
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
File: 12292A8CE4276ED3C82E79BA376F7A0363A06716.mft (raw, json)
Hash identifier: 9kd90auaKijrwbJZpSU87QBHNPK0t1EHH/LYs7iljj8=
Subject key identifier: 66:BC:40:34:94:C7:5E:C1:63:0C:BB:CB:60:F8:A3:65:60:02:E0:C5
Authority key identifier: 12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16
Certificate issuer: /CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
Certificate serial: 0F92B95BA6C67CE67A4E7AD6C2CB6CF115819426
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
Manifest number: 46
Signing time: Thu 12 Mar 2026 15:38:39 +0000
Manifest this update: Thu 12 Mar 2026 15:33:39 +0000
Manifest next update: Fri 13 Mar 2026 15:46:39 +0000
Files and hashes: 1: 12292A8CE4276ED3C82E79BA376F7A0363A06716.crl (hash: WFX5Eghyj8xwyVKXyv0iSZsbWkRe12eyymiwFIfOT9Y=)
2: 3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa (hash: POleG0l4wno//ZX5b+0oZBB9yM8f+wy3+HMPXea5rYs=)
3: 3134342e37392e3131392e302f32342d3234203d3e20313335353432.roa (hash: zBALkojrGEY7SR5/7+fqt3Odg1/G/Zmmn1B3936v+KM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 08:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:92:b9:5b:a6:c6:7c:e6:7a:4e:7a:d6:c2:cb:6c:f1:15:81:94:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
Validity
Not Before: Mar 12 15:33:39 2026 GMT
Not After : Mar 13 15:46:39 2026 GMT
Subject: CN=66BC403494C75EC1630CBBCB60F8A3656002E0C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:6f:82:92:8b:1e:bc:bc:c1:90:2f:e9:a7:
e4:b9:00:c6:81:51:eb:98:f1:f5:28:ab:58:4d:b3:
52:10:b7:f6:c8:6a:56:79:f9:63:f4:33:cc:77:21:
2e:2d:13:8e:eb:53:bd:89:49:25:0e:d5:6e:8d:21:
e9:55:d2:8f:e9:16:e8:69:14:b4:23:31:01:cc:7b:
f5:80:e1:1d:15:5d:0b:df:ce:d4:17:2c:36:4b:1e:
e5:3b:9f:04:4c:15:17:b2:06:fd:69:ea:3b:ea:c5:
71:ea:67:96:44:98:74:c5:ec:c7:b4:e3:22:30:6e:
27:ad:fc:fc:26:ce:be:87:73:cd:8d:94:17:0a:8d:
f1:d9:07:11:3b:55:cc:c8:45:28:78:c3:cf:3e:08:
82:09:ec:dd:77:fa:a4:23:78:33:04:3d:ff:50:17:
6a:4d:3f:c0:ad:d9:ee:3d:7f:60:bd:56:1b:0a:f2:
d8:b0:4b:c4:45:31:ff:1f:f6:47:b9:a6:6f:9f:ea:
c1:1c:58:2d:7e:01:23:cf:b5:1e:e5:b3:a6:fc:c7:
63:be:bc:3f:b1:c7:d0:83:c5:10:30:0c:5e:57:5a:
cf:c5:d3:18:ad:45:14:08:06:e9:dc:6e:d5:21:2f:
c7:64:d7:96:69:e6:02:9d:03:c1:cb:f9:c1:2d:bf:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BC:40:34:94:C7:5E:C1:63:0C:BB:CB:60:F8:A3:65:60:02:E0:C5
X509v3 Authority Key Identifier:
keyid:12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c7:f4:56:13:d9:69:ef:86:f9:42:5f:df:f9:84:da:91:47:
af:e8:8f:21:2c:28:f0:f5:6f:09:f7:e2:c8:e5:ce:1f:51:a6:
08:f7:00:86:c5:05:26:4a:47:f2:9a:57:b4:a1:4e:3b:96:89:
36:99:bb:4d:f4:3e:2c:53:bb:6c:6f:34:ac:87:40:73:ac:f0:
29:df:11:de:8c:83:f1:a4:ea:c6:61:d1:93:4b:6e:72:f0:7d:
f6:80:13:f7:fa:5c:e6:d8:ea:9b:be:fb:d4:f7:d9:54:ad:4b:
5a:8c:1d:37:51:6f:a8:07:17:f6:cf:ff:77:a9:fa:04:60:84:
a9:ed:cc:09:93:e6:47:b1:66:eb:19:56:83:10:aa:22:2f:08:
00:23:b4:33:86:17:6a:7b:48:fa:31:d2:20:ba:05:a5:59:d8:
9b:64:08:78:55:c4:22:05:0f:52:59:52:0c:d0:f9:97:52:e2:
39:4d:50:ed:24:cd:73:97:f7:ed:a4:de:18:4b:d7:28:8e:db:
b3:6d:0e:d0:b4:22:94:6a:a2:85:c7:9c:bc:f9:8d:ff:78:19:
66:08:2a:44:97:60:05:48:59:ab:76:de:72:1c:25:d6:5f:9e:
f3:e9:72:62:72:05:f2:77:10:d7:51:d0:7f:0a:1b:30:ba:15:
47:84:af:a8
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUD5K5W6bGfOZ6TnrWwsts8RWBlCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIyOTJBOENFNDI3NkVEM0M4MkU3OUJBMzc2RjdBMDM2
M0EwNjcxNjAeFw0yNjAzMTIxNTMzMzlaFw0yNjAzMTMxNTQ2MzlaMDMxMTAvBgNV
BAMTKDY2QkM0MDM0OTRDNzVFQzE2MzBDQkJDQjYwRjhBMzY1NjAwMkUwQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6I2+CkosevLzBkC/pp+S5AMaB
UeuY8fUoq1hNs1IQt/bIalZ5+WP0M8x3IS4tE47rU72JSSUO1W6NIelV0o/pFuhp
FLQjMQHMe/WA4R0VXQvfztQXLDZLHuU7nwRMFReyBv1p6jvqxXHqZ5ZEmHTF7Me0
4yIwbiet/Pwmzr6Hc82NlBcKjfHZBxE7VczIRSh4w88+CIIJ7N13+qQjeDMEPf9Q
F2pNP8Ct2e49f2C9VhsK8tiwS8RFMf8f9ke5pm+f6sEcWC1+ASPPtR7ls6b8x2O+
vD+xx9CDxRAwDF5XWs/F0xitRRQIBuncbtUhL8dk15Zp5gKdA8HL+cEtv8iRAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUZrxANJTHXsFjDLvLYPijZWAC4MUwHwYDVR0j
BBgwFoAUEikqjOQnbtPILnm6N296A2OgZxYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTY2MjQ2NS8wLzEyMjkyQThDRTQyNzZFRDNDODJFNzlCQTM3NkY3
QTAzNjNBMDY3MTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTIyOTJBOENFNDI3NkVEM0M4MkU3OUJBMzc2RjdBMDM2M0EwNjcxNi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE2NjI0NjUvMC8xMjI5MkE4Q0U0Mjc2
RUQzQzgyRTc5QkEzNzZGN0EwMzYzQTA2NzE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8f0VhPZae+G
+UJf3/mE2pFHr+iPISwo8PVvCffiyOXOH1GmCPcAhsUFJkpH8ppXtKFOO5aJNpm7
TfQ+LFO7bG80rIdAc6zwKd8R3oyD8aTqxmHRk0tucvB99oAT9/pc5tjqm7771PfZ
VK1LWowdN1FvqAcX9s//d6n6BGCEqe3MCZPmR7Fm6xlWgxCqIi8IACO0M4YXantI
+jHSILoFpVnYm2QIeFXEIgUPUllSDND5l1LiOU1Q7STNc5f37aTeGEvXKI7bs20O
0LQilGqihcecvPmN/3gZZggqRJdgBUhZq3bechwl1l+e8+lyYnIF8ncQ11HQfwob
MLoVR4SvqA==
-----END CERTIFICATE-----
Generated at Thu Mar 12 18:00:24 2026 by rpki-client