
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft
File: C074E80FFDB9B886B42838EA88032DC68025A5B3.mft (raw, json)
Hash identifier: PV/ZYH2MO0GStU6sHl+oFKS/QdZzSdYgiXWCE2KNHkE=
Subject key identifier: 4E:43:C0:06:F0:E1:97:DA:B2:0B:5D:04:FD:B0:B8:E1:08:BB:72:0C
Authority key identifier: C0:74:E8:0F:FD:B9:B8:86:B4:28:38:EA:88:03:2D:C6:80:25:A5:B3
Certificate issuer: /CN=C074E80FFDB9B886B42838EA88032DC68025A5B3
Certificate serial: 55C1621D3D2C52AB20F88BC24AB11CF0BEC1CB5A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft
Manifest number: D0
Signing time: Thu 15 Oct 2026 09:11:36 +0000
Manifest this update: Thu 15 Oct 2026 09:06:36 +0000
Manifest next update: Sun 18 Oct 2026 17:28:36 +0000
Files and hashes: 1: C074E80FFDB9B886B42838EA88032DC68025A5B3.crl (hash: D4hgiVI3MbMKf8KmRH1qt5jlkEDvVp8QGkcg64pslvI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 17:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c1:62:1d:3d:2c:52:ab:20:f8:8b:c2:4a:b1:1c:f0:be:c1:cb:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C074E80FFDB9B886B42838EA88032DC68025A5B3
Validity
Not Before: Oct 15 09:06:36 2026 GMT
Not After : Oct 18 17:28:36 2026 GMT
Subject: CN=4E43C006F0E197DAB20B5D04FDB0B8E108BB720C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:80:28:13:fe:55:d5:6f:05:01:c8:6c:7d:6e:
a9:b9:b7:b9:2e:83:f7:a2:6b:c9:c5:cd:75:9a:62:
7d:aa:94:c0:a0:79:f8:86:4f:1b:89:39:04:86:cd:
2b:f7:29:ae:05:d9:e2:2a:ab:dc:cf:f4:23:63:c2:
bd:98:65:17:7d:55:d3:8c:3b:3a:58:ef:9d:4c:35:
40:94:b7:dd:dc:e4:fa:15:07:71:dd:d1:02:5d:e9:
23:3c:c0:3f:34:38:15:e7:f6:33:29:9c:cd:13:bb:
c0:8b:41:f2:2f:f8:94:70:5c:2d:ff:bf:3d:8e:46:
40:cf:3c:0d:3a:82:84:75:63:cf:8d:7a:8f:be:1a:
19:4a:98:d5:0b:10:fa:a1:e4:c8:91:4d:ee:7c:96:
cc:c1:00:6f:62:83:18:a3:e7:48:b4:31:9a:5d:83:
04:bf:ab:0b:38:73:1d:8c:d3:dd:7e:00:f4:56:b0:
f0:7e:b1:b4:58:2f:9d:f5:10:53:01:78:cf:eb:5e:
8a:e0:11:e1:90:c6:a9:2c:91:f3:59:42:09:18:49:
be:f6:f7:e1:a1:82:ae:d7:e8:ab:74:78:8f:81:e0:
63:ca:c9:1c:93:40:fa:29:5f:56:35:c8:ff:77:36:
09:87:56:90:6d:90:11:98:8a:49:e2:a4:1e:5c:ee:
69:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:43:C0:06:F0:E1:97:DA:B2:0B:5D:04:FD:B0:B8:E1:08:BB:72:0C
X509v3 Authority Key Identifier:
keyid:C0:74:E8:0F:FD:B9:B8:86:B4:28:38:EA:88:03:2D:C6:80:25:A5:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d3:54:8b:17:82:00:0d:e5:c5:c3:be:37:f5:19:eb:ec:48:
3b:56:9e:8d:4f:7b:97:21:50:b4:22:5d:47:fd:d6:34:64:14:
18:2b:21:8e:99:88:91:79:5c:48:26:48:76:4e:b1:74:d0:7d:
0b:e7:b7:e6:7c:a1:e2:1f:5b:be:2d:81:ad:67:b3:3c:34:d1:
c1:a8:15:a3:76:97:a7:a1:4c:33:2d:46:98:6c:6a:9a:06:82:
fa:7f:a9:3d:2c:5f:2d:12:74:f7:ce:aa:d1:38:1e:2d:24:ef:
1c:e2:85:00:59:c7:7c:16:fa:12:9f:fd:0a:43:6a:89:66:bb:
2e:ee:c8:7c:4b:7c:86:e7:56:76:c4:fb:58:01:51:db:b6:c1:
10:7d:d8:a3:89:cf:3a:c9:ab:bc:07:af:d3:2c:46:19:33:43:
e8:b1:61:ad:c1:d6:80:f3:b7:11:a0:b7:8c:ed:c4:6c:1f:4e:
ff:2e:cf:db:4c:05:2f:2d:93:63:7c:1f:f4:8a:e3:ae:69:84:
25:64:b7:8d:cd:7d:0f:14:58:b5:f0:3b:8c:57:74:19:05:96:
77:90:49:87:9f:11:06:1f:bc:20:72:f3:b3:c4:e4:70:e5:86:
71:23:71:70:77:73:73:0d:49:21:99:2d:9a:63:6c:0c:67:d7:
73:c5:ea:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:42:58 2026 by rpki-client