
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.mft
File: 315716FC30019F539EC77C931D00EAAABC7835C2.mft (raw, json)
Hash identifier: oxIgglIeXJDIZUV4S5sri6VpbXdU/nQjK/T+ECDbbjE=
Subject key identifier: 2F:E5:A5:FE:24:F0:ED:17:D4:C4:D9:58:F6:DE:6B:FF:48:33:0D:95
Authority key identifier: 31:57:16:FC:30:01:9F:53:9E:C7:7C:93:1D:00:EA:AA:BC:78:35:C2
Certificate issuer: /CN=315716FC30019F539EC77C931D00EAAABC7835C2
Certificate serial: 2D4ADA6DFDD8E46C9E26E5C1CF4ADEE7EB0E8076
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/315716FC30019F539EC77C931D00EAAABC7835C2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.mft
Manifest number: 2E
Signing time: Mon 12 Oct 2026 12:56:58 +0000
Manifest this update: Mon 12 Oct 2026 12:51:58 +0000
Manifest next update: Thu 15 Oct 2026 18:54:58 +0000
Files and hashes: 1: 315716FC30019F539EC77C931D00EAAABC7835C2.crl (hash: DFlORe8DUhLw3gLcKajsD0MKWIR1v0lDqth9ich9ktE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.crl
rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/315716FC30019F539EC77C931D00EAAABC7835C2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 18:54:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:4a:da:6d:fd:d8:e4:6c:9e:26:e5:c1:cf:4a:de:e7:eb:0e:80:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=315716FC30019F539EC77C931D00EAAABC7835C2
Validity
Not Before: Oct 12 12:51:58 2026 GMT
Not After : Oct 15 18:54:58 2026 GMT
Subject: CN=2FE5A5FE24F0ED17D4C4D958F6DE6BFF48330D95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:b3:51:57:bb:50:11:09:5f:7b:ee:f9:73:
cf:ad:45:4e:a7:d9:13:54:22:62:fc:c1:51:49:38:
b0:20:97:71:a8:2f:17:78:c6:6e:90:02:06:cc:bc:
09:a7:63:db:de:ca:c7:25:e9:9b:cf:22:bc:56:3b:
de:e4:12:4b:f9:3d:32:7b:3c:a4:c5:30:78:70:bb:
2e:02:3d:be:66:b7:35:aa:ba:9d:0d:ee:aa:97:42:
ca:b1:64:86:96:0e:42:42:73:86:6b:b1:21:57:f9:
17:09:81:b8:5e:cc:f2:64:ff:d3:83:a7:b9:76:32:
d7:f4:c4:32:95:19:53:e8:93:d3:19:d5:12:12:7f:
fc:f4:f1:82:2c:0b:c5:13:6b:59:8e:fd:68:88:e4:
b2:8c:e4:8a:57:e8:89:41:f3:61:16:c9:cd:ba:f6:
e1:ce:3d:96:83:94:5a:be:72:72:d0:ca:1f:7e:45:
16:0e:38:9a:5a:17:cc:de:d3:31:f2:04:c9:81:0e:
0b:d2:77:5c:66:91:f3:af:72:a2:21:5b:79:e2:5e:
4f:8a:20:ec:95:67:fb:e3:3e:69:45:f4:4d:26:29:
80:07:b8:82:ed:be:74:0a:8a:ac:20:5e:37:0e:d8:
a8:35:25:0c:b1:4f:67:20:b5:a0:be:c2:6e:5b:a2:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E5:A5:FE:24:F0:ED:17:D4:C4:D9:58:F6:DE:6B:FF:48:33:0D:95
X509v3 Authority Key Identifier:
keyid:31:57:16:FC:30:01:9F:53:9E:C7:7C:93:1D:00:EA:AA:BC:78:35:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/315716FC30019F539EC77C931D00EAAABC7835C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ed:cb:93:f1:70:7a:ee:41:15:d6:80:da:4d:35:4a:d2:62:
bd:8d:cd:9a:d4:37:45:ed:10:c1:33:fe:4e:1e:4b:65:45:51:
4f:b8:f7:d2:af:d8:29:d0:6f:9f:55:fe:61:ae:05:1a:f5:18:
95:f7:ad:cb:82:be:c2:e9:61:68:c0:20:1d:b6:84:2a:58:c0:
53:e2:c0:2d:67:e7:97:6b:85:58:6e:93:6a:26:06:62:00:31:
ee:22:ad:c0:c5:51:fe:59:33:62:df:d2:61:ae:39:78:6d:0d:
a4:a3:6e:8e:08:9d:3d:b5:f8:35:a1:d0:49:a7:70:c0:05:11:
51:42:d4:e4:8f:b4:85:b0:aa:e0:94:2f:69:ee:a4:e0:0f:24:
c3:a6:08:0a:0c:70:44:a5:8f:29:a4:98:fe:f4:e7:53:f1:d3:
0a:4d:2c:3c:3e:51:96:fd:83:ec:99:3d:64:9f:ff:ee:ce:fc:
4a:2f:f4:6b:f9:35:fe:2c:44:4f:b1:f6:3d:b4:cf:79:7a:bf:
b6:da:67:b8:ce:a7:63:17:ce:b5:1d:ee:4f:d2:e7:12:be:8b:
1b:7b:c9:3f:4a:35:3a:e6:c7:5b:80:5a:86:35:76:37:d2:16:
ba:a7:d8:e4:78:f9:42:6c:03:e4:ac:d7:de:8a:d4:d1:54:b3:
9e:b5:95:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:43:56 2026 by rpki-client