
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft
File: 8F4847B639E40E191DBFCE7F69985F8744142AF6.mft (raw, json)
Hash identifier: GCmWz7z3/TmsK3A3NoIlA3ygltmhTaGR5eSglxU7+do=
Subject key identifier: 5C:69:95:A5:50:01:24:87:75:DB:A3:5D:CD:78:EC:91:30:53:9B:B3
Authority key identifier: 8F:48:47:B6:39:E4:0E:19:1D:BF:CE:7F:69:98:5F:87:44:14:2A:F6
Certificate issuer: /CN=8F4847B639E40E191DBFCE7F69985F8744142AF6
Certificate serial: 34592CAA5C7B86152927F747E5608ADF033E5F3F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft
Manifest number: 64
Signing time: Tue 14 Jul 2026 12:06:13 +0000
Manifest this update: Tue 14 Jul 2026 12:01:13 +0000
Manifest next update: Wed 15 Jul 2026 15:24:13 +0000
Files and hashes: 1: 8F4847B639E40E191DBFCE7F69985F8744142AF6.crl (hash: yY7hi26e5Ohy3O/SCgB5auDdV9CxvYePg0oXf4HaZeY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.crl
rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:24:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:59:2c:aa:5c:7b:86:15:29:27:f7:47:e5:60:8a:df:03:3e:5f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F4847B639E40E191DBFCE7F69985F8744142AF6
Validity
Not Before: Jul 14 12:01:13 2026 GMT
Not After : Jul 15 15:24:13 2026 GMT
Subject: CN=5C6995A55001248775DBA35DCD78EC9130539BB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:49:17:12:ed:3d:b8:40:9f:fb:a8:70:83:
74:ba:58:20:18:ec:a5:56:0d:54:17:bd:88:49:c9:
f9:8d:1a:4e:ab:60:49:48:df:6f:c6:85:51:ba:4f:
f0:6d:01:25:07:ba:08:9c:98:f7:91:c9:7c:95:8a:
c8:20:7c:c7:89:02:5a:2c:c1:bc:dc:fe:c7:32:ae:
2c:66:63:c7:71:78:5e:ee:da:71:18:ac:70:db:58:
76:8a:56:cc:f1:45:a0:1f:09:6c:f8:e2:52:d3:51:
35:b4:8f:4c:63:6c:36:6c:07:72:73:37:06:6e:ac:
68:2a:38:8e:5b:5f:85:a1:9d:13:06:f3:8b:e6:c1:
aa:a4:12:01:0b:b8:2f:61:7a:a3:87:40:6d:92:e6:
e0:d6:d3:4d:0b:d3:95:7c:a9:2f:7e:d6:95:9f:b4:
b7:62:e9:14:df:3a:70:b4:7e:45:b1:ae:68:ad:91:
bc:f9:6c:8e:e4:46:92:b6:8f:4f:57:a0:9e:0b:73:
bd:08:4f:20:10:bd:c3:b4:0e:02:a3:31:e3:ef:3c:
a8:de:e6:ea:a9:8e:b3:28:1e:a6:f4:02:21:b8:5c:
af:04:f4:48:4e:b5:94:f7:3f:fb:2e:83:c4:d3:d4:
16:15:22:95:76:2f:d4:b1:d7:ee:d7:a4:5a:ca:d7:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:69:95:A5:50:01:24:87:75:DB:A3:5D:CD:78:EC:91:30:53:9B:B3
X509v3 Authority Key Identifier:
keyid:8F:48:47:B6:39:E4:0E:19:1D:BF:CE:7F:69:98:5F:87:44:14:2A:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1102067388175613959/1/8F4847B639E40E191DBFCE7F69985F8744142AF6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:67:ed:34:93:d5:53:db:03:dd:fc:a8:8e:eb:b4:fd:d8:17:
25:e5:2c:5c:27:70:b7:11:a9:b7:a3:0b:af:d8:16:39:c0:f3:
da:c7:6f:a9:30:14:ae:95:be:f5:d4:d7:69:b8:57:06:c9:ee:
81:dd:76:8d:b3:1f:23:ab:dd:53:97:8a:96:d6:1f:03:06:c2:
fc:a4:05:16:2a:d5:6a:ac:aa:11:e9:ef:f5:e5:20:60:67:df:
bf:49:21:39:e2:8f:b2:c0:cf:77:3d:63:5d:bf:45:86:30:86:
6e:a3:c6:92:37:9e:36:8c:f5:b9:0d:94:7a:a0:30:3a:09:cb:
c1:08:10:93:01:bb:40:32:b1:fa:0b:4d:d8:16:10:12:52:eb:
eb:82:b1:e1:07:c7:6e:b9:64:eb:5c:d4:69:6e:ef:aa:f6:19:
6e:ba:97:1a:f3:35:2c:dd:18:b4:2b:d1:12:10:0c:53:f8:d3:
6b:07:06:4f:14:d0:8a:85:b7:6f:b5:51:bc:53:a8:71:bd:0b:
fe:80:02:f3:f9:7d:de:25:d3:8f:9e:45:2c:be:cd:b0:4e:c9:
8c:fb:53:dd:3c:a8:92:e3:88:09:2f:b1:c0:b1:86:fa:b7:3e:
09:0f:04:7c:2e:41:ca:bf:bd:8a:ad:c4:b5:d1:1e:b9:23:81:
bf:27:01:38
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUNFksqlx7hhUpJ/dH5WCK3wM+Xz8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY0ODQ3QjYzOUU0MEUxOTFEQkZDRTdGNjk5ODVGODc0
NDE0MkFGNjAeFw0yNjA3MTQxMjAxMTNaFw0yNjA3MTUxNTI0MTNaMDMxMTAvBgNV
BAMTKDVDNjk5NUE1NTAwMTI0ODc3NURCQTM1RENENzhFQzkxMzA1MzlCQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc5EkXEu09uECf+6hwg3S6WCAY
7KVWDVQXvYhJyfmNGk6rYElI32/GhVG6T/BtASUHugicmPeRyXyVisggfMeJAlos
wbzc/scyrixmY8dxeF7u2nEYrHDbWHaKVszxRaAfCWz44lLTUTW0j0xjbDZsB3Jz
NwZurGgqOI5bX4WhnRMG84vmwaqkEgELuC9heqOHQG2S5uDW000L05V8qS9+1pWf
tLdi6RTfOnC0fkWxrmitkbz5bI7kRpK2j09XoJ4Lc70ITyAQvcO0DgKjMePvPKje
5uqpjrMoHqb0AiG4XK8E9EhOtZT3P/sug8TT1BYVIpV2L9Sx1+7XpFrK182XAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUXGmVpVABJId126NdzXjskTBTm7MwHwYDVR0j
BBgwFoAUj0hHtjnkDhkdv85/aZhfh0QUKvYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MjA2NzM4ODE3NTYxMzk1OS8xLzhGNDg0N0I2MzlFNDBFMTkxREJGQ0U3RjY5OTg1
Rjg3NDQxNDJBRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOEY0ODQ3QjYzOUU0MEUxOTFEQkZDRTdGNjk5ODVGODc0NDE0MkFGNi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDIwNjczODgxNzU2MTM5NTkvMS84RjQ4NDdCNjM5RTQw
RTE5MURCRkNFN0Y2OTk4NUY4NzQ0MTQyQUY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGftNJPVU9sD
3fyojuu0/dgXJeUsXCdwtxGpt6MLr9gWOcDz2sdvqTAUrpW+9dTXabhXBsnugd12
jbMfI6vdU5eKltYfAwbC/KQFFirVaqyqEenv9eUgYGffv0khOeKPssDPdz1jXb9F
hjCGbqPGkjeeNoz1uQ2UeqAwOgnLwQgQkwG7QDKx+gtN2BYQElLr64Kx4QfHbrlk
61zUaW7vqvYZbrqXGvM1LN0YtCvREhAMU/jTawcGTxTQioW3b7VRvFOocb0L/oAC
8/l93iXTj55FLL7NsE7JjPtT3TyokuOICS+xwLGG+rc+CQ8EfC5Byr+9iq3EtdEe
uSOBvycBOA==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:51 2026 by rpki-client