
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft
File: 848188DBA8D369CB93B918182269D397DE354F44.mft (raw, json)
Hash identifier: N0pz4jyHSmn9lLAl/R47ZbUApX3ZA6ElehWlu1dw3MU=
Subject key identifier: 57:C7:29:F6:61:FB:95:B1:16:E5:88:B0:F5:87:F4:A0:31:34:70:73
Authority key identifier: 84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44
Certificate issuer: /CN=848188DBA8D369CB93B918182269D397DE354F44
Certificate serial: 3E0F6375A6D894691B4E5F6D9911A590C7AA4203
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft
Manifest number: 013E
Signing time: Mon 12 Oct 2026 08:36:49 +0000
Manifest this update: Mon 12 Oct 2026 08:31:49 +0000
Manifest next update: Thu 15 Oct 2026 11:38:49 +0000
Files and hashes: 1: 3130332e36302e33322e302f32322d3332203d3e20313039.roa (hash: MzSW+d1QZG9GRLvksmbq6oNyDTlfux+PnhU3TrTlXko=)
2: 3131312e3232332e382e302f32322d3234203d3e203234343039.roa (hash: S/Wh/JVPJO7YKvn1vwUqixNT3YF0XjGX3yFXKcclN04=)
3: 3131312e3232332e382e302f32322d3332203d3e20313039.roa (hash: zQZ+GZ/PmnZiTYYUgL8WbnnthSRy3dbcLyqydGTq64o=)
4: 848188DBA8D369CB93B918182269D397DE354F44.crl (hash: owLPizEdeP5uzYbkpJF9JfdvIAfMTNvVeWiC/FVRklY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 11:38:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:0f:63:75:a6:d8:94:69:1b:4e:5f:6d:99:11:a5:90:c7:aa:42:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848188DBA8D369CB93B918182269D397DE354F44
Validity
Not Before: Oct 12 08:31:49 2026 GMT
Not After : Oct 15 11:38:49 2026 GMT
Subject: CN=57C729F661FB95B116E588B0F587F4A031347073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:02:75:bd:7e:cd:a3:21:36:eb:64:58:21:
63:fa:d7:9b:a1:69:7d:c1:33:10:24:b5:8c:94:b0:
de:d6:6c:86:cd:01:1f:9c:56:d6:25:ed:59:d8:c9:
99:59:59:b6:66:24:fb:a0:0a:7c:57:5a:6f:ee:44:
da:a8:27:4d:41:f8:4e:75:91:8c:e1:07:9f:a5:40:
48:0e:34:67:8c:97:54:67:96:8c:12:04:d7:a6:24:
6c:31:14:3d:c0:3b:2d:6a:8f:39:bd:02:d2:bc:fd:
d7:aa:d6:d0:e3:d3:ec:df:b5:76:31:00:7e:55:a9:
2c:06:03:a4:c6:42:b2:5e:39:41:eb:f8:e8:9a:07:
58:57:90:99:5d:cd:c2:89:8c:c4:9f:6d:a0:05:78:
0e:97:c3:b6:b1:6f:3f:58:a5:bd:75:74:86:ec:69:
b7:56:85:ab:ed:f7:1d:bc:5f:5d:d5:5d:ab:10:d2:
77:a4:ac:2f:1b:b2:7b:48:25:9f:40:ed:83:77:82:
53:df:3d:4b:0a:90:86:1d:dd:96:f8:3a:6b:af:5f:
68:b6:28:93:be:dc:0c:46:10:e6:28:62:25:64:c3:
5c:67:97:fb:4a:23:d1:eb:cb:92:6e:0b:8c:58:f3:
16:96:38:f9:92:b2:12:46:31:1c:7c:62:ff:b4:62:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C7:29:F6:61:FB:95:B1:16:E5:88:B0:F5:87:F4:A0:31:34:70:73
X509v3 Authority Key Identifier:
keyid:84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c5:c4:eb:54:c2:11:a7:86:87:6d:89:ab:ef:99:17:31:e7:
72:72:4a:4c:c7:71:28:2b:9a:17:aa:b3:2f:d0:3a:c7:7b:c4:
f2:cc:b9:6c:b5:ef:25:c7:cb:58:8e:80:d6:bc:37:d7:d9:99:
5c:20:2c:e6:2b:fc:a5:34:1c:68:19:af:78:07:10:00:c7:5e:
52:9f:9a:52:95:91:79:4f:02:ad:fe:fe:d8:bb:75:f0:75:a1:
99:8c:2b:8d:b6:be:73:a1:16:a0:6c:51:7a:1e:4d:79:f0:da:
a6:7a:58:de:5d:3b:f3:7f:49:92:f7:db:1a:73:c6:1e:e5:8b:
2c:ca:d4:85:bf:62:b4:c9:0e:f7:c7:27:c1:07:f4:a5:47:b3:
60:4a:ea:b8:e1:e4:55:f5:c5:c3:94:05:92:9a:0c:c0:af:42:
be:74:f4:03:5e:21:57:e9:94:57:2d:9f:2e:87:eb:7b:54:55:
d5:66:76:87:ef:75:92:62:7a:a9:12:6f:94:b1:3b:f7:da:f2:
7c:ce:5f:20:9a:89:d2:57:f0:d8:07:d4:ae:ff:48:0c:ad:ba:
48:4f:ae:b7:3c:37:d1:cf:14:71:37:72:d2:53:00:b2:3a:f9:
c1:f5:ec:0f:e5:3c:a3:53:a4:0c:85:84:71:e3:ea:86:36:16:
2b:cd:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:54:09 2026 by rpki-client