
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft
File: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft (raw, json)
Hash identifier: 7YWl1QRyREJAwmt5hx9pz4RxWM2/JGxnucnC4js0k8M=
Subject key identifier: F8:64:E7:8C:15:1C:7D:A2:87:E6:5E:37:1A:16:E1:37:F9:4E:10:2D
Authority key identifier: 14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A
Certificate issuer: /CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A
Certificate serial: 7C6C793B061B0E241317C0E83FE6E5FF5378ACB5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft
Manifest number: 0E
Signing time: Fri 29 May 2026 18:23:04 +0000
Manifest this update: Fri 29 May 2026 18:18:04 +0000
Manifest next update: Sat 30 May 2026 21:29:04 +0000
Files and hashes: 1: 1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl (hash: 4jsNRGWqVeKyl7M/RzydUQNqji+TtBh+9POtBZKfOoQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl
rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:6c:79:3b:06:1b:0e:24:13:17:c0:e8:3f:e6:e5:ff:53:78:ac:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A
Validity
Not Before: May 29 18:18:04 2026 GMT
Not After : May 30 21:29:04 2026 GMT
Subject: CN=F864E78C151C7DA287E65E371A16E137F94E102D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:eb:8c:09:5d:c4:d2:4a:ad:d2:63:2b:29:
8e:72:f0:54:6b:06:dd:fb:de:f8:6d:af:fa:a0:65:
9f:11:e3:67:e9:09:de:d9:70:61:46:ec:38:b7:6f:
40:88:87:2e:31:71:07:2d:be:ce:b3:d9:82:85:5e:
ce:fc:a7:9d:ad:2d:a4:86:50:05:cb:44:ec:e0:f8:
de:70:c3:53:ba:11:09:bd:5e:48:ed:7a:d5:f1:8c:
89:6a:83:1b:81:fa:71:49:e6:ce:04:cb:6e:c3:f8:
81:a9:ce:bf:56:ed:04:ac:4d:dd:76:6c:0a:64:8c:
04:a4:c0:c8:94:26:53:b4:ff:28:a3:5a:70:a0:73:
b6:66:59:42:87:ea:56:d4:d2:8e:de:bb:3b:f4:6c:
3a:64:dd:69:e4:9f:7a:c8:13:69:0c:f0:f3:f4:f7:
59:c8:36:9c:bd:ef:b2:11:95:c9:c7:e6:6b:33:61:
81:67:aa:a1:e7:49:6e:0c:de:38:b0:d1:c5:fd:5d:
ab:cf:b8:85:bb:5c:a5:7b:44:86:4f:c6:57:33:49:
83:31:88:ff:52:8e:bf:e9:98:41:4a:d2:16:15:1d:
4c:31:49:66:73:8d:08:6d:99:f7:88:0f:ee:3d:91:
0f:7f:51:61:5f:45:74:2d:16:32:35:9f:10:cf:3b:
56:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:64:E7:8C:15:1C:7D:A2:87:E6:5E:37:1A:16:E1:37:F9:4E:10:2D
X509v3 Authority Key Identifier:
keyid:14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f6:1f:1b:97:b7:fd:14:63:43:34:4f:85:21:48:e1:2e:02:
96:5c:9e:62:de:c3:85:74:5e:df:62:6c:e8:e9:88:b9:b7:d2:
e0:a1:da:26:7a:6e:a9:88:1f:d3:a0:fa:54:1c:a3:d5:be:68:
39:c2:1c:c1:6f:6d:02:d9:01:a4:f5:6c:97:0f:20:fa:76:e6:
67:a6:95:81:50:22:d4:32:d6:a8:64:4e:c8:46:9b:ca:9a:b2:
1f:40:25:6a:ea:fc:23:ee:68:fb:9c:04:e6:dd:74:2e:1f:b3:
6a:ff:f1:03:b3:11:68:d2:07:d0:5d:ca:0c:fc:2c:23:d1:73:
52:c6:7d:25:c1:53:95:bc:5e:93:bb:e5:93:3f:08:6b:91:d0:
42:6f:6d:f0:83:19:70:7f:d5:f8:40:13:72:df:0c:44:0b:a8:
88:63:3c:d2:81:5b:a3:e6:62:1e:ba:91:43:96:73:7f:da:cc:
e2:be:40:46:41:8d:64:86:e5:f7:76:35:94:67:2c:24:69:79:
72:4a:1f:d0:7e:94:8b:a3:05:41:76:e4:81:fd:ce:b4:3f:1a:
15:95:0e:7b:75:ab:ce:5f:c6:da:ab:90:bf:78:58:67:3e:e8:
83:35:a5:d0:c9:fc:cd:e3:04:f3:a3:63:b3:35:ba:3e:49:b1:
20:8f:fe:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:03:34 2026 by rpki-client