
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
File: D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft (raw, json)
Hash identifier: gIPjAnC8PwqB3mMuPRXgbA5FFk93i7UUvYGujZEqqsU=
Subject key identifier: 5F:66:6C:8A:4B:E7:4D:27:FA:A2:9C:0B:6F:87:D3:6C:AB:82:38:24
Authority key identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04
Certificate issuer: /CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
Certificate serial: 0C21DC35766DF6DE1650AC0810CD4944A35A9799
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
Manifest number: 3B
Signing time: Wed 04 Mar 2026 00:23:20 +0000
Manifest this update: Wed 04 Mar 2026 00:18:20 +0000
Manifest next update: Thu 05 Mar 2026 03:30:20 +0000
Files and hashes: 1: D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl (hash: fFfMlJPmRB8W2/nCiBXtl4xNJXmnPgRbUpwcosMYbSw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 03:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:21:dc:35:76:6d:f6:de:16:50:ac:08:10:cd:49:44:a3:5a:97:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
Validity
Not Before: Mar 4 00:18:20 2026 GMT
Not After : Mar 5 03:30:20 2026 GMT
Subject: CN=5F666C8A4BE74D27FAA29C0B6F87D36CAB823824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8c:58:d0:6b:fb:24:05:b6:e1:d1:fa:16:99:
3b:db:1f:45:42:fa:9f:bb:f1:94:98:ca:7b:5a:44:
6f:b6:9a:90:1c:e0:f3:20:1a:23:46:fc:8d:7c:65:
e6:dc:86:17:e8:0b:f6:3b:0f:0f:7a:a5:5f:e0:2a:
de:fd:80:23:04:f6:de:63:f9:b8:11:7b:43:c3:a2:
37:3b:31:cc:90:9c:15:ba:2d:02:1f:cc:cc:83:19:
ce:8f:07:f0:e0:d2:20:57:56:ee:73:0a:f6:4f:5c:
53:b7:f7:da:72:ae:e0:d6:e3:e8:0f:db:57:7a:1c:
7b:0e:9b:7b:b9:65:d7:dc:3f:df:b0:9d:dc:ab:14:
a0:4a:6a:de:00:42:7d:2f:a8:5a:cc:b5:f0:d6:ab:
ba:e5:92:ac:a5:7c:1c:33:83:f9:a0:69:a2:19:2b:
ac:64:8b:b5:db:96:0b:52:5a:68:67:28:ec:b2:ba:
44:c3:cc:7d:63:47:a1:ad:83:ac:61:34:38:83:f3:
39:eb:b6:9c:df:ab:97:0b:61:b1:a9:5d:e2:e6:cc:
47:69:f3:f5:1f:52:38:bf:2e:7e:88:7a:4b:26:58:
8c:ee:56:df:7e:db:5d:53:4c:0a:af:0a:94:56:5b:
27:74:0b:21:16:f1:8d:55:7e:49:f1:53:db:55:e0:
f5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:66:6C:8A:4B:E7:4D:27:FA:A2:9C:0B:6F:87:D3:6C:AB:82:38:24
X509v3 Authority Key Identifier:
keyid:D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e8:1b:6b:9b:f3:63:96:1f:aa:41:98:9b:88:75:00:6e:97:
ee:dd:53:55:9c:26:e7:83:9a:86:0f:20:cf:d4:f5:3e:6b:0f:
9a:78:48:aa:57:e1:3b:a1:a7:1d:07:a0:50:ef:0a:86:ca:05:
f8:f2:d8:f7:85:30:72:54:48:ab:5e:7e:2a:b3:bb:3b:5e:48:
b5:24:d0:76:17:7c:c5:d5:49:80:65:9b:e1:80:8e:6b:b4:9d:
b9:55:26:62:63:36:c5:59:30:30:0c:11:27:c0:fb:83:c9:9b:
ca:a7:6b:7d:92:a8:d5:f8:70:08:f3:53:5d:a7:64:22:5c:99:
af:a9:79:1d:a5:55:ca:bf:82:15:6c:3c:4c:3e:1c:73:d2:50:
72:20:71:f3:96:cd:e9:0a:79:f3:85:81:bf:2e:08:67:bb:c6:
be:09:09:df:b2:bb:0d:2b:a8:13:7b:e6:e6:fd:59:df:e8:fe:
77:df:b3:2b:ad:ad:bd:1d:4f:2c:4d:96:09:6f:7b:3a:44:50:
3e:f0:43:97:8d:41:2e:60:4e:42:c3:70:0c:bd:86:c3:71:fe:
77:ad:31:26:f0:f5:5b:35:a7:95:c8:95:51:78:23:d2:a5:99:
a1:6b:68:5f:74:cf:cb:4b:7f:77:c1:b5:bb:5a:be:e7:fd:c8:
b1:df:25:9d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUDCHcNXZt9t4WUKwIEM1JRKNal5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM2OUY3MURGRDk2NTE5REVCNEJDQTI4QzJBN0IyMzc0
QjI0MjcwNDAeFw0yNjAzMDQwMDE4MjBaFw0yNjAzMDUwMzMwMjBaMDMxMTAvBgNV
BAMTKDVGNjY2QzhBNEJFNzREMjdGQUEyOUMwQjZGODdEMzZDQUI4MjM4MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcjFjQa/skBbbh0foWmTvbH0VC
+p+78ZSYyntaRG+2mpAc4PMgGiNG/I18ZebchhfoC/Y7Dw96pV/gKt79gCME9t5j
+bgRe0PDojc7McyQnBW6LQIfzMyDGc6PB/Dg0iBXVu5zCvZPXFO399pyruDW4+gP
21d6HHsOm3u5ZdfcP9+wndyrFKBKat4AQn0vqFrMtfDWq7rlkqylfBwzg/mgaaIZ
K6xki7XblgtSWmhnKOyyukTDzH1jR6Gtg6xhNDiD8znrtpzfq5cLYbGpXeLmzEdp
8/UfUji/Ln6IeksmWIzuVt9+211TTAqvCpRWWyd0CyEW8Y1VfknxU9tV4PV5AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUX2ZsikvnTSf6opwLb4fTbKuCOCQwHwYDVR0j
BBgwFoAU02n3Hf2WUZ3rS8oowqeyN0skJwQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzQ1NTEwNy8xL0QzNjlGNzFERkQ5NjUxOURFQjRCQ0EyOEMyQTdC
MjM3NEIyNDI3MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRDM2OUY3MURGRDk2NTE5REVCNEJDQTI4QzJBN0IyMzc0QjI0MjcwNC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMS9EMzY5RjcxREZEOTY1
MTlERUI0QkNBMjhDMkE3QjIzNzRCMjQyNzA0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOgba5vzY5Yf
qkGYm4h1AG6X7t1TVZwm54Oahg8gz9T1PmsPmnhIqlfhO6GnHQegUO8KhsoF+PLY
94UwclRIq15+KrO7O15ItSTQdhd8xdVJgGWb4YCOa7SduVUmYmM2xVkwMAwRJ8D7
g8mbyqdrfZKo1fhwCPNTXadkIlyZr6l5HaVVyr+CFWw8TD4cc9JQciBx85bN6Qp5
84WBvy4IZ7vGvgkJ37K7DSuoE3vm5v1Z3+j+d9+zK62tvR1PLE2WCW97OkRQPvBD
l41BLmBOQsNwDL2Gw3H+d60xJvD1WzWnlciVUXgj0qWZoWtoX3TPy0t/d8G1u1q+
5/3Isd8lnQ==
-----END CERTIFICATE-----
Generated at Wed Mar 4 13:07:32 2026 by rpki-client