
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
File: 1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft (raw, json)
Hash identifier: 84ZigxwU20ATOScaVI0fa2HDe0m+aiNT+5huky68wHM=
Subject key identifier: 84:47:82:3E:76:C8:51:F7:6C:CB:72:A1:E8:58:AF:58:C0:0E:8A:06
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Certificate issuer: /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial: 3C3D4D1806CE3F44524FE3C3F014BD6B3CC7C2A5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
Manifest number: 38
Signing time: Mon 02 Mar 2026 02:23:16 +0000
Manifest this update: Mon 02 Mar 2026 02:18:16 +0000
Manifest next update: Tue 03 Mar 2026 05:17:16 +0000
Files and hashes: 1: 1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl (hash: vYHH3HBAxeS016+CPlbuF2ehq9Q0yUaAoy+Yyy9l2j4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 05:17:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:3d:4d:18:06:ce:3f:44:52:4f:e3:c3:f0:14:bd:6b:3c:c7:c2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Validity
Not Before: Mar 2 02:18:16 2026 GMT
Not After : Mar 3 05:17:16 2026 GMT
Subject: CN=8447823E76C851F76CCB72A1E858AF58C00E8A06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:28:d0:e5:d1:84:a4:11:35:29:05:c8:e9:
47:73:cd:55:4c:00:f6:a9:ff:cb:07:3b:4f:b0:db:
a5:35:86:5c:a4:22:44:98:64:8f:df:d8:17:a6:48:
b8:5d:80:16:30:b9:1c:d4:3f:16:5c:6a:82:94:69:
30:73:80:d9:87:8c:ad:a5:2c:4e:32:21:e7:75:41:
94:c7:65:fd:9f:4d:17:aa:22:46:78:ef:be:95:91:
ca:8a:9e:c6:4b:4f:61:2c:d0:6c:4b:c2:a0:62:ab:
a4:35:7e:f0:47:f6:1e:b2:93:cc:17:e1:d3:86:16:
33:7c:2e:ff:a8:9f:c4:2d:87:80:48:ce:fd:ce:c7:
a2:fe:9a:a1:d2:4b:95:ba:bd:a4:4d:8b:2d:7a:fa:
89:34:0a:c7:a0:46:0e:4b:98:c5:09:69:68:6f:83:
fc:9d:ad:a1:f8:77:e6:14:75:b3:ee:6c:37:bb:48:
63:b4:fb:89:a6:fd:db:fb:c0:9f:09:c8:be:f0:59:
fb:82:cc:3b:c4:91:f5:92:91:d6:ad:e1:33:32:14:
0f:31:9e:5c:7f:12:43:6a:19:4f:6f:29:2f:56:c8:
e6:ad:ec:f1:76:7c:63:1b:aa:67:f2:ba:ff:db:5e:
72:65:c7:83:50:81:cd:65:36:6f:62:20:8a:c0:0f:
3f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:47:82:3E:76:C8:51:F7:6C:CB:72:A1:E8:58:AF:58:C0:0E:8A:06
X509v3 Authority Key Identifier:
keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c6:2f:42:7b:41:2b:ad:2a:41:3c:0d:ad:0d:61:46:88:31:
a1:0e:2e:89:1b:18:8e:b5:9e:34:06:07:b4:5c:73:94:c0:9a:
e7:1f:44:ef:3a:9c:ad:50:36:04:31:13:dd:58:83:dd:26:2f:
7f:ee:3f:e0:d2:25:41:ac:d5:b1:8a:42:1c:79:c0:c0:6f:67:
08:84:c3:a1:07:28:d9:95:b4:d0:95:de:f8:33:41:69:15:ac:
0e:11:c4:24:68:fd:55:50:c6:d9:86:fc:cf:4c:78:52:c5:a5:
69:cc:df:ac:f5:58:90:51:3e:e5:10:7b:07:28:72:ef:38:a2:
f8:25:fc:92:d3:f1:f2:6f:0d:ce:be:1c:3d:73:12:06:84:6d:
77:11:56:88:f7:ea:13:3a:aa:10:67:d2:66:e2:dd:5c:93:48:
08:0f:8f:33:51:f6:d9:97:d1:90:4d:ad:93:e2:59:a5:13:f1:
64:98:74:98:5f:18:54:d8:e4:11:e5:27:fc:aa:b5:91:35:0c:
fa:0b:8f:3a:5c:12:45:e1:a1:22:d9:60:ec:c8:16:e3:10:5b:
73:0a:49:84:22:bb:63:79:74:84:44:a2:87:36:87:d7:a9:05:
bc:6b:32:55:2e:d1:aa:0f:89:b7:d5:21:d5:8a:c4:fe:ff:30:
7a:7a:dc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:57:38 2026 by rpki-client