
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
File: 12292A8CE4276ED3C82E79BA376F7A0363A06716.mft (raw, json)
Hash identifier: L2XlGYdFU7STSq4Q8U599IzBlrsR7UxwNEtg69LbD2s=
Subject key identifier: F2:08:9E:42:A3:CC:56:B7:35:60:17:B7:14:74:94:1E:E8:7B:44:B1
Authority key identifier: 12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16
Certificate issuer: /CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
Certificate serial: 5BDBC563A601E6A72F4DFDEB86E1B257F98C3D98
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
Manifest number: E9
Signing time: Mon 13 Jul 2026 05:27:55 +0000
Manifest this update: Mon 13 Jul 2026 05:22:55 +0000
Manifest next update: Tue 14 Jul 2026 06:18:55 +0000
Files and hashes: 1: 12292A8CE4276ED3C82E79BA376F7A0363A06716.crl (hash: STMuL1GwfNdfDDfyT08asnVQXWkUL/0+ni7Pq+JRwD8=)
2: 3134342e37392e3131392e302f32342d3234203d3e20313335353432.roa (hash: zBALkojrGEY7SR5/7+fqt3Odg1/G/Zmmn1B3936v+KM=)
3: 3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa (hash: POleG0l4wno//ZX5b+0oZBB9yM8f+wy3+HMPXea5rYs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 03:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:db:c5:63:a6:01:e6:a7:2f:4d:fd:eb:86:e1:b2:57:f9:8c:3d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
Validity
Not Before: Jul 13 05:22:55 2026 GMT
Not After : Jul 14 06:18:55 2026 GMT
Subject: CN=F2089E42A3CC56B7356017B71474941EE87B44B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:e2:0a:bb:fc:bb:b3:4c:22:0c:fb:01:8e:
e4:89:be:f0:87:35:bd:62:9f:2a:73:8c:15:5f:85:
26:76:48:37:b0:cc:33:5b:16:05:fc:1f:73:58:4c:
ee:9e:c6:26:10:a9:84:be:c0:2f:a3:ff:34:a4:2d:
40:b8:11:e7:c5:84:f7:02:fc:8e:92:58:74:b9:26:
40:d9:cd:62:a4:d4:3e:b1:33:c8:fa:be:8b:13:d4:
59:8d:ac:55:e4:b9:c4:8e:06:64:a8:fa:a5:47:4d:
15:3f:e6:21:1f:bb:97:ec:5c:88:60:15:6e:99:cc:
75:97:99:3a:87:3d:09:f4:5a:06:0c:66:77:96:cd:
bf:46:1e:07:2a:9d:c2:13:cb:61:45:df:44:4d:55:
f4:b2:82:55:5a:3e:14:05:7e:04:b8:4a:7b:89:05:
c7:8c:ef:f9:83:0e:03:2e:8b:3a:e3:0b:22:b9:a3:
d7:41:a3:6f:04:5b:7b:70:48:92:68:8d:d2:03:7f:
73:7f:1b:96:1c:33:3f:da:e3:38:cd:8f:64:dd:0b:
0e:c3:0a:ec:db:ce:ef:86:ac:49:53:56:35:59:d2:
3a:e4:2b:cc:66:95:55:2b:29:5d:14:cd:09:c0:ff:
b8:5e:ee:d9:98:f4:7c:54:0d:c5:66:cc:16:26:87:
ee:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:08:9E:42:A3:CC:56:B7:35:60:17:B7:14:74:94:1E:E8:7B:44:B1
X509v3 Authority Key Identifier:
keyid:12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c4:0a:d7:7b:d8:46:9b:3a:34:d8:54:61:74:4e:89:92:f5:
00:0c:c9:5e:ab:dd:e1:40:03:eb:7b:bd:ff:90:1a:53:7d:28:
4d:b1:73:f1:b7:0a:e7:e9:20:cc:e8:64:5a:78:0e:b9:a6:14:
12:e1:d6:36:ba:88:5d:47:f8:7b:e5:79:ef:fb:db:bc:e2:2a:
0e:af:de:1f:2d:ea:2a:f2:70:ab:71:03:0f:14:97:32:5f:aa:
64:62:de:53:13:71:60:1e:bd:cd:94:6c:5a:6f:4e:ac:17:a5:
a3:c2:57:91:53:8a:cc:81:5c:50:85:1d:35:39:54:4e:dd:2b:
b3:42:47:f3:ff:8d:84:2e:20:01:3b:c6:95:d4:1c:8e:70:ec:
c3:10:68:f2:44:ae:c7:fa:8b:62:a7:c5:8e:d7:dc:f7:63:d6:
e2:c8:77:34:38:47:5f:35:db:d9:e5:24:9a:e7:49:f8:7a:e7:
11:22:21:25:ec:e4:06:36:48:38:94:f7:06:61:e0:04:31:18:
1d:ce:24:5b:60:b2:d0:9a:7a:41:be:70:86:f0:cb:52:a6:56:
22:82:bf:c8:c8:d2:89:9d:62:4a:81:c8:d2:f4:6e:a2:41:14:
7b:39:b6:e1:92:92:56:c6:ee:ae:b7:e9:8a:cd:a4:07:c4:47:
67:fe:ab:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 09:47:38 2026 by rpki-client