
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft
File: AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft (raw, json)
Hash identifier: D8gcVQAfqhync8Nfa31C1JvVNmaavxmj3t7b2USfnTY=
Subject key identifier: 50:C1:0F:95:06:D4:05:B4:C1:D2:6A:79:89:10:89:4D:3F:D7:CB:A1
Authority key identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26
Certificate issuer: /CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126
Certificate serial: 3C6F728702EC33FC77D10C39F39713155909407B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft
Manifest number: C2
Signing time: Sun 14 Jun 2026 01:32:35 +0000
Manifest this update: Sun 14 Jun 2026 01:27:35 +0000
Manifest next update: Mon 15 Jun 2026 03:27:35 +0000
Files and hashes: 1: AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl (hash: VgJg8vbOR1jnjHXFFLiCgIWmEIk99Zzp2B7nkAu5VRY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:6f:72:87:02:ec:33:fc:77:d1:0c:39:f3:97:13:15:59:09:40:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126
Validity
Not Before: Jun 14 01:27:35 2026 GMT
Not After : Jun 15 03:27:35 2026 GMT
Subject: CN=50C10F9506D405B4C1D26A798910894D3FD7CBA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:45:86:77:6e:07:54:49:5e:3e:bc:86:06:
ea:ee:77:e7:14:8e:c7:2a:cd:36:94:bc:cc:ca:32:
c2:37:59:94:27:f9:e8:e0:54:c6:19:15:02:86:21:
fb:60:6b:34:9a:e7:cf:6b:ad:e6:cf:c5:8e:b6:4d:
0d:a9:77:e7:6e:6c:93:cb:c6:0d:33:28:23:69:e8:
00:d3:de:59:b2:9b:bc:92:83:af:3d:6f:c4:dc:43:
32:f4:ab:92:59:73:09:f3:93:5d:f9:2c:b9:ff:e1:
5c:4d:5e:88:b0:6b:ac:c8:43:22:34:ce:aa:e8:9f:
1c:3f:56:68:c0:1f:01:54:74:49:71:b8:f4:36:f7:
21:fc:f9:3b:ee:5b:ec:58:50:52:b2:d7:bf:04:8a:
d5:5e:07:1c:e6:4e:78:80:5d:00:c0:67:e5:53:4d:
bc:f9:7a:d4:b1:64:fe:58:4a:80:e7:d4:c3:49:08:
7b:aa:35:7a:21:67:7c:7a:81:fb:c2:fe:71:d1:aa:
76:79:a7:c6:a6:b8:05:ff:9b:08:90:fb:87:cb:e0:
2e:a5:f6:29:a4:2e:2e:a6:af:02:08:57:05:5f:4e:
ea:06:76:12:fd:1d:e5:70:3f:a1:06:ab:a9:11:b5:
f6:72:b0:5f:4e:6a:0f:ca:5c:97:cb:f3:c1:6d:12:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C1:0F:95:06:D4:05:B4:C1:D2:6A:79:89:10:89:4D:3F:D7:CB:A1
X509v3 Authority Key Identifier:
keyid:AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1c:f7:7e:5f:27:7c:b4:b9:b1:46:67:fb:3e:fd:c1:de:24:
c7:71:1c:fc:c0:15:d6:a6:16:04:b3:1d:4a:6e:11:d2:34:96:
7a:bc:fd:7f:eb:d8:4a:4e:97:4c:2a:d0:2d:79:80:26:96:11:
cb:be:70:53:13:2f:1a:f3:4e:c6:0f:a7:21:25:58:cb:a7:a2:
93:14:90:35:77:0b:1f:64:3c:b9:f4:24:63:b7:db:10:62:1f:
c9:91:88:57:ed:4f:1e:d5:0b:29:55:3d:20:90:a4:d4:3f:4a:
11:cb:65:eb:08:1b:d2:b6:ce:43:4d:42:8c:c8:81:73:de:3b:
55:f0:5f:1d:0c:0b:04:97:54:a2:e1:c3:c8:34:75:b8:c0:4b:
a0:6a:36:90:4d:44:8d:d4:bd:41:50:44:0a:f5:9d:5e:12:5f:
9b:d7:b1:ab:1f:ab:2e:a4:15:ba:df:27:bc:50:a5:a1:bf:28:
07:9c:7f:63:d9:e8:67:eb:26:fe:b4:f8:33:e7:05:44:9f:9d:
c7:15:ab:53:59:67:c7:3c:cf:89:16:9e:0b:91:b0:ee:1b:0f:
a8:79:4b:98:bd:0c:a7:68:39:8c:b6:b7:8d:38:cd:91:17:f7:
05:a2:7d:c8:f6:30:b1:0a:82:b0:26:9c:62:67:24:14:5f:86:
6c:d8:4f:94
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUPG9yhwLsM/x30Qw585cTFVkJQHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5
OTVFQjEyNjAeFw0yNjA2MTQwMTI3MzVaFw0yNjA2MTUwMzI3MzVaMDMxMTAvBgNV
BAMTKDUwQzEwRjk1MDZENDA1QjRDMUQyNkE3OTg5MTA4OTREM0ZEN0NCQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CEWGd24HVElePryGBurud+cU
jscqzTaUvMzKMsI3WZQn+ejgVMYZFQKGIftgazSa589rrebPxY62TQ2pd+dubJPL
xg0zKCNp6ADT3lmym7ySg689b8TcQzL0q5JZcwnzk135LLn/4VxNXoiwa6zIQyI0
zqronxw/VmjAHwFUdElxuPQ29yH8+TvuW+xYUFKy178EitVeBxzmTniAXQDAZ+VT
Tbz5etSxZP5YSoDn1MNJCHuqNXohZ3x6gfvC/nHRqnZ5p8amuAX/mwiQ+4fL4C6l
9imkLi6mrwIIVwVfTuoGdhL9HeVwP6EGq6kRtfZysF9Oag/KXJfL88FtElzjAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUUMEPlQbUBbTB0mp5iRCJTT/Xy6EwHwYDVR0j
BBgwFoAUr3hDFkag+rvY8IH5/zS8rplesSYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDM5MjU3OS8wL0FGNzg0MzE2NDZBMEZBQkJEOEYwODFGOUZGMzRC
Q0FFOTk1RUIxMjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUY3ODQzMTY0NkEwRkFCQkQ4RjA4MUY5RkYzNEJDQUU5OTVFQjEyNi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMC9BRjc4NDMxNjQ2QTBG
QUJCRDhGMDgxRjlGRjM0QkNBRTk5NUVCMTI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqBz3fl8nfLS5
sUZn+z79wd4kx3Ec/MAV1qYWBLMdSm4R0jSWerz9f+vYSk6XTCrQLXmAJpYRy75w
UxMvGvNOxg+nISVYy6eikxSQNXcLH2Q8ufQkY7fbEGIfyZGIV+1PHtULKVU9IJCk
1D9KEctl6wgb0rbOQ01CjMiBc947VfBfHQwLBJdUouHDyDR1uMBLoGo2kE1EjdS9
QVBECvWdXhJfm9exqx+rLqQVut8nvFClob8oB5x/Y9noZ+sm/rT4M+cFRJ+dxxWr
U1lnxzzPiRaeC5Gw7hsPqHlLmL0Mp2g5jLa3jTjNkRf3BaJ9yPYwsQqCsCacYmck
FF+GbNhPlA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:10:54 2026 by rpki-client