
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
File: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft (raw, json)
Hash identifier: sJ7vaQqeUIJc2LH7O0a/ATXh96tiuAvskAvb7Z2o5iY=
Subject key identifier: BD:92:68:A6:4D:4F:17:D9:19:93:62:10:EA:B5:35:5D:2F:A1:E9:A4
Authority key identifier: 8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A
Certificate issuer: /CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A
Certificate serial: 1C24C2C5715B97C6DF45808530F66877119DB04E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
Manifest number: 0D
Signing time: Sat 07 Mar 2026 00:48:22 +0000
Manifest this update: Sat 07 Mar 2026 00:43:22 +0000
Manifest next update: Sun 08 Mar 2026 00:51:22 +0000
Files and hashes: 1: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl (hash: dPtJXmHT4W3ry9Rwc0pJV1uFcZU1Xo/BFxh/rqYF/ME=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl
rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 00:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:24:c2:c5:71:5b:97:c6:df:45:80:85:30:f6:68:77:11:9d:b0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A
Validity
Not Before: Mar 7 00:43:22 2026 GMT
Not After : Mar 8 00:51:22 2026 GMT
Subject: CN=BD9268A64D4F17D919936210EAB5355D2FA1E9A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:f2:2b:91:67:15:c4:c8:cf:c1:f6:22:57:
17:cb:98:1f:65:88:2b:9e:59:db:a0:aa:75:6e:9e:
26:3d:60:67:f8:30:fc:ef:cc:dd:d4:c0:ff:14:e6:
6d:de:88:d8:d2:25:69:40:a6:63:e4:a4:b3:50:61:
ea:0f:d7:a1:48:81:28:79:24:1b:3b:3f:05:6c:f0:
10:39:d0:98:29:90:07:e4:c5:29:91:ea:97:c2:2b:
60:65:c2:7b:3d:80:20:a4:ff:9d:90:4b:d1:84:48:
24:9e:9f:83:7b:28:62:0d:19:10:4d:de:79:25:d0:
8c:96:6d:e3:88:7f:74:9a:64:28:a8:96:df:b2:63:
80:57:a9:c0:62:97:cd:e2:60:cd:98:27:f7:8c:d5:
30:c7:64:74:c2:e0:e1:5b:6b:6d:76:3f:fb:9a:91:
c7:60:97:31:c7:8b:18:e8:09:67:44:2b:56:cc:49:
b9:f3:5d:81:63:59:70:08:2e:18:83:97:70:40:a2:
fd:ec:26:af:70:6c:c5:97:86:ef:25:ee:af:07:94:
73:47:aa:fa:a1:b6:b3:c6:fa:8e:8a:0b:24:78:2b:
15:80:45:6d:b1:b9:3b:80:a4:0f:fd:bd:a9:7a:d7:
74:56:18:70:5b:93:c4:e2:10:b6:f0:84:9c:1d:c4:
f6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:92:68:A6:4D:4F:17:D9:19:93:62:10:EA:B5:35:5D:2F:A1:E9:A4
X509v3 Authority Key Identifier:
keyid:8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:47:c9:1b:66:f2:7c:0c:25:8a:0e:50:f8:08:dd:07:f5:6c:
97:40:d8:50:0d:c0:78:1e:17:a9:a3:d0:26:85:a0:89:a0:f3:
dc:4d:b9:90:fb:08:4b:81:71:f5:88:70:e3:d1:18:e6:1b:a8:
6c:fd:43:1c:59:0d:4d:43:45:a7:eb:13:3f:33:7e:92:43:41:
6e:37:7f:14:27:92:75:c1:c9:18:e3:fb:75:95:12:fa:e7:bb:
55:73:67:cd:0e:dd:a2:db:2e:62:35:af:18:40:64:c9:83:eb:
a0:01:dd:1d:09:1a:da:71:45:54:51:bd:78:ab:69:19:dc:d3:
30:99:fe:dc:af:da:67:e5:2d:4b:34:6e:de:df:49:72:b4:a6:
1e:bc:f0:d6:9d:db:ed:eb:03:95:9d:ae:b2:15:38:35:3b:f5:
38:11:d8:cf:0a:1f:69:3e:93:ea:5f:e6:0a:fa:68:75:a3:2c:
ff:ac:86:e3:ea:fc:85:7f:9a:d2:f5:1b:5d:a0:06:fc:eb:ef:
15:7d:6c:7d:d5:37:6b:aa:aa:dc:02:e7:a3:cf:3c:53:26:5f:
e1:89:ec:8a:29:24:8e:59:3f:1e:cf:82:b1:78:5d:22:7e:ee:
9a:ee:a3:b5:ad:c4:d8:45:2a:2f:6b:db:42:00:8d:84:b4:90:
f8:5a:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:43:56 2026 by rpki-client