
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft
File: 53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft (raw, json)
Hash identifier: 75V5aI3by4seYAP6zKVThfm9y8vxZIqk8Uoon48qcxk=
Subject key identifier: C9:F1:59:F0:A1:12:CE:48:40:31:30:1A:98:0A:EC:0A:12:12:64:60
Authority key identifier: 53:51:6F:A1:49:7C:FC:CD:BB:F2:8F:2B:DE:9F:A4:86:FE:90:FE:24
Certificate issuer: /CN=53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24
Certificate serial: 3543C74B06C60820AA93EF46F02D2D5C124BF311
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft
Manifest number: 9F
Signing time: Fri 16 Oct 2026 00:02:03 +0000
Manifest this update: Thu 15 Oct 2026 23:57:03 +0000
Manifest next update: Mon 19 Oct 2026 08:30:03 +0000
Files and hashes: 1: 53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl (hash: Bh+QzgmOiqfwpkLlAryHrGAj3H9xPlkTh1e31BdJ3ws=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl
rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 08:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:43:c7:4b:06:c6:08:20:aa:93:ef:46:f0:2d:2d:5c:12:4b:f3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24
Validity
Not Before: Oct 15 23:57:03 2026 GMT
Not After : Oct 19 08:30:03 2026 GMT
Subject: CN=C9F159F0A112CE484031301A980AEC0A12126460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:95:6c:82:1b:16:1f:44:a3:71:98:a6:da:c4:
9f:43:4c:db:cf:75:59:32:48:be:4a:6f:a0:a4:cf:
56:58:9a:bb:e4:17:0a:3c:71:eb:ad:06:f3:ce:42:
e8:68:89:ca:fa:62:5b:ee:4e:fc:2e:74:5e:3e:07:
c8:8b:31:7b:55:5e:5e:05:6a:0c:b6:d5:5b:21:e7:
2d:e4:7e:d7:ef:4b:3a:14:4f:69:02:4b:52:0c:ed:
8c:2a:80:a5:06:e0:6d:26:5d:9d:8a:6b:fe:1b:03:
91:43:5c:73:97:5d:22:71:6c:4d:2f:6b:25:bd:36:
51:7c:9f:85:be:4c:ff:67:ef:c1:1f:bb:91:62:bb:
e4:0a:dc:2e:d1:8c:fa:6a:78:0f:21:dd:ed:bf:19:
de:ee:a9:67:67:11:7e:48:5a:1e:b0:86:7c:f1:6a:
cc:38:be:84:cc:01:53:94:e5:a4:f1:e0:b1:d8:c8:
42:db:9e:77:c0:82:00:da:f8:94:a6:03:84:9f:0a:
47:5b:03:57:55:59:3c:5e:29:8f:89:3d:e8:9e:e8:
12:22:9a:3e:5c:2d:81:df:b0:4e:8a:08:34:96:55:
65:ea:d1:45:63:70:b4:5a:e6:11:f2:e1:05:8f:27:
5d:b2:d5:1d:6e:13:9c:b6:db:f8:e6:77:62:24:23:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F1:59:F0:A1:12:CE:48:40:31:30:1A:98:0A:EC:0A:12:12:64:60
X509v3 Authority Key Identifier:
keyid:53:51:6F:A1:49:7C:FC:CD:BB:F2:8F:2B:DE:9F:A4:86:FE:90:FE:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/1/53516FA1497CFCCDBBF28F2BDE9FA486FE90FE24.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3b:9c:57:68:17:5a:58:56:6d:30:f8:99:d7:0d:d8:5b:59:
44:06:88:c7:b8:60:e9:ea:93:f5:78:8d:16:1e:b2:38:ed:37:
f4:e9:9f:76:49:51:f3:fe:40:a4:20:3f:77:12:99:69:0e:e9:
4b:f1:85:ac:02:dc:00:21:19:28:3a:7d:4a:19:af:01:ea:03:
3c:dc:21:d8:7a:df:87:47:ba:5e:21:7b:14:4a:14:b4:25:da:
1b:38:9b:28:cd:ee:40:94:ce:69:07:8e:b8:b1:ce:c4:a5:4b:
57:3f:2b:6a:e0:69:1d:a5:c8:b3:fc:cb:dd:30:d3:2c:97:5c:
2d:73:69:d0:b4:fa:9e:4e:b9:2d:7e:1f:86:b5:ce:82:b2:24:
db:4b:c5:de:9d:d8:bf:4e:9d:fc:79:ef:0e:42:ff:32:67:ba:
ec:58:c9:b4:ee:91:c6:3d:c9:1e:ae:74:40:b4:2b:38:16:e3:
8f:52:7e:7b:84:f9:47:4d:5c:49:f9:27:92:40:f7:29:50:96:
9d:41:0e:65:78:92:76:35:2b:4d:56:c1:17:d0:23:47:2b:8d:
01:9f:14:dd:30:7f:16:83:f6:c0:66:7d:96:ff:0a:25:aa:87:
82:7a:96:2e:48:6b:7a:84:e7:f3:02:12:b0:58:a0:70:6f:6a:
4c:53:a9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 19:33:35 2026 by rpki-client