
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft
File: 48394F266C145173319F25807E0F7F0C02A6894A.mft (raw, json)
Hash identifier: LvvAc2G2oVsk2GTpERl3ZJ87tiXpB4BuyUWlAXjmA0I=
Subject key identifier: A8:76:43:24:D6:96:EA:7A:4B:46:2B:EF:FC:61:A9:7A:48:CA:32:D6
Authority key identifier: 48:39:4F:26:6C:14:51:73:31:9F:25:80:7E:0F:7F:0C:02:A6:89:4A
Certificate issuer: /CN=48394F266C145173319F25807E0F7F0C02A6894A
Certificate serial: 67AE21F4D19C26DB641EFEFD1D40F26BDB8AEAFB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft
Manifest number: 04
Signing time: Fri 17 Apr 2026 19:34:48 +0000
Manifest this update: Fri 17 Apr 2026 19:29:48 +0000
Manifest next update: Sat 18 Apr 2026 19:34:48 +0000
Files and hashes: 1: 48394F266C145173319F25807E0F7F0C02A6894A.crl (hash: MMZUSDCsLAoU2oeQtEahax0xwyeYzRQ8cKXLOpjCow0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.crl
rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ae:21:f4:d1:9c:26:db:64:1e:fe:fd:1d:40:f2:6b:db:8a:ea:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48394F266C145173319F25807E0F7F0C02A6894A
Validity
Not Before: Apr 17 19:29:48 2026 GMT
Not After : Apr 18 19:34:48 2026 GMT
Subject: CN=A8764324D696EA7A4B462BEFFC61A97A48CA32D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:52:18:72:dd:ad:c6:a7:de:13:e7:12:d3:
e6:d4:8b:a4:4f:ef:d4:08:e5:29:9d:bb:e4:de:c7:
5f:ee:5d:e5:d2:56:41:2b:e0:8b:6d:09:f6:08:34:
b0:aa:12:9a:53:4b:99:c8:96:d2:6c:c0:1d:23:fc:
e8:ec:71:2c:76:e2:b5:15:8a:69:bc:d9:6d:b0:04:
79:42:c8:72:74:5c:b6:51:6e:1d:32:83:58:ec:7f:
7a:7b:1c:8b:d6:76:bc:0c:2a:dc:84:a8:61:7e:05:
27:1b:4f:a8:cc:62:15:aa:b3:32:a6:f3:f9:58:55:
2c:e6:71:78:dd:26:1b:8d:cc:14:41:61:78:e3:72:
bf:f8:ca:e8:75:a1:3d:c2:fe:53:cd:49:31:46:1b:
8a:45:b7:98:e6:f2:28:8f:7a:7a:bd:b1:e3:fe:02:
f0:c9:34:a0:77:2b:83:24:e7:f9:f1:5f:55:57:2e:
7c:5b:3a:b8:86:8c:51:2a:55:82:00:b6:66:29:b7:
90:52:bf:11:a7:8a:06:67:6b:4a:b8:c0:7e:a9:1b:
1a:d0:61:e8:87:5f:f3:6e:b6:d3:3a:5a:99:aa:1c:
2b:50:a2:e7:ed:98:a3:13:c2:10:d1:b5:38:8e:ed:
99:ec:20:c2:11:9e:03:96:b1:eb:5b:b5:3e:70:01:
8d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:76:43:24:D6:96:EA:7A:4B:46:2B:EF:FC:61:A9:7A:48:CA:32:D6
X509v3 Authority Key Identifier:
keyid:48:39:4F:26:6C:14:51:73:31:9F:25:80:7E:0F:7F:0C:02:A6:89:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/48394F266C145173319F25807E0F7F0C02A6894A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096740874986979330/0/48394F266C145173319F25807E0F7F0C02A6894A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:85:d8:0a:a6:e4:52:e0:b0:1d:0d:68:ea:f6:de:64:b4:d5:
d4:f2:99:db:9c:4c:4a:8d:a0:da:dc:40:1b:44:9a:55:55:9b:
52:5b:0c:55:6a:4b:1f:eb:36:7b:bf:bd:b8:3b:2c:2e:45:23:
5c:51:48:0b:d8:b1:6e:be:65:f6:9a:0a:c4:ea:00:51:7b:c6:
25:41:0f:0c:36:c2:50:50:da:00:5a:e7:7f:3b:8f:f7:b1:5c:
ea:cb:e5:15:de:e5:23:30:b4:50:65:ee:f5:07:10:fb:6e:fa:
b5:4e:ae:ac:06:71:0a:92:f3:4a:3d:bd:78:4b:f5:e0:89:a5:
39:e8:ed:89:6e:6d:9c:ef:db:b8:48:62:ea:3a:b6:95:1d:b2:
60:47:2e:d6:da:94:4e:c5:17:b9:71:04:4e:7b:0f:7f:a3:c7:
fb:ee:6f:cf:03:83:b5:03:9a:57:ec:cb:6c:8c:ec:41:a5:c7:
65:7f:04:5d:f2:31:e4:de:af:04:2c:81:ce:b1:4e:59:ed:35:
6f:49:53:4d:5c:32:87:24:0a:b1:65:8c:dd:bd:3d:b9:9b:73:
09:e5:02:bf:cd:b7:61:c9:cf:6c:ec:aa:c0:1f:f5:e8:e8:df:
e3:32:ff:da:e1:f5:0c:ce:4a:e5:cb:a0:87:8b:1f:2f:88:76:
24:54:2c:52
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZ64h9NGcJttkHv79HUDya9uK6vswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgzOTRGMjY2QzE0NTE3MzMxOUYyNTgwN0UwRjdGMEMw
MkE2ODk0QTAeFw0yNjA0MTcxOTI5NDhaFw0yNjA0MTgxOTM0NDhaMDMxMTAvBgNV
BAMTKEE4NzY0MzI0RDY5NkVBN0E0QjQ2MkJFRkZDNjFBOTdBNDhDQTMyRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/clIYct2txqfeE+cS0+bUi6RP
79QI5Smdu+Tex1/uXeXSVkEr4IttCfYINLCqEppTS5nIltJswB0j/OjscSx24rUV
imm82W2wBHlCyHJ0XLZRbh0yg1jsf3p7HIvWdrwMKtyEqGF+BScbT6jMYhWqszKm
8/lYVSzmcXjdJhuNzBRBYXjjcr/4yuh1oT3C/lPNSTFGG4pFt5jm8iiPenq9seP+
AvDJNKB3K4Mk5/nxX1VXLnxbOriGjFEqVYIAtmYpt5BSvxGnigZna0q4wH6pGxrQ
YeiHX/NuttM6WpmqHCtQouftmKMTwhDRtTiO7ZnsIMIRngOWsetbtT5wAY1fAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUqHZDJNaW6npLRivv/GGpekjKMtYwHwYDVR0j
BBgwFoAUSDlPJmwUUXMxnyWAfg9/DAKmiUowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
Njc0MDg3NDk4Njk3OTMzMC8wLzQ4Mzk0RjI2NkMxNDUxNzMzMTlGMjU4MDdFMEY3
RjBDMDJBNjg5NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDgzOTRGMjY2QzE0NTE3MzMxOUYyNTgwN0UwRjdGMEMwMkE2ODk0QS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY3NDA4NzQ5ODY5NzkzMzAvMC80ODM5NEYyNjZDMTQ1
MTczMzE5RjI1ODA3RTBGN0YwQzAyQTY4OTRBLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4XYCqbkUuCw
HQ1o6vbeZLTV1PKZ25xMSo2g2txAG0SaVVWbUlsMVWpLH+s2e7+9uDssLkUjXFFI
C9ixbr5l9poKxOoAUXvGJUEPDDbCUFDaAFrnfzuP97Fc6svlFd7lIzC0UGXu9QcQ
+276tU6urAZxCpLzSj29eEv14ImlOejtiW5tnO/buEhi6jq2lR2yYEcu1tqUTsUX
uXEETnsPf6PH++5vzwODtQOaV+zLbIzsQaXHZX8EXfIx5N6vBCyBzrFOWe01b0lT
TVwyhyQKsWWM3b09uZtzCeUCv823YcnPbOyqwB/16Ojf4zL/2uH1DM5K5cugh4sf
L4h2JFQsUg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:02:03 2026 by rpki-client