
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1116992151696179223/1/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.mft
File: EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.mft (raw, json)
Hash identifier: RIvU7IJcL0ddz2bIFM9Ne7V4PKv9wSVZ5wHmtxnsdT0=
Subject key identifier: AF:C6:8E:BD:55:EC:1E:F7:88:23:6A:37:6A:CE:37:63:69:EF:11:D8
Authority key identifier: EF:79:F5:32:C0:5F:0C:25:F3:94:95:E2:C6:6C:3E:A4:CD:C9:CC:C4
Certificate issuer: /CN=EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4
Certificate serial: 48BDF1530305258E6394717D9483DC848834AF72
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/1/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.mft
Manifest number: 84
Signing time: Wed 28 Oct 2026 09:50:41 +0000
Manifest this update: Wed 28 Oct 2026 09:45:41 +0000
Manifest next update: Sat 31 Oct 2026 12:18:41 +0000
Files and hashes: 1: EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.crl (hash: n+77i6/jFQKt9J8KBCYZiZ/X3vG88/aOVL5bMf5fAAg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/1/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.crl
rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/1/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 12:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:bd:f1:53:03:05:25:8e:63:94:71:7d:94:83:dc:84:88:34:af:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4
Validity
Not Before: Oct 28 09:45:41 2026 GMT
Not After : Oct 31 12:18:41 2026 GMT
Subject: CN=AFC68EBD55EC1EF788236A376ACE376369EF11D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:43:42:7b:04:5c:b4:33:5d:e7:43:ff:77:05:
b4:97:b2:b2:5c:1e:3b:7e:52:24:ff:a1:4f:29:0d:
f5:78:fa:43:d6:b0:a1:35:97:0a:c6:df:37:d5:85:
fc:e5:7f:88:ed:96:34:01:af:4f:0e:60:25:b1:8d:
ad:ac:8b:fe:a8:ef:b6:36:57:f8:31:88:d8:75:16:
63:77:95:7d:78:28:e9:f4:07:49:fd:c8:36:8c:e3:
f4:ed:9f:e1:b4:eb:5f:5a:40:bc:51:ba:30:2b:c3:
70:58:3b:19:4d:e9:5e:c5:f1:56:ba:1e:c2:9f:10:
7e:49:2b:eb:27:0d:79:14:15:ea:04:76:27:6a:47:
3f:b3:8c:38:1c:0a:f1:2a:20:69:66:55:30:ca:05:
ea:c7:d3:5e:eb:d3:f7:3c:9f:06:19:94:42:fc:f5:
79:54:09:1c:33:4f:86:be:b1:d8:75:93:bd:a5:1c:
f9:eb:45:dd:71:3c:a0:d8:35:b3:1a:71:0f:7f:15:
09:8d:bf:d5:73:b1:d2:e1:9a:98:45:52:c7:d5:7e:
84:4b:d2:82:e6:7e:2c:6b:89:34:62:1e:20:62:98:
9b:a9:df:a4:13:af:1e:56:c8:d8:76:60:64:17:f3:
3f:21:cf:9d:7a:73:d3:f4:77:f2:06:0d:29:81:35:
58:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C6:8E:BD:55:EC:1E:F7:88:23:6A:37:6A:CE:37:63:69:EF:11:D8
X509v3 Authority Key Identifier:
keyid:EF:79:F5:32:C0:5F:0C:25:F3:94:95:E2:C6:6C:3E:A4:CD:C9:CC:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/1/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116992151696179223/1/EF79F532C05F0C25F39495E2C66C3EA4CDC9CCC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:53:43:92:74:ee:fe:db:a5:98:6a:02:c5:43:23:27:8f:52:
3f:b4:72:a5:85:cc:e7:b9:4d:a6:10:d0:60:af:64:53:62:ce:
ec:e9:b9:d3:4b:d7:d6:13:bd:9e:09:73:35:a4:60:9b:43:26:
4e:f5:59:29:f0:bd:c5:ff:94:7d:32:ba:ec:cf:59:5b:a9:38:
7e:69:90:ee:82:05:c4:95:c0:28:30:bb:3e:62:da:da:3f:d8:
91:31:67:f0:7e:ab:00:2d:8d:58:54:e9:fa:bf:94:42:e0:b2:
13:83:9a:64:c8:de:85:75:48:96:5b:4f:f5:cc:3c:aa:08:5e:
81:8a:d7:5b:5a:59:44:d2:05:45:41:c8:0e:3a:a6:0a:3c:09:
c1:50:ce:f2:57:58:b9:97:8d:7d:d6:36:7e:2c:3e:0a:30:f9:
d0:30:64:f6:16:42:14:3f:a3:3d:ca:83:23:39:1e:89:8b:73:
85:73:8a:2c:44:e0:04:f5:b7:b6:ff:66:02:f0:88:06:ad:f7:
b4:74:c9:b0:04:d5:8e:07:43:a9:19:7c:0e:b6:0c:d2:e8:25:
d4:6d:b6:49:37:99:d5:9d:c5:c8:d2:7d:43:64:e7:0b:4c:b6:
54:4a:ef:16:38:90:7a:70:ff:34:f5:cb:22:15:a7:3b:44:a2:
db:5e:dc:ad
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUSL3xUwMFJY5jlHF9lIPchIg0r3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUY3OUY1MzJDMDVGMEMyNUYzOTQ5NUUyQzY2QzNFQTRD
REM5Q0NDNDAeFw0yNjEwMjgwOTQ1NDFaFw0yNjEwMzExMjE4NDFaMDMxMTAvBgNV
BAMTKEFGQzY4RUJENTVFQzFFRjc4ODIzNkEzNzZBQ0UzNzYzNjlFRjExRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWQ0J7BFy0M13nQ/93BbSXsrJc
Hjt+UiT/oU8pDfV4+kPWsKE1lwrG3zfVhfzlf4jtljQBr08OYCWxja2si/6o77Y2
V/gxiNh1FmN3lX14KOn0B0n9yDaM4/Ttn+G0619aQLxRujArw3BYOxlN6V7F8Va6
HsKfEH5JK+snDXkUFeoEdidqRz+zjDgcCvEqIGlmVTDKBerH017r0/c8nwYZlEL8
9XlUCRwzT4a+sdh1k72lHPnrRd1xPKDYNbMacQ9/FQmNv9VzsdLhmphFUsfVfoRL
0oLmfixriTRiHiBimJup36QTrx5WyNh2YGQX8z8hz516c9P0d/IGDSmBNVhVAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUr8aOvVXsHveII2o3as43Y2nvEdgwHwYDVR0j
BBgwFoAU73n1MsBfDCXzlJXixmw+pM3JzMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
Njk5MjE1MTY5NjE3OTIyMy8xL0VGNzlGNTMyQzA1RjBDMjVGMzk0OTVFMkM2NkMz
RUE0Q0RDOUNDQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvRUY3OUY1MzJDMDVGMEMyNUYzOTQ5NUUyQzY2QzNFQTRDREM5Q0NDNC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTY5OTIxNTE2OTYxNzkyMjMvMS9FRjc5RjUzMkMwNUYw
QzI1RjM5NDk1RTJDNjZDM0VBNENEQzlDQ0M0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1NDknTu/tul
mGoCxUMjJ49SP7RypYXM57lNphDQYK9kU2LO7Om500vX1hO9nglzNaRgm0MmTvVZ
KfC9xf+UfTK67M9ZW6k4fmmQ7oIFxJXAKDC7PmLa2j/YkTFn8H6rAC2NWFTp+r+U
QuCyE4OaZMjehXVIlltP9cw8qghegYrXW1pZRNIFRUHIDjqmCjwJwVDO8ldYuZeN
fdY2fiw+CjD50DBk9hZCFD+jPcqDIzkeiYtzhXOKLETgBPW3tv9mAvCIBq33tHTJ
sATVjgdDqRl8DrYM0ugl1G22STeZ1Z3FyNJ9Q2TnC0y2VErvFjiQenD/NPXLIhWn
O0Si217crQ==
-----END CERTIFICATE-----
Generated at Fri Oct 30 05:34:31 2026 by rpki-client