
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft
File: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft (raw, json)
Hash identifier: qIJdNPeJuDiLC25os49+pzI7QrmM1fAM6BgOTERiXZA=
Subject key identifier: 35:4F:A8:2D:8A:30:20:5B:5B:22:BE:76:31:6B:B2:3D:1D:ED:C6:7D
Authority key identifier: 0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6
Certificate issuer: /CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6
Certificate serial: 405CBB73D6605550DFE169E22EE2C4E3964F5209
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft
Manifest number: 2F
Signing time: Sun 22 Feb 2026 16:37:30 +0000
Manifest this update: Sun 22 Feb 2026 16:32:30 +0000
Manifest next update: Mon 23 Feb 2026 20:32:30 +0000
Files and hashes: 1: 0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl (hash: 3dpOeHuBDtzBxmWjvO990sdM7Np511yByVv8CsfUn0s=)
2: 323430313a626461303a3a2f33322d3332203d3e20313531323737.roa (hash: 9fwFD84ztG9UUivDa4dFwK8Y6fw7uNd0odjWh9t4he8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:5c:bb:73:d6:60:55:50:df:e1:69:e2:2e:e2:c4:e3:96:4f:52:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AFFEB3DB5B290035312103A162969BF6E9D25E6
Validity
Not Before: Feb 22 16:32:30 2026 GMT
Not After : Feb 23 20:32:30 2026 GMT
Subject: CN=354FA82D8A30205B5B22BE76316BB23D1DEDC67D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:39:85:2f:77:c2:79:f7:3b:f6:e4:aa:2e:
ee:d9:d0:da:6c:82:fc:2e:75:9c:72:66:05:19:d0:
1c:1d:ff:f4:23:58:f6:90:a6:e1:5d:0d:a5:36:36:
43:84:41:29:da:2e:30:2d:45:d0:af:c5:85:7b:49:
44:8f:2f:5b:59:e8:7c:3c:86:f8:e1:93:99:7c:92:
63:ca:1e:21:32:f4:3d:91:56:f5:b0:c6:55:1c:c3:
f3:b9:64:2b:85:12:c8:1c:58:0b:77:aa:8a:a4:d7:
56:bb:1a:8f:86:bc:48:76:e5:cc:40:e4:1c:39:b3:
fb:65:24:5c:8b:cf:71:19:5d:eb:54:71:0a:76:42:
0c:3f:9b:88:b7:64:a0:54:d3:bf:09:b9:28:28:64:
3b:7b:40:6d:1e:55:57:80:f8:da:1d:78:db:05:a8:
eb:e3:ff:1a:36:33:4b:75:5f:55:3d:e4:87:34:8f:
77:b6:a2:3c:73:6a:a0:d9:fb:42:b5:d2:2a:d2:78:
2b:bb:00:78:a6:e3:25:63:35:2b:7f:5b:cc:86:f4:
8c:7b:c0:ae:6d:39:e4:40:a7:a8:32:66:b3:d4:86:
58:cf:99:86:a9:e2:ce:94:7a:82:ac:57:a3:51:06:
cc:8f:bd:d7:59:ed:16:c4:5b:ff:b5:07:a0:6f:cd:
88:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4F:A8:2D:8A:30:20:5B:5B:22:BE:76:31:6B:B2:3D:1D:ED:C6:7D
X509v3 Authority Key Identifier:
keyid:0A:FF:EB:3D:B5:B2:90:03:53:12:10:3A:16:29:69:BF:6E:9D:25:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0AFFEB3DB5B290035312103A162969BF6E9D25E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/0/0AFFEB3DB5B290035312103A162969BF6E9D25E6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:92:64:53:0d:94:e7:3b:92:87:8f:01:d4:19:83:0a:80:0b:
0c:96:de:1a:8d:fc:8a:c0:dd:69:e0:af:32:f2:d1:80:43:f4:
cf:81:3e:33:30:4e:8e:6c:44:be:29:bb:18:56:fc:6c:42:f5:
d7:e9:c5:84:31:0c:7b:15:6f:63:5d:0f:8e:fc:ee:de:4f:b0:
96:dc:63:b1:0b:fc:36:90:9b:fc:c3:f4:24:82:a2:ff:56:18:
53:ac:55:91:0c:48:24:b2:21:8f:b6:6b:71:16:9a:24:83:78:
64:f0:1f:bb:7f:57:f2:53:77:d9:c2:12:5e:11:0b:50:1d:89:
83:39:8f:ac:c0:19:e2:c7:cb:2c:a7:75:a5:c3:f9:ed:a6:7b:
90:e0:80:1c:46:6e:e2:67:f9:c3:a1:29:b6:83:d0:f5:6e:7d:
73:1d:3f:ab:f8:8c:15:f6:40:24:ee:e6:9a:9c:57:ea:2b:52:
4b:0c:35:f1:94:9e:9b:1a:f1:bc:e3:6c:30:d8:df:99:e3:c7:
e9:df:5a:cb:fe:46:25:88:21:58:f0:d6:5e:8b:dd:fb:3c:d2:
c1:f5:6e:15:e6:d8:4b:fa:d7:5f:67:20:e1:9a:d9:df:4d:6b:
41:00:dc:e8:3a:01:71:6e:07:ba:b3:30:ce:85:79:e4:aa:df:
ef:aa:a4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:07:14 2026 by rpki-client