
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
File: D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft (raw, json)
Hash identifier: O0k4T3VzrJCjH4SW/VruJ5/LnUGOfiVIgRdNULy+D+4=
Subject key identifier: 04:E3:46:D2:8D:43:7A:4B:9A:70:9C:F7:3E:C0:1A:E7:6B:73:EB:7F
Authority key identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04
Certificate issuer: /CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
Certificate serial: 58D9C47AF1721AF97202F683049FBAEA7A6684F3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
Manifest number: 38
Signing time: Mon 02 Mar 2026 09:38:17 +0000
Manifest this update: Mon 02 Mar 2026 09:33:17 +0000
Manifest next update: Tue 03 Mar 2026 12:59:17 +0000
Files and hashes: 1: D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl (hash: SMlc0/RmOIeRPwsr4iWf4d6J9ilIv/KHavcocpxYKdM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 12:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d9:c4:7a:f1:72:1a:f9:72:02:f6:83:04:9f:ba:ea:7a:66:84:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
Validity
Not Before: Mar 2 09:33:17 2026 GMT
Not After : Mar 3 12:59:17 2026 GMT
Subject: CN=04E346D28D437A4B9A709CF73EC01AE76B73EB7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4d:44:00:6f:2d:a5:9e:de:7a:54:89:3b:a8:
22:86:72:e4:1c:43:26:04:84:8f:09:ee:9c:19:3a:
11:36:0b:4f:91:a6:a7:16:5c:fa:dd:4b:a0:f2:05:
e4:40:de:4e:62:0f:d7:92:dc:35:7b:e6:20:f5:09:
30:4d:2e:31:8c:cb:c4:86:01:06:dd:de:92:4e:cd:
83:ba:c4:e8:1a:3a:f7:91:e0:ac:f5:49:a4:00:b0:
5f:43:6a:69:28:4d:cd:80:16:bc:33:fc:4e:1f:36:
d2:23:59:62:6e:17:63:59:06:2e:cf:ad:dd:0a:d3:
20:d8:49:73:79:12:0d:b8:f0:17:de:e8:c3:84:7b:
8c:dc:af:dd:0f:df:b9:37:ff:c5:a7:28:2a:56:62:
a5:13:a5:17:ef:0a:fc:f5:d3:8a:34:2e:e3:82:ef:
d9:81:f2:cd:6b:d9:7d:22:40:42:1f:26:91:ac:07:
45:56:85:c7:15:26:c3:51:9a:26:63:1b:a0:94:c9:
3e:8f:e2:66:84:c0:4d:af:83:b4:4a:7f:95:93:c8:
90:a1:cb:3a:dc:af:4a:9e:24:a0:d3:64:08:b2:2a:
cf:d8:02:fa:19:8c:26:68:ee:5d:ce:8b:3d:6a:c4:
00:84:45:36:ae:82:15:92:00:d3:a6:77:6c:ad:a3:
90:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E3:46:D2:8D:43:7A:4B:9A:70:9C:F7:3E:C0:1A:E7:6B:73:EB:7F
X509v3 Authority Key Identifier:
keyid:D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:3e:91:0d:01:c9:c8:33:8b:e2:6f:4d:91:5b:cd:28:fd:ed:
86:9a:d6:bc:9f:5c:10:37:59:4e:12:5c:df:7a:c1:5a:cf:2e:
2e:50:af:43:56:fe:8f:00:4f:13:87:ba:5f:7c:a6:8d:3d:bb:
59:47:ee:11:97:e6:dc:6c:2d:53:4c:e0:f4:3c:5e:83:b1:3e:
59:86:56:a3:19:07:30:f0:12:1f:82:8c:cb:7a:30:0e:df:1e:
ff:58:64:b6:d0:1f:2c:21:09:2b:65:bc:36:4c:5d:e6:ca:f1:
d6:90:24:ba:5a:a2:cd:8a:cf:e9:20:6c:29:6d:72:ef:fe:ad:
9f:ba:5c:ec:e7:c2:b1:93:c9:7a:93:f2:2d:2c:6d:81:2c:dc:
2f:4c:71:ad:23:7a:16:d0:c3:1b:27:61:33:21:19:d6:3a:ba:
20:bc:62:6f:fd:ae:d5:b1:40:51:f4:d5:28:ee:ed:35:94:d0:
63:2a:d7:3e:9a:62:44:2a:e6:e0:23:57:0e:ca:b6:64:7a:f8:
0c:a5:57:df:66:7d:f6:e1:60:8a:e5:53:5c:d3:15:fa:0f:07:
c0:61:2e:9c:2b:07:1f:95:2c:12:77:d5:25:6d:21:93:cf:50:
17:76:eb:05:f3:fd:c5:1a:b5:63:42:f6:07:93:8b:f8:64:e4:
2a:55:26:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:00:19 2026 by rpki-client