
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft
File: 8332B09A385E541C166AE62E8F2A1193E685BAA6.mft (raw, json)
Hash identifier: aUbUhwQJTAur8F+eLLbRZKoJ0ZB1vHq84/wzNu7qFBw=
Subject key identifier: 58:89:B0:D5:02:08:60:0A:9D:51:8C:84:8B:0B:D4:01:CC:2D:29:AA
Authority key identifier: 83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6
Certificate issuer: /CN=8332B09A385E541C166AE62E8F2A1193E685BAA6
Certificate serial: 37C7CEFC73995FCC08887D77641497C88270E2A8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft
Manifest number: 2E
Signing time: Sun 22 Feb 2026 08:27:30 +0000
Manifest this update: Sun 22 Feb 2026 08:22:30 +0000
Manifest next update: Mon 23 Feb 2026 10:07:30 +0000
Files and hashes: 1: 8332B09A385E541C166AE62E8F2A1193E685BAA6.crl (hash: YC2nlTs12NLzNdZePfNkzeHUodbubfpfCCcfdYZpm58=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:c7:ce:fc:73:99:5f:cc:08:88:7d:77:64:14:97:c8:82:70:e2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8332B09A385E541C166AE62E8F2A1193E685BAA6
Validity
Not Before: Feb 22 08:22:30 2026 GMT
Not After : Feb 23 10:07:30 2026 GMT
Subject: CN=5889B0D50208600A9D518C848B0BD401CC2D29AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:72:96:5b:0f:ca:ea:67:4e:fd:4d:b7:c5:
56:3a:ed:be:1c:08:20:14:6e:c0:e7:08:fe:53:e8:
4a:63:b6:06:b4:e1:86:45:cc:c8:2c:5f:19:26:5c:
e0:bc:5b:9e:9d:56:8c:54:09:40:74:49:bb:61:c3:
9a:09:23:aa:34:eb:4b:82:70:36:dc:58:62:c5:61:
fe:61:24:00:d3:13:f5:30:52:64:b5:76:60:88:9d:
45:37:c5:07:7c:47:82:e4:fb:4b:16:89:7e:08:b6:
03:f6:5a:f9:8b:cb:07:9d:6c:df:50:d3:3a:f3:2e:
a8:23:91:c8:98:c9:85:50:a4:74:a2:30:02:0e:fd:
24:60:48:43:d6:9c:ca:16:b9:1c:db:32:6e:86:82:
d7:02:3e:54:f3:24:23:63:6e:c7:c6:ea:9e:e4:ab:
5a:f9:68:40:f4:a0:c8:87:02:6c:b2:7c:8d:25:e2:
cd:bc:6d:3e:c4:08:a9:4d:18:56:94:e7:56:f8:59:
13:3c:7d:55:e0:e5:c2:97:1b:b4:57:a0:e6:88:35:
72:b9:1e:ac:61:a9:40:c6:ea:af:63:0b:c7:76:6b:
ef:04:ff:0e:0a:d2:b3:35:39:fd:32:c6:b1:49:1e:
6d:37:23:52:67:52:c3:eb:ba:7d:38:99:f2:ea:c5:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:89:B0:D5:02:08:60:0A:9D:51:8C:84:8B:0B:D4:01:CC:2D:29:AA
X509v3 Authority Key Identifier:
keyid:83:32:B0:9A:38:5E:54:1C:16:6A:E6:2E:8F:2A:11:93:E6:85:BA:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8332B09A385E541C166AE62E8F2A1193E685BAA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/0/8332B09A385E541C166AE62E8F2A1193E685BAA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:61:ea:74:57:83:85:3f:b6:86:94:6c:5d:f4:d5:63:80:73:
6b:2f:6b:58:c1:9f:37:34:dc:4f:c4:de:d0:43:0d:a5:89:62:
e0:2c:d2:ec:a1:ad:c5:69:4e:67:f1:77:2e:ee:44:16:ea:ee:
93:45:a6:74:69:22:bd:f7:e0:6e:92:d3:80:b8:23:71:79:7e:
c4:f2:ed:56:dd:e8:b2:5e:3a:dc:42:bb:e3:22:49:3a:f7:c4:
62:94:bc:38:d3:3d:94:f4:2e:3d:83:c9:35:e0:a6:3e:d3:e4:
42:4f:0b:1f:63:64:90:ba:8b:f4:b0:dc:c4:db:3f:5e:48:4e:
49:dc:87:40:1c:bf:93:95:50:2e:69:7a:65:a6:f8:d2:89:97:
fc:2c:d8:2c:52:53:7a:3d:c8:9f:86:cb:7f:8b:17:b6:c8:af:
21:3e:28:0a:e1:69:8b:25:13:80:8e:6a:7f:d8:b2:1b:81:0d:
bc:16:f9:d5:4e:38:94:3b:ed:20:34:ee:93:90:aa:e4:ec:84:
a4:85:ec:86:6f:e0:9e:87:8b:40:07:7a:6d:1b:f3:25:ef:b8:
9d:44:26:b7:02:ee:63:bb:29:da:94:05:ca:e4:fd:f0:b2:70:
22:12:b8:32:0e:4e:2c:54:c7:e2:3d:2d:9d:db:f4:4d:35:a8:
0b:5f:c0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:11:42 2026 by rpki-client