
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
File: 3F0AED0297682970CEA1257B1985DB5901444FE7.mft (raw, json)
Hash identifier: Xc4ohxMU7tpuumIJhNzd4q4gsKBTz9GosqZsxQS+2tY=
Subject key identifier: 4D:C9:C0:9B:68:81:CA:8F:1C:57:C3:46:EE:D3:61:F5:BC:E4:EB:CD
Authority key identifier: 3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7
Certificate issuer: /CN=3F0AED0297682970CEA1257B1985DB5901444FE7
Certificate serial: 74D42E172E8E1D49B1B4C914B519D9E7F85213EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
Manifest number: 96
Signing time: Fri 28 Aug 2026 06:48:17 +0000
Manifest this update: Fri 28 Aug 2026 06:43:17 +0000
Manifest next update: Mon 31 Aug 2026 08:48:17 +0000
Files and hashes: 1: 3F0AED0297682970CEA1257B1985DB5901444FE7.crl (hash: TRGJHMzRYHWF/+QTCpAKQj89guT4TozGysFdaR12Aek=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl
rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:d4:2e:17:2e:8e:1d:49:b1:b4:c9:14:b5:19:d9:e7:f8:52:13:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F0AED0297682970CEA1257B1985DB5901444FE7
Validity
Not Before: Aug 28 06:43:17 2026 GMT
Not After : Aug 31 08:48:17 2026 GMT
Subject: CN=4DC9C09B6881CA8F1C57C346EED361F5BCE4EBCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:84:bf:c1:bb:93:2c:4a:10:58:8e:e8:c5:
ab:be:a9:5b:4b:14:66:4d:17:13:61:2d:95:bd:a3:
85:37:7d:01:f5:2b:c0:1d:83:52:e6:73:9f:1b:8f:
b4:d4:79:23:f1:d9:4c:e4:b9:81:82:c1:8e:ef:3f:
37:38:c8:db:98:8e:f3:8e:12:13:77:c7:8b:9e:d9:
53:9c:28:f0:38:de:1d:19:ae:c6:b1:59:a4:f3:3b:
36:46:8e:e1:d5:2c:14:d1:95:8a:9e:62:38:31:d6:
cf:82:24:18:57:78:39:97:b7:af:55:58:13:82:56:
de:17:ad:3a:31:f4:f4:73:a9:1c:16:b4:82:91:06:
87:b3:24:60:e2:a5:d9:1b:a7:12:5c:ef:d9:c2:01:
7b:61:23:00:92:bf:97:23:52:9e:ee:d7:c7:22:02:
c0:37:11:9b:69:b6:05:42:cd:78:43:76:70:2d:c9:
15:98:69:0e:a1:b5:81:e7:8f:12:bb:30:0c:ad:7d:
70:b7:25:fa:fd:fe:b5:b7:18:ca:c2:c7:c6:cf:83:
5a:8b:86:ed:f4:34:da:f0:f2:41:17:08:d0:0e:13:
d2:f4:4e:41:5c:dd:e2:3b:bc:3e:98:2b:1c:cf:0b:
8c:53:4e:fd:b7:85:57:68:88:eb:5a:c4:50:f1:3a:
35:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C9:C0:9B:68:81:CA:8F:1C:57:C3:46:EE:D3:61:F5:BC:E4:EB:CD
X509v3 Authority Key Identifier:
keyid:3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:16:e9:da:e7:c9:9e:bd:e7:f7:7d:12:db:da:83:e3:74:06:
85:6e:f5:22:e6:27:e5:a9:4d:f7:da:9c:45:da:19:6f:db:1c:
53:da:6a:a9:2a:5a:2b:8b:0f:e5:35:79:b6:d4:0e:92:0d:6b:
64:20:d9:72:34:fe:22:ab:74:d9:96:7a:78:96:d2:a9:f0:e5:
ba:60:4c:34:76:4f:2c:23:85:89:2a:bc:2e:8b:33:af:15:a3:
96:7c:85:6c:93:32:cf:9d:b3:b8:4e:e7:c1:67:97:55:bb:91:
6f:9e:7b:ba:2a:e8:3a:56:f0:e7:8e:08:9f:af:bf:90:1f:cc:
ea:c4:ed:8e:ef:23:80:ba:4f:a6:e8:37:5e:41:37:29:ff:ff:
6f:74:c2:0c:ce:fd:51:28:e1:f9:38:b6:07:1a:be:e2:01:f6:
05:d0:35:d9:68:03:d7:81:b4:f9:31:f2:d9:50:62:3f:69:a4:
be:0a:f5:27:e6:43:39:22:2d:43:45:05:4e:2d:03:3f:61:d4:
16:b1:63:84:1b:79:6d:53:bb:f9:1d:71:04:68:ff:27:5d:0d:
92:c3:7a:f3:be:a8:a0:3b:8d:ab:ce:f2:d2:4a:a4:7c:ed:d7:
03:a3:a0:39:95:40:fb:39:c9:2b:e9:06:53:f2:00:ba:24:66:
18:1c:de:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:02:34 2026 by rpki-client