
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft
File: 0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft (raw, json)
Hash identifier: pF5KTAobG9GAHqEpOZAI1DGuLV+owkYmB66HqnJWd1Y=
Subject key identifier: 12:19:66:01:31:50:1D:A4:BE:5B:45:49:C1:E9:F9:A4:86:52:C9:98
Authority key identifier: 00:15:FC:DA:54:1F:FF:5E:E2:67:70:C7:8E:30:B5:EA:89:44:21:E3
Certificate issuer: /CN=0015FCDA541FFF5EE26770C78E30B5EA894421E3
Certificate serial: 0DFD7FD084333FE9B507ECB7B50CF4AC1F336771
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0015FCDA541FFF5EE26770C78E30B5EA894421E3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft
Manifest number: 42
Signing time: Sat 17 Oct 2026 06:28:34 +0000
Manifest this update: Sat 17 Oct 2026 06:23:34 +0000
Manifest next update: Tue 20 Oct 2026 08:29:34 +0000
Files and hashes: 1: 0015FCDA541FFF5EE26770C78E30B5EA894421E3.crl (hash: PFDAM0lpM42vCHRklI8YRpM4DcUzEodOTitB8aUTa/o=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0015FCDA541FFF5EE26770C78E30B5EA894421E3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 20:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:fd:7f:d0:84:33:3f:e9:b5:07:ec:b7:b5:0c:f4:ac:1f:33:67:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0015FCDA541FFF5EE26770C78E30B5EA894421E3
Validity
Not Before: Oct 17 06:23:34 2026 GMT
Not After : Oct 20 08:29:34 2026 GMT
Subject: CN=1219660131501DA4BE5B4549C1E9F9A48652C998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f9:06:d1:b1:79:b6:79:ef:da:0b:1d:01:27:
c6:84:2a:3d:cc:5d:b3:69:b6:3e:2d:28:65:34:6a:
c0:9f:f0:47:ed:d6:9d:28:c0:b9:c5:70:20:de:63:
b8:1f:c2:a8:ec:58:c3:bc:b1:35:e1:33:c9:8c:e5:
b6:68:c5:bf:60:59:c8:fa:6f:83:2b:15:a9:10:be:
32:69:99:ca:93:bc:f3:27:83:ba:1f:56:4b:91:cd:
2e:d1:18:86:36:1d:2a:9b:c8:c2:4c:d8:91:3c:e8:
d1:06:1e:a2:80:e0:f4:90:4a:4b:ee:f5:b0:1f:35:
e3:0f:8a:a7:13:70:2a:42:dd:f7:aa:b1:c2:4d:4d:
af:58:b2:a0:8d:84:af:6c:19:8e:c5:b3:73:e8:a4:
4a:1d:be:cf:cf:4f:d1:b7:ce:a9:ed:2a:d4:83:c3:
cf:bf:53:a7:6e:67:1f:4d:45:0e:6c:cf:d3:f2:58:
38:8e:be:87:98:a9:0c:31:62:04:40:7e:28:ba:4e:
0a:d4:b5:27:d0:4e:eb:16:75:d2:5c:8a:4d:c9:07:
60:88:36:70:2a:21:e6:27:ec:c1:ed:e0:76:40:43:
9a:e3:60:79:db:a7:04:22:db:5a:75:77:03:c3:6b:
16:c2:46:53:86:b0:28:d4:2c:11:b6:76:00:96:93:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:19:66:01:31:50:1D:A4:BE:5B:45:49:C1:E9:F9:A4:86:52:C9:98
X509v3 Authority Key Identifier:
keyid:00:15:FC:DA:54:1F:FF:5E:E2:67:70:C7:8E:30:B5:EA:89:44:21:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0015FCDA541FFF5EE26770C78E30B5EA894421E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/1/0015FCDA541FFF5EE26770C78E30B5EA894421E3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a7:1f:2b:87:91:94:3e:bb:ae:5b:c4:c2:b6:ee:6a:23:5b:
12:2f:84:a7:58:1d:e2:b3:2f:b5:88:b9:f1:dc:f7:40:e1:3e:
f4:09:8d:b4:07:90:08:18:b1:27:b5:ba:b4:03:cc:c9:91:c6:
02:77:37:a5:cd:c1:24:e7:ad:5d:06:1b:27:de:aa:67:5c:84:
a2:2e:d7:a6:cc:d0:54:7b:0f:d6:e0:c2:59:9e:c9:47:a1:37:
28:df:c8:da:31:6d:96:2b:e1:d0:a0:ff:9c:93:a3:63:82:d5:
d5:07:8b:43:f0:8d:d9:2b:2b:c8:ef:0c:ab:45:39:11:6f:c6:
f0:68:db:37:49:f8:d2:91:16:56:2b:44:d3:ff:80:9f:f7:41:
84:2b:b3:e9:fc:70:40:74:08:1e:50:e7:05:52:05:3d:60:ef:
2b:98:ce:d6:d9:c3:22:73:e5:ec:29:7f:12:ff:30:37:c2:b9:
06:7e:fe:78:2b:3a:ef:c1:75:4b:8d:8d:19:49:98:c6:02:d4:
37:92:9c:a3:0a:3c:70:79:48:4c:73:1d:7c:1d:bb:3f:23:bd:
6f:ed:58:ad:51:b0:7e:b4:5d:a9:a7:68:41:76:7e:4f:e4:21:
85:a2:d8:72:03:54:56:97:b8:23:84:c7:11:89:06:ac:00:c0:
05:5d:b8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:25:47 2026 by rpki-client