
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft
File: 0503C0DCF2359A63935CA42978F7E95CF29425AD.mft (raw, json)
Hash identifier: bdTXljknw8EOm1rK/lTwg83+ZBSvH54cnR2Jyl6aAdE=
Subject key identifier: 79:76:BE:7C:19:13:15:1F:D6:2A:09:00:0E:76:95:7E:B5:63:D6:9B
Authority key identifier: 05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD
Certificate issuer: /CN=0503C0DCF2359A63935CA42978F7E95CF29425AD
Certificate serial: 6B596D0A6ABC98D9BBF198579C98915351239055
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft
Manifest number: BE
Signing time: Fri 04 Sep 2026 11:50:27 +0000
Manifest this update: Fri 04 Sep 2026 11:45:27 +0000
Manifest next update: Mon 07 Sep 2026 18:44:27 +0000
Files and hashes: 1: 0503C0DCF2359A63935CA42978F7E95CF29425AD.crl (hash: zKd/A+cMdWGK0qwN95PE56NcTB0m1A2ICvp2PlQa+lM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl
rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 10:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:59:6d:0a:6a:bc:98:d9:bb:f1:98:57:9c:98:91:53:51:23:90:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0503C0DCF2359A63935CA42978F7E95CF29425AD
Validity
Not Before: Sep 4 11:45:27 2026 GMT
Not After : Sep 7 18:44:27 2026 GMT
Subject: CN=7976BE7C1913151FD62A09000E76957EB563D69B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:ac:58:d7:be:1c:56:24:1b:b1:d0:8e:78:
86:a8:af:f1:cb:64:ae:e7:6c:96:dd:c4:ba:2d:15:
8a:b5:03:94:89:ca:27:7e:de:76:1e:5a:e1:eb:37:
ca:ed:59:4f:73:bf:a5:77:e8:23:12:28:80:86:c6:
dc:f4:36:35:c5:e1:6d:e0:4c:23:28:12:a9:55:da:
6f:50:e2:60:fb:e2:27:1b:f4:02:52:f3:d1:3f:e4:
35:fb:b5:d5:50:fc:63:2d:62:ee:25:80:d0:1c:98:
41:52:e9:33:e9:9d:74:56:fb:5c:54:ee:66:02:36:
38:55:bc:f6:77:30:c7:c6:78:c9:cd:3e:e3:0b:c1:
b2:4f:ae:d0:0f:6c:77:ab:6e:b0:57:52:b4:24:91:
7a:62:be:cc:10:04:f2:67:5a:cf:ac:07:fa:37:b0:
ff:3e:53:2e:70:a6:f0:7f:df:c6:d4:1e:67:b5:b1:
f1:c1:8a:fb:5b:4a:5b:7c:68:f8:8c:d9:b5:a5:f5:
d4:62:61:a3:9b:64:6c:e1:5e:38:67:6d:fd:2b:5c:
ab:2b:34:b0:21:cf:a2:9f:08:d3:f9:7f:1f:34:57:
c4:98:2b:fb:88:74:a0:92:74:11:21:b2:9f:c3:50:
a6:c8:eb:52:0f:c6:0d:69:b8:7f:e4:9f:31:9d:73:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:76:BE:7C:19:13:15:1F:D6:2A:09:00:0E:76:95:7E:B5:63:D6:9B
X509v3 Authority Key Identifier:
keyid:05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:89:a0:74:13:00:ef:a8:6a:68:f5:7a:19:a3:b7:c3:0b:11:
66:9a:38:7b:3e:7b:d1:1f:56:fc:01:c2:48:79:b6:04:17:4c:
d6:fa:7a:57:29:65:4b:a4:87:2f:de:59:26:12:7b:1e:2d:40:
c5:97:2b:8a:70:2f:da:c4:08:b3:f5:1b:f8:24:79:70:f5:b3:
61:66:c5:5e:ec:80:85:2e:97:ae:cc:fc:5f:c3:5f:8e:98:08:
5b:47:56:56:27:10:a5:62:40:29:78:4f:3c:de:0c:4c:b9:0f:
1c:b2:02:11:a8:12:69:74:94:42:5b:ed:fe:77:f7:8c:3c:b0:
7e:49:04:16:1c:11:2c:9d:a2:96:27:10:0a:e1:ff:ad:b7:6c:
a5:33:8b:00:09:c9:f5:31:c7:88:c5:e4:a7:b9:29:54:ec:21:
56:b4:23:62:3e:fc:70:42:16:87:83:51:f3:41:e7:36:cc:ee:
a4:bf:57:04:cc:b2:e7:d2:1e:02:7b:e9:68:4b:fc:e7:2b:d4:
9c:e9:73:55:16:0e:a3:37:b2:8e:12:d9:ff:f8:fe:3a:f5:56:
6e:9a:35:a3:23:59:cb:55:8a:fe:bd:d2:5b:1d:09:03:fe:9e:
15:61:99:51:e9:bf:2a:e8:1f:de:32:37:21:a0:9e:36:ca:07:
63:c6:a7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:34:23 2026 by rpki-client