
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
File: 12292A8CE4276ED3C82E79BA376F7A0363A06716.mft (raw, json)
Hash identifier: JD2ltZp4RFmfg0Ncmrkez+gXG/cxuoRDIog0RS4yl2g=
Subject key identifier: A6:5F:85:16:C0:EA:E9:FC:68:56:C0:C7:D5:CC:50:E2:8C:4C:73:E6
Authority key identifier: 12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16
Certificate issuer: /CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
Certificate serial: 013C637AACAA4942AA9F942EF7D74A9FC58C8776
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
Manifest number: 013D
Signing time: Sat 17 Oct 2026 05:28:32 +0000
Manifest this update: Sat 17 Oct 2026 05:23:32 +0000
Manifest next update: Tue 20 Oct 2026 14:58:32 +0000
Files and hashes: 1: 12292A8CE4276ED3C82E79BA376F7A0363A06716.crl (hash: JsQ848RjSX/HiltFTvOK3tn0us2yXuH/jvxkcO4HdiQ=)
2: 3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa (hash: POleG0l4wno//ZX5b+0oZBB9yM8f+wy3+HMPXea5rYs=)
3: 3134342e37392e3131392e302f32342d3234203d3e20313335353432.roa (hash: zBALkojrGEY7SR5/7+fqt3Odg1/G/Zmmn1B3936v+KM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 20:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:3c:63:7a:ac:aa:49:42:aa:9f:94:2e:f7:d7:4a:9f:c5:8c:87:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
Validity
Not Before: Oct 17 05:23:32 2026 GMT
Not After : Oct 20 14:58:32 2026 GMT
Subject: CN=A65F8516C0EAE9FC6856C0C7D5CC50E28C4C73E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:38:04:fd:45:50:7b:c0:f3:af:e2:ee:f9:c1:
ea:41:18:e1:da:37:e9:03:05:b3:f7:36:19:b7:74:
90:c4:b5:9f:29:4f:ff:c7:6f:03:37:fe:06:aa:c8:
98:04:58:56:13:db:9b:46:25:4a:6a:cc:ed:47:2a:
d1:c9:d9:1c:d5:a8:0b:2d:db:9d:42:7c:fa:31:06:
50:1c:80:40:8a:d0:2f:29:04:5a:f9:b6:2e:04:a7:
47:f3:1c:d2:30:d8:75:af:86:c9:89:0a:53:af:27:
d2:bb:66:7a:f6:51:6f:63:64:ab:4b:69:da:77:ae:
2b:cf:93:6b:af:4c:0b:63:4a:9a:b8:03:1d:45:72:
f9:da:32:0d:18:16:f6:5a:6c:43:f1:f7:1c:4d:98:
d1:c6:46:6e:9b:fe:09:c8:fd:68:2c:8e:0b:68:2a:
1c:fa:2a:c0:39:24:ba:7b:83:38:9d:e5:30:33:bb:
9e:e8:55:b3:74:00:df:d1:51:5a:37:ca:e6:7c:07:
f2:45:ef:4f:17:2d:a6:ff:0d:14:cd:28:f5:d2:9c:
df:e6:5b:1f:60:84:4f:66:58:01:44:fc:5a:70:6e:
d6:5b:39:7b:d6:c9:f3:b7:47:cc:9f:ff:a1:ad:c3:
03:a7:34:ab:73:00:5e:1c:e3:4d:bc:d6:d7:6d:f1:
92:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5F:85:16:C0:EA:E9:FC:68:56:C0:C7:D5:CC:50:E2:8C:4C:73:E6
X509v3 Authority Key Identifier:
keyid:12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:56:00:67:8c:78:e0:42:d9:4d:42:f7:d2:47:2e:8e:c3:60:
ab:a8:6f:56:8a:63:ed:65:e0:21:b3:97:26:64:7a:89:2d:02:
7b:04:41:91:46:31:e3:07:cc:e6:63:4d:2c:76:d1:31:e6:49:
97:89:ab:96:d2:d8:2e:75:9f:9b:ba:69:5f:30:8a:3d:c2:d5:
fe:b8:63:72:12:92:2d:b0:ac:7a:7f:99:46:c5:9a:42:20:78:
cc:f1:f6:af:47:1f:66:42:a1:d7:29:8a:1c:9e:8f:4c:20:db:
98:ee:5b:fb:ac:55:32:ab:fc:e7:39:30:a2:75:ce:60:9b:ab:
6d:63:51:ac:4a:64:28:93:81:e4:89:73:89:b2:77:2d:a6:93:
0b:81:75:72:62:84:ad:fb:1f:8c:0d:18:bb:9a:24:72:78:e5:
fa:f1:41:91:3a:04:3f:d2:1b:2c:5c:b6:34:c9:fb:c1:28:07:
fe:95:c6:1c:1d:f2:5d:98:07:34:61:12:9a:79:30:6a:51:68:
99:78:7b:fe:b5:e1:de:46:e5:3d:23:10:0a:c3:f1:ab:86:cb:
76:d2:90:e4:8a:a3:78:fe:7f:f3:b9:61:b8:0d:1b:a9:e8:1a:
f1:fb:88:f6:ca:9d:e7:70:19:b4:7b:45:ee:cf:19:ce:4a:40:
be:73:0d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 17:45:48 2026 by rpki-client