
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft
File: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft (raw, json)
Hash identifier: ZKtn3HIGU2YWMlDMFVsRN9n8RaqJi+nGnMzOMlvYF/E=
Subject key identifier: 6A:59:60:9C:AB:69:4B:D8:F5:66:C2:CA:CF:E6:40:BE:6B:9B:1A:1D
Authority key identifier: 65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B
Certificate issuer: /CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B
Certificate serial: 2CEEF42984B8F62F9FF00CCD2EAE93023C5314FC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft
Manifest number: C3
Signing time: Tue 13 Oct 2026 02:22:39 +0000
Manifest this update: Tue 13 Oct 2026 02:17:39 +0000
Manifest next update: Fri 16 Oct 2026 04:23:39 +0000
Files and hashes: 1: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl (hash: AxNEFvoshFK+ZQ0zq+ZvGzsbZHfoBZ71wiZTbdMXFY4=)
2: 3130332e32352e36362e302f32332d3233203d3e2030.roa (hash: JMo6LH7KCuXdAXtrDjOm3O2HDvLmSMhk1dhzSjfl0Z4=)
3: 3130332e32352e36342e302f32332d3233203d3e2034383132.roa (hash: Nq6gNiMaaKFWixnw61ZZIDSmy1W/Glh2AAvq8ITBxjk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl
rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 04:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ee:f4:29:84:b8:f6:2f:9f:f0:0c:cd:2e:ae:93:02:3c:53:14:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B
Validity
Not Before: Oct 13 02:17:39 2026 GMT
Not After : Oct 16 04:23:39 2026 GMT
Subject: CN=6A59609CAB694BD8F566C2CACFE640BE6B9B1A1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:d7:fb:ea:96:7c:d2:ee:48:91:79:03:4d:
f4:be:5e:ff:8f:b8:f9:52:9f:b0:d9:66:42:7f:82:
4d:81:39:7a:5f:37:21:31:89:63:f9:f3:f6:bb:df:
28:82:59:d4:40:81:b2:49:af:59:ad:43:b5:d5:df:
4c:c1:51:50:4f:1b:8d:ea:28:94:01:a4:35:49:2e:
f0:5c:41:52:30:b5:b7:cc:64:cd:69:2a:e8:24:bb:
8a:57:d7:fc:ae:eb:a7:0b:08:94:73:ee:0b:15:16:
78:c3:13:66:fc:bb:0e:7c:af:8a:71:9b:b5:34:9d:
fb:2b:08:df:88:71:7b:55:af:1c:54:7b:c2:33:15:
2a:36:15:bc:7c:01:5b:3e:7d:31:a5:b6:ca:04:f3:
d0:29:47:8e:45:6f:a7:e3:2f:96:da:a2:c2:4e:af:
52:06:d6:42:45:ce:19:e2:55:01:5a:5d:bf:be:30:
58:89:c4:f6:30:d6:32:6e:8f:87:54:f3:37:d8:c2:
6b:28:63:10:a5:57:c5:a4:2d:f8:2a:67:91:c3:c6:
2a:39:62:19:78:ab:b6:b8:a1:e3:46:5a:a2:2a:fa:
6b:8e:08:68:69:9b:ee:4f:93:a7:d1:20:b1:7a:7c:
d3:a0:3d:6b:5e:72:a4:14:3a:e4:96:36:db:22:42:
8b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:59:60:9C:AB:69:4B:D8:F5:66:C2:CA:CF:E6:40:BE:6B:9B:1A:1D
X509v3 Authority Key Identifier:
keyid:65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:25:42:b5:a6:71:06:8f:8a:60:6a:69:09:1a:29:1d:95:51:
13:00:fe:a1:db:dd:46:8a:c9:7f:10:9f:60:bd:f3:f9:0d:da:
1d:d1:93:05:4d:9c:92:17:8e:01:cc:ac:48:97:00:ef:b5:5a:
12:dd:5d:3f:30:58:0f:69:93:7a:d7:e5:ce:a6:83:5d:65:6d:
67:0a:4d:7a:ea:ff:e1:71:80:84:48:10:99:30:52:43:c6:33:
ed:34:bf:63:f3:f5:9f:e2:19:7c:2c:ab:09:6d:40:16:62:f0:
e0:9b:8e:c9:1f:5d:37:2c:1d:fc:58:43:7d:02:bc:41:86:4d:
30:d1:45:3d:66:e4:a4:1f:e2:9b:c8:ea:2e:f1:fa:39:06:2e:
58:c9:be:c5:38:24:b8:79:5d:2d:48:21:0c:61:3e:ff:ae:fb:
34:b7:5d:54:64:75:7b:36:f3:9e:21:2f:2f:9f:f9:9c:88:b7:
7b:89:34:06:d0:1d:db:55:8c:f5:69:a2:34:33:83:b1:87:3b:
ab:f1:0d:25:20:3b:7a:0a:a3:7a:e5:65:31:c8:3e:86:db:ea:
5b:39:dd:bf:1e:ea:61:9a:60:e1:c1:89:b6:94:32:d4:c7:c4:
ee:66:a1:5d:92:7d:c5:74:30:3a:24:69:b2:90:4f:97:5d:2f:
46:3a:88:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:05:15 2026 by rpki-client