
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
File: 3F0AED0297682970CEA1257B1985DB5901444FE7.mft (raw, json)
Hash identifier: ywCKhzKl0vwR7NM7L5ht7XTSbi3j6Vpu7UcH7Q8HILM=
Subject key identifier: 3F:DB:BD:36:CF:B6:71:63:70:C6:72:7C:CB:EC:E7:99:29:6A:A3:4D
Authority key identifier: 3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7
Certificate issuer: /CN=3F0AED0297682970CEA1257B1985DB5901444FE7
Certificate serial: 0860424457F44FE34BF759DA4614D5D7B1BA902C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
Manifest number: 5A
Signing time: Tue 14 Jul 2026 14:56:32 +0000
Manifest this update: Tue 14 Jul 2026 14:51:32 +0000
Manifest next update: Wed 15 Jul 2026 15:48:32 +0000
Files and hashes: 1: 3F0AED0297682970CEA1257B1985DB5901444FE7.crl (hash: cOuFzVTayJmI4uLfYQqIC8gNa7iytmeCP6LZpXzi+vc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl
rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:60:42:44:57:f4:4f:e3:4b:f7:59:da:46:14:d5:d7:b1:ba:90:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F0AED0297682970CEA1257B1985DB5901444FE7
Validity
Not Before: Jul 14 14:51:32 2026 GMT
Not After : Jul 15 15:48:32 2026 GMT
Subject: CN=3FDBBD36CFB6716370C6727CCBECE799296AA34D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:5d:36:37:f3:21:f4:21:b4:25:0e:cc:35:
aa:8e:73:49:21:97:70:de:d2:b9:18:0e:93:ea:9d:
57:bd:33:98:a0:d6:8d:7d:3d:a8:e3:d5:a9:a0:0a:
4c:ef:61:2c:94:bd:ae:26:7f:c6:3a:1e:fe:bb:2b:
69:42:87:be:95:ed:6f:a0:2e:f2:d8:1f:4d:a8:c3:
d2:25:6a:08:ab:e9:fc:93:27:85:d2:6e:01:71:ef:
6f:a0:d2:6e:0e:d6:fb:7b:3b:0b:53:cf:cb:03:4b:
98:bc:e9:4d:c5:e2:e9:d9:5c:ea:8c:f4:a6:66:af:
ed:28:94:89:fc:70:f7:52:fd:5f:8f:40:bd:fe:bc:
65:22:68:bc:a9:f7:9f:a6:07:82:bb:af:51:bd:cf:
6c:a3:ca:54:e9:75:f1:e2:11:a8:0e:81:eb:2e:fc:
71:37:01:cf:e4:c8:e0:04:fe:68:c7:d7:1c:93:97:
4d:a2:e5:3d:bf:8f:ff:5f:91:0e:2e:ab:c7:43:80:
8b:a3:6f:03:16:6e:00:63:b1:4e:b5:bb:8d:7d:dd:
1e:87:fa:ba:08:7d:5b:ab:57:99:c0:2d:dc:17:28:
54:7f:28:4a:8d:74:88:2e:fa:20:42:50:a6:f0:b9:
e8:bd:a5:14:e0:59:55:f8:53:71:f4:e8:db:05:f1:
32:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DB:BD:36:CF:B6:71:63:70:C6:72:7C:CB:EC:E7:99:29:6A:A3:4D
X509v3 Authority Key Identifier:
keyid:3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:da:12:80:d5:8e:19:ac:bb:7d:10:f2:76:c5:64:1e:eb:ab:
a6:33:6e:bd:6c:92:4b:6f:1f:2d:e6:59:50:70:e5:06:e6:05:
63:12:14:f4:02:15:a9:d5:76:ec:53:6b:8e:e2:56:64:f5:5d:
b3:ac:b8:47:75:6f:a7:a8:c6:1c:79:6d:2c:e8:67:47:fd:a7:
e2:3b:35:1f:52:d8:a1:8a:56:8d:8c:46:85:45:8e:bd:89:cd:
8b:00:b7:ce:ba:5f:da:a0:f8:a5:1a:6f:1d:90:cd:f2:b3:2d:
0b:f3:a5:35:58:43:40:ba:8f:10:97:32:87:4b:c6:ba:0c:1e:
20:0a:2a:0e:ce:e4:02:e1:b8:50:1f:8f:31:2c:85:ea:d6:fe:
18:49:82:14:7d:17:bb:46:0f:ad:03:a9:c3:b7:f8:bb:87:b4:
e9:5e:28:70:6b:98:a0:fb:13:8e:75:d6:42:33:cf:c2:e2:0a:
29:11:7a:b1:0b:bc:1d:a2:da:1e:7b:8c:9e:c5:1e:41:7c:16:
2e:6b:6f:fe:b7:18:a5:ad:cb:2e:75:8e:47:6f:9f:b6:7d:9f:
07:3a:93:48:c0:c9:3f:4f:ed:60:67:46:aa:21:2c:86:7a:c2:
d1:37:96:70:bb:a7:c8:29:d7:fe:d2:f1:b4:c9:8a:1c:6c:79:
10:db:67:e7
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUCGBCRFf0T+NL91naRhTV17G6kCwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YwQUVEMDI5NzY4Mjk3MENFQTEyNTdCMTk4NURCNTkw
MTQ0NEZFNzAeFw0yNjA3MTQxNDUxMzJaFw0yNjA3MTUxNTQ4MzJaMDMxMTAvBgNV
BAMTKDNGREJCRDM2Q0ZCNjcxNjM3MEM2NzI3Q0NCRUNFNzk5Mjk2QUEzNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl8l02N/Mh9CG0JQ7MNaqOc0kh
l3De0rkYDpPqnVe9M5ig1o19Pajj1amgCkzvYSyUva4mf8Y6Hv67K2lCh76V7W+g
LvLYH02ow9Ilagir6fyTJ4XSbgFx72+g0m4O1vt7OwtTz8sDS5i86U3F4unZXOqM
9KZmr+0olIn8cPdS/V+PQL3+vGUiaLyp95+mB4K7r1G9z2yjylTpdfHiEagOgesu
/HE3Ac/kyOAE/mjH1xyTl02i5T2/j/9fkQ4uq8dDgIujbwMWbgBjsU61u4193R6H
+roIfVurV5nALdwXKFR/KEqNdIgu+iBCUKbwuei9pRTgWVX4U3H06NsF8TJPAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUP9u9Ns+2cWNwxnJ8y+znmSlqo00wHwYDVR0j
BBgwFoAUPwrtApdoKXDOoSV7GYXbWQFET+cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTQyMDM1NjUxODE1MDE1OS8wLzNGMEFFRDAyOTc2ODI5NzBDRUExMjU3QjE5ODVE
QjU5MDE0NDRGRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvM0YwQUVEMDI5NzY4Mjk3MENFQTEyNTdCMTk4NURCNTkwMTQ0NEZFNy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDU0MjAzNTY1MTgxNTAxNTkvMC8zRjBBRUQwMjk3Njgy
OTcwQ0VBMTI1N0IxOTg1REI1OTAxNDQ0RkU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktoSgNWOGay7
fRDydsVkHuurpjNuvWySS28fLeZZUHDlBuYFYxIU9AIVqdV27FNrjuJWZPVds6y4
R3Vvp6jGHHltLOhnR/2n4js1H1LYoYpWjYxGhUWOvYnNiwC3zrpf2qD4pRpvHZDN
8rMtC/OlNVhDQLqPEJcyh0vGugweIAoqDs7kAuG4UB+PMSyF6tb+GEmCFH0Xu0YP
rQOpw7f4u4e06V4ocGuYoPsTjnXWQjPPwuIKKRF6sQu8HaLaHnuMnsUeQXwWLmtv
/rcYpa3LLnWOR2+ftn2fBzqTSMDJP0/tYGdGqiEshnrC0TeWcLunyCnX/tLxtMmK
HGx5ENtn5w==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:04:34 2026 by rpki-client