
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
File: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft (raw, json)
Hash identifier: 0TOga2m1MIQemNphFb8L78RZmSYkg0+duSdrG9Az++E=
Subject key identifier: 7B:8A:5D:78:14:70:93:CF:59:C4:62:AB:65:44:90:56:4D:42:D2:FD
Authority key identifier: 8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A
Certificate issuer: /CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A
Certificate serial: 70AFA7DB77376346C572CDD25B83D22561B13EBC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
Manifest number: C7
Signing time: Fri 24 Jul 2026 12:01:07 +0000
Manifest this update: Fri 24 Jul 2026 11:56:07 +0000
Manifest next update: Sat 25 Jul 2026 13:24:07 +0000
Files and hashes: 1: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl (hash: znRLFNZG7OQ1Gj9sl+k7SNisiDvD16kAi79HAahUXdQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl
rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 13:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:af:a7:db:77:37:63:46:c5:72:cd:d2:5b:83:d2:25:61:b1:3e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A
Validity
Not Before: Jul 24 11:56:07 2026 GMT
Not After : Jul 25 13:24:07 2026 GMT
Subject: CN=7B8A5D78147093CF59C462AB654490564D42D2FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e7:fc:5b:87:0e:7d:d9:f7:e9:21:5b:03:99:
f3:f5:49:b5:41:c6:5b:14:eb:c1:21:04:18:7e:ce:
6b:19:be:db:96:41:1f:a9:27:df:78:9e:41:0f:14:
ef:9c:00:cf:2c:3b:20:25:12:df:77:58:54:c5:3c:
d3:e3:9a:c8:62:ad:30:e3:26:98:e9:88:e4:5c:fa:
96:4b:33:9c:80:fb:c0:0f:48:21:d7:05:a5:f3:71:
33:4e:2a:0f:e1:cb:37:38:0a:68:d0:06:9a:7f:1a:
39:01:46:e9:34:bb:bb:83:89:9a:cc:d7:ff:99:ed:
94:98:33:8d:e5:66:9e:48:9f:f2:75:c5:a6:53:7f:
69:f5:c8:49:96:d0:83:27:f6:87:a2:eb:dc:09:0d:
bb:39:7d:77:1d:2d:6e:ef:a5:b3:b6:e2:ed:3e:d1:
fa:c7:85:70:35:2b:af:8b:f0:0e:9c:02:20:03:2f:
ea:08:98:a8:3b:ba:c6:9f:0d:36:4a:e3:75:d8:7d:
c3:09:12:7e:0d:f6:c6:54:0b:a1:15:88:09:4e:af:
d6:a2:ae:69:ad:ac:a5:3c:9d:73:f8:b9:aa:a3:f5:
21:d6:83:e5:3a:7f:22:5e:2c:fc:f6:6d:03:61:92:
2c:b2:ba:4b:db:2b:e6:4d:d0:02:ff:9f:1c:c7:81:
39:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8A:5D:78:14:70:93:CF:59:C4:62:AB:65:44:90:56:4D:42:D2:FD
X509v3 Authority Key Identifier:
keyid:8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:84:83:1f:83:70:80:cf:59:4f:7d:f4:c5:a1:e0:d4:78:81:
ef:2c:cc:2c:46:0f:be:46:33:9e:d6:bb:3b:c3:ec:d2:a7:a7:
71:b5:64:c9:87:62:c1:42:5e:4a:80:99:47:1d:b2:37:78:74:
b6:92:df:1a:79:e5:b5:68:ad:6a:95:ee:99:2b:aa:28:5f:a4:
97:7d:c6:e3:03:6d:94:29:3a:75:1c:10:42:49:95:90:24:59:
51:08:7e:69:eb:46:61:77:cc:a2:f2:db:0c:0e:3b:66:de:7c:
c7:9f:e1:80:1b:7a:e7:0f:1a:11:80:2c:07:51:c7:09:03:2c:
42:7c:08:e0:8c:ed:3b:5f:6c:d4:40:7b:f2:cb:be:95:d7:66:
a7:37:8f:99:34:99:c5:6c:32:21:93:86:0d:9d:c6:82:7a:c8:
d3:ef:dd:bd:e5:f4:e1:e7:21:ec:40:6a:c6:77:66:28:7f:75:
22:34:bb:41:c8:10:26:8b:12:bc:50:71:e4:8f:61:32:35:43:
d7:36:19:cc:0b:09:c9:6e:22:55:aa:b9:d6:ab:6e:87:44:39:
ed:e1:fa:36:fd:5a:6c:f1:ef:83:12:6b:dc:8a:88:4f:a5:4e:
8f:09:a6:6f:57:6b:8a:f9:3e:3b:c1:58:ed:81:0d:e0:96:27:
58:cd:29:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:04:26 2026 by rpki-client