
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
File: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft (raw, json)
Hash identifier: xwWUUnMEEpdtFwiou+WTBlZvyOWGt8NBsY+CXKR7xBA=
Subject key identifier: 2E:74:E9:C4:CB:C8:C8:CF:04:1D:E5:3A:9B:04:8D:21:EB:5B:0F:79
Authority key identifier: 8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A
Certificate issuer: /CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A
Certificate serial: 30F11E74CA41EAD4E2F6DDA27DC0407C431FC72C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
Manifest number: 86
Signing time: Fri 05 Jun 2026 20:46:26 +0000
Manifest this update: Fri 05 Jun 2026 20:41:26 +0000
Manifest next update: Sat 06 Jun 2026 21:19:26 +0000
Files and hashes: 1: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl (hash: nDfOzsGCOAt9pFB0xysbXJByxuB6n+lR1xYc/GyDtZo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl
rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 20:42:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f1:1e:74:ca:41:ea:d4:e2:f6:dd:a2:7d:c0:40:7c:43:1f:c7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BBDAF863FBD0953D9A56BC29707DEEFD460943A
Validity
Not Before: Jun 5 20:41:26 2026 GMT
Not After : Jun 6 21:19:26 2026 GMT
Subject: CN=2E74E9C4CBC8C8CF041DE53A9B048D21EB5B0F79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cd:04:e8:3e:cb:01:1a:32:a6:5f:45:47:62:
04:7e:16:3f:f5:d3:10:4d:3e:ca:83:93:a5:a5:9b:
b3:4e:63:3f:d2:81:33:20:1d:a5:0a:73:be:61:d9:
75:ff:59:82:2b:ec:dd:22:73:58:87:38:39:80:ec:
d4:33:53:9a:88:c7:62:a5:35:13:5f:dd:82:be:00:
cb:38:c5:16:e0:3d:8b:40:6d:c3:35:b4:08:a0:b8:
e8:9c:91:e0:77:ef:91:0a:3d:ae:9b:11:9c:4f:b0:
78:2f:d9:a4:82:ad:d6:57:03:67:c0:c4:57:ee:ef:
c4:b5:1d:64:f2:0d:ab:59:d1:2f:6c:a2:74:9e:e3:
4c:b8:71:af:1d:4a:9a:74:cc:f8:d6:d0:1c:06:80:
16:db:5c:ec:2d:d2:2c:3e:75:ed:e3:89:83:ba:70:
61:08:07:2c:9e:d8:cd:d9:40:65:bc:17:07:49:d8:
fd:78:fe:bf:4f:49:e8:40:42:a7:e3:bf:fb:d6:b3:
6e:ba:d2:7b:6a:bf:4f:e9:19:e5:64:e9:71:4d:e7:
c3:00:1f:2d:29:7e:89:a5:0d:a7:2b:93:cb:fc:b1:
36:56:a5:a8:c5:f1:73:44:94:76:8a:dc:5b:62:4a:
c8:a1:3b:a2:c9:8d:50:18:8c:32:01:d9:48:94:59:
f2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:74:E9:C4:CB:C8:C8:CF:04:1D:E5:3A:9B:04:8D:21:EB:5B:0F:79
X509v3 Authority Key Identifier:
keyid:8B:BD:AF:86:3F:BD:09:53:D9:A5:6B:C2:97:07:DE:EF:D4:60:94:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079239660892323843/1/8BBDAF863FBD0953D9A56BC29707DEEFD460943A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8d:82:7f:8c:16:6a:c6:bd:4b:6e:6f:9c:e4:33:3d:28:15:
74:91:38:97:df:cf:62:07:ab:f1:25:53:04:a6:fd:90:66:0d:
4b:64:de:15:ee:53:f8:6b:2b:e6:6f:2d:b8:3b:6c:cd:f9:66:
d3:e5:42:39:6e:f2:6f:0f:a5:a4:c3:1b:60:f4:3d:66:0d:6b:
1f:6f:1b:21:18:e1:73:19:bc:9a:f4:b0:2a:0c:b1:34:63:f3:
3a:5c:a3:e1:3f:1c:fb:da:b9:b7:8d:b9:d1:c4:c6:5c:33:49:
07:0c:c6:7d:51:4f:d4:f0:f9:a5:c5:72:60:49:36:00:e2:23:
af:51:9c:52:b9:49:3c:87:b9:7c:e8:1d:45:d1:c3:cd:94:79:
8f:54:f4:f7:e2:13:1f:58:fe:2b:34:19:ed:32:0b:79:3f:5a:
bb:8f:d3:70:f1:60:ee:97:73:15:6b:b1:4f:09:d5:14:aa:05:
ea:71:63:ce:72:48:60:98:8a:a5:f3:4d:74:6c:91:6e:72:dc:
19:98:e0:03:4d:80:95:d8:30:27:20:e2:ae:3a:31:4b:44:8e:
2b:f4:7e:c4:ab:cd:ac:76:dd:7c:4c:57:32:93:3d:36:f6:26:
9f:d8:06:9c:cc:4a:ec:0b:c2:c3:69:ea:7e:7d:33:d4:01:2b:
e7:4e:a8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:37:46 2026 by rpki-client