
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft
File: 08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft (raw, json)
Hash identifier: ZCdQhyYVce0Sr/bUbWWKanw9q1+wliopjft6RguS3wc=
Subject key identifier: 06:C9:95:03:4E:4B:6C:8B:AF:2A:69:1D:5B:78:C8:CB:72:09:C0:0C
Authority key identifier: 08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F
Certificate issuer: /CN=08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F
Certificate serial: 49BEC677E7C1FE38B3AA5A9BCAC8877D5CB5576D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft
Manifest number: 57
Signing time: Fri 24 Jul 2026 06:30:33 +0000
Manifest this update: Fri 24 Jul 2026 06:25:33 +0000
Manifest next update: Sat 25 Jul 2026 09:38:33 +0000
Files and hashes: 1: 08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl (hash: itZ/ax5qG1Sjg8OA3ZHgNZU/VPtFtyRqLr+YtR+1f+M=)
2: 323430363a653363303a3a2f33322d3332203d3e20313334373733.roa (hash: r2mlC4GthxxDvprtfPMIptLo1apDgBMcOFdGeuOZ7GA=)
3: 323430363a653363303a313830303a3a2f33372d3337203d3e20313334373733.roa (hash: NZeJ5bQFAG7ba0+Y7Pn0f3zGdJzBRiRJ447HtDKanFM=)
4: 323430363a653363303a3a2f33322d3332203d3e20313337373231.roa (hash: k8TzbFMmHAutaTx4LA5r4lZixH232tTVKYk+YbSt+44=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl
rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:be:c6:77:e7:c1:fe:38:b3:aa:5a:9b:ca:c8:87:7d:5c:b5:57:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F
Validity
Not Before: Jul 24 06:25:33 2026 GMT
Not After : Jul 25 09:38:33 2026 GMT
Subject: CN=06C995034E4B6C8BAF2A691D5B78C8CB7209C00C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ca:ce:4f:39:30:23:db:1d:93:82:c3:a2:1b:
3c:0a:10:f3:af:ae:9e:e2:70:88:3d:58:6a:60:c7:
4c:f9:64:9a:bd:6d:e5:fd:dd:df:c6:84:a0:48:21:
83:a6:d4:31:06:be:78:e8:4c:7d:62:88:48:cf:c1:
a0:01:26:9e:b1:9f:50:0f:54:dc:f1:7a:47:27:57:
82:e3:73:ff:d5:f0:2c:4c:0f:41:32:8b:d0:72:6c:
07:f0:7b:c4:03:a7:c4:1d:de:29:50:d7:24:60:9f:
46:90:c3:02:30:e0:8a:2d:50:1b:f2:e9:7b:f7:25:
65:03:b4:5f:b7:be:15:45:13:ae:cb:3c:48:34:75:
bd:a0:bb:0e:85:6d:a1:4c:44:28:8b:e8:4e:02:03:
4e:b3:ec:70:22:7e:51:3d:70:53:d5:36:87:69:68:
00:1e:36:c9:84:80:ba:d7:3a:a4:67:de:48:ab:5e:
aa:fd:38:a4:81:82:1f:41:49:61:f2:2d:2b:c4:a5:
2e:c1:24:11:f7:1b:f5:b3:a5:b5:76:78:69:36:a6:
72:7c:c7:ee:2d:15:2b:c7:27:75:8a:1a:d6:75:eb:
7b:d8:c6:ab:da:bb:54:e2:12:5f:23:b3:99:f6:40:
37:92:a8:00:77:3e:b8:7b:8d:ac:50:e2:a8:3d:6c:
be:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C9:95:03:4E:4B:6C:8B:AF:2A:69:1D:5B:78:C8:CB:72:09:C0:0C
X509v3 Authority Key Identifier:
keyid:08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:26:a2:8b:b9:21:7d:5f:fd:9d:d2:cb:c3:47:5d:90:5d:4d:
4a:ff:4e:40:47:60:66:1e:fb:99:fb:ed:c3:62:95:0c:15:3e:
dc:a3:57:fd:04:34:45:66:04:d3:4d:e2:71:50:18:19:a1:be:
f8:4b:69:07:47:6b:4f:28:2c:e8:12:81:16:7b:18:0b:dd:06:
d4:f8:ca:43:52:76:d7:5d:43:f4:27:55:2a:c7:b7:75:3c:4a:
f5:80:55:eb:ac:50:1c:2c:83:a0:b5:94:eb:a4:e7:cb:a3:96:
64:5d:a6:bc:8f:38:46:4b:7a:f8:43:80:b5:a5:0f:7f:8d:da:
de:84:07:b0:87:7c:b6:22:10:68:3e:2b:1e:0e:07:3b:e0:cb:
d3:e1:1f:4c:a0:f3:a1:ef:2d:39:60:b5:1e:6d:51:2a:e7:33:
72:aa:08:ae:39:ae:4d:2f:c5:1a:44:fd:b7:2d:c9:f8:62:ca:
15:fc:b9:1d:14:a3:2e:14:89:62:9d:9f:70:ac:6c:fc:34:c4:
7c:f3:c2:73:a6:d7:d3:8d:01:81:69:76:8b:3f:34:2c:18:9a:
74:da:01:47:0b:58:48:9b:a2:ea:2e:83:d2:82:b0:46:71:14:
c1:54:c6:50:55:a1:9e:26:7c:c4:a2:55:3a:3c:7a:da:e5:d3:
2b:f0:59:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:13 2026 by rpki-client