
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft
File: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft (raw, json)
Hash identifier: joLnPVJmMAodC+xeiBgsovfU0vbiXyEISwLaAuMEFNM=
Subject key identifier: A0:9A:F6:B1:DB:1D:39:A9:49:65:1F:65:16:52:51:8B:1A:F7:EA:62
Authority key identifier: 49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52
Certificate issuer: /CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52
Certificate serial: 16309286CF210624D8DC4FBA32B18B2255104FDB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft
Manifest number: 012C
Signing time: Thu 10 Sep 2026 14:26:44 +0000
Manifest this update: Thu 10 Sep 2026 14:21:44 +0000
Manifest next update: Mon 14 Sep 2026 02:06:44 +0000
Files and hashes: 1: 495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl (hash: oHdrxceU+xWMgCP4GyguN4leFppkNrGiF2TwOKw6G6I=)
2: 3130332e3130372e3138382e302f32322d3234203d3e203233363530.roa (hash: CFAHQAP8THI9wJ8BWhCV4cLNG+81bpwlbJskkyJTB6g=)
3: 3130332e37332e3134342e302f32322d3234203d3e203233363530.roa (hash: VxGsnx1rBWe9B0qof1L0wGRBl07VZZxHo2M/U0hpVD0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Sep 2026 00:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:30:92:86:cf:21:06:24:d8:dc:4f:ba:32:b1:8b:22:55:10:4f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52
Validity
Not Before: Sep 10 14:21:44 2026 GMT
Not After : Sep 14 02:06:44 2026 GMT
Subject: CN=A09AF6B1DB1D39A949651F651652518B1AF7EA62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:95:ea:93:fb:6e:4b:88:01:c2:8c:70:37:
62:a0:70:aa:4f:4d:7a:6d:37:ae:53:4b:37:ef:b8:
a9:34:de:2c:cc:fe:55:b1:b9:b4:76:c6:b0:4b:2f:
ad:33:72:3e:e6:b8:c0:ea:d8:1d:e6:3b:a5:1a:36:
3c:b9:3c:36:ac:d4:be:8a:77:9b:aa:24:6d:3f:75:
c8:ce:66:e3:3c:ef:ea:86:ff:47:1f:e7:98:96:a4:
9f:e3:1c:43:3f:74:7b:1d:9a:5c:f0:ad:0b:13:56:
8a:fd:b3:d4:45:ee:80:17:2d:ae:92:da:44:25:8b:
a9:6a:45:05:dc:0d:ef:a4:84:36:ae:7f:97:53:a8:
27:15:5b:b7:55:7f:20:47:7a:f0:b3:f2:99:44:87:
78:e0:d4:5f:de:cb:17:fa:81:a1:d9:97:b1:00:0c:
2e:b9:b1:69:a4:61:72:98:e2:bc:1f:15:20:bc:89:
f4:da:b7:ee:41:8a:6b:4e:6e:de:19:f2:2e:9c:4b:
64:4b:53:ec:13:15:e4:98:c1:0c:af:3b:34:b5:d8:
42:20:f6:0d:4c:70:fe:f3:de:5f:6c:6a:dc:df:10:
23:26:c9:4d:08:5b:67:14:e8:ff:31:80:21:04:33:
ef:4a:07:72:1b:b4:ea:e0:9d:f3:6c:d8:2e:0f:5e:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9A:F6:B1:DB:1D:39:A9:49:65:1F:65:16:52:51:8B:1A:F7:EA:62
X509v3 Authority Key Identifier:
keyid:49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f1:be:ee:2a:19:69:c1:49:99:9d:f3:95:75:5b:48:e8:67:
ba:5f:dd:7b:a0:2f:74:ff:25:ac:47:b4:e5:d3:72:69:b1:42:
ca:50:e8:ec:65:97:c9:78:3a:d4:a3:95:a7:4f:6c:a8:20:36:
3c:6c:2b:4a:09:e5:8e:97:6b:00:5f:e7:94:b2:40:39:53:86:
26:1a:c6:3d:e0:6f:ab:56:c9:44:bc:75:e6:26:57:b1:58:aa:
97:86:9f:9f:18:cd:9b:e0:72:fc:1a:eb:17:cb:2a:ea:46:92:
f4:49:c0:2a:95:a9:b2:8b:20:e2:84:ee:30:30:28:9f:2f:f2:
25:bb:41:e0:01:0e:a4:dc:fb:07:b4:83:40:9b:91:ef:f4:24:
44:99:27:3d:ca:e1:a4:f9:90:08:24:51:98:2e:39:f5:b7:7b:
6b:4f:3c:d2:c5:9e:db:c9:32:6e:94:af:43:18:44:1c:51:a6:
40:5a:2a:b1:2c:2d:a7:c6:1c:a9:70:ce:da:dc:a7:56:9c:c3:
f8:bd:0f:4e:46:60:72:a6:d1:e1:0c:dd:14:2b:1f:15:eb:53:
7c:41:c2:7c:71:92:a0:fc:9f:23:22:34:e2:cf:b4:b5:af:f8:
32:e2:1b:25:d5:0c:9f:d6:f4:ce:cc:a2:07:cb:68:b2:9f:0b:
f3:5a:a7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:09:47 2026 by rpki-client