
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft
File: A7133A09AC078B101CB7980FE646810280C0D64F.mft (raw, json)
Hash identifier: ziiIk4ZuuntreYmO0Cb3qw1ipJ9BsHA5p/oZ1/0J8Qw=
Subject key identifier: 5B:BE:4E:4F:A7:E7:6C:D3:35:88:CD:67:25:B0:FF:B3:F3:B1:D4:B7
Authority key identifier: A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F
Certificate issuer: /CN=A7133A09AC078B101CB7980FE646810280C0D64F
Certificate serial: 5D69A6248D509CA047EA7E6BA2F858C74C75EC8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft
Manifest number: 82
Signing time: Fri 24 Jul 2026 06:30:33 +0000
Manifest this update: Fri 24 Jul 2026 06:25:33 +0000
Manifest next update: Sat 25 Jul 2026 10:26:33 +0000
Files and hashes: 1: A7133A09AC078B101CB7980FE646810280C0D64F.crl (hash: MUv1Oc2A9lCUqqn5Tz9RMb0x+P4TbmLnZvWwVWpYSA0=)
2: 3131382e3234322e33322e302f32322d3232203d3e2034383132.roa (hash: eqKYssRjmbT+n2crq/yxbZNVr33UQZ6vHSKYThAYbGw=)
3: 3131382e3234322e302e302f32322d3232203d3e2034383132.roa (hash: 58I4ydCCcF9hQm4ALM8HdXPHeUsscGP0Ad1DVSViNOs=)
4: 3131382e3234322e31362e302f32322d3232203d3e2034383132.roa (hash: Wg6c56nIiryoYb5Qqfo2U52K9I6Dt+EF0h4NcPIMpRg=)
5: 3131382e3234322e32342e302f32322d3232203d3e2034383132.roa (hash: NcYkM98RLbkSlZKIJVkf0b8tgMhZh0eBBgVWrZHmpIE=)
6: 3131382e3234322e34302e302f32342d3234203d3e2034383132.roa (hash: YuFq6zn2fxeE5ra6cdH7TfbmzrsmrMPSofOx9YtBqUQ=)
7: 3131382e3234322e302e302f31362d3136203d3e2030.roa (hash: mUk74oXYFU6Ae6TtZNwjm0VOpRcUFRFOOIDC/sj+JZU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl
rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:69:a6:24:8d:50:9c:a0:47:ea:7e:6b:a2:f8:58:c7:4c:75:ec:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A7133A09AC078B101CB7980FE646810280C0D64F
Validity
Not Before: Jul 24 06:25:33 2026 GMT
Not After : Jul 25 10:26:33 2026 GMT
Subject: CN=5BBE4E4FA7E76CD33588CD6725B0FFB3F3B1D4B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:1d:43:a1:aa:f5:19:93:08:a5:5d:1c:23:
a5:7d:57:aa:a1:b1:e9:7c:d3:cf:28:87:13:3a:d3:
2e:04:48:51:8a:94:c4:cf:f6:7c:29:8a:b2:fe:e7:
fc:a1:c7:11:7f:42:0c:5d:56:18:35:90:1d:1a:16:
54:76:9d:df:70:d6:d4:ac:ca:82:66:a9:91:25:bc:
90:1f:d6:7d:df:26:b0:2b:eb:87:4a:75:96:dd:fc:
9c:8d:eb:da:9f:51:b0:31:e6:1b:a1:c7:1a:29:17:
1a:ea:c6:a2:33:f5:18:7f:7e:a4:52:b6:09:6b:fa:
1d:71:ce:56:1b:c2:36:3e:eb:82:5a:52:33:31:36:
15:16:9a:39:a4:48:38:ec:0b:c3:ab:1d:ea:56:91:
13:71:27:53:36:a5:6c:08:67:2e:bb:52:9d:23:f9:
de:c3:a5:02:00:b1:c5:43:89:49:53:73:31:87:f2:
d8:ac:bf:8a:23:86:14:43:ab:de:f0:6b:ff:e6:68:
95:6d:40:c0:38:0a:18:da:33:cd:a5:11:21:9b:63:
84:f5:f2:96:9e:3e:6b:92:4d:d9:11:33:48:0d:b4:
06:21:b9:b2:55:22:ce:fb:bf:e6:1d:4d:93:fb:51:
3a:69:4a:bb:66:62:08:0c:68:f3:f9:4d:ac:04:8c:
4f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:BE:4E:4F:A7:E7:6C:D3:35:88:CD:67:25:B0:FF:B3:F3:B1:D4:B7
X509v3 Authority Key Identifier:
keyid:A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f7:d0:02:4c:d7:1c:8a:f3:b5:72:a2:ad:c1:97:b4:2b:9c:
36:24:02:b3:08:c1:7b:ff:b8:aa:c9:12:77:35:77:8f:f7:d5:
e2:eb:20:9d:13:43:d7:3c:ff:17:9e:b0:58:1e:08:82:b2:bd:
ae:6a:13:cb:37:dc:3e:c0:ec:ce:6e:1a:a6:36:59:6d:7a:9d:
bf:56:c1:38:84:e6:0e:c7:24:9f:e1:ac:8f:8d:db:7f:7e:d2:
ac:01:fd:af:98:ca:9d:14:fe:85:d8:e1:7e:5a:58:69:89:df:
d4:42:bd:e4:26:57:a6:c0:c1:fb:60:e6:81:3c:b0:08:ab:b5:
bb:9c:a9:c0:cc:de:c6:ed:86:f8:74:52:8b:35:12:93:62:6a:
3d:00:75:25:51:53:1a:2e:a8:a1:c8:f7:8e:bd:36:4f:09:02:
b7:07:ca:b0:13:17:3d:66:3e:19:60:0a:96:28:60:c1:fe:04:
fc:39:cb:aa:50:41:65:76:66:5e:af:5b:8f:13:f6:42:9f:42:
9e:6f:20:4c:5a:95:16:5f:ad:a3:39:77:11:83:c4:d9:f5:6f:
16:48:21:b9:6a:b3:80:30:e9:d2:2b:53:5a:6b:59:fb:63:25:
14:e2:9f:b3:68:fd:f9:e2:69:ce:19:6e:f9:1d:e2:be:02:55:
09:c9:09:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:21:25 2026 by rpki-client