
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
File: 5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft (raw, json)
Hash identifier: QOuMuaTRL02OwdJTFjE0UPQliKKUkQXjpgSCqn+r7oE=
Subject key identifier: 6F:66:22:9E:40:64:C1:FB:35:C0:91:D2:57:06:CE:85:E7:39:EA:E8
Authority key identifier: 5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85
Certificate issuer: /CN=5A6112BF7CBEE15DA8C00A8556B7755AFB44A885
Certificate serial: 2B689A9E1BC155E7725B8FB2DE677D7A32900BF5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
Manifest number: 87
Signing time: Wed 14 Oct 2026 23:30:48 +0000
Manifest this update: Wed 14 Oct 2026 23:25:48 +0000
Manifest next update: Sun 18 Oct 2026 08:44:48 +0000
Files and hashes: 1: 5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl (hash: mBtbY/xh0maT1LOI5sqNhzf3rjhFjg2zkECvprLEp4M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl
rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:68:9a:9e:1b:c1:55:e7:72:5b:8f:b2:de:67:7d:7a:32:90:0b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A6112BF7CBEE15DA8C00A8556B7755AFB44A885
Validity
Not Before: Oct 14 23:25:48 2026 GMT
Not After : Oct 18 08:44:48 2026 GMT
Subject: CN=6F66229E4064C1FB35C091D25706CE85E739EAE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:fb:64:d4:de:27:ce:3c:c8:70:8a:9a:47:
cb:c7:58:19:37:1d:43:5d:e0:28:40:50:6c:a0:2d:
60:26:f4:1a:df:76:ea:91:18:9a:37:ca:da:19:05:
a4:c6:e0:c0:0f:93:b6:55:e7:61:73:95:70:9e:15:
4d:0a:73:73:a2:d7:29:aa:49:ea:5c:97:1d:9d:9f:
6a:a2:55:9a:a0:91:9d:bb:5e:e9:50:d2:ff:40:3d:
eb:9d:42:b3:65:66:a4:55:a8:2a:9f:4c:2b:a3:9c:
e4:ce:bc:33:9e:da:e0:38:e0:fa:69:93:b1:1f:de:
7e:a8:59:6c:1d:67:ba:56:8b:f3:29:c8:74:1a:e2:
55:13:0f:c4:e9:da:9f:6d:cc:6a:4f:12:ea:85:c7:
cd:b5:3b:71:8d:5f:85:e0:12:d9:9c:f4:47:56:31:
e8:32:b3:f9:03:c4:9d:f1:7d:2f:0a:1f:a7:34:98:
0a:95:27:9b:bd:02:61:3b:00:e1:94:ed:e3:37:2c:
ad:60:bb:a0:7e:03:dc:2e:82:83:ce:8e:57:bd:d8:
d5:30:fc:ad:95:66:95:6f:c0:10:b9:92:c7:9b:8c:
f7:d5:77:46:96:94:f0:64:c0:0e:e7:e8:c5:e2:cf:
5e:90:d3:ed:f5:49:8f:08:ce:97:31:52:98:37:14:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:66:22:9E:40:64:C1:FB:35:C0:91:D2:57:06:CE:85:E7:39:EA:E8
X509v3 Authority Key Identifier:
keyid:5A:61:12:BF:7C:BE:E1:5D:A8:C0:0A:85:56:B7:75:5A:FB:44:A8:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/1/5A6112BF7CBEE15DA8C00A8556B7755AFB44A885.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:29:26:fb:fa:f9:ca:21:93:3f:62:1c:c4:b0:4b:f1:3e:10:
a3:65:5c:cb:4b:31:04:74:3c:c3:74:0d:a7:da:0a:0a:d1:ba:
b8:f4:6c:82:e2:80:7a:38:5a:7b:35:6a:97:71:f3:75:ed:e8:
d7:5c:86:1b:53:22:b3:7b:1e:06:5e:19:1d:18:af:a8:76:2f:
8c:e7:10:ec:00:d1:82:c7:dc:81:58:72:83:f0:4d:72:26:b3:
18:b4:f4:4e:66:3d:b6:16:c3:17:a9:b6:f1:ac:d5:99:10:3a:
e8:11:7a:c9:4d:2e:32:ba:f9:b6:f4:ef:92:f2:a0:62:b0:de:
8f:5d:6c:19:c5:38:66:fb:f5:cd:ba:03:53:3c:7c:c3:5b:8e:
4d:03:0f:9d:aa:b0:85:c1:5e:28:ee:87:14:3e:39:98:5f:c0:
eb:1f:67:d9:b3:7f:55:e7:6a:9e:4f:b9:a1:9b:1f:a0:79:3f:
f0:12:37:78:d1:72:2c:b1:66:ea:ec:62:02:32:35:c1:e9:49:
7e:24:90:46:3a:d0:3a:a6:27:99:23:5b:01:b8:36:3c:c5:5a:
12:fb:19:c6:a8:f4:90:d9:3a:0f:ad:92:7f:dc:6b:8a:e3:e2:
55:e5:f1:58:de:a3:69:1c:a0:7e:2d:8e:70:85:0a:97:54:25:
14:71:e2:a9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUK2ianhvBVedyW4+y3md9ejKQC/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUE2MTEyQkY3Q0JFRTE1REE4QzAwQTg1NTZCNzc1NUFG
QjQ0QTg4NTAeFw0yNjEwMTQyMzI1NDhaFw0yNjEwMTgwODQ0NDhaMDMxMTAvBgNV
BAMTKDZGNjYyMjlFNDA2NEMxRkIzNUMwOTFEMjU3MDZDRTg1RTczOUVBRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Wftk1N4nzjzIcIqaR8vHWBk3
HUNd4ChAUGygLWAm9BrfduqRGJo3ytoZBaTG4MAPk7ZV52FzlXCeFU0Kc3Oi1ymq
Sepclx2dn2qiVZqgkZ27XulQ0v9APeudQrNlZqRVqCqfTCujnOTOvDOe2uA44Ppp
k7Ef3n6oWWwdZ7pWi/MpyHQa4lUTD8Tp2p9tzGpPEuqFx821O3GNX4XgEtmc9EdW
Megys/kDxJ3xfS8KH6c0mAqVJ5u9AmE7AOGU7eM3LK1gu6B+A9wugoPOjle92NUw
/K2VZpVvwBC5ksebjPfVd0aWlPBkwA7n6MXiz16Q0+31SY8IzpcxUpg3FBRhAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUb2YinkBkwfs1wJHSVwbOhec56ugwHwYDVR0j
BBgwFoAUWmESv3y+4V2owAqFVrd1WvtEqIUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NjkxMDExMzA1MTkwMTk3Ny8xLzVBNjExMkJGN0NCRUUxNURBOEMwMEE4NTU2Qjc3
NTVBRkI0NEE4ODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvNUE2MTEyQkY3Q0JFRTE1REE4QzAwQTg1NTZCNzc1NUFGQjQ0QTg4NS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTY5MTAxMTMwNTE5MDE5NzcvMS81QTYxMTJCRjdDQkVF
MTVEQThDMDBBODU1NkI3NzU1QUZCNDRBODg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2ikm+/r5yiGT
P2IcxLBL8T4Qo2Vcy0sxBHQ8w3QNp9oKCtG6uPRsguKAejhaezVql3Hzde3o11yG
G1Mis3seBl4ZHRivqHYvjOcQ7ADRgsfcgVhyg/BNciazGLT0TmY9thbDF6m28azV
mRA66BF6yU0uMrr5tvTvkvKgYrDej11sGcU4Zvv1zboDUzx8w1uOTQMPnaqwhcFe
KO6HFD45mF/A6x9n2bN/Vedqnk+5oZsfoHk/8BI3eNFyLLFm6uxiAjI1welJfiSQ
RjrQOqYnmSNbAbg2PMVaEvsZxqj0kNk6D62Sf9xriuPiVeXxWN6jaRygfi2OcIUK
l1QlFHHiqQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 03:53:43 2026 by rpki-client