
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
File: F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft (raw, json)
Hash identifier: u8oKEP9txQAhACu/kVPZ0A6QkCbd/YOobgIXggAd7gs=
Subject key identifier: A9:25:F4:C2:9B:F4:02:83:0A:F6:8A:6A:31:E5:23:16:8F:7B:B8:B0
Authority key identifier: F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85
Certificate issuer: /CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485
Certificate serial: 41A0AE842BD25D6F2AC4BA010D069C34DC591A6D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
Manifest number: 64
Signing time: Sun 12 Apr 2026 16:24:16 +0000
Manifest this update: Sun 12 Apr 2026 16:19:16 +0000
Manifest next update: Mon 13 Apr 2026 20:05:16 +0000
Files and hashes: 1: F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl (hash: aaIVUNLYISu98k0frAe1srRhRMti23/LU7dPZVg2/QE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl
rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 20:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:a0:ae:84:2b:d2:5d:6f:2a:c4:ba:01:0d:06:9c:34:dc:59:1a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485
Validity
Not Before: Apr 12 16:19:16 2026 GMT
Not After : Apr 13 20:05:16 2026 GMT
Subject: CN=A925F4C29BF402830AF68A6A31E523168F7BB8B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:6f:40:ff:c2:3b:68:e9:2a:44:77:24:03:
69:b4:5b:52:3c:51:9d:61:40:0b:bf:51:16:d8:ed:
19:a1:82:07:cd:e1:35:39:07:d4:e2:6f:28:13:8c:
17:cd:73:ab:20:01:97:fb:c5:6a:6c:97:a2:7f:ff:
bd:a9:e4:91:d6:a2:ec:47:db:75:ea:70:87:20:89:
83:10:b9:70:96:7d:1e:a6:ed:f4:89:45:98:c7:7c:
fa:82:69:22:91:99:9c:a9:92:50:07:95:d9:d6:84:
55:d6:b5:db:b8:02:d1:d0:35:c9:80:64:3b:1a:d1:
58:8e:fb:d2:02:20:e3:e1:21:b8:3a:2a:83:58:c8:
98:a6:9b:66:15:e2:3a:23:d6:16:83:88:e1:0e:9d:
ed:b6:9e:f5:39:68:56:ed:58:10:a9:af:1b:3e:7a:
47:db:52:01:a2:99:64:d0:1a:f5:e2:77:d9:1e:61:
59:fb:58:f9:24:9d:2e:47:04:c5:a1:fa:ea:04:ae:
b8:e1:84:8b:59:96:58:ae:1f:b8:82:46:20:b9:b0:
9b:a6:97:ec:20:fa:19:1c:d0:fb:1a:d6:00:27:d0:
b5:d1:a8:71:e9:7e:e5:a8:b8:fe:a8:f7:7e:48:36:
8d:7a:ca:e3:79:03:c9:43:46:a0:dd:8a:87:ad:18:
d5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:25:F4:C2:9B:F4:02:83:0A:F6:8A:6A:31:E5:23:16:8F:7B:B8:B0
X509v3 Authority Key Identifier:
keyid:F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:db:f4:7d:d6:55:41:6c:a2:be:04:af:9f:e8:3e:a5:53:94:
12:91:d0:64:10:7b:7c:7d:62:3e:80:4b:0e:7c:3b:06:48:e9:
5e:01:e0:73:f1:0c:9c:2e:a5:f8:e0:03:e8:87:e3:ba:4e:8c:
3f:2f:d9:1e:3d:62:cf:1d:b1:ae:e5:f0:53:d6:25:fb:be:8e:
2c:20:74:fe:41:f4:17:d7:b2:e7:b3:8f:0d:66:a3:39:67:87:
7e:d4:db:43:4e:fc:58:b7:e8:df:54:48:96:b1:0c:49:61:41:
0f:6e:d9:67:20:34:e4:20:98:31:10:95:b7:95:81:ce:22:82:
1c:4b:e1:bf:ad:db:ae:e5:a5:3b:1f:1a:66:f5:ec:bf:3c:71:
20:a1:c9:24:88:2a:3e:79:65:51:04:ba:19:35:87:93:13:35:
4e:b1:0f:cc:85:d9:db:92:e9:c1:5e:84:7e:e8:dd:e1:b3:a5:
7b:52:03:e0:13:7d:ad:00:31:b1:66:04:82:3d:7f:8e:d8:60:
8d:71:1e:92:a6:29:5b:60:74:6d:77:d8:89:96:14:c9:fc:ad:
29:8c:02:3a:cc:0f:85:1a:69:86:3a:2c:f9:11:94:ba:8f:74:
34:d8:37:09:07:fc:8f:fd:ca:98:3b:08:bf:c3:4b:a3:98:f4:
17:c4:e2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 11:04:52 2026 by rpki-client