
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.mft
File: 2C17316B7F43D4949633C8E9473373FAB42B7312.mft (raw, json)
Hash identifier: n6Pfqb9GgaoAzri/Vzgdy0u3QYcr3BhrIT2IDglVHp0=
Subject key identifier: 1F:94:D3:13:59:E0:25:DC:D4:39:9A:EE:BA:98:30:85:3E:BF:69:E8
Authority key identifier: 2C:17:31:6B:7F:43:D4:94:96:33:C8:E9:47:33:73:FA:B4:2B:73:12
Certificate issuer: /CN=A91B10180000/serialNumber=2C17316B7F43D4949633C8E9473373FAB42B7312
Certificate serial: 7172A6DEAEDDC4B4B0FE3CF1499D716D474828AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LBcxa39D1JSWM8jpRzNz-rQrcxI.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.mft
Manifest number: 06
Signing time: Mon 31 Aug 2026 03:38:01 +0000
Manifest this update: Mon 31 Aug 2026 03:33:01 +0000
Manifest next update: Thu 03 Sep 2026 06:15:01 +0000
Files and hashes: 1: 2C17316B7F43D4949633C8E9473373FAB42B7312.crl (hash: 95AZZQsKgUkJxnKoqLXI1obevvOSA/bMOCIfJBp5jn4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.crl
rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LBcxa39D1JSWM8jpRzNz-rQrcxI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 06:15:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:72:a6:de:ae:dd:c4:b4:b0:fe:3c:f1:49:9d:71:6d:47:48:28:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B10180000, serialNumber=2C17316B7F43D4949633C8E9473373FAB42B7312
Validity
Not Before: Aug 31 03:33:01 2026 GMT
Not After : Sep 3 06:15:01 2026 GMT
Subject: CN=1F94D31359E025DCD4399AEEBA9830853EBF69E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:16:6d:6b:63:12:b6:7b:9f:d0:f7:cc:97:d4:
4d:3a:52:67:31:a6:9d:2a:99:d3:54:3a:36:68:0c:
e0:92:9e:15:81:60:03:26:5a:ba:05:82:6a:3d:0d:
30:1f:c6:12:a1:98:5d:43:9a:9e:69:ac:1a:5b:5a:
81:b5:0f:64:5b:55:ed:08:e7:65:90:f1:90:b2:ef:
3b:e1:59:d5:91:46:96:3a:e8:f5:a2:92:61:d1:8c:
2e:bc:9c:bf:82:89:d5:ad:12:8b:a4:1a:ff:d8:24:
00:8f:44:57:c6:20:63:93:c8:31:a3:9b:85:40:e0:
da:47:16:bf:f7:c7:92:65:01:9d:5e:8d:26:e4:c1:
11:df:bb:da:6d:db:6d:59:23:6d:58:d8:e1:0a:67:
78:f2:d2:14:e0:76:87:7a:45:9a:1b:76:2d:97:41:
8f:84:e0:0d:18:8f:73:f6:3e:c3:68:b6:2c:46:77:
dc:ee:87:55:11:b4:7c:3e:ea:4e:7b:99:74:65:bf:
e1:ef:38:79:1c:61:39:7f:11:b7:7b:3c:8a:70:01:
0c:d0:e9:7f:3e:1f:bb:b9:27:d3:73:47:c5:0d:6e:
28:fd:1c:3c:1e:5b:3d:7f:ac:ce:08:7b:28:2c:06:
66:49:ee:db:9a:a0:68:f0:a2:68:9e:44:6f:b4:47:
5e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:94:D3:13:59:E0:25:DC:D4:39:9A:EE:BA:98:30:85:3E:BF:69:E8
X509v3 Authority Key Identifier:
keyid:2C:17:31:6B:7F:43:D4:94:96:33:C8:E9:47:33:73:FA:B4:2B:73:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LBcxa39D1JSWM8jpRzNz-rQrcxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4f:52:db:70:55:3d:f3:aa:1c:97:73:d5:c3:ff:68:13:a6:
a1:f0:e2:5c:9d:6c:ca:59:b9:7c:b2:fe:80:d0:01:21:28:b1:
e6:15:ce:d6:73:15:2b:12:7a:75:dd:18:f4:df:ad:16:89:c0:
bb:db:96:f6:78:42:ac:ca:e7:41:20:9f:c1:24:cd:7e:ba:2c:
d2:11:bc:f6:04:55:e4:93:96:ab:8d:d3:27:6a:35:a5:45:d0:
85:0f:f8:6e:7b:fc:e3:6a:ef:e0:e9:a2:73:ad:4c:b1:31:6a:
93:f2:d1:db:b9:07:85:07:71:8c:fe:68:36:8a:6a:4d:1e:2a:
27:e7:22:17:6a:cf:46:87:a7:19:57:09:af:f7:d0:12:85:21:
1b:d8:63:cf:04:13:9d:77:13:ab:50:1f:17:bb:df:b3:8a:a8:
3e:d2:1f:18:5a:7c:a4:d8:eb:af:ed:22:d1:bc:31:4c:25:51:
00:1f:04:fb:27:f5:45:13:a4:34:23:4a:64:7b:ce:61:7b:c6:
6e:91:1d:39:5c:77:85:99:5b:fe:03:14:c0:42:47:96:9e:b1:
66:dc:4f:81:a9:28:51:ec:b5:e9:b2:47:92:a3:2c:42:d7:35:
4f:3b:05:9d:ba:51:99:e7:c3:cf:ae:d9:5f:d0:ce:5d:8e:df:
8c:4f:e2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:29:58 2026 by rpki-client