
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft
File: 951830FAEB53F8097C135F16292E2995BBCF3DC4.mft (raw, json)
Hash identifier: Vgm/1/yrYemYyqtbLkUqtW4GSGeeTQ/TC9O6fKIb9ng=
Subject key identifier: 0B:A4:B5:26:2E:A4:8C:37:82:02:BD:B5:5D:74:A8:62:E1:6E:81:47
Authority key identifier: 95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4
Certificate issuer: /CN=951830FAEB53F8097C135F16292E2995BBCF3DC4
Certificate serial: 1A2D57A5EE1BB27D5B90A1ED4930C4B60DADC5FC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft
Manifest number: C7
Signing time: Mon 12 Oct 2026 22:32:28 +0000
Manifest this update: Mon 12 Oct 2026 22:27:28 +0000
Manifest next update: Fri 16 Oct 2026 01:39:28 +0000
Files and hashes: 1: 951830FAEB53F8097C135F16292E2995BBCF3DC4.crl (hash: gdDiVe3CH8gYNQTn3+bbQfRmPgnvqzNtvGg8NInX1s4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl
rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 01:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:2d:57:a5:ee:1b:b2:7d:5b:90:a1:ed:49:30:c4:b6:0d:ad:c5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951830FAEB53F8097C135F16292E2995BBCF3DC4
Validity
Not Before: Oct 12 22:27:28 2026 GMT
Not After : Oct 16 01:39:28 2026 GMT
Subject: CN=0BA4B5262EA48C378202BDB55D74A862E16E8147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:70:41:a7:98:59:77:84:c4:85:26:e6:57:
8f:38:1a:d4:a7:a4:b1:c8:45:db:c5:91:56:29:4f:
27:12:c5:56:21:7d:fe:be:26:bf:05:55:33:69:08:
f5:9e:58:0c:43:db:74:28:43:3b:ac:13:4e:fc:e3:
f4:ee:ec:a1:0c:a0:4e:80:bd:c4:52:c5:5b:ca:cf:
00:14:33:1f:35:ed:16:7d:ab:92:5f:88:35:6f:f8:
69:fa:f0:1f:3f:4e:d8:50:48:b8:6c:96:d0:74:95:
56:60:4c:e0:c1:01:70:b5:bc:af:1d:98:cd:34:29:
9a:6b:bf:a4:6e:8a:ba:a5:a8:d5:c1:5b:90:e2:99:
90:8d:e7:49:ef:b0:97:37:46:ca:8a:8f:f3:19:92:
e7:e5:97:3a:68:97:f6:b8:30:64:d3:77:81:ba:5d:
d5:1e:3f:ef:a4:fb:f5:38:06:9a:ae:77:3a:94:d3:
6e:a3:56:84:e1:da:78:35:3b:0d:f5:89:42:55:dd:
9e:00:7e:56:dd:b3:51:9c:d2:be:f0:89:dd:7e:f2:
a9:69:4c:d3:19:fe:d8:49:06:89:d8:72:bf:3c:16:
5b:e9:0e:f4:8d:a4:1e:46:3b:17:61:a9:14:4d:bf:
63:52:42:21:eb:2e:fb:95:40:8e:42:ee:f7:b5:f6:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A4:B5:26:2E:A4:8C:37:82:02:BD:B5:5D:74:A8:62:E1:6E:81:47
X509v3 Authority Key Identifier:
keyid:95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b4:19:d5:87:84:38:ec:f0:1a:2b:05:7a:81:fb:01:79:b5:
34:3b:2c:10:27:62:33:b6:87:39:f2:91:be:98:08:d6:4a:fc:
e7:55:fc:ed:3d:12:b1:c8:11:b6:10:c2:45:c5:ed:0d:96:23:
04:16:99:4c:d8:a4:15:09:b2:c6:b4:07:12:22:d0:3b:55:34:
a3:f5:e0:fe:ac:32:a1:91:3d:fe:3a:e7:63:22:95:2c:55:14:
81:c4:1a:37:0f:14:c8:50:99:44:c8:8c:fe:a8:c1:71:49:43:
6d:e3:49:22:b8:ab:f7:d6:14:2d:85:5f:a2:e6:cc:c6:cc:8b:
b3:04:ce:34:fe:3d:8f:0e:5c:c7:0c:a8:3e:0a:8e:4e:d0:0e:
ac:82:1e:60:96:1e:1c:cb:63:ef:d6:c5:67:41:21:c9:a0:eb:
87:d1:60:d8:c8:8c:2e:92:94:9a:3c:bd:56:70:1e:d3:4a:cd:
46:50:96:4e:9f:7b:72:42:bf:8a:59:94:bc:85:d0:6f:d4:6f:
06:cb:5d:f5:ea:a8:3c:55:69:6b:90:78:e1:c9:70:eb:df:b0:
49:5b:8c:4a:ac:e4:6c:18:e8:d8:0c:8a:68:f7:f4:b8:cf:a7:
3c:a2:c3:28:be:d4:9d:09:b7:39:d8:14:c2:5e:c2:d3:62:71:
98:34:26:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:30:04 2026 by rpki-client