
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft
File: 8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft (raw, json)
Hash identifier: 0+f47qF9MicdTtg0alF3zEisHzdnvLHo3BL5HLn0zMs=
Subject key identifier: 71:D8:E6:6F:4E:FC:1A:26:00:C4:86:21:97:B2:3E:0A:B3:69:A0:2F
Authority key identifier: 8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E
Certificate issuer: /CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E
Certificate serial: 3FF4E8BFB2068CFCA8D7B8558FC14D75CF0C8684
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft
Manifest number: C8
Signing time: Fri 28 Aug 2026 06:47:39 +0000
Manifest this update: Fri 28 Aug 2026 06:42:39 +0000
Manifest next update: Mon 31 Aug 2026 13:32:39 +0000
Files and hashes: 1: 8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl (hash: RoCFy3BeBjX/bwFZAgM7SSaJkrpg1FQ0ki7GFIVAB0c=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl
rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 13:32:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:f4:e8:bf:b2:06:8c:fc:a8:d7:b8:55:8f:c1:4d:75:cf:0c:86:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E
Validity
Not Before: Aug 28 06:42:39 2026 GMT
Not After : Aug 31 13:32:39 2026 GMT
Subject: CN=71D8E66F4EFC1A2600C4862197B23E0AB369A02F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:7d:41:06:4b:67:a6:b7:aa:5a:39:5a:9a:
67:e0:a6:44:20:62:37:d6:42:a3:78:c0:48:de:b3:
1a:99:2b:96:8c:26:58:64:f8:d8:d6:59:8a:6c:f3:
23:79:1f:83:f4:3b:6e:41:3d:4b:3f:f9:4c:cb:0a:
50:34:6e:30:4b:d4:58:13:60:80:8c:ec:a7:41:25:
76:01:dd:fd:2c:81:d9:21:4b:f7:09:05:97:43:69:
2d:5d:ed:94:fd:e8:16:d7:22:5a:49:b7:4b:32:5a:
8e:76:b7:58:5c:ae:c1:ba:27:79:04:af:ae:22:18:
82:42:a6:fd:7f:b7:b7:71:05:fc:16:d3:79:b2:db:
4e:6e:5a:66:2b:8e:06:c1:6f:76:46:b1:07:c9:04:
a6:6e:a3:5c:8d:0d:b6:84:d5:37:97:9d:39:43:5c:
a6:09:88:65:bd:a0:c5:a9:54:ab:8a:30:4a:f8:66:
e9:43:7d:b8:c9:b4:de:25:18:d9:65:74:ad:e5:f7:
c6:17:00:bb:d0:61:6a:34:2d:4a:aa:58:a7:bd:2c:
40:2e:1e:bf:7a:20:3e:9b:02:42:dc:53:5a:33:3b:
e6:1c:21:bd:29:55:87:6a:1d:a6:14:f1:5b:1d:06:
e3:36:0e:b3:4a:4e:74:91:7a:d9:19:7a:e6:45:31:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D8:E6:6F:4E:FC:1A:26:00:C4:86:21:97:B2:3E:0A:B3:69:A0:2F
X509v3 Authority Key Identifier:
keyid:8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:02:52:8c:b9:b1:7e:0a:2f:87:68:0b:52:d9:15:bb:9f:d2:
7a:62:fa:a4:f1:db:ca:da:a5:a3:c9:a7:f3:fc:f0:c6:71:9e:
26:47:79:30:8d:09:3c:d0:22:3f:9f:26:37:e0:ea:e6:02:1b:
c0:48:a1:17:af:bc:7a:a3:25:45:02:60:8d:bf:fc:6a:9c:6d:
61:70:74:e5:0f:6f:80:1e:ca:4e:2f:00:2e:20:c3:75:ed:23:
50:35:d9:52:07:45:12:0f:9b:4d:6e:48:fd:6f:b8:11:fa:d4:
cb:b9:c7:b2:2f:45:04:3b:ce:7c:af:7c:c2:36:49:82:b4:76:
eb:36:bb:a4:a3:ba:6f:cb:9f:10:13:0f:3f:9e:4b:ca:cc:66:
20:fb:02:48:04:11:d6:54:dc:c1:dc:76:e5:96:a3:41:36:ce:
a8:ea:31:89:3b:44:91:8c:e3:3d:6c:3c:b8:6c:a2:53:23:dd:
45:5b:e8:08:2d:d2:6d:ea:ae:2b:89:18:03:0a:5a:c0:37:f4:
32:fe:18:ba:f6:d7:72:94:37:aa:84:f3:1d:dc:d5:9b:b4:47:
70:b3:1f:21:09:86:4d:18:c3:45:50:a1:a9:03:ef:5f:db:08:
a6:09:d9:25:a4:5e:af:8d:68:5f:ad:6c:89:ae:a4:61:42:84:
89:49:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:24:05 2026 by rpki-client