
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft
File: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft (raw, json)
Hash identifier: ZrkO3/2oVTla+XlmGuNq4rmhDU0UoQ/4C7SIKIZrink=
Subject key identifier: A6:9B:29:5F:CB:F4:18:79:5A:C4:96:13:B3:CA:3A:E3:DE:10:B5:F9
Authority key identifier: 65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B
Certificate issuer: /CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B
Certificate serial: 7DADA5851781B091C3C99C78EF8F3985A8BEB9A2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft
Manifest number: 48
Signing time: Thu 11 Jun 2026 11:08:43 +0000
Manifest this update: Thu 11 Jun 2026 11:03:43 +0000
Manifest next update: Fri 12 Jun 2026 11:32:43 +0000
Files and hashes: 1: 65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl (hash: eErlctKkxv708NRGP1hYK5fHOHZlFQ7XSPL8lIhH1tc=)
2: 3130332e32352e36362e302f32332d3233203d3e2030.roa (hash: JMo6LH7KCuXdAXtrDjOm3O2HDvLmSMhk1dhzSjfl0Z4=)
3: 3130332e32352e36342e302f32332d3233203d3e2034383132.roa (hash: Nq6gNiMaaKFWixnw61ZZIDSmy1W/Glh2AAvq8ITBxjk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl
rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 11:32:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ad:a5:85:17:81:b0:91:c3:c9:9c:78:ef:8f:39:85:a8:be:b9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65339B7A6B7988AA6EF40EF864D58BFE051E018B
Validity
Not Before: Jun 11 11:03:43 2026 GMT
Not After : Jun 12 11:32:43 2026 GMT
Subject: CN=A69B295FCBF418795AC49613B3CA3AE3DE10B5F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:84:07:6e:08:7f:a4:49:be:4e:8b:bf:79:
44:b1:e7:ac:c1:50:11:95:59:72:d2:be:aa:74:a8:
61:fd:e6:ae:4d:89:ff:3c:d1:9d:92:db:6f:36:1e:
28:ab:69:85:fb:a7:6e:8c:e2:68:d5:7d:fa:01:da:
d2:38:36:10:b0:ae:e6:50:d9:4c:ca:b9:85:44:7b:
ae:a4:0d:ee:12:11:1d:81:bf:13:12:bc:db:b9:89:
f8:30:36:2b:ca:69:13:34:0a:eb:4d:68:ea:45:bd:
e7:60:7b:af:35:de:42:3b:fd:42:c8:de:b1:2f:eb:
76:7e:ad:86:e2:eb:fb:f0:fc:9e:5d:4f:23:69:32:
15:84:d7:1b:72:e9:14:42:2c:2e:df:9f:20:e4:a1:
ee:33:dd:81:4b:67:78:61:f5:95:e7:f8:2d:b6:0e:
c6:f5:25:06:96:83:6c:7f:2c:ee:db:ff:6f:17:b4:
e9:80:12:cc:82:43:8d:53:0e:02:0b:73:3f:ca:27:
02:04:49:87:7d:f0:fe:b1:89:c6:3f:f3:59:b8:4f:
ff:a4:a6:98:5f:9e:73:b8:8f:2f:1b:98:db:0b:30:
26:a6:fc:49:46:f6:95:47:0c:75:fe:3d:18:36:7f:
42:3d:8f:f5:cd:6b:b9:b8:c1:2b:49:65:48:e7:e8:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9B:29:5F:CB:F4:18:79:5A:C4:96:13:B3:CA:3A:E3:DE:10:B5:F9
X509v3 Authority Key Identifier:
keyid:65:33:9B:7A:6B:79:88:AA:6E:F4:0E:F8:64:D5:8B:FE:05:1E:01:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65339B7A6B7988AA6EF40EF864D58BFE051E018B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098791527330611202/0/65339B7A6B7988AA6EF40EF864D58BFE051E018B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:24:0a:88:a3:18:05:15:65:d5:9b:0f:c3:4d:e4:82:cf:70:
62:0b:da:86:55:1b:d8:38:91:0c:49:92:f4:95:5c:f0:e3:53:
77:c8:78:4f:56:58:32:6d:b0:ec:cb:1a:4a:32:b1:3e:a6:0b:
3a:77:1e:3e:7d:de:a2:38:9c:14:0b:c0:07:72:5d:20:a1:37:
92:af:36:4f:c1:1e:8b:ea:10:ef:8e:57:c5:bc:6d:c1:97:49:
97:a2:9b:aa:ad:ae:38:39:59:a8:8f:fb:17:9b:32:5e:e5:d2:
ff:9b:7d:d3:d9:60:ea:e3:1e:b5:8e:6e:2a:c0:47:8c:a4:91:
a3:8d:07:fb:3f:2c:64:b5:5e:43:21:c5:db:2f:92:e5:72:7f:
18:6f:29:41:8d:dd:a2:9b:e0:9e:98:5a:f0:91:5d:00:9a:7d:
af:3a:f3:7c:1a:10:7e:f3:fd:ae:5d:2a:c7:eb:b5:e9:d3:52:
5e:3a:3a:94:5a:e5:9c:0d:27:16:d9:77:eb:d9:c9:99:3c:79:
cd:19:9d:f0:f1:87:23:88:66:3d:68:4b:81:e0:30:9a:b6:1e:
94:e6:6e:9e:27:e3:33:c3:6a:10:08:dd:b9:57:01:cf:92:c2:
6a:b4:cd:1e:dd:99:10:6d:1e:49:00:15:7e:4b:04:29:16:00:
61:ac:9b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:16 2026 by rpki-client