
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft
File: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft (raw, json)
Hash identifier: dRFldgKw8OGIsKPHsmKHHCd07EDz7uevKL0CDNTY7sU=
Subject key identifier: EA:F9:AF:AC:D9:5B:06:F1:9B:EA:3D:84:35:73:3B:AF:CE:B9:8A:CB
Authority key identifier: 7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08
Certificate issuer: /CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608
Certificate serial: 3A18B3803A63A5DEA001CC47F1DA778D9560D088
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft
Manifest number: 29
Signing time: Wed 13 May 2026 00:00:49 +0000
Manifest this update: Tue 12 May 2026 23:55:49 +0000
Manifest next update: Thu 14 May 2026 01:23:49 +0000
Files and hashes: 1: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl (hash: qoBeOKc6pZAycIHDratv9wotT4MQjBx7wsmsI93BpHc=)
2: 3130332e33362e3139322e302f32322d3232203d3e203233363530.roa (hash: M765CopqZf6j7SPn53UaW0BZUmGFf3AOcTsTTNyVaoA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl
rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 01:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:18:b3:80:3a:63:a5:de:a0:01:cc:47:f1:da:77:8d:95:60:d0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608
Validity
Not Before: May 12 23:55:49 2026 GMT
Not After : May 14 01:23:49 2026 GMT
Subject: CN=EAF9AFACD95B06F19BEA3D8435733BAFCEB98ACB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:e9:29:35:a2:da:80:10:88:d7:f2:bc:f7:
01:d2:c2:fd:a6:d7:16:71:5c:80:4c:2a:07:d5:2c:
65:5a:6e:a2:f3:55:a7:d7:36:4d:d0:be:09:fc:ec:
2d:c0:93:68:df:13:6a:9c:0b:6e:00:6e:9e:d4:f6:
67:a5:b4:2f:f9:31:3e:2a:db:e8:72:06:76:7c:12:
77:ab:fe:d6:2d:ad:b3:ad:68:aa:b3:70:4d:d3:df:
29:da:08:e4:2b:d1:77:55:e0:8b:bc:16:4d:da:aa:
9f:5e:e5:fb:a7:a7:f7:74:61:af:9d:4c:4f:8c:45:
63:e1:8d:d0:ce:75:b0:ba:c4:7c:61:38:2e:28:a9:
f2:79:50:e3:ff:d3:05:e5:d4:bd:e1:94:82:74:03:
93:8f:55:76:82:f5:81:56:25:8f:cd:77:8b:c8:7a:
29:28:58:4d:1f:78:aa:6d:09:10:18:f6:31:bf:90:
7f:50:3f:0d:af:f8:7a:e9:62:ee:88:b7:c4:be:9a:
13:d3:8b:11:a3:3c:e0:b4:ad:18:5d:17:a9:da:3b:
34:78:0a:28:d9:4b:55:b0:3e:60:c5:52:6a:53:07:
99:97:0c:40:c0:8b:ad:f7:9d:d6:d6:e7:c2:8a:62:
de:d9:33:02:09:cf:43:16:49:17:db:17:f5:89:e9:
18:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F9:AF:AC:D9:5B:06:F1:9B:EA:3D:84:35:73:3B:AF:CE:B9:8A:CB
X509v3 Authority Key Identifier:
keyid:7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:45:40:92:5d:ff:d8:17:7c:0c:08:78:a8:71:84:d1:12:9f:
65:c0:d1:b1:e1:f4:91:13:19:8f:d0:76:67:21:f6:01:04:2e:
7e:27:6c:0e:de:48:ed:0c:77:f1:1a:7a:6e:1f:e2:87:83:8c:
71:b2:5d:4e:3b:01:16:e1:41:5d:38:67:ac:fa:81:86:cf:fd:
e0:2e:7d:12:04:2c:ec:af:6f:16:de:d7:87:ce:8f:22:e7:81:
3d:94:19:fc:47:e8:7c:76:12:ca:d5:22:7e:8f:28:72:ad:e7:
f3:3d:3c:f4:db:33:b1:f6:c7:d6:90:c6:1a:5b:bf:48:42:6f:
1d:6d:e0:3c:fc:f7:d0:59:bf:73:27:b8:2f:80:87:f2:b0:3e:
7b:46:76:42:b7:d8:44:e8:a7:68:9f:dc:53:5a:d3:fc:9b:f1:
91:5e:89:b2:1d:e6:62:f1:15:10:62:38:bf:43:12:4f:16:45:
36:95:7b:f7:56:26:58:5c:5b:2e:1d:82:75:8e:ef:c9:87:3d:
e8:98:a3:e8:b9:ac:9a:b3:9c:d6:29:d3:e7:d9:ab:14:24:f0:
40:c1:b4:fa:ed:a4:a5:cf:7e:b0:fb:3f:79:1d:7b:99:e2:48:
92:dc:d8:5f:0d:a2:a0:b9:72:cb:08:69:56:a2:33:b4:d7:84:
91:db:8a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:26:25 2026 by rpki-client