
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
File: D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft (raw, json)
Hash identifier: FFxsi+TA3tU22P8ePsC/QKIB5UJuVDWmEIEW4Jr79KI=
Subject key identifier: DA:66:10:76:D5:B7:E0:DA:52:26:11:3E:CD:E6:06:87:7A:D9:C0:FD
Authority key identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04
Certificate issuer: /CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
Certificate serial: 7E643C44DA4DC4B3C0622AF555F8DCD3634F7623
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
Manifest number: 78
Signing time: Sat 18 Apr 2026 13:59:55 +0000
Manifest this update: Sat 18 Apr 2026 13:54:55 +0000
Manifest next update: Sun 19 Apr 2026 17:04:55 +0000
Files and hashes: 1: D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl (hash: 7edsmi9gUex5daDlqwjpg25H2CA7qyPMZHIovhdeP5w=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 10:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:64:3c:44:da:4d:c4:b3:c0:62:2a:f5:55:f8:dc:d3:63:4f:76:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
Validity
Not Before: Apr 18 13:54:55 2026 GMT
Not After : Apr 19 17:04:55 2026 GMT
Subject: CN=DA661076D5B7E0DA5226113ECDE606877AD9C0FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:18:18:59:9a:42:bd:c4:d2:e7:69:f9:cd:21:
3e:1d:7b:24:cb:44:16:bb:8f:64:ba:02:92:bb:18:
2a:7f:73:c1:44:4f:8a:27:04:17:c4:1e:64:ff:2e:
bd:0e:04:87:cf:58:6c:63:f1:f0:39:57:86:29:74:
94:d3:bd:02:ee:20:ed:3e:25:8f:86:fd:4f:3c:cf:
7d:ef:23:6d:7c:b3:58:2f:55:77:13:c1:1e:6f:f2:
fc:53:34:33:a5:f6:18:6c:19:68:a1:73:ae:66:02:
eb:ee:00:09:83:18:2c:9d:a0:58:ed:0d:da:d0:12:
c1:33:60:a3:03:e9:7e:dd:f5:e4:db:0a:19:df:35:
b3:df:9e:34:c5:da:56:08:64:75:e2:4b:cb:68:2c:
cc:9c:4d:45:b4:0c:51:0e:b2:b1:8e:c3:e7:fb:29:
8b:57:d1:4f:a1:6c:02:ad:16:2f:b0:b7:86:88:87:
d9:7e:e3:8f:b7:c1:f1:26:9b:c0:9f:63:fe:4a:5c:
48:38:e0:82:f6:fc:cd:4f:7f:0b:35:6b:b9:40:a6:
0b:36:e3:17:9a:c9:a9:8d:05:f4:c7:16:80:1b:94:
c3:ca:df:6e:9b:82:b3:5f:56:8f:44:59:5b:3b:88:
24:87:3f:52:41:07:2d:11:42:1e:48:27:a0:97:7d:
b5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:66:10:76:D5:B7:E0:DA:52:26:11:3E:CD:E6:06:87:7A:D9:C0:FD
X509v3 Authority Key Identifier:
keyid:D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8d:a3:b1:a4:4d:04:53:dc:ab:07:4a:2c:e5:82:8d:ba:a0:
8f:b5:60:43:d3:06:70:f9:cf:15:fc:f4:01:60:c3:a6:52:46:
ce:5f:e1:e8:17:7e:52:33:07:84:80:9e:4c:1f:0e:be:13:65:
05:55:73:d7:df:f4:a1:d3:6c:8f:29:bf:1f:5f:e9:48:42:04:
7a:39:cc:c2:f6:f0:76:2d:80:f7:2f:71:c8:dc:ad:ff:30:4b:
1c:0f:9a:41:f9:4a:48:26:3e:6e:45:b5:98:73:ee:83:44:da:
0b:1e:f7:a4:82:b9:9c:b7:cb:e8:f7:74:71:2f:32:1e:c7:88:
7b:6f:b1:2a:8a:e6:3e:a9:f6:27:90:f3:8b:b4:ad:71:7f:7d:
29:24:fd:5f:75:74:cd:9f:b5:45:d5:5f:40:72:5b:5e:e4:4e:
f0:82:9d:98:cf:a5:aa:aa:96:26:90:6d:04:75:ae:67:cc:d1:
92:59:74:62:e0:d9:17:92:20:25:0f:72:b2:4d:22:26:5b:76:
d4:bc:bc:93:d2:40:4c:1f:00:3e:11:18:e1:57:da:f8:90:c7:
b0:3d:d0:b0:a4:46:02:f7:4c:98:3b:0f:29:83:51:1a:76:76:
a2:d4:81:f0:4a:22:65:46:2b:a5:1e:d3:02:44:7a:92:bf:45:
f8:52:44:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 01:14:17 2026 by rpki-client