
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft
File: 1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft (raw, json)
Hash identifier: Ef8hzhHOn9s8wA4IdNyBE925zLm66+gOJY/J+Utjpk8=
Subject key identifier: CD:26:AB:91:48:A6:CF:3B:86:F8:C5:9F:8A:EF:F5:61:60:70:A8:8B
Authority key identifier: 1C:0A:7C:94:4D:B9:9C:44:19:C3:E2:89:FF:A9:80:FF:82:2B:8B:71
Certificate issuer: /CN=1C0A7C944DB99C4419C3E289FFA980FF822B8B71
Certificate serial: 60B02BE9057A9F337F0C95BF0304F2AD96DDFA0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft
Manifest number: 80
Signing time: Sat 17 Oct 2026 03:13:25 +0000
Manifest this update: Sat 17 Oct 2026 03:08:25 +0000
Manifest next update: Tue 20 Oct 2026 07:01:25 +0000
Files and hashes: 1: 1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl (hash: dr/FGj0RuoVxVrV7QTphWw1hckz/IE6YRPuszGA6MOY=)
2: 3131372e3130332e3132382e302f32302d3234203d3e203338333537.roa (hash: u7LzJQwy+fgwt4WDTFIyv8MHQBC/pA/j8q1mwwgHXuo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl
rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 11:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b0:2b:e9:05:7a:9f:33:7f:0c:95:bf:03:04:f2:ad:96:dd:fa:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C0A7C944DB99C4419C3E289FFA980FF822B8B71
Validity
Not Before: Oct 17 03:08:25 2026 GMT
Not After : Oct 20 07:01:25 2026 GMT
Subject: CN=CD26AB9148A6CF3B86F8C59F8AEFF5616070A88B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:1f:a3:9c:5a:0e:34:92:4a:8d:a4:e2:fc:
02:75:4d:67:af:2b:83:01:20:32:aa:3b:5d:be:14:
8a:3d:e4:70:71:a0:54:b4:6a:68:b3:dc:86:47:c6:
2f:3d:6c:d9:fb:5a:22:db:77:0a:8a:a4:eb:f4:f5:
2f:34:88:7e:30:7c:d9:8d:7e:6f:fa:97:5e:bf:ea:
84:43:13:b3:d1:fb:af:96:b2:58:5d:52:94:c4:20:
a6:6f:f3:b7:87:92:02:bb:55:b3:2b:31:b7:0a:78:
b4:15:ce:08:13:c4:c5:17:19:59:f2:fa:52:5a:9b:
f2:f1:37:12:3d:67:08:c4:7e:c2:47:2f:9e:53:e5:
9a:75:22:fe:61:e0:25:96:ae:6a:0b:09:5b:a8:78:
70:bc:0c:89:68:a6:11:0b:85:1f:c6:01:f4:ac:9e:
1d:e2:10:94:53:08:96:5d:4e:32:30:c3:39:30:2b:
58:6c:a5:c5:fa:ec:ee:3f:1a:c0:4e:e9:27:94:9d:
88:b9:3e:17:47:41:9c:18:b8:97:19:55:7d:ec:5d:
57:74:76:66:0a:32:4b:11:c9:c9:38:ae:53:eb:7e:
88:d5:e5:b0:15:ad:17:66:bc:b7:32:e1:3b:59:97:
ae:3a:0f:90:04:68:61:9d:f1:db:50:14:41:10:1c:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:26:AB:91:48:A6:CF:3B:86:F8:C5:9F:8A:EF:F5:61:60:70:A8:8B
X509v3 Authority Key Identifier:
keyid:1C:0A:7C:94:4D:B9:9C:44:19:C3:E2:89:FF:A9:80:FF:82:2B:8B:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b2:f7:84:40:e0:2d:76:5c:16:9a:43:b2:5c:c8:ea:d6:85:
9d:bb:cc:cf:5e:fa:89:d6:f5:34:42:73:f0:19:30:80:7a:97:
4f:55:fd:0b:25:5d:ee:2d:a4:3f:25:d6:61:99:a3:25:47:f6:
82:29:ee:e3:4a:5d:eb:90:81:79:69:7c:46:b3:a8:78:84:2f:
a6:f6:38:3a:f7:82:93:50:eb:79:0a:61:80:fb:44:2c:8d:03:
e2:52:8a:b8:75:d9:b4:d3:12:81:b8:a3:1e:6c:c8:64:66:d9:
af:b0:f4:b4:2a:31:64:23:b4:6a:7a:33:e6:74:3d:95:cc:c8:
c6:f2:d3:08:42:18:4b:97:69:c0:e5:2d:46:90:00:18:6b:ce:
d3:9b:69:75:23:c2:20:e6:bc:3f:09:20:2f:48:4a:1c:5d:f6:
ad:1f:52:f4:8e:1a:3d:48:13:7a:c7:03:ba:2b:ff:76:99:b6:
77:bf:38:f8:b1:1a:47:94:02:1f:a1:c4:cf:dd:b5:af:2a:c1:
e9:1c:4a:0c:ff:6e:6c:5b:83:68:a8:84:89:3e:96:07:bc:28:
5c:f0:1d:b9:44:a7:61:7b:cc:32:64:a0:7c:4a:e0:03:b5:4d:
52:40:f1:17:b8:29:db:f1:8c:e1:e5:09:ca:2f:fe:47:48:d6:
d9:81:a5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:57:18 2026 by rpki-client