:77:5a:a7:a8:76:36:23:ad:d8:cd:
4f:e3:0d:56:75:fb:45:55:0e:51:48:4d:27:65:a9:
0d:1b:87:3d:1a:bf:06:72:c8:eb:d5:08:06:8f:4d:
71:18:a7:57:bc:1a:62:6a:81:75:94:84:35:c6:68:
5b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B6:4C:D8:6F:AC:0D:93:E6:72:C2:2A:5F:08:10:77:6D:FD:8D:E6
X509v3 Authority Key Identifier:
keyid:7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:12:de:14:30:95:7d:76:7a:11:58:c1:67:29:96:d6:46:f4:
47:b0:4b:f3:b6:88:21:69:8b:0b:c5:bc:94:ed:c5:61:1a:43:
59:73:61:11:9b:db:8c:a2:6b:df:3f:56:d2:7b:65:eb:0e:dd:
bf:8f:b5:41:e8:1b:e3:d1:ca:71:ce:b3:09:43:09:ec:d2:44:
9c:b1:c9:b1:7b:98:df:7f:02:08:67:4e:5e:ad:74:36:1a:3a:
17:60:95:95:69:02:be:e5:5f:0a:73:c0:55:ad:ad:18:9d:76:
4f:9a:4b:a0:32:d2:3c:e9:30:7b:c8:db:e6:80:65:13:c9:02:
f1:e6:b5:bc:4f:d5:96:4f:eb:15:41:cc:3e:cd:6a:4e:89:91:
65:1f:76:b4:6c:6c:37:a6:b7:ea:0f:56:1e:dd:49:31:a5:d4:
7f:80:e9:bd:1f:8d:97:67:4c:6f:6b:f1:ad:13:94:70:26:8d:
49:df:48:53:f3:3f:de:03:9f:0e:07:e1:00:03:56:f3:44:67:
10:7f:18:e9:5f:9e:02:7e:97:f0:1f:80:e2:ce:4b:db:6d:ce:
93:cb:05:31:25:20:7a:47:09:ea:f5:e9:eb:4c:84:a0:f3:d9:
e0:1e:ac:b4:33:12:07:b6:62:c8:25:46:51:72:0a:26:83:43:
1a:68:b5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:00:32 2026 by rpki-client