
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft
File: A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft (raw, json)
Hash identifier: KhSFpGYYh/7z9jx9IpfgDAOxrYmB9C0BAzDn2CM+WDA=
Subject key identifier: C4:EA:DA:2B:1F:6B:BF:68:63:AC:68:D7:F5:84:1F:70:AD:CF:4F:72
Authority key identifier: A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53
Certificate issuer: /CN=A91209740000/serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353
Certificate serial: 75EC282B4599C9977A95E9EABC82DD9E01C13F7D
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft
Manifest number: 02F3
Signing time: Mon 19 Oct 2026 23:33:58 +0000
Manifest this update: Mon 19 Oct 2026 23:28:58 +0000
Manifest next update: Fri 23 Oct 2026 08:55:58 +0000
Files and hashes: 1: AS45090.roa (hash: sn70bdO2V7+ZbQfzexLi6sW+lrFjwUJxIN4L0R9gCzE=)
2: A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl (hash: o9r1suJL8wAT4t4noygBi/an3pHiivA3kIB/w1iyf7U=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl
rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 08:55:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ec:28:2b:45:99:c9:97:7a:95:e9:ea:bc:82:dd:9e:01:c1:3f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91209740000, serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353
Validity
Not Before: Oct 19 23:28:58 2026 GMT
Not After : Oct 23 08:55:58 2026 GMT
Subject: CN=C4EADA2B1F6BBF6863AC68D7F5841F70ADCF4F72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1c:6d:fc:e4:a4:60:68:56:2e:db:24:fe:73:
54:91:8c:c5:6d:1f:47:00:b8:56:ab:3f:d5:73:bd:
8c:44:ef:9b:31:05:9d:48:cb:0a:22:7f:21:c9:55:
66:a2:ca:48:7f:90:a8:52:9e:45:70:bd:66:55:34:
fa:02:d2:b5:26:86:57:79:78:7d:64:4f:d3:c8:80:
0b:1d:12:7a:84:67:48:a7:41:67:5a:b8:e7:3d:c3:
58:61:4b:91:ad:76:8c:05:e5:73:8a:ac:50:58:44:
75:08:a1:df:31:79:35:99:a5:90:a8:b6:fc:cd:b0:
1b:21:f3:d9:6e:ca:94:4a:8c:18:9f:97:6b:2b:9d:
07:2e:2f:08:3d:61:41:e1:14:b1:a9:dc:98:28:ac:
90:79:9c:5d:83:fd:05:75:63:c3:ba:fa:13:a9:d3:
8d:e6:2e:33:28:f1:0c:bf:ea:1b:9a:46:c5:f7:05:
c9:d8:74:3a:12:f8:98:0d:10:d2:ea:b1:3a:d2:88:
33:a5:81:cc:1b:29:e9:61:74:fa:00:eb:75:eb:cf:
21:8f:e8:d4:6e:33:ff:13:4b:0d:4e:6a:be:77:5e:
8c:6b:58:b3:cf:1f:6c:8a:ae:6d:33:8d:b2:e1:84:
fa:ba:1a:0d:ba:0e:23:0e:91:10:4c:05:ce:a4:ba:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EA:DA:2B:1F:6B:BF:68:63:AC:68:D7:F5:84:1F:70:AD:CF:4F:72
X509v3 Authority Key Identifier:
keyid:A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:08:1e:54:6d:ee:d0:00:b4:86:5b:cc:ae:f8:1c:8d:31:9d:
55:dc:38:e2:8a:69:a3:05:01:b2:18:95:e1:3b:c1:81:60:77:
06:c8:7c:6f:8e:88:e5:59:12:23:d9:9c:08:62:ab:b0:8d:65:
02:99:46:1e:0e:f8:ef:9f:df:9f:7d:52:90:ae:06:5c:6d:67:
e4:f1:16:c2:b6:0d:24:5c:97:c1:43:50:04:92:88:9c:da:e9:
7c:3c:06:68:97:bd:f1:e6:20:ab:c9:04:1c:f5:07:e2:7f:28:
e3:f7:09:ae:cf:13:20:4d:87:81:49:f8:9e:68:75:49:5b:45:
d4:1d:c3:28:c4:da:b4:f6:be:55:b5:f4:54:ba:37:3c:11:db:
a7:77:a4:27:f1:7f:82:ad:73:c1:05:ef:0e:ed:6b:1f:f2:b4:
b0:cf:5a:32:8e:59:39:49:c0:e2:24:a6:09:63:97:f0:c7:bb:
1d:90:5b:4d:46:c3:b1:ed:86:8d:32:ad:33:c6:d6:c1:22:80:
05:0a:3c:7a:98:e9:cb:66:29:66:ec:0c:33:a5:d6:af:e6:57:
9f:7d:1e:cf:33:b7:76:35:8c:71:1b:ca:67:4a:02:34:16:03:
f4:5a:1f:ba:35:92:16:12:fa:6a:fc:03:ac:8e:9f:c9:e2:74:
75:03:49:9f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUdewoK0WZyZd6lenqvILdngHBP30wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMjA5NzQwMDAwMTEwLwYDVQQFEyhBM0FGNzE3NjJG
QTA1RTVBQ0UzQjZBM0MzMzJDQUI3RjI5QUEzMzUzMB4XDTI2MTAxOTIzMjg1OFoX
DTI2MTAyMzA4NTU1OFowMzExMC8GA1UEAxMoQzRFQURBMkIxRjZCQkY2ODYzQUM2
OEQ3RjU4NDFGNzBBRENGNEY3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN4cbfzkpGBoVi7bJP5zVJGMxW0fRwC4Vqs/1XO9jETvmzEFnUjLCiJ/IclV
ZqLKSH+QqFKeRXC9ZlU0+gLStSaGV3l4fWRP08iACx0SeoRnSKdBZ1q45z3DWGFL
ka12jAXlc4qsUFhEdQih3zF5NZmlkKi2/M2wGyHz2W7KlEqMGJ+XayudBy4vCD1h
QeEUsancmCiskHmcXYP9BXVjw7r6E6nTjeYuMyjxDL/qG5pGxfcFydh0OhL4mA0Q
0uqxOtKIM6WBzBsp6WF0+gDrdevPIY/o1G4z/xNLDU5qvndejGtYs88fbIqubTON
suGE+roaDboOIw6REEwFzqS6SZUCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBTE6tor
H2u/aGOsaNf1hB9wrc9PcjAfBgNVHSMEGDAWgBSjr3F2L6BeWs47ajwzLKt/Kaoz
UzAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTIxNjE1ODMzNDA0MDgwMTY1LzMvQTNBRjcx
NzYyRkEwNUU1QUNFM0I2QTNDMzMyQ0FCN0YyOUFBMzM1My5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvbzY5eGRpLWdY
bHJPTzJvOE15eXJmeW1xTTFNLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH
MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEyMTYxNTgzMzQw
NDA4MDE2NS8zL0EzQUY3MTc2MkZBMDVFNUFDRTNCNkEzQzMzMkNBQjdGMjlBQTMz
NTMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQBYCB5Ube7QALSGW8yu+ByNMZ1V3DjiimmjBQGyGJXhO8GB
YHcGyHxvjojlWRIj2ZwIYquwjWUCmUYeDvjvn9+ffVKQrgZcbWfk8RbCtg0kXJfB
Q1AEkoic2ul8PAZol73x5iCryQQc9Qfifyjj9wmuzxMgTYeBSfieaHVJW0XUHcMo
xNq09r5VtfRUujc8Edund6Qn8X+CrXPBBe8O7Wsf8rSwz1oyjlk5ScDiJKYJY5fw
x7sdkFtNRsOx7YaNMq0zxtbBIoAFCjx6mOnLZilm7Awzpdav5leffR7PM7d2NYxx
G8pnSgI0FgP0Wh+6NZIWEvpq/AOsjp/J4nR1A0mf
-----END CERTIFICATE-----
Generated at Tue Oct 20 06:38:49 2026 by rpki-client