
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
File: 3F0AED0297682970CEA1257B1985DB5901444FE7.mft (raw, json)
Hash identifier: h88bP3CWfLsKlGmBo1RmpL1H9bIcP4qO0AjcY2AgxbU=
Subject key identifier: B5:EE:16:E7:AF:FC:EB:9E:92:47:56:0A:7C:B0:85:73:0D:6A:E3:C1
Authority key identifier: 3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7
Certificate issuer: /CN=3F0AED0297682970CEA1257B1985DB5901444FE7
Certificate serial: 235E285BE07EB45BD49CA40E6D1FA0A1101627D4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
Manifest number: AA
Signing time: Mon 12 Oct 2026 03:41:26 +0000
Manifest this update: Mon 12 Oct 2026 03:36:26 +0000
Manifest next update: Thu 15 Oct 2026 04:58:26 +0000
Files and hashes: 1: 3F0AED0297682970CEA1257B1985DB5901444FE7.crl (hash: 1GVtLNgZ1QoOIgzID1hfIw53acGKDR+LjUdlXw2rong=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl
rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:5e:28:5b:e0:7e:b4:5b:d4:9c:a4:0e:6d:1f:a0:a1:10:16:27:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F0AED0297682970CEA1257B1985DB5901444FE7
Validity
Not Before: Oct 12 03:36:26 2026 GMT
Not After : Oct 15 04:58:26 2026 GMT
Subject: CN=B5EE16E7AFFCEB9E9247560A7CB085730D6AE3C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:fd:6b:04:5d:45:47:18:b9:5c:a0:5e:68:
2b:4d:79:8f:3d:04:bb:e5:aa:fd:79:aa:cf:61:69:
b0:86:ae:59:6d:5a:64:72:39:88:6c:3f:40:33:bc:
40:a6:28:02:11:6b:88:0b:82:55:62:d4:47:47:8c:
91:08:bb:3c:35:47:c4:e9:73:ce:0b:51:53:d5:b0:
9e:e2:9c:4d:28:d9:5d:df:e9:89:4b:2a:3f:dc:dd:
49:54:40:1b:dd:a3:f4:72:19:7a:85:9c:a5:38:a2:
2f:e3:50:11:9b:d8:32:f4:95:a9:3c:8e:c1:bd:21:
4e:c3:b0:69:b7:36:4c:2e:ff:22:01:0c:96:63:b3:
12:89:6a:40:cb:6d:83:8a:dc:3e:64:e1:56:59:bf:
a7:35:bd:48:9e:32:9b:84:d0:b2:e8:83:31:63:70:
78:82:63:c8:9c:ba:0f:21:78:b9:b5:9a:2b:08:a5:
3d:74:55:75:b4:bb:3b:17:42:f3:04:ac:d5:3b:48:
36:5e:dd:37:2a:a7:c0:c5:15:92:89:65:c5:9f:8e:
d4:3e:7a:83:ce:c6:09:cb:63:d3:6b:5a:b9:4f:87:
dc:89:8b:07:dd:57:e8:de:de:e3:87:fa:51:6e:cb:
d7:d7:a0:60:bb:8d:54:c3:c4:c3:dc:c6:5c:04:b9:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:EE:16:E7:AF:FC:EB:9E:92:47:56:0A:7C:B0:85:73:0D:6A:E3:C1
X509v3 Authority Key Identifier:
keyid:3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:03:6d:bd:2e:78:21:71:e7:bd:8e:ac:a6:05:fc:c5:bc:a8:
9b:cf:ae:65:c7:53:01:fd:47:38:5e:35:d8:0c:f2:6c:2d:5c:
a4:2a:6e:7e:9d:59:23:c1:9a:68:f8:69:16:20:09:3f:2a:2d:
1d:49:68:d5:93:e2:c8:7d:61:ab:2f:98:77:ad:1d:6f:29:9d:
a9:e6:a1:f3:45:61:00:41:77:6d:82:a9:b0:f4:f1:28:67:07:
3d:85:c4:37:31:b9:11:0c:89:43:5c:b2:de:ea:c1:37:fd:55:
4e:dd:1a:ae:72:4a:e3:13:f4:8a:46:b7:f7:93:c0:b1:6b:59:
7e:98:0c:31:5a:b1:68:48:3f:5c:f4:b7:52:82:71:6b:e0:4c:
a0:41:1b:aa:75:46:7f:a3:b7:e8:0e:4d:d8:e2:09:a0:b0:87:
01:2d:0b:0a:4a:8b:fd:a5:5d:54:c0:4f:6d:f0:da:d4:32:66:
cd:50:fc:14:15:51:4d:26:3d:a3:19:97:97:fb:99:96:9c:1c:
75:23:aa:2e:da:02:6e:db:6d:a1:ed:4f:9e:0d:ae:8b:cc:be:
f7:b3:7e:59:70:d4:80:ea:0d:f9:8c:5e:bf:1f:df:58:97:33:
27:dd:bb:d0:d3:e8:3c:20:86:41:93:4f:d9:0c:c5:ae:44:6d:
6e:cd:93:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:48:54 2026 by rpki-client