
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
File: 82611B8148EDC9354240ABCE432147501DAE52D1.mft (raw, json)
Hash identifier: OjWJkdDRubyjfhPzv2RCX+ZBX8YVUcyezvZUQADQvIE=
Subject key identifier: 25:D7:CE:DF:D5:06:9F:CA:7C:C1:EA:0C:4D:B3:6F:B4:6E:87:09:A0
Authority key identifier: 82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1
Certificate issuer: /CN=82611B8148EDC9354240ABCE432147501DAE52D1
Certificate serial: 1B4182A70A4D72F02BA1A9B6D15DABF28D0C6598
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
Manifest number: 04
Signing time: Sat 13 Jun 2026 11:21:45 +0000
Manifest this update: Sat 13 Jun 2026 11:16:45 +0000
Manifest next update: Sun 14 Jun 2026 12:44:45 +0000
Files and hashes: 1: 82611B8148EDC9354240ABCE432147501DAE52D1.crl (hash: KAmJIJKT1fyyyhQK8dg9QUsE7ATetdYD1PWGY2frq9I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.crl
rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:41:82:a7:0a:4d:72:f0:2b:a1:a9:b6:d1:5d:ab:f2:8d:0c:65:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82611B8148EDC9354240ABCE432147501DAE52D1
Validity
Not Before: Jun 13 11:16:45 2026 GMT
Not After : Jun 14 12:44:45 2026 GMT
Subject: CN=25D7CEDFD5069FCA7CC1EA0C4DB36FB46E8709A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:ec:78:db:ca:c3:f5:85:d0:d8:ec:c4:02:
a4:80:83:3c:2d:d0:f8:37:1f:10:da:80:09:84:f5:
32:6f:e3:c8:82:23:fc:7e:f5:3e:6f:76:f0:4a:b6:
15:70:bd:c2:5d:b8:14:ff:8a:da:b8:ba:a4:c3:5f:
2a:10:8b:06:8d:0c:b5:2e:63:36:79:8e:40:18:d1:
20:af:d1:e6:18:da:e8:43:52:eb:2f:bd:77:b1:44:
0b:07:90:0c:70:55:5c:80:5e:13:bb:62:ce:41:51:
ef:d0:3f:6a:6e:7d:c9:a9:0b:51:2e:89:71:48:b2:
4a:8c:81:a2:64:65:cb:f5:6e:1e:95:5a:b7:66:e9:
cb:b1:e0:a8:1d:15:8c:df:cc:15:8b:8d:e5:98:fb:
d4:46:f2:39:91:13:66:75:c1:7e:cc:18:21:6e:0e:
59:24:4d:52:33:a8:3e:89:f0:10:35:6b:38:d4:2b:
ac:1f:81:09:fa:b4:65:0c:3d:9f:fd:70:b9:b9:0c:
4e:af:39:06:c4:f0:09:d3:d4:29:25:f8:7b:2e:b1:
43:b8:71:28:77:fe:ee:33:51:8e:24:f8:c3:a8:f7:
51:be:ed:a9:32:9f:0e:82:c8:21:50:e8:2f:49:74:
c3:b9:96:ba:23:2b:66:2c:5c:9b:06:5f:fb:c3:3f:
35:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D7:CE:DF:D5:06:9F:CA:7C:C1:EA:0C:4D:B3:6F:B4:6E:87:09:A0
X509v3 Authority Key Identifier:
keyid:82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:81:7d:7e:26:c4:f1:8e:5c:63:ed:da:7c:40:6f:42:af:06:
06:39:c0:d1:93:33:54:e3:3f:26:59:47:34:1a:39:50:9a:3e:
8d:2c:ec:02:2d:b6:a8:cf:f2:0f:1f:23:d2:75:13:56:f2:13:
39:a5:22:5f:75:bb:3d:da:7b:fb:72:8b:de:a3:49:19:d4:fd:
72:de:60:5e:e1:ab:e0:6a:1d:be:99:01:19:88:48:5a:76:74:
38:db:05:b9:37:b5:65:4a:16:c3:21:b5:e5:c1:eb:26:77:51:
bd:49:17:76:6e:bf:56:9d:e8:c7:f9:8d:01:c3:cb:d0:e1:e9:
e7:f9:bc:a2:66:14:8e:a2:d0:be:7e:73:27:5e:37:46:70:0b:
8a:8d:00:3a:53:0f:d5:e7:15:28:fb:0b:ce:a9:97:92:6a:a9:
b8:37:9a:16:74:10:3a:e5:ab:51:a9:24:9d:c9:6e:52:ec:2b:
97:dd:8c:ca:e2:7e:d7:9e:2e:0f:a6:36:4a:1c:5a:0b:29:15:
79:72:50:ee:94:88:7b:d3:5f:b1:3b:40:d1:8d:29:ca:b6:74:
25:db:1e:58:ac:e0:e8:f9:5d:fd:54:27:3f:51:4c:7d:17:d3:
96:d7:a8:11:1e:92:32:51:55:9f:c8:63:ed:35:e0:33:3a:22:
5b:29:9b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:09 2026 by rpki-client