
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
File: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft (raw, json)
Hash identifier: RE4sf/GzKTYubZnBzk54Hk1CQKJOgH1KASSO/fn9pQg=
Subject key identifier: F8:7B:CD:6C:95:43:C6:04:DA:86:21:CB:47:D6:38:29:E2:BB:05:E8
Authority key identifier: 6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C
Certificate issuer: /CN=A91EFAA20000/serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C
Certificate serial: 08650302083D3C4BAFDE7CA725C72B28FDD5CB07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
Manifest number: 7F
Signing time: Thu 23 Jul 2026 17:56:27 +0000
Manifest this update: Thu 23 Jul 2026 17:51:27 +0000
Manifest next update: Fri 24 Jul 2026 18:19:27 +0000
Files and hashes: 1: 323430373a343838303a3a2f33322d3332203d3e2030.roa (hash: ijCaVomoD4Gp49iRFc8q+IjUsH7ACZllQmvyC2Sz9cQ=)
2: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl (hash: 2tjjl861DYsNbXpfbooctbMIQ622pVr98q23qqLXnGE=)
3: 3230332e39342e302e302f31392d3139203d3e203137373339.roa (hash: +m3tQEFjHE7EvQqZt5ZFMX5uxgUV2P9Xu/hnIBd3mN4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl
rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 18:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:65:03:02:08:3d:3c:4b:af:de:7c:a7:25:c7:2b:28:fd:d5:cb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFAA20000, serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C
Validity
Not Before: Jul 23 17:51:27 2026 GMT
Not After : Jul 24 18:19:27 2026 GMT
Subject: CN=F87BCD6C9543C604DA8621CB47D63829E2BB05E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f4:81:a5:76:f8:9c:e4:a3:b4:2f:2f:73:d8:
77:46:80:a1:5f:68:ec:cc:c6:cf:fd:8f:13:49:8a:
44:98:38:ec:f4:e5:6c:2c:22:b7:fc:63:bb:d6:9a:
97:ad:6c:a9:85:e8:22:f4:99:1b:b6:d4:bb:0e:ca:
26:9d:17:16:49:ab:c7:d0:c6:f5:45:40:63:1b:e7:
15:95:be:66:80:5b:5d:00:92:04:79:46:bd:65:ba:
bd:86:ff:e5:ca:f6:91:8f:37:13:2c:52:ae:89:d2:
23:ee:74:bf:cd:37:4c:d1:7d:d3:91:da:61:ed:86:
1a:76:11:97:f1:b5:0f:e4:bc:74:35:54:e9:0a:2b:
a5:c8:90:7f:cc:68:7b:c7:a1:67:8f:fe:d8:f7:48:
f3:3e:c9:63:d8:67:ea:50:46:fd:f6:49:e3:98:92:
9c:6f:ec:26:31:72:0e:ad:3b:fe:ed:ed:eb:38:7c:
29:3f:80:d3:b3:06:82:72:d5:ad:98:1a:12:65:07:
c5:c4:14:66:7d:42:e1:37:1d:b8:bd:95:23:f8:40:
cd:46:8f:3b:99:db:1b:ad:25:94:ad:e1:7b:dc:ef:
10:73:39:c0:87:bc:ca:38:74:43:b3:7e:c7:7c:13:
db:2c:fa:6a:6c:dc:31:f1:4c:06:83:c7:c7:cc:d1:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7B:CD:6C:95:43:C6:04:DA:86:21:CB:47:D6:38:29:E2:BB:05:E8
X509v3 Authority Key Identifier:
keyid:6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7d:12:5f:ce:62:52:3d:a3:d7:27:b9:d6:16:52:39:88:2e:
2d:89:f1:e5:1a:80:43:5f:f3:ac:ea:0e:e4:01:20:d2:db:8f:
39:5f:fd:3d:34:14:38:5d:35:ed:62:24:a2:85:46:66:57:6e:
80:26:6f:42:e0:19:47:e1:f6:41:c0:cc:12:4f:15:89:2b:b5:
30:10:6c:cd:f0:2a:92:c6:d0:ec:06:3f:46:a1:c6:d9:ed:b1:
82:a5:b1:04:c9:69:61:74:58:53:ec:21:02:c8:15:73:0d:97:
bb:5e:13:b7:66:a7:95:86:74:9d:e3:56:09:c4:c5:0c:40:91:
0f:be:f3:db:f7:b4:4f:90:38:6c:87:5c:c7:ee:eb:d6:08:82:
e8:a3:e6:10:b8:f8:22:d9:e2:ea:55:c2:d1:2f:a0:58:be:15:
a4:9d:da:e6:e9:8b:77:86:10:d0:60:f9:82:69:c9:67:9c:58:
79:23:78:e3:28:c3:e6:e2:d1:c9:78:eb:d7:d7:7d:8d:70:49:
93:65:26:10:8e:b1:30:ac:19:23:23:25:6b:a7:a2:1d:08:c6:
97:f4:5f:6d:b8:9d:56:f2:49:57:c8:5b:a5:85:a9:5a:04:f0:
45:dc:7f:ef:52:1e:51:ae:57:23:ba:41:51:1c:17:2d:76:00:
8b:9e:99:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:59 2026 by rpki-client