
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
File: B5148646F2C451864E20696E4F1C926A098BC8D2.mft (raw, json)
Hash identifier: wvbuva/eSvkUNTUvZqE5qRfFn6wDX3E2zeYQO69APR4=
Subject key identifier: 32:60:36:4B:85:96:9C:F8:FF:0A:04:E2:D7:11:9C:7C:E2:F4:87:D9
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial: 75E16667690E0EE3DDF4B26CFB6E8F4D64C23FEE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
Manifest number: 0D
Signing time: Fri 29 May 2026 05:22:39 +0000
Manifest this update: Fri 29 May 2026 05:17:39 +0000
Manifest next update: Sat 30 May 2026 07:38:39 +0000
Files and hashes: 1: B5148646F2C451864E20696E4F1C926A098BC8D2.crl (hash: xn4JevsCXOrdZUA/hCn+G+W7jL0C2qeXmizP+1pm2ek=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 07:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e1:66:67:69:0e:0e:e3:dd:f4:b2:6c:fb:6e:8f:4d:64:c2:3f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Validity
Not Before: May 29 05:17:39 2026 GMT
Not After : May 30 07:38:39 2026 GMT
Subject: CN=3260364B85969CF8FF0A04E2D7119C7CE2F487D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1e:df:72:ac:1b:4a:51:f4:fe:89:8f:c4:75:
d5:cd:f4:31:13:77:88:8f:91:88:33:60:92:a3:01:
12:e4:27:f6:4e:9c:2a:15:49:06:26:e6:7f:73:a5:
46:24:f7:9d:27:3b:43:76:46:10:0e:7e:55:e1:b3:
60:ee:be:ac:62:23:f0:c3:41:c1:35:d9:e7:7d:8d:
57:06:92:82:8c:af:c1:73:cd:e7:e3:8f:ea:48:b9:
1d:e0:89:53:d3:9d:60:61:bf:3b:f8:48:1b:ec:1f:
43:a2:ce:4f:b2:70:c0:e1:fb:95:47:54:8a:9e:51:
00:bb:3e:24:51:ce:8b:ea:6c:90:8c:37:e0:8e:d3:
3a:1b:80:70:61:ea:c1:f3:ef:39:5f:73:61:b9:9f:
7a:93:73:20:27:b2:fd:39:f1:84:bb:68:f5:85:b5:
2c:49:86:71:31:9b:1b:69:30:6a:6a:b2:0d:57:78:
b2:3b:a6:2c:25:e3:e9:5a:74:7c:45:19:3c:35:4a:
fe:99:e8:2a:52:10:59:59:09:2b:42:b9:ef:1b:64:
1d:19:73:38:36:54:e7:80:e2:90:60:02:74:94:16:
c0:4a:3b:82:3f:e8:d7:c8:6f:62:98:c9:ca:1f:d4:
82:b1:27:f0:d4:be:86:b1:29:3d:18:74:1e:61:96:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:60:36:4B:85:96:9C:F8:FF:0A:04:E2:D7:11:9C:7C:E2:F4:87:D9
X509v3 Authority Key Identifier:
keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:ea:74:49:9e:a8:b7:24:47:88:12:7f:a0:cb:d9:e0:73:43:
61:6e:e4:c6:98:52:14:e5:9c:6c:20:fd:ca:86:f4:1a:a7:23:
a4:60:ad:33:23:3d:e7:0c:21:53:b7:1b:6c:b4:f3:30:55:9d:
61:b6:0b:fa:01:36:94:6c:03:a5:33:72:42:fd:5d:d8:d0:68:
af:54:2b:9d:c6:da:c0:ff:77:ea:45:c7:02:83:b1:fe:9e:74:
b9:2b:73:b8:00:9e:92:86:b0:b3:4f:bc:b6:f6:71:51:4c:07:
92:17:25:63:d4:53:95:5b:14:e0:29:a7:94:5f:5e:66:3a:d4:
38:d4:9e:ec:af:3e:59:0b:1e:a7:31:70:ec:26:cc:8d:81:bd:
8a:0a:a1:a9:c8:47:6e:f3:08:27:52:a8:d6:ae:fb:a9:7d:b8:
05:15:95:61:a5:9a:39:c7:7a:e9:a1:07:9e:d7:a1:0c:95:9e:
75:8a:fe:cd:4b:04:96:03:93:db:a4:a5:0c:5c:35:44:61:18:
50:61:65:d2:41:34:16:52:c5:2d:4f:e0:d9:92:31:0f:42:27:
51:c6:dc:14:bc:a4:f1:ab:50:c4:95:b2:55:d9:38:b3:56:f1:
45:52:74:fa:a4:5d:e6:79:2a:36:80:6e:55:61:7b:b0:b6:ab:
34:f6:09:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:55 2026 by rpki-client