
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft
File: 8F4847B639E40E191DBFCE7F69985F8744142AF6.mft (raw, json)
Hash identifier: JD7LDVr5UQaJFFwhPV0mQk+Z0hYTu3lXJh1aU0juREE=
Subject key identifier: 52:E0:A8:00:D9:50:19:3E:9E:CF:F1:68:EF:71:DB:BC:8B:AD:BD:D3
Authority key identifier: 8F:48:47:B6:39:E4:0E:19:1D:BF:CE:7F:69:98:5F:87:44:14:2A:F6
Certificate issuer: /CN=8F4847B639E40E191DBFCE7F69985F8744142AF6
Certificate serial: 14C4B59860193820091D54206764E3312E5702BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft
Manifest number: 78
Signing time: Wed 29 Jul 2026 15:49:44 +0000
Manifest this update: Wed 29 Jul 2026 15:44:44 +0000
Manifest next update: Thu 30 Jul 2026 18:56:44 +0000
Files and hashes: 1: 8F4847B639E40E191DBFCE7F69985F8744142AF6.crl (hash: KJ6840ji37Qd89Qq/FXhXD4X5OgKSLx55mchcS2mfA4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.crl
rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 18:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:c4:b5:98:60:19:38:20:09:1d:54:20:67:64:e3:31:2e:57:02:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F4847B639E40E191DBFCE7F69985F8744142AF6
Validity
Not Before: Jul 29 15:44:44 2026 GMT
Not After : Jul 30 18:56:44 2026 GMT
Subject: CN=52E0A800D950193E9ECFF168EF71DBBC8BADBDD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7d:b8:5a:f1:0b:7f:27:c6:dc:b5:c7:a6:bb:
0c:20:39:2c:f5:9e:6d:62:6b:63:15:b8:a4:ce:a1:
66:4a:4c:66:2b:2c:85:a9:09:8f:98:6c:1f:a3:5d:
17:3d:9f:5b:55:08:02:2f:92:be:e0:2e:80:62:93:
f0:21:99:a1:25:17:52:88:1f:c9:c1:22:be:ae:bb:
2c:69:3b:e6:c0:85:ec:ef:ff:09:09:fe:cd:01:5f:
36:20:f8:55:27:f1:8c:e0:98:2c:0f:f7:62:4d:3b:
63:95:35:4e:72:8b:d4:3d:f3:40:49:21:a2:5e:47:
21:e8:7b:aa:32:a8:e7:42:21:59:7b:f3:eb:fe:38:
fd:5b:9d:f4:de:87:57:72:dd:62:7e:d9:7f:a9:bb:
6e:d6:28:bc:44:99:c2:7b:b9:c2:48:4d:a6:8c:eb:
98:b1:58:04:35:d6:ac:c4:52:72:04:d6:49:66:1c:
3c:a4:ae:5d:68:51:32:87:93:2a:7a:97:68:e4:84:
f9:89:ea:be:5d:f2:25:d6:9b:f7:5c:0e:1c:3d:49:
96:dc:42:b8:c3:3d:21:00:f2:e4:8f:37:bb:b1:13:
96:f8:10:ba:c3:57:70:1c:07:e7:e8:34:4e:08:b7:
0f:e3:80:18:77:40:36:46:9d:b3:91:51:f6:29:a6:
e0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E0:A8:00:D9:50:19:3E:9E:CF:F1:68:EF:71:DB:BC:8B:AD:BD:D3
X509v3 Authority Key Identifier:
keyid:8F:48:47:B6:39:E4:0E:19:1D:BF:CE:7F:69:98:5F:87:44:14:2A:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:78:0c:31:d0:3b:95:8e:f7:89:db:5b:7e:74:63:2a:50:ee:
69:a9:a1:80:a1:33:50:52:56:47:24:f9:65:f6:e4:53:db:a5:
bd:dc:c8:07:50:37:05:8f:66:6d:8e:23:a8:3b:ef:1f:cc:21:
9d:72:be:cc:99:05:02:c4:53:f0:f4:e7:dd:8c:51:3c:69:10:
29:7c:45:3e:d8:9a:e1:2c:77:50:ec:0e:56:2b:51:46:62:7b:
a7:f1:dd:5e:67:a0:01:1f:f3:25:36:b2:6d:4b:32:8b:93:e3:
82:d5:83:25:a0:f0:b5:2b:67:d6:3c:ac:3f:b6:ae:7f:43:4d:
99:a3:88:1d:58:e0:35:ab:2e:47:c7:ac:a4:f3:42:45:73:27:
be:7d:21:a6:80:2b:6f:14:85:83:2b:90:10:37:46:f7:57:b8:
49:02:0a:e2:22:23:a8:a3:69:30:b8:ef:af:0d:a0:7f:88:23:
36:20:b2:44:60:16:5a:82:fc:29:e6:47:5e:2c:2b:bc:5d:b5:
db:eb:d7:7c:71:5c:ff:8f:21:39:d8:bd:ce:86:c6:68:8e:c5:
17:1b:03:82:22:bd:fd:b2:62:fc:15:59:58:31:db:b9:72:77:
7a:32:49:f0:19:69:03:c8:15:af:35:14:35:eb:90:50:b3:f6:
dd:33:81:92
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUFMS1mGAZOCAJHVQgZ2TjMS5XAr0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY0ODQ3QjYzOUU0MEUxOTFEQkZDRTdGNjk5ODVGODc0
NDE0MkFGNjAeFw0yNjA3MjkxNTQ0NDRaFw0yNjA3MzAxODU2NDRaMDMxMTAvBgNV
BAMTKDUyRTBBODAwRDk1MDE5M0U5RUNGRjE2OEVGNzFEQkJDOEJBREJERDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbfbha8Qt/J8bctcemuwwgOSz1
nm1ia2MVuKTOoWZKTGYrLIWpCY+YbB+jXRc9n1tVCAIvkr7gLoBik/AhmaElF1KI
H8nBIr6uuyxpO+bAhezv/wkJ/s0BXzYg+FUn8YzgmCwP92JNO2OVNU5yi9Q980BJ
IaJeRyHoe6oyqOdCIVl78+v+OP1bnfTeh1dy3WJ+2X+pu27WKLxEmcJ7ucJITaaM
65ixWAQ11qzEUnIE1klmHDykrl1oUTKHkyp6l2jkhPmJ6r5d8iXWm/dcDhw9SZbc
QrjDPSEA8uSPN7uxE5b4ELrDV3AcB+foNE4Itw/jgBh3QDZGnbORUfYppuBPAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUUuCoANlQGT6ez/Fo73HbvIutvdMwHwYDVR0j
BBgwFoAUj0hHtjnkDhkdv85/aZhfh0QUKvYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MjA2NzM4ODE3NTYxMzk1OS8xLzhGNDg0N0I2MzlFNDBFMTkxREJGQ0U3RjY5OTg1
Rjg3NDQxNDJBRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOEY0ODQ3QjYzOUU0MEUxOTFEQkZDRTdGNjk5ODVGODc0NDE0MkFGNi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDIwNjczODgxNzU2MTM5NTkvMS84RjQ4NDdCNjM5RTQw
RTE5MURCRkNFN0Y2OTk4NUY4NzQ0MTQyQUY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOHgMMdA7lY73
idtbfnRjKlDuaamhgKEzUFJWRyT5ZfbkU9ulvdzIB1A3BY9mbY4jqDvvH8whnXK+
zJkFAsRT8PTn3YxRPGkQKXxFPtia4Sx3UOwOVitRRmJ7p/HdXmegAR/zJTaybUsy
i5PjgtWDJaDwtStn1jysP7auf0NNmaOIHVjgNasuR8espPNCRXMnvn0hpoArbxSF
gyuQEDdG91e4SQIK4iIjqKNpMLjvrw2gf4gjNiCyRGAWWoL8KeZHXiwrvF212+vX
fHFc/48hOdi9zobGaI7FFxsDgiK9/bJi/BVZWDHbuXJ3ejJJ8BlpA8gVrzUUNeuQ
ULP23TOBkg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 23:04:23 2026 by rpki-client