
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
File: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft (raw, json)
Hash identifier: 1FLT3zJJi6vxQWo3gH4lm+HqgITcAkNejuDIEvmuidQ=
Subject key identifier: 96:02:BD:32:E2:31:28:47:DC:5C:A9:08:1E:AE:8F:2C:EC:98:BD:F7
Authority key identifier: 8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A
Certificate issuer: /CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A
Certificate serial: 70FC3CA988A09EB38CFD2AD689A63113353D6BC9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
Manifest number: 90
Signing time: Sat 13 Jun 2026 13:46:49 +0000
Manifest this update: Sat 13 Jun 2026 13:41:49 +0000
Manifest next update: Sun 14 Jun 2026 15:58:49 +0000
Files and hashes: 1: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl (hash: QXePT/UIusDPgKsOzdnTPr3QL0r1t4W3WmDj1W0FGmk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl
rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:44:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:fc:3c:a9:88:a0:9e:b3:8c:fd:2a:d6:89:a6:31:13:35:3d:6b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A
Validity
Not Before: Jun 13 13:41:49 2026 GMT
Not After : Jun 14 15:58:49 2026 GMT
Subject: CN=9602BD32E2312847DC5CA9081EAE8F2CEC98BDF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:fa:e0:9a:3e:b8:7b:bb:ad:c3:e9:a0:d3:
d9:9f:c9:a7:e8:fd:a6:ac:60:2d:18:6b:d5:37:d5:
88:10:90:92:16:49:37:ac:53:65:ea:53:c0:e6:15:
9c:ad:5f:c6:78:0d:65:0f:33:f8:7c:24:21:5a:43:
be:6c:4e:4c:2a:fd:37:e2:54:a6:37:7e:a3:ad:17:
02:58:43:4c:d9:e9:3d:5f:13:82:ee:8e:52:7f:28:
84:b6:71:bc:30:c8:db:63:25:04:3a:8b:22:31:7c:
bc:01:cc:33:48:21:40:d8:7b:69:7c:67:8b:e2:80:
e2:95:4e:47:f9:f4:59:04:87:6e:f2:50:05:4b:71:
14:94:15:31:a3:5a:c4:4f:c0:ad:58:0c:65:73:2a:
b4:69:97:7d:cb:bf:82:01:bf:c1:3e:5e:86:cd:d0:
df:3e:8b:ae:71:05:e0:5f:ff:87:84:fd:e1:d5:db:
d0:fd:d5:49:14:85:18:12:9c:38:d6:5d:c1:ed:b9:
6c:c3:db:94:6a:c3:82:5b:ac:58:76:57:2c:37:28:
40:18:1c:00:66:6f:42:7c:45:32:39:f8:60:68:6b:
86:ee:85:17:07:39:50:ce:ce:39:3a:60:61:c5:5d:
73:ae:fa:5a:f5:7d:12:86:60:f1:fb:51:60:1f:df:
18:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:02:BD:32:E2:31:28:47:DC:5C:A9:08:1E:AE:8F:2C:EC:98:BD:F7
X509v3 Authority Key Identifier:
keyid:8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:5b:bc:c4:1a:53:7a:de:f3:a2:8b:ed:33:c8:63:69:3f:9d:
4c:5c:e5:b5:b1:0e:77:74:7b:05:1f:09:f8:c9:cd:ea:2d:cd:
52:c9:e4:bf:a4:52:ce:b3:68:d8:2a:76:cd:8f:4b:91:53:5e:
18:3c:9e:ee:14:86:0a:e7:e8:0f:f2:8e:d6:aa:4d:4c:9f:80:
07:a9:b6:7f:5d:6b:01:42:f3:0b:8f:e9:71:03:19:2a:48:e6:
f8:07:1d:c7:37:8c:bc:05:72:10:db:fa:fc:74:2c:e4:29:fe:
b8:5a:88:bc:6e:d7:09:07:d6:ac:8e:06:38:24:8a:fb:70:2f:
46:07:df:ed:0b:4f:9e:65:23:9b:6a:01:b5:45:2d:31:7a:42:
84:95:cb:1e:ed:89:5a:d5:91:14:07:b2:aa:30:eb:5c:ff:5b:
ab:b9:b6:9f:3a:4a:38:30:6a:22:7a:71:7e:74:ea:e6:44:1c:
f0:ba:61:03:9c:5e:1c:3b:ca:0e:bd:3a:e1:0b:2a:b9:14:b2:
0b:b5:21:1a:fd:14:e4:3e:5a:39:e4:6a:52:ea:5d:8b:b8:b8:
8c:ab:01:69:36:7f:19:b2:20:c3:73:44:2f:05:eb:95:a1:c3:
0d:6f:2e:4a:10:22:0e:50:9b:b4:49:4a:e1:b0:80:ef:bd:8f:
f3:67:a4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:56:15 2026 by rpki-client