
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft
File: FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft (raw, json)
Hash identifier: AGPlWvXQqARvWj+9BLkOJTWawzqiAUZjjBstFU7boyg=
Subject key identifier: 4A:03:F9:A7:1A:56:50:58:34:39:D4:6C:D6:EF:53:FB:6A:F4:4D:3A
Authority key identifier: FA:D0:AD:5C:C5:8F:B4:B3:27:15:69:A1:6C:80:5A:53:AB:4A:27:0D
Certificate issuer: /CN=FAD0AD5CC58FB4B3271569A16C805A53AB4A270D
Certificate serial: 141A63B96F4ADADDB2E21DF1905CD868BF9760BD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft
Manifest number: B7
Signing time: Fri 28 Aug 2026 06:47:46 +0000
Manifest this update: Fri 28 Aug 2026 06:42:46 +0000
Manifest next update: Mon 31 Aug 2026 08:58:46 +0000
Files and hashes: 1: FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl (hash: LbwtWn2qK2I5viZq4CDb0O2lP/k5YLRKO/QYQ2+eA1A=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 08:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1a:63:b9:6f:4a:da:dd:b2:e2:1d:f1:90:5c:d8:68:bf:97:60:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAD0AD5CC58FB4B3271569A16C805A53AB4A270D
Validity
Not Before: Aug 28 06:42:46 2026 GMT
Not After : Aug 31 08:58:46 2026 GMT
Subject: CN=4A03F9A71A5650583439D46CD6EF53FB6AF44D3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:5f:b3:9d:eb:d1:db:5d:e3:b4:40:17:56:
28:1c:1d:21:32:9d:a8:8e:8d:0b:f8:23:2b:af:fe:
91:9b:19:f2:41:81:96:d7:ac:07:92:b8:30:32:65:
db:88:b2:86:84:19:aa:ca:cf:be:01:8d:50:5d:e1:
f3:26:79:9a:30:fd:70:4e:d8:88:bb:cf:10:cc:ff:
c4:9d:5b:b2:c6:ae:cf:d2:fa:e7:b2:35:fc:29:2e:
c0:ba:c5:c3:92:d8:00:8d:94:e4:15:ef:96:5c:0f:
ce:34:ad:36:eb:a7:38:d7:ac:70:2d:f9:81:bc:0f:
6d:39:f1:38:a4:2a:7a:97:9d:2e:6b:1a:75:27:40:
19:dd:30:9b:bb:81:ee:78:ec:87:45:1c:f0:c4:fa:
86:75:ae:19:7f:05:17:45:af:7b:f4:e8:e3:75:f1:
a4:b1:76:53:2b:c6:25:6e:99:70:16:94:04:5a:a5:
07:a8:40:8c:d5:0e:5b:61:76:42:c1:31:10:6a:5d:
ff:95:57:ea:87:1b:cc:1f:7c:89:c8:5f:81:0d:37:
e7:12:42:16:2e:2c:ea:f3:cb:dd:19:7e:17:48:0b:
4d:8f:5f:71:2f:da:0e:82:3c:9d:d4:68:ab:82:e7:
d0:41:18:dc:26:36:0b:79:aa:86:87:df:fd:b9:ac:
1a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:03:F9:A7:1A:56:50:58:34:39:D4:6C:D6:EF:53:FB:6A:F4:4D:3A
X509v3 Authority Key Identifier:
keyid:FA:D0:AD:5C:C5:8F:B4:B3:27:15:69:A1:6C:80:5A:53:AB:4A:27:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096761453970456578/0/FAD0AD5CC58FB4B3271569A16C805A53AB4A270D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e0:cb:07:1a:aa:92:d6:4a:69:20:ac:77:fe:85:1d:01:04:
14:8c:83:7a:f6:48:af:ab:16:c2:aa:96:b2:f0:b2:bd:85:7d:
ef:0b:db:e0:c4:52:f2:4a:9c:3f:2a:09:d9:af:13:5e:39:ea:
b6:53:6c:26:fc:71:e5:71:b3:01:01:d6:a7:38:76:82:18:07:
88:90:01:e8:46:ff:3e:9c:64:56:e3:a7:d8:ba:3e:54:0e:0e:
3c:52:95:93:b3:5c:ad:92:30:de:2c:d3:2a:ff:d6:e0:f7:82:
8e:4c:98:32:93:8c:7a:65:79:d7:59:12:85:3b:00:8e:a7:e7:
6c:a1:41:0c:a9:cb:44:2b:4e:b4:96:bf:18:6d:c8:b7:45:b3:
8b:f1:b5:b7:48:06:56:de:35:82:a7:10:94:24:de:72:10:52:
6e:76:6d:90:60:c9:4b:2c:be:57:8b:0d:bc:f1:86:cf:79:0b:
70:0b:4f:81:61:d3:5c:ab:93:47:f2:fe:16:2f:9d:39:13:6c:
d3:e2:df:68:85:43:96:b5:52:7c:a5:ef:75:02:5d:f1:11:e5:
82:e5:c1:cc:9c:68:53:f3:4a:18:c9:7f:ed:cb:02:6d:64:00:
a7:3a:36:2d:ac:d4:37:ee:1e:0f:86:c9:cb:6c:af:9d:6e:08:
04:fa:94:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:23:11 2026 by rpki-client