
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
File: 7F04F6FCE22750607E54E558E039E0F551D3135D.mft (raw, json)
Hash identifier: OoY3K+aqZMpSGV1Tae0ASyL9gmdBu+WnIqm0/6Cr3tk=
Subject key identifier: 1C:E0:EF:36:06:0A:7E:0C:F3:96:E4:EA:32:51:41:77:3B:B5:9E:30
Authority key identifier: 7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D
Certificate issuer: /CN=7F04F6FCE22750607E54E558E039E0F551D3135D
Certificate serial: 13C95C7F082B1172C3BFF165F0D9EAEC72FC8E42
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
Manifest number: C6
Signing time: Thu 01 Oct 2026 07:54:21 +0000
Manifest this update: Thu 01 Oct 2026 07:49:21 +0000
Manifest next update: Sun 04 Oct 2026 10:56:21 +0000
Files and hashes: 1: 3130332e312e32302e302f32322d3232203d3e203233383431.roa (hash: VysPkdD4l/g9blPW2SJoFaVCrMMxGsdFC4KZtokwYps=)
2: 323430313a636130303a3a2f33322d3332203d3e203233383431.roa (hash: Su8W1ryH6AcZbU5mbEZVZDmU61kG94jGmfhPCm2jvgw=)
3: 3231312e3134382e3136302e302f31392d3139203d3e203233383431.roa (hash: bMsjW1jbE0mk/8BJ/0nz3O3UXsGlGA3e6jddE9uPDS4=)
4: 7F04F6FCE22750607E54E558E039E0F551D3135D.crl (hash: IkFK5zuqqlTl36O96DLpIQ6XLrS2yHfRUPcjg5KOOMI=)
5: 3232312e3132392e302e302f31362d3136203d3e203233383431.roa (hash: LXzAf6+hhsdt/TNw4PFtDGl7SS8I2bBwjZ8Gp200CMo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 05:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c9:5c:7f:08:2b:11:72:c3:bf:f1:65:f0:d9:ea:ec:72:fc:8e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F04F6FCE22750607E54E558E039E0F551D3135D
Validity
Not Before: Oct 1 07:49:21 2026 GMT
Not After : Oct 4 10:56:21 2026 GMT
Subject: CN=1CE0EF36060A7E0CF396E4EA325141773BB59E30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:42:1a:70:87:e6:86:a6:16:c7:67:99:c5:45:
ba:f1:80:8e:bd:86:fe:a3:15:06:94:42:ce:14:f4:
db:57:bf:f0:91:4d:21:9b:7e:eb:0b:db:59:e9:f1:
a8:75:85:ea:30:06:b5:58:8a:68:27:7d:73:30:c4:
0b:0e:9b:d4:5d:f5:01:e5:d9:d5:ca:df:2e:db:31:
e9:4e:45:95:18:de:8f:59:76:ce:0f:5b:a4:7a:b0:
83:92:f7:17:ae:4e:4a:62:7b:58:30:b4:4b:85:1e:
71:85:3a:0b:08:8e:62:f7:5f:84:a3:3d:73:cd:1c:
05:42:b2:d0:62:82:12:1f:29:ed:ff:cf:a8:58:d8:
67:98:51:4f:ec:fd:17:d8:29:6c:b6:a1:e1:f2:e9:
81:83:be:25:e7:53:6f:f7:a4:7a:1a:5f:91:50:51:
eb:c6:48:e2:3e:9e:83:3c:73:14:59:c9:b0:e8:d9:
ec:06:09:e1:0c:17:d2:8d:bc:cf:fd:83:5b:a0:fc:
c8:2c:1e:df:1b:4e:c3:4c:f5:4d:cd:42:bb:56:d4:
9e:56:62:4e:08:1a:91:46:2b:f7:e5:86:2b:00:59:
2f:b7:74:43:68:d8:81:42:65:5f:9f:b2:92:ee:db:
f0:d3:d4:55:de:4c:60:03:37:35:59:24:d7:f1:e7:
0f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E0:EF:36:06:0A:7E:0C:F3:96:E4:EA:32:51:41:77:3B:B5:9E:30
X509v3 Authority Key Identifier:
keyid:7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6a:2a:f9:9c:9d:91:e0:8d:a1:27:a8:5c:58:14:46:ab:98:
ea:3e:fe:e1:b9:24:90:cb:0b:7e:b9:88:18:8f:e6:46:c5:17:
63:cc:4c:db:7f:29:88:e4:77:2d:46:e2:92:36:03:5f:3f:1a:
7c:fa:40:4c:e5:0b:49:3f:90:cf:0d:89:45:8d:6f:8f:bf:51:
c4:a2:4f:9d:2c:d7:7d:b6:e9:69:6d:21:da:3d:54:cf:f1:cd:
19:71:da:2e:f6:06:63:60:0e:52:4e:a4:e0:b5:44:d3:1a:c4:
82:d0:95:22:02:55:4d:28:92:e3:d5:da:19:ce:e6:6e:e6:3e:
90:9f:3b:b8:8d:66:f2:97:37:68:65:9a:ef:d8:ac:59:dc:ed:
11:1a:22:b9:64:39:e2:71:c7:bb:7e:26:c2:f9:87:4d:3f:75:
2a:09:cd:18:1c:dc:aa:63:d1:dc:ea:ce:4e:9f:da:2d:bd:b7:
d3:6d:8f:56:de:7d:6f:24:4b:e7:04:bd:48:2d:07:6a:75:22:
ae:72:f1:dd:e6:26:64:97:46:79:fa:79:eb:00:61:80:c0:11:
56:1f:4d:f1:91:e5:dd:47:ef:dd:d6:cc:eb:a3:d9:c1:85:02:
bb:e0:e4:cc:1b:b4:e1:ff:cc:11:03:35:38:37:48:8c:eb:33:
a1:54:38:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 23:49:31 2026 by rpki-client