
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft
File: 0503C0DCF2359A63935CA42978F7E95CF29425AD.mft (raw, json)
Hash identifier: Rij4X9G2HqEiqVufqRUfcoS3hYPMj5LpkzZeKC7BXPs=
Subject key identifier: A0:5F:7E:D1:9D:E3:63:E7:D0:49:F4:12:EC:AA:AE:AE:06:64:B0:46
Authority key identifier: 05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD
Certificate issuer: /CN=0503C0DCF2359A63935CA42978F7E95CF29425AD
Certificate serial: 28EC58639920D8F441EB1CA9693C0F77F19F23E1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft
Manifest number: 88
Signing time: Tue 21 Jul 2026 18:49:19 +0000
Manifest this update: Tue 21 Jul 2026 18:44:19 +0000
Manifest next update: Wed 22 Jul 2026 21:17:19 +0000
Files and hashes: 1: 0503C0DCF2359A63935CA42978F7E95CF29425AD.crl (hash: zV7RHOsxPJ+D7CQM3m7+JBZMjYCtcIe2k4qAU+w36oc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl
rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 21:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ec:58:63:99:20:d8:f4:41:eb:1c:a9:69:3c:0f:77:f1:9f:23:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0503C0DCF2359A63935CA42978F7E95CF29425AD
Validity
Not Before: Jul 21 18:44:19 2026 GMT
Not After : Jul 22 21:17:19 2026 GMT
Subject: CN=A05F7ED19DE363E7D049F412ECAAAEAE0664B046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:e0:ba:f3:42:0b:9c:00:ed:48:10:4a:17:
9c:3f:c9:52:d3:a5:07:81:c1:bd:5d:b5:b3:23:ff:
bb:49:b7:87:b8:ae:8b:c9:f8:8c:5c:7b:11:bc:66:
26:c0:89:3f:67:04:57:e7:3c:da:dd:9b:4c:a0:3b:
aa:ec:ad:d4:88:58:d2:e9:06:2f:d7:f7:6e:bb:71:
84:23:b8:33:9d:37:63:c8:08:45:c6:e3:75:8b:df:
1f:55:1f:31:47:86:5b:6f:b7:bc:d8:dd:f2:9c:ba:
4c:94:88:b2:2d:23:aa:38:7c:76:66:2c:7c:e9:db:
71:61:06:2d:da:1a:e5:6c:6b:56:42:68:85:71:a8:
48:94:23:5d:41:fd:4c:f0:06:5c:f0:b5:bf:f2:e2:
b1:52:33:9b:c3:d2:2f:a9:ae:c9:da:e4:d7:b7:90:
6d:ed:9a:6e:18:24:52:d6:a5:38:62:0a:f9:81:ca:
f6:a1:62:68:ea:32:02:56:a7:78:92:3d:85:0f:11:
ae:06:52:f5:ba:49:82:f7:65:c9:06:e4:8b:7b:d6:
59:28:10:ce:9f:c2:fb:e3:03:24:b4:f9:f7:61:80:
bf:67:9f:1d:b9:4c:47:4b:59:fc:fd:a7:ac:89:70:
49:c1:3e:4b:1e:6d:e4:4c:3a:10:bd:ef:e6:1c:52:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5F:7E:D1:9D:E3:63:E7:D0:49:F4:12:EC:AA:AE:AE:06:64:B0:46
X509v3 Authority Key Identifier:
keyid:05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:58:4d:22:e6:3c:9d:7a:ba:b7:15:4c:ad:68:ef:fc:fb:13:
49:13:95:0b:55:fb:3c:82:ff:17:56:30:23:40:71:f8:7f:ca:
ed:e2:6e:c5:56:b2:5f:4d:d0:ea:2b:6f:f7:24:99:09:96:3a:
1f:39:b0:2f:77:92:fe:a8:9c:08:a5:63:61:48:91:95:72:11:
c5:15:83:9d:28:74:42:e5:9a:e9:a8:40:04:60:aa:cb:9e:57:
2f:97:c1:35:f0:ae:41:cd:b5:51:21:87:81:90:cf:28:7d:2d:
a9:b1:41:8d:23:64:15:79:42:ac:23:3e:a2:07:31:1c:0a:b8:
a9:b1:c7:ee:88:d4:a6:18:9d:a1:07:91:50:05:19:00:d2:db:
10:fd:9d:ea:c8:72:8f:bf:3d:72:49:eb:06:76:a7:c1:8f:70:
f5:f0:5c:6a:7d:28:c7:73:07:a6:01:e9:01:f0:5d:99:30:5c:
3c:2c:dc:fb:db:92:4d:c5:52:64:71:c5:93:68:68:92:2b:24:
62:7b:c4:6d:66:ad:6b:e1:35:2b:ce:6b:7f:e5:28:9a:dd:a3:
1e:31:cc:26:5c:6c:df:d0:9d:5a:b5:00:77:23:8a:a4:11:44:
e9:74:6c:49:a7:f4:e9:81:1f:98:21:73:3a:63:6d:d3:ef:87:
89:84:c2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:46:49 2026 by rpki-client