
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
File: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft (raw, json)
Hash identifier: TVIDotQtd6kufwX3h62Ce1YeMZ7+nIpKuo0FFrt1jZM=
Subject key identifier: 6E:D9:B2:50:CC:24:A4:8F:C0:E3:44:3D:27:D4:A9:6D:94:FA:11:47
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 696183E81496FE74E6CFE03D1BE734F2D2872E32
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
Manifest number: 3C
Signing time: Wed 04 Mar 2026 09:08:20 +0000
Manifest this update: Wed 04 Mar 2026 09:03:20 +0000
Manifest next update: Thu 05 Mar 2026 09:28:20 +0000
Files and hashes: 1: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl (hash: 7KQs3jnNKBaWKKq99yZAwMS2Wt9AiS1HXIKeO9VucFI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 19:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:61:83:e8:14:96:fe:74:e6:cf:e0:3d:1b:e7:34:f2:d2:87:2e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Mar 4 09:03:20 2026 GMT
Not After : Mar 5 09:28:20 2026 GMT
Subject: CN=6ED9B250CC24A48FC0E3443D27D4A96D94FA1147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:ff:9c:53:3a:22:4b:75:42:0f:34:38:4f:
fb:71:7d:a6:f8:f3:56:0e:fc:cf:0b:0d:2c:b1:57:
8c:36:00:45:eb:38:d9:45:4e:60:fd:91:40:90:49:
72:23:1d:7e:c8:44:db:82:2e:46:3e:3f:e4:2b:1d:
d7:30:2e:42:c2:89:f0:c4:bb:ef:42:5f:11:9f:16:
dd:15:3a:f0:98:b1:00:a5:22:61:99:1b:6d:96:f1:
8a:66:d0:ce:de:c9:94:c6:16:a4:55:96:8b:16:39:
09:0f:20:d5:7e:bd:c0:21:6a:20:90:98:51:0d:80:
cc:a1:98:5a:31:00:6b:5a:57:af:3f:4d:e1:e0:c2:
d7:27:2d:2e:d6:e6:18:20:06:34:93:e3:53:d0:58:
94:cb:c4:66:a0:e0:da:7b:0b:fa:1a:04:36:5e:04:
d4:de:2c:d5:ec:59:08:80:46:5f:7c:a4:dc:00:69:
52:2c:f2:ff:f5:9d:2f:63:63:02:9d:08:07:a0:a9:
52:c7:05:44:65:81:fa:f1:6f:1c:39:4c:e0:ad:ab:
8a:43:3e:c4:b0:aa:4d:fd:d4:7e:08:2f:89:40:75:
9c:6a:b0:29:d6:a9:1f:83:a2:0d:59:47:8f:83:53:
67:bd:da:c8:b5:b0:ea:48:0a:b4:ef:d1:fd:b9:2e:
56:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D9:B2:50:CC:24:A4:8F:C0:E3:44:3D:27:D4:A9:6D:94:FA:11:47
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:68:81:f0:cd:91:06:a5:39:e0:58:6d:30:67:e7:bc:bb:8f:
ff:78:ca:19:86:2e:33:a9:3c:5e:cd:79:6d:4b:e6:4a:70:c8:
55:bd:8d:a2:a5:8f:7f:7a:e0:1c:ed:aa:41:e5:cb:05:3f:4f:
27:7a:0e:8a:db:81:d4:ae:03:3c:5b:ca:a3:70:bc:c1:62:66:
42:64:c6:23:eb:f1:1a:fd:be:9c:06:c8:3d:b3:0d:8f:c4:0c:
ea:f9:6a:54:16:31:f3:50:45:70:a5:17:7f:1c:41:e4:67:43:
6e:fe:93:b0:05:2b:e5:e7:84:36:b9:45:3a:2d:56:da:f2:c1:
08:cc:8c:37:06:f6:93:43:49:cf:2b:05:f1:21:55:53:3c:49:
94:cb:8e:b2:c7:a5:29:ca:80:d5:f4:ca:1b:7e:c3:19:71:c6:
c7:de:44:87:9e:d5:d9:a8:ec:4e:89:c4:eb:63:96:7c:b7:47:
ef:35:a4:52:2d:79:45:5b:a2:b2:9f:39:c6:a8:5d:05:7c:25:
53:8c:8d:fa:1f:36:d9:03:1c:d6:83:15:49:40:ca:60:74:25:
82:dd:78:0a:a9:d1:97:cf:00:8f:60:d0:75:e3:15:45:b1:54:
aa:fb:d0:f8:8e:ff:04:c8:10:6d:70:dc:75:cf:49:11:bb:78:
e8:f0:a1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:29:14 2026 by rpki-client