
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
File: 7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft (raw, json)
Hash identifier: eHE+myItyIhDe1TcZG9KviIDejsJ9ahsvMHZj1gxbmI=
Subject key identifier: E0:AE:6A:3C:20:85:87:5D:F1:68:E0:38:19:A9:5F:6D:60:E3:97:0D
Authority key identifier: 7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
Certificate issuer: /CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Certificate serial: 39FF09074093356D7BC9302A43C776C6855ACCA6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
Manifest number: F5
Signing time: Tue 28 Jul 2026 20:22:41 +0000
Manifest this update: Tue 28 Jul 2026 20:17:41 +0000
Manifest next update: Wed 29 Jul 2026 22:52:41 +0000
Files and hashes: 1: AS24138.roa (hash: xSgs8vwIbJkUWCN+zWjeD8FAFwkeRsci8W14DDMVWls=)
2: AS9394.roa (hash: tPZUbO4SI48PQycQ05C83hNK59q9QmDob6L9igI/O+s=)
3: 7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl (hash: e1XCRaRX8p/7qjJ1xB6q8QlP/gha1L5eeG6FyJzhuMU=)
4: AS56046.roa (hash: VoU1Yy8W9X5nBLouynhmB8TLBSuAgEwO4Sk7DuHC2Ak=)
5: AS56040.roa (hash: oZCKJU4dh/Nt+eYpzB9lsNE9+wplWvOn3SxADhCFxk8=)
6: AS38341.roa (hash: RJkDZXApQMPiDZRPX5V1FKULI7lsgYxE3qOhphaxQ2o=)
7: AS9808.roa (hash: FzsvtcBSjmSmgRghpx9UXPmCwJmLz5tkNAGrDrSE8pQ=)
8: AS45057.roa (hash: RyQnZ1SR5WSmk7o4bJ4b2E+nALl68m6SIg/3qHEnzWU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:52:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ff:09:07:40:93:35:6d:7b:c9:30:2a:43:c7:76:c6:85:5a:cc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Validity
Not Before: Jul 28 20:17:41 2026 GMT
Not After : Jul 29 22:52:41 2026 GMT
Subject: CN=E0AE6A3C2085875DF168E03819A95F6D60E3970D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:00:6d:67:de:95:14:88:0c:b2:4f:97:a5:e3:
5c:5d:73:53:56:dc:80:06:6b:89:05:56:01:c9:f1:
db:31:29:3d:a0:5c:58:a5:1d:f0:07:80:96:9e:f9:
f6:d7:e7:3c:04:4e:6a:7f:b3:b1:78:cb:e4:15:3c:
46:7b:0f:d6:18:ea:44:7f:60:e8:b4:ef:34:aa:a8:
a2:07:eb:a9:c7:aa:68:2f:81:87:62:0e:5c:e7:ae:
82:f8:8f:7c:4e:10:95:0c:00:9b:d4:7b:19:e4:ba:
8d:10:2a:ad:3d:09:ca:dc:06:be:c2:2e:f5:54:c7:
2c:93:23:a0:e2:de:ae:63:41:04:50:ee:3b:60:74:
b1:45:6b:11:f2:ad:27:fa:60:a0:cf:7c:09:aa:44:
69:45:e5:b0:ff:05:72:c7:cd:66:47:33:c2:c0:04:
9e:81:ce:3d:91:1c:20:85:94:b9:cd:9a:91:e8:31:
a7:7c:65:cd:9f:63:b3:c2:8b:c2:81:b0:db:b9:7e:
d5:72:9b:e7:b8:05:32:12:95:a8:13:f5:ba:71:56:
87:f5:b6:84:6e:b1:e0:6f:63:2f:c7:23:30:6f:77:
0c:38:32:bf:10:31:7a:3b:25:ef:60:1c:b7:0c:f1:
6b:67:9b:38:7a:b7:b8:9b:7b:5c:00:c8:ea:8e:27:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AE:6A:3C:20:85:87:5D:F1:68:E0:38:19:A9:5F:6D:60:E3:97:0D
X509v3 Authority Key Identifier:
keyid:7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2d:3d:1b:07:de:c8:04:e3:1d:da:93:7e:92:bf:d6:58:db:
4c:a8:76:33:bf:8d:a7:58:4f:84:43:ca:ba:59:23:c5:f7:0f:
75:b7:e1:d1:f8:cc:48:b6:5e:c0:59:db:ed:b8:69:67:27:60:
1e:7a:72:f8:68:97:92:3a:34:18:3b:c5:97:90:b5:8a:dd:83:
15:42:91:29:fe:7f:3f:8f:8a:23:e0:a7:a8:86:fb:a6:2c:db:
81:92:02:1e:26:d5:14:6d:6d:d4:17:84:3b:6c:e5:58:fa:1f:
4d:c5:bb:6b:f9:1b:fe:7a:6c:49:a9:a8:58:09:b0:d6:50:26:
53:4b:1d:9c:f6:cf:b9:49:58:dc:db:23:41:84:e7:a3:bb:b0:
ce:11:f1:5d:d8:83:d3:a7:10:8e:ad:13:b7:0f:fb:c4:26:8a:
3a:ff:97:fc:04:c2:2b:47:34:4f:19:d4:0d:40:7c:e9:24:a4:
0c:a7:be:57:2c:51:17:a6:6f:43:c7:ad:b1:08:15:de:3b:d1:
55:a9:52:c1:a8:7d:c4:39:b0:52:49:1e:18:5c:4b:b2:c1:67:
a2:c9:4e:c4:3b:89:95:e4:30:9e:f4:e7:b2:5d:f6:23:9e:7e:
f8:bf:7a:4b:bf:8b:10:6a:57:60:4a:89:3c:4f:7a:ef:17:6f:
fb:3a:0a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:15:35 2026 by rpki-client