
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
File: F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft (raw, json)
Hash identifier: X1H5UBeA2YaPJ0NPcWrKQivioscggEyH+snO4XxPMq4=
Subject key identifier: 1D:68:41:1A:DF:B9:C8:7C:5F:32:76:67:4E:EC:13:DC:EB:D3:2A:B0
Authority key identifier: F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85
Certificate issuer: /CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485
Certificate serial: 64B833B72E4F6E2CAC857C022480B2913CDDDF17
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
Manifest number: 0130
Signing time: Wed 14 Oct 2026 13:04:09 +0000
Manifest this update: Wed 14 Oct 2026 12:59:09 +0000
Manifest next update: Sat 17 Oct 2026 13:20:09 +0000
Files and hashes: 1: F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl (hash: OR+4VOPwnkhjrNL4Nihc4S/uMzDI40yRxK9RB4orW3Q=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl
rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 12:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b8:33:b7:2e:4f:6e:2c:ac:85:7c:02:24:80:b2:91:3c:dd:df:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485
Validity
Not Before: Oct 14 12:59:09 2026 GMT
Not After : Oct 17 13:20:09 2026 GMT
Subject: CN=1D68411ADFB9C87C5F3276674EEC13DCEBD32AB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:3c:7f:fc:7b:84:0f:b2:1a:17:ea:55:dd:
7f:1a:84:a4:da:a9:1b:62:a1:92:05:b2:b5:b6:46:
12:8b:0b:2f:8d:43:a9:25:6d:93:ea:a5:88:02:b4:
e7:59:17:64:19:e6:88:b2:af:0b:0a:32:12:de:e4:
83:3b:60:84:6e:a7:15:6c:95:d2:3c:02:60:5d:7b:
25:d4:9b:52:02:b2:b6:15:31:f4:79:25:1c:5d:a0:
52:97:24:ab:b5:4e:87:e7:c5:86:d8:b6:03:06:85:
94:28:38:cd:c9:14:10:e4:ad:66:86:21:97:14:c5:
92:63:42:14:75:99:8f:df:e3:43:a2:57:43:9d:1c:
6d:1a:ba:cd:54:a0:2b:f6:4d:66:50:a5:ec:37:59:
05:1e:a6:65:0e:ca:2c:5b:c6:0a:0c:54:8a:99:3b:
c7:6a:18:d8:70:07:3c:2f:dd:ff:a9:c1:ed:92:b7:
7d:8c:0a:f5:44:4a:09:be:ff:c3:9d:8e:8c:db:c5:
9e:bc:b8:20:a6:ad:c7:21:20:04:80:f8:d6:57:6e:
b6:a1:fd:b3:3b:6d:f0:ba:c3:34:42:12:ac:35:92:
79:fe:88:30:92:16:30:d6:bd:10:ba:ed:1e:bc:9d:
ff:78:a0:b9:32:00:29:67:f5:4e:47:ea:1a:93:0b:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:68:41:1A:DF:B9:C8:7C:5F:32:76:67:4E:EC:13:DC:EB:D3:2A:B0
X509v3 Authority Key Identifier:
keyid:F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f9:4d:d6:c1:d0:65:ca:a9:38:e1:ca:be:34:53:0e:64:7f:
a8:5e:95:ad:46:1d:be:1b:5d:65:26:bc:35:e3:18:38:35:95:
05:72:cf:ce:4f:24:2c:53:8f:bd:a5:da:e9:59:a5:9f:c2:0d:
38:14:55:c0:fe:a6:5f:d2:c9:b2:f5:71:5d:eb:2f:ba:bd:5f:
12:de:09:5f:eb:d5:88:1b:62:c2:ee:de:15:59:88:d0:49:84:
3d:ca:59:0e:31:e9:71:41:77:f0:dc:43:6c:81:7f:17:39:63:
21:e4:5e:a7:ca:aa:f1:05:26:f9:4a:56:fb:49:fe:36:45:a9:
59:3f:c3:3b:95:4d:7a:fe:b8:b0:a3:ed:ac:d1:7a:be:59:87:
dc:be:8d:9f:53:b4:42:f0:6f:c1:53:59:a2:a0:65:e6:08:f3:
6f:e3:a0:72:45:90:06:14:01:35:6a:fb:7f:1c:c8:95:9f:4a:
a2:ea:b2:18:eb:91:b5:89:7a:b0:fb:7d:78:b7:da:40:5c:d4:
7d:31:ee:19:03:2d:3d:52:92:23:e2:65:8b:b1:d7:3a:3a:b4:
2b:b3:b6:b7:fe:66:4d:77:eb:7c:e3:75:82:0a:a8:6b:95:ac:
1b:6d:a3:09:bf:4e:5a:a5:a4:34:4c:97:f6:ed:5f:4d:34:ea:
b1:1a:f7:7c
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZLgzty5PbiyshXwCJICykTzd3xcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjBFMkI0NTZENENENzExMzIzMjYyMUVDQkY3OTJGNEE2
MkY5RjQ4NTAeFw0yNjEwMTQxMjU5MDlaFw0yNjEwMTcxMzIwMDlaMDMxMTAvBgNV
BAMTKDFENjg0MTFBREZCOUM4N0M1RjMyNzY2NzRFRUMxM0RDRUJEMzJBQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4rDx//HuED7IaF+pV3X8ahKTa
qRtioZIFsrW2RhKLCy+NQ6klbZPqpYgCtOdZF2QZ5oiyrwsKMhLe5IM7YIRupxVs
ldI8AmBdeyXUm1ICsrYVMfR5JRxdoFKXJKu1TofnxYbYtgMGhZQoOM3JFBDkrWaG
IZcUxZJjQhR1mY/f40OiV0OdHG0aus1UoCv2TWZQpew3WQUepmUOyixbxgoMVIqZ
O8dqGNhwBzwv3f+pwe2St32MCvVESgm+/8OdjozbxZ68uCCmrcchIASA+NZXbrah
/bM7bfC6wzRCEqw1knn+iDCSFjDWvRC67R68nf94oLkyACln9U5H6hqTC2eVAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUHWhBGt+5yHxfMnZnTuwT3OvTKrAwHwYDVR0j
BBgwFoAU8OK0VtTNcRMjJiHsv3kvSmL59IUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
ODcwMjkxMTM4ODc3ODQ5OC8wL0YwRTJCNDU2RDRDRDcxMTMyMzI2MjFFQ0JGNzky
RjRBNjJGOUY0ODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjBFMkI0NTZENENENzExMzIzMjYyMUVDQkY3OTJGNEE2MkY5RjQ4NS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3Nzg0OTgvMC9GMEUyQjQ1NkQ0Q0Q3
MTEzMjMyNjIxRUNCRjc5MkY0QTYyRjlGNDg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/lN1sHQZcqp
OOHKvjRTDmR/qF6VrUYdvhtdZSa8NeMYODWVBXLPzk8kLFOPvaXa6Vmln8INOBRV
wP6mX9LJsvVxXesvur1fEt4JX+vViBtiwu7eFVmI0EmEPcpZDjHpcUF38NxDbIF/
FzljIeRep8qq8QUm+UpW+0n+NkWpWT/DO5VNev64sKPtrNF6vlmH3L6Nn1O0QvBv
wVNZoqBl5gjzb+OgckWQBhQBNWr7fxzIlZ9KouqyGOuRtYl6sPt9eLfaQFzUfTHu
GQMtPVKSI+Jli7HXOjq0K7O2t/5mTXfrfON1ggqoa5WsG22jCb9OWqWkNEyX9u1f
TTTqsRr3fA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 20:30:34 2026 by rpki-client