
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft
File: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft (raw, json)
Hash identifier: U7j1HtdVpcCiOxnqYAgv+8h44ogE56KW9xL3Rsz5a5w=
Subject key identifier: EB:92:67:1F:CC:E2:2E:E7:22:C2:CA:D9:75:77:07:51:33:89:B8:49
Authority key identifier: F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43
Certificate issuer: /CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043
Certificate serial: 52443A8F264CFF67FD46B869560C87503D7BB4DE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft
Manifest number: A4
Signing time: Thu 15 Oct 2026 10:21:42 +0000
Manifest this update: Thu 15 Oct 2026 10:16:42 +0000
Manifest next update: Sun 18 Oct 2026 21:21:42 +0000
Files and hashes: 1: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl (hash: chQijjQelBlUP/gG1cKuK1s+B0rP5XNihy/idDmzKbI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl
rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 21:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:44:3a:8f:26:4c:ff:67:fd:46:b8:69:56:0c:87:50:3d:7b:b4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043
Validity
Not Before: Oct 15 10:16:42 2026 GMT
Not After : Oct 18 21:21:42 2026 GMT
Subject: CN=EB92671FCCE22EE722C2CAD9757707513389B849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:85:97:59:e2:88:e1:b9:76:ec:fc:63:10:
7e:5a:78:4f:26:32:19:76:3d:88:a6:c6:f2:16:b9:
9b:da:c7:04:4b:82:67:b8:a7:d9:20:4d:a2:e8:35:
8e:59:8e:66:67:1a:c1:63:93:b4:e5:c1:f0:41:28:
7a:37:e4:54:a2:71:21:4d:7d:64:23:78:f4:cf:73:
29:23:d9:27:b4:2d:36:6b:14:ed:3e:e9:86:eb:0c:
b6:99:5e:9e:aa:7c:30:7c:59:7d:eb:0b:39:b4:1d:
55:34:ee:27:8c:60:03:7b:87:1f:67:31:22:34:e2:
e1:93:3f:4f:70:b8:f9:95:e8:8e:ab:eb:33:cf:ad:
6b:75:ae:e1:d4:23:5c:8e:6b:26:cc:fc:84:74:5b:
d9:be:92:af:b8:db:74:07:27:05:29:22:b8:32:95:
cf:de:fb:5c:58:23:c6:d3:5a:4b:6e:98:a3:31:9c:
20:87:40:ca:38:5b:4d:e3:2b:53:04:c6:0f:86:ec:
ba:b7:76:82:ec:79:ef:a5:d4:8f:74:b6:41:c8:4f:
1a:bf:2b:52:b2:6c:45:cc:7e:5a:2c:9b:47:cb:78:
93:69:cd:e0:dd:0c:df:e6:8f:17:8c:69:9f:55:42:
16:48:6d:dd:df:04:6f:d4:2d:dd:f6:0f:8d:64:48:
ea:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:92:67:1F:CC:E2:2E:E7:22:C2:CA:D9:75:77:07:51:33:89:B8:49
X509v3 Authority Key Identifier:
keyid:F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a0:a7:9c:4f:04:35:55:f2:20:87:17:78:97:b5:d1:21:28:
5f:92:74:9f:1d:4b:26:5e:ef:eb:8f:0d:a3:64:d3:63:a2:00:
b2:82:ed:ca:fd:1a:de:58:fc:a3:00:d3:41:e4:89:c3:f1:58:
43:5b:20:4d:7f:af:16:85:ab:34:32:d9:c9:1a:6e:be:8e:36:
1a:07:bd:65:7c:4e:98:57:0c:52:d6:e8:2d:ff:8f:e1:60:ff:
6f:d0:f2:d6:3d:de:b6:60:d4:2a:3b:1f:7a:9e:f1:3b:0d:38:
73:e6:a0:7a:a9:12:16:67:23:16:b5:11:6d:33:3f:cc:1d:cb:
0a:04:8d:01:af:7e:23:29:1f:49:a0:4f:94:b4:64:c2:54:a2:
9e:c3:c8:d5:db:19:df:3a:22:95:30:a1:72:e6:a0:3b:cd:c2:
56:a0:0c:10:48:ba:2b:ea:26:09:62:29:c0:9e:94:09:3b:a5:
9e:d3:40:0a:ea:b0:6f:fa:80:70:a3:54:b0:50:27:56:77:c6:
94:cc:c9:db:12:a2:64:00:7a:c7:dc:ae:2b:f3:7a:b7:01:f2:
c1:9a:58:dc:56:06:bb:69:17:03:4c:08:d5:24:0a:e9:a8:ba:
de:d1:08:95:5f:ee:5a:b7:9e:c2:6d:d1:6e:28:e1:ec:6a:f1:
21:4c:ae:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 07:17:19 2026 by rpki-client