
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
File: F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft (raw, json)
Hash identifier: nsmLNoc3UmQPnGPFXB7YFNaXCnZV9bByS8g5knoyxkc=
Subject key identifier: 46:B8:52:F7:4A:CD:23:F0:C4:2F:8C:97:AF:CC:9B:0B:8E:FA:F1:DD
Authority key identifier: F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5
Certificate issuer: /CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5
Certificate serial: 556F99A4F6BD32E1C0E955B335345C751AD3BF6B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
Manifest number: DE
Signing time: Mon 19 Oct 2026 20:26:14 +0000
Manifest this update: Mon 19 Oct 2026 20:21:14 +0000
Manifest next update: Thu 22 Oct 2026 23:34:14 +0000
Files and hashes: 1: F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl (hash: dGMgwY3Ti1g1YtT1NZYF5gGJuw3VZiumWAu7CrR8JMo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl
rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 18:51:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:6f:99:a4:f6:bd:32:e1:c0:e9:55:b3:35:34:5c:75:1a:d3:bf:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5
Validity
Not Before: Oct 19 20:21:14 2026 GMT
Not After : Oct 22 23:34:14 2026 GMT
Subject: CN=46B852F74ACD23F0C42F8C97AFCC9B0B8EFAF1DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6c:12:73:d6:c0:d2:16:f7:e2:4a:6e:98:78:
95:1c:49:5f:9f:46:cb:52:1b:8e:7e:09:ec:65:8c:
53:88:e7:d8:30:d8:c7:b1:72:2c:f7:64:62:53:69:
58:c1:5d:e2:e6:38:9a:80:9c:f7:b8:01:c1:83:a1:
95:5b:d3:a4:85:80:8e:be:7d:fc:4c:54:e1:a5:e9:
dc:c4:5b:80:16:09:22:7c:79:13:c6:02:13:13:5e:
a7:9f:62:23:91:82:55:ba:a8:10:b1:4e:46:2b:ec:
56:84:61:47:95:2e:f9:e5:6c:cd:e7:81:f3:02:0c:
5f:0c:55:15:b3:70:39:c4:be:e3:4b:5b:e9:d4:35:
4c:e7:d7:a3:04:58:33:50:a1:f8:1a:c8:6a:90:f1:
0c:9e:3b:97:cc:6c:38:ef:6e:84:70:da:e3:ab:30:
12:a0:14:06:38:d0:34:46:15:21:fd:9d:75:d0:03:
43:13:43:29:d5:76:b3:01:cb:d2:87:3c:22:29:17:
42:b9:35:11:5d:a5:67:f6:28:87:78:9e:69:82:bd:
5b:e8:40:68:88:1d:3a:80:e3:ba:64:28:2a:e5:64:
4c:00:a0:41:94:24:b6:e6:19:1d:9e:89:94:8d:40:
01:8d:9d:13:f0:86:0b:4d:9f:bc:f5:be:ca:2e:fd:
07:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B8:52:F7:4A:CD:23:F0:C4:2F:8C:97:AF:CC:9B:0B:8E:FA:F1:DD
X509v3 Authority Key Identifier:
keyid:F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:62:98:04:b4:de:a2:33:f8:98:bb:b6:f2:8f:00:b1:f4:5f:
8a:c8:36:36:b2:ae:40:57:43:56:13:05:35:5e:04:ea:32:93:
61:4a:c9:bf:3a:82:ea:16:43:8b:c3:a4:e2:09:fc:c7:21:7b:
5a:25:16:f0:11:c0:9d:1e:5c:db:96:e5:3b:28:2e:36:f3:cd:
9e:2d:ad:bf:e6:13:06:67:8a:16:44:bd:3e:be:6b:ee:fe:16:
0f:14:0c:ce:21:a1:aa:43:c0:fb:56:62:6c:3c:59:3b:05:98:
0e:ec:3c:9f:e8:a6:1e:53:b3:55:91:d3:c6:bd:92:f7:5c:43:
f4:8b:8a:89:66:29:f3:a4:14:5b:00:72:3b:31:1c:4e:90:a3:
3a:04:33:b4:f6:aa:9f:b0:b9:c6:0f:a4:45:c1:a9:b0:cf:79:
be:41:be:62:67:a0:9e:67:82:fb:73:ff:3a:a7:3e:95:b3:f9:
34:4b:30:f0:93:d4:60:df:3f:fe:d8:b4:6c:6c:65:63:6c:aa:
0b:4b:56:39:ee:a8:91:4c:2a:d5:a0:9e:86:68:55:03:cb:2f:
02:7f:32:b1:6a:38:fe:08:dd:e7:15:b7:b5:a7:c3:1b:42:f1:
6f:6f:2d:07:c0:ed:e9:6c:92:9a:f4:2c:98:51:87:b5:36:96:
bc:b0:82:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:01:22 2026 by rpki-client