
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
File: D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft (raw, json)
Hash identifier: u/al+AlSS16jjCwNQ649c7G/8EZQcR0QsC3zSO+3f4o=
Subject key identifier: D4:AC:AE:69:49:53:AA:9D:49:98:D3:63:3C:BC:37:0B:9F:FD:D8:9A
Authority key identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04
Certificate issuer: /CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
Certificate serial: 6E93FEB038BF54CD30708B81044F2B25A082E632
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
Manifest number: 014C
Signing time: Thu 03 Sep 2026 22:04:11 +0000
Manifest this update: Thu 03 Sep 2026 21:59:11 +0000
Manifest next update: Mon 07 Sep 2026 02:48:11 +0000
Files and hashes: 1: D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl (hash: WgFgfy1oy0vaJ/ArxCBwv5F/dYUJCsS5KAGec5JVq4Y=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 10:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:93:fe:b0:38:bf:54:cd:30:70:8b:81:04:4f:2b:25:a0:82:e6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
Validity
Not Before: Sep 3 21:59:11 2026 GMT
Not After : Sep 7 02:48:11 2026 GMT
Subject: CN=D4ACAE694953AA9D4998D3633CBC370B9FFDD89A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:ee:f3:7f:39:67:d2:9c:e4:08:51:a6:18:
4f:41:f3:e2:3a:4d:30:c0:62:45:dd:7b:c6:8c:e8:
3f:f0:a4:fe:2c:b2:60:a7:f5:2a:42:64:95:5e:fd:
e1:87:db:be:2e:0d:f5:d3:22:e4:35:53:0e:a2:23:
18:cb:36:8c:a1:ec:31:f3:04:d8:5a:d3:0a:d9:df:
67:c9:ab:34:8f:fc:0c:8e:65:dd:68:ad:52:d7:14:
fd:63:ec:30:fb:e2:85:d0:75:e8:fe:ff:95:b5:f6:
e7:ed:1b:6a:ec:49:13:34:e0:6e:03:69:a4:b7:6b:
b7:ea:ec:59:93:5c:39:22:c2:86:07:3a:84:6d:6d:
1c:a4:02:19:48:92:a4:ff:fa:27:b2:cb:6c:bf:c1:
f1:4a:b3:c4:6d:70:f9:fb:9a:4d:4d:f8:dd:4b:f8:
6c:26:f5:a0:ec:8d:30:81:cc:6e:32:b6:8d:fb:c5:
bf:b7:17:ae:98:a5:c2:b4:dd:cb:5e:88:cf:c9:e3:
29:b0:aa:33:36:65:1a:63:51:1c:37:28:dd:06:5d:
92:d0:ad:a4:92:8d:7d:37:3f:3c:b3:cd:59:75:8b:
9c:8d:b2:0a:a9:ee:4b:cf:35:c1:0a:3d:c0:bd:da:
48:8a:58:b9:8a:fe:f6:c6:10:90:58:85:db:86:d8:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AC:AE:69:49:53:AA:9D:49:98:D3:63:3C:BC:37:0B:9F:FD:D8:9A
X509v3 Authority Key Identifier:
keyid:D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bb:31:95:35:32:7d:6f:d4:fc:05:f6:b2:a4:7e:2c:1f:7f:
08:cf:3a:24:71:8c:67:15:cf:64:90:a3:c0:95:71:11:99:84:
dd:61:b5:99:51:0b:69:55:9d:e4:1c:51:80:c9:0e:c3:e0:a7:
a3:0b:ec:62:a0:60:db:79:ac:6f:8a:61:82:a6:d1:c0:5e:10:
53:eb:73:3e:3e:b7:e4:da:df:9f:ed:58:e5:1e:7e:0b:cc:3b:
77:a6:fe:81:c8:38:4b:67:eb:c6:1a:f0:5b:15:bc:58:b8:5e:
b3:cb:29:db:0d:84:23:29:aa:46:76:74:2d:66:54:87:01:80:
86:34:5d:f1:c4:66:82:b9:54:e9:58:96:70:7e:f5:64:39:90:
c4:a7:bc:4d:d6:b1:e2:e3:cb:f1:84:c8:68:19:eb:fe:e3:da:
38:53:16:cd:28:cd:fe:80:53:44:bb:b7:01:fe:0b:a7:6d:06:
01:45:62:7d:b1:25:ba:58:25:93:64:54:5e:ae:48:47:1b:03:
99:4e:9d:55:1e:e1:3a:09:5f:9b:b9:bf:14:92:4a:e2:64:8d:
34:f7:07:df:6b:7b:ca:af:d1:d3:f5:57:4c:f8:85:38:40:82:
fb:07:de:82:be:e8:7c:cc:2c:4a:ef:bd:e8:eb:ac:2d:9a:f6:
c4:40:81:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:53:08 2026 by rpki-client