
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft
File: A0234EE8675FA5228CCCF9670EE151D623AC6958.mft (raw, json)
Hash identifier: ivXJOe23NDjyqBNwPf0vO6pgfdP7ByLyGO2r+XRjnPk=
Subject key identifier: F8:13:28:B0:79:7E:EC:04:E9:7B:FC:D8:EF:67:E8:22:AB:EF:69:90
Authority key identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58
Certificate issuer: /CN=A0234EE8675FA5228CCCF9670EE151D623AC6958
Certificate serial: 3827CC72741DEA074DFC46AF955244A9967E130F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft
Manifest number: 011C
Signing time: Fri 14 Aug 2026 23:57:34 +0000
Manifest this update: Fri 14 Aug 2026 23:52:34 +0000
Manifest next update: Sun 16 Aug 2026 00:24:34 +0000
Files and hashes: 1: A0234EE8675FA5228CCCF9670EE151D623AC6958.crl (hash: d3U4rqFBVr5YoPt4UvHA+wtJcWyCzMQwBhl/Vf0WWJI=)
2: 323430313a353138303a3a2f33322d3634203d3e203331323136.roa (hash: hByfJEGkoLosWu98+UyPe1GFHZyB6Lb+I72uzppAPPE=)
3: 323430313a353138303a3a2f33322d3634203d3e2034343535.roa (hash: 16+K4Nibi1YK4aeI83ZsVLtABxPWdfuSNwCCv7kTTg0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 19:57:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:27:cc:72:74:1d:ea:07:4d:fc:46:af:95:52:44:a9:96:7e:13:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0234EE8675FA5228CCCF9670EE151D623AC6958
Validity
Not Before: Aug 14 23:52:34 2026 GMT
Not After : Aug 16 00:24:34 2026 GMT
Subject: CN=F81328B0797EEC04E97BFCD8EF67E822ABEF6990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:3f:30:1d:dc:b4:d8:fb:7f:f9:d0:cb:58:
fd:dc:a1:c1:2b:86:3e:d1:79:99:b7:56:3f:0b:83:
6c:31:0d:00:3d:56:f5:95:37:8c:9f:cc:cd:ad:d0:
e7:c5:cf:67:8a:67:11:6a:1d:fb:43:0f:85:71:9c:
e4:51:c1:b4:14:a5:96:4a:0b:0a:67:24:4d:7f:22:
75:c9:04:e5:3a:fd:48:a7:67:69:a7:1c:52:b2:3c:
0b:59:9b:d6:39:4e:cb:82:4d:58:bd:be:1d:5f:9a:
8f:7c:3b:73:6d:f4:2e:94:0d:c3:da:b3:e7:cc:8d:
dd:7a:95:40:cc:24:7b:db:5a:0d:30:55:8e:c7:15:
44:82:44:39:23:3b:fc:84:ea:35:73:29:6b:ac:03:
ad:d1:50:14:c4:d3:f9:91:87:99:c2:c3:9b:05:72:
27:de:88:d4:9f:07:be:73:43:3d:77:34:33:1f:ad:
3c:6a:00:72:49:99:3a:00:a9:32:38:f0:6c:f1:ca:
6e:b9:71:45:57:a1:34:3b:67:9c:b1:5e:63:54:93:
85:99:ff:9c:7b:5e:47:ee:de:c6:e1:47:7e:5a:64:
58:58:16:2b:52:2e:00:6b:80:a6:15:32:2e:a4:f3:
a2:50:04:32:3a:0d:ba:09:1b:9f:66:65:ab:f2:09:
fb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:13:28:B0:79:7E:EC:04:E9:7B:FC:D8:EF:67:E8:22:AB:EF:69:90
X509v3 Authority Key Identifier:
keyid:A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a2:16:af:ec:0c:d5:28:33:77:ef:a8:36:e1:07:02:09:e5:
d3:ea:5f:47:9d:9c:0d:99:9a:72:c4:fe:fc:bf:09:8d:5f:5c:
f0:58:b8:94:60:17:49:52:da:5f:b2:43:63:d3:bd:9f:1a:d4:
7b:cf:38:b3:ce:1a:27:e4:c5:ff:09:a4:db:74:0f:7f:c3:20:
5c:fa:03:cc:b9:d7:d1:c9:ef:b1:a0:3e:aa:c5:5b:42:af:aa:
1f:51:ed:69:ed:87:1a:92:1a:e4:e0:55:81:8e:1c:8f:73:00:
c1:ca:df:e3:78:04:b0:ac:2f:97:45:ae:dd:53:e2:ce:16:c8:
ac:42:b8:0d:7b:b1:c3:81:49:2c:80:97:33:87:d5:c7:ec:11:
52:9f:0f:a3:90:3b:bc:fd:2f:f9:ca:3d:dd:4f:ec:e7:51:a6:
14:e4:c4:98:8e:f2:1d:9e:06:14:c1:53:f4:6b:62:33:ef:da:
a3:75:fc:35:25:22:11:57:38:2f:79:5f:d5:38:ae:42:00:b1:
7d:93:d1:f1:b8:01:05:24:d9:44:04:5b:ad:33:f1:54:e6:b5:
d6:66:c0:4e:1c:26:b4:e2:b7:ad:59:2e:3b:59:4a:b7:e8:18:
12:92:9c:0f:18:bb:df:fc:f1:a6:bb:3a:17:82:cb:95:9e:fd:
9b:78:5b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:24:10 2026 by rpki-client