
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
File: 7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft (raw, json)
Hash identifier: g/TPLpRu37bYzvr6/gXU8oGmhr0lDZzXvsKxfG49z1E=
Subject key identifier: F9:C1:A5:BA:9D:39:D2:4F:25:61:17:C7:91:32:66:89:2F:20:85:6E
Authority key identifier: 7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
Certificate issuer: /CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Certificate serial: 5938E9180CD6B42894B9260000C9A5E0BC3D38DB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
Manifest number: EE
Signing time: Thu 23 Jul 2026 14:33:52 +0000
Manifest this update: Thu 23 Jul 2026 14:28:52 +0000
Manifest next update: Fri 24 Jul 2026 18:13:52 +0000
Files and hashes: 1: AS56046.roa (hash: VoU1Yy8W9X5nBLouynhmB8TLBSuAgEwO4Sk7DuHC2Ak=)
2: AS9808.roa (hash: FzsvtcBSjmSmgRghpx9UXPmCwJmLz5tkNAGrDrSE8pQ=)
3: AS56040.roa (hash: oZCKJU4dh/Nt+eYpzB9lsNE9+wplWvOn3SxADhCFxk8=)
4: AS45057.roa (hash: RyQnZ1SR5WSmk7o4bJ4b2E+nALl68m6SIg/3qHEnzWU=)
5: 7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl (hash: zxgtpqFdRJTu9QG3OeqTgvoZlPMBjxOUPeAsqhVHOPc=)
6: AS24138.roa (hash: xSgs8vwIbJkUWCN+zWjeD8FAFwkeRsci8W14DDMVWls=)
7: AS9394.roa (hash: tPZUbO4SI48PQycQ05C83hNK59q9QmDob6L9igI/O+s=)
8: AS38341.roa (hash: RJkDZXApQMPiDZRPX5V1FKULI7lsgYxE3qOhphaxQ2o=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 18:13:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:38:e9:18:0c:d6:b4:28:94:b9:26:00:00:c9:a5:e0:bc:3d:38:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F335EE4A33D07C42C38C45EC648A6F91CE4E95D
Validity
Not Before: Jul 23 14:28:52 2026 GMT
Not After : Jul 24 18:13:52 2026 GMT
Subject: CN=F9C1A5BA9D39D24F256117C7913266892F20856E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:91:40:b9:3b:aa:b2:fb:b5:c2:9f:86:49:
63:2c:d2:ba:db:3e:6e:ef:3d:d6:39:42:67:4f:16:
94:5e:0b:b2:25:9e:53:07:48:de:c8:04:ca:01:a1:
db:8a:8c:f3:da:bf:21:8f:be:5d:31:18:60:a4:fc:
36:e2:62:a9:c0:ba:6e:fa:d7:bf:be:82:77:3d:b0:
20:08:40:66:2a:0b:a4:a0:2f:51:07:84:dd:c2:7a:
de:17:7d:b5:e4:2c:8e:81:01:4e:14:80:b5:60:91:
b8:77:a5:3d:75:84:6a:08:8c:aa:d4:99:c9:d5:f8:
c0:e4:81:4e:f4:14:5f:1d:21:3b:18:80:9d:61:d7:
39:26:e4:7b:e2:d7:fb:a1:39:b6:67:fa:14:72:76:
df:ed:f6:dc:3a:02:d8:bd:1d:8e:01:c0:ce:f9:85:
02:7a:23:bd:4d:52:06:9c:c1:1a:bb:c2:11:f8:2a:
3d:61:e9:b5:e2:d9:6b:09:e1:ca:3b:55:99:85:91:
5f:a2:ee:27:76:9d:02:37:f9:1a:03:36:f2:1c:d8:
1b:65:f5:ce:8a:ff:f2:c9:38:1f:fd:a4:cd:0a:35:
1c:3f:f6:7e:bc:46:b9:fb:29:5a:53:c9:25:b8:7b:
11:41:fe:22:df:05:2c:44:f1:29:c5:c3:99:fa:ed:
fb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C1:A5:BA:9D:39:D2:4F:25:61:17:C7:91:32:66:89:2F:20:85:6E
X509v3 Authority Key Identifier:
keyid:7F:33:5E:E4:A3:3D:07:C4:2C:38:C4:5E:C6:48:A6:F9:1C:E4:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106220441690701841/0/7F335EE4A33D07C42C38C45EC648A6F91CE4E95D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:56:1f:4f:ab:30:c7:bb:f7:75:df:7d:1b:e5:30:02:cb:44:
df:93:d9:11:01:47:35:6a:4b:e4:9b:ae:07:b2:c3:77:87:7f:
ca:1d:d8:98:a2:94:a6:5c:01:44:54:cc:f6:c8:ed:be:3b:90:
7a:3a:02:74:4c:c3:a0:2f:92:2c:2a:89:5a:6c:08:aa:64:b8:
53:f1:8d:08:19:0a:22:ac:d4:34:77:51:23:a7:25:f8:bf:e6:
e8:ee:19:02:07:af:7d:5a:97:e2:2d:f2:ed:c1:bd:d2:22:35:
6a:e7:2e:3c:1f:e6:62:30:fc:aa:e6:17:3d:0e:10:fe:2e:ec:
bc:20:fe:03:87:25:5b:ff:e2:75:01:6d:59:a4:9d:27:6f:e6:
22:e8:e7:44:be:9a:39:e9:c0:e6:0f:f3:6b:75:9b:62:d2:ad:
ed:25:a9:31:03:23:a4:5d:ba:82:79:fe:a3:29:87:5b:51:47:
3e:ef:2b:db:3d:70:25:9b:3d:62:96:d6:32:35:ac:7d:5a:e0:
c7:35:3d:ee:7b:b6:11:d2:de:a6:8c:b5:d4:b2:06:71:45:c1:
d7:a3:1d:08:1d:1e:fd:22:10:fc:f9:63:20:6c:cc:37:77:82:
d4:e7:8f:3d:8e:73:44:4e:59:1c:c6:30:bc:7d:1d:64:14:63:
42:9f:fa:cf
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUWTjpGAzWtCiUuSYAAMml4Lw9ONswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzMzVFRTRBMzNEMDdDNDJDMzhDNDVFQzY0OEE2Rjkx
Q0U0RTk1RDAeFw0yNjA3MjMxNDI4NTJaFw0yNjA3MjQxODEzNTJaMDMxMTAvBgNV
BAMTKEY5QzFBNUJBOUQzOUQyNEYyNTYxMTdDNzkxMzI2Njg5MkYyMDg1NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxJFAuTuqsvu1wp+GSWMs0rrb
Pm7vPdY5QmdPFpReC7IlnlMHSN7IBMoBoduKjPPavyGPvl0xGGCk/DbiYqnAum76
17++gnc9sCAIQGYqC6SgL1EHhN3Cet4XfbXkLI6BAU4UgLVgkbh3pT11hGoIjKrU
mcnV+MDkgU70FF8dITsYgJ1h1zkm5Hvi1/uhObZn+hRydt/t9tw6Ati9HY4BwM75
hQJ6I71NUgacwRq7whH4Kj1h6bXi2WsJ4co7VZmFkV+i7id2nQI3+RoDNvIc2Btl
9c6K//LJOB/9pM0KNRw/9n68Rrn7KVpTySW4exFB/iLfBSxE8SnFw5n67fvpAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU+cGlup050k8lYRfHkTJmiS8ghW4wHwYDVR0j
BBgwFoAUfzNe5KM9B8QsOMRexkim+Rzk6V0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjIyMDQ0MTY5MDcwMTg0MS8wLzdGMzM1RUU0QTMzRDA3QzQyQzM4QzQ1RUM2NDhB
NkY5MUNFNEU5NUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvN0YzMzVFRTRBMzNEMDdDNDJDMzhDNDVFQzY0OEE2RjkxQ0U0RTk1RC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDYyMjA0NDE2OTA3MDE4NDEvMC83RjMzNUVFNEEzM0Qw
N0M0MkMzOEM0NUVDNjQ4QTZGOTFDRTRFOTVELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVYfT6swx7v3
dd99G+UwAstE35PZEQFHNWpL5JuuB7LDd4d/yh3YmKKUplwBRFTM9sjtvjuQejoC
dEzDoC+SLCqJWmwIqmS4U/GNCBkKIqzUNHdRI6cl+L/m6O4ZAgevfVqX4i3y7cG9
0iI1aucuPB/mYjD8quYXPQ4Q/i7svCD+A4clW//idQFtWaSdJ2/mIujnRL6aOenA
5g/za3WbYtKt7SWpMQMjpF26gnn+oymHW1FHPu8r2z1wJZs9YpbWMjWsfVrgxzU9
7nu2EdLepoy11LIGcUXB16MdCB0e/SIQ/PljIGzMN3eC1OePPY5zRE5ZHMYwvH0d
ZBRjQp/6zw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:40:37 2026 by rpki-client