
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft
File: F3D2189E79D8CABAA6E636A706E38827E75A574A.mft (raw, json)
Hash identifier: ZBKnibHhvVrjB5XWPrWRDiPxePloatx1uwDUJ9HNITQ=
Subject key identifier: D3:30:9B:81:27:F7:DB:D3:10:77:6B:BE:E2:92:7F:44:97:BC:3A:77
Authority key identifier: F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A
Certificate issuer: /CN=F3D2189E79D8CABAA6E636A706E38827E75A574A
Certificate serial: 334697D1615B7D7C2A1F3254455CEA8C5E675873
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft
Manifest number: AE
Signing time: Sun 14 Jun 2026 01:02:31 +0000
Manifest this update: Sun 14 Jun 2026 00:57:31 +0000
Manifest next update: Mon 15 Jun 2026 03:34:31 +0000
Files and hashes: 1: F3D2189E79D8CABAA6E636A706E38827E75A574A.crl (hash: iK5SqaXyx0jVKGOp7F2XkIwwzAEizBAnxTTI2N4VNvU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl
rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:46:97:d1:61:5b:7d:7c:2a:1f:32:54:45:5c:ea:8c:5e:67:58:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3D2189E79D8CABAA6E636A706E38827E75A574A
Validity
Not Before: Jun 14 00:57:31 2026 GMT
Not After : Jun 15 03:34:31 2026 GMT
Subject: CN=D3309B8127F7DBD310776BBEE2927F4497BC3A77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2d:5f:a4:78:1a:ad:d1:f9:87:1d:f7:3e:af:
45:51:e0:5f:38:ff:f1:b6:c9:97:2d:3c:23:a0:cc:
c1:bf:b6:c4:38:24:73:24:98:65:18:7b:21:c9:65:
1c:4d:cb:b9:96:47:b2:b1:87:22:17:97:bd:b8:98:
dd:d0:42:8a:ae:c0:11:7b:48:73:d0:4a:47:eb:27:
3b:3e:b3:d6:d3:b7:c7:6a:c8:63:e6:1b:d3:ab:6e:
69:d1:46:69:1b:e9:54:8b:d3:9c:06:20:da:90:ed:
20:07:13:b5:53:37:81:57:29:aa:b4:e9:c2:f3:02:
a7:27:75:9c:32:05:7d:18:63:0c:e7:cf:85:f7:3c:
66:98:e9:65:d4:29:4d:01:3d:fa:43:5e:38:a6:13:
02:57:ab:cb:d5:a5:7c:9b:40:27:f5:f6:d0:71:5b:
ac:7e:75:e6:e1:b1:25:b5:59:7f:98:7c:c2:99:ad:
bb:84:80:de:d9:cb:ca:de:80:fb:4c:4c:78:b5:ab:
86:f8:0f:0a:f6:1e:30:08:f3:55:03:2b:53:c4:37:
7d:2f:f1:2b:a2:9a:d4:43:0c:c9:ef:23:bf:89:47:
41:80:cf:2e:d5:76:fe:70:d7:70:aa:21:5e:b6:92:
c7:f9:7f:cf:c9:37:ec:b2:25:79:9d:76:d1:18:83:
01:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:30:9B:81:27:F7:DB:D3:10:77:6B:BE:E2:92:7F:44:97:BC:3A:77
X509v3 Authority Key Identifier:
keyid:F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:91:17:79:64:ae:9c:4a:9c:7e:42:c2:a2:26:fc:3c:9e:7e:
12:c4:96:2a:19:aa:17:e9:97:2d:3c:5b:97:1e:a6:d3:5a:fa:
ab:6a:47:ec:56:b3:30:ee:b4:27:47:9d:80:68:25:f5:6c:b8:
37:e1:37:24:7a:b6:40:4f:56:7c:4e:9c:3a:09:5d:7f:85:f9:
92:43:65:78:9c:40:6f:6b:49:e3:85:e5:5b:10:56:66:c7:a0:
ad:70:7a:e8:eb:82:1e:1d:7b:1a:03:c9:d5:36:8e:6c:35:91:
73:75:50:6a:70:c2:6b:41:6c:75:ec:1a:8a:e1:42:5d:6e:e3:
43:fd:f6:f0:7f:f8:54:cd:cb:d7:03:75:d7:60:30:c8:81:c0:
04:aa:6e:c2:24:98:10:bb:67:2f:82:0a:2b:63:5a:bf:bb:8f:
e8:f2:f5:ab:21:e1:50:75:cd:57:91:79:cb:12:b7:f9:7a:f3:
de:35:07:01:9d:1c:8b:35:a7:6d:2b:37:8a:2e:b8:3e:77:9f:
72:70:f1:f0:10:ab:bc:46:21:e1:c8:ba:1b:93:06:7e:26:0a:
1b:b5:5b:0b:cc:e2:de:06:5b:7d:25:f7:f4:f9:0a:07:31:3f:
7a:01:92:d9:64:d1:a9:23:0a:35:7e:96:ca:f3:1f:02:a1:a4:
1e:33:5a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:37:42 2026 by rpki-client