
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
File: 82611B8148EDC9354240ABCE432147501DAE52D1.mft (raw, json)
Hash identifier: 1GD+B7mcH4dn9AcfPEO2Iud1fLYgxLW/6uA0mPrKa8U=
Subject key identifier: 3D:1C:B7:A5:04:E0:56:B2:FA:24:2E:69:CF:20:37:30:17:61:E5:E6
Authority key identifier: 82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1
Certificate issuer: /CN=82611B8148EDC9354240ABCE432147501DAE52D1
Certificate serial: 538823043314F4D2AB97DBEB4DE0CC136F40D819
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
Manifest number: 69
Signing time: Fri 28 Aug 2026 06:48:18 +0000
Manifest this update: Fri 28 Aug 2026 06:43:18 +0000
Manifest next update: Mon 31 Aug 2026 09:48:18 +0000
Files and hashes: 1: 82611B8148EDC9354240ABCE432147501DAE52D1.crl (hash: PEmGt1wEAnqejj/hc0zGQ6amFDpEJGDH0XpUdxiLcDU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.crl
rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 09:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:88:23:04:33:14:f4:d2:ab:97:db:eb:4d:e0:cc:13:6f:40:d8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82611B8148EDC9354240ABCE432147501DAE52D1
Validity
Not Before: Aug 28 06:43:18 2026 GMT
Not After : Aug 31 09:48:18 2026 GMT
Subject: CN=3D1CB7A504E056B2FA242E69CF2037301761E5E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:e7:9f:14:23:5c:d4:5e:e1:a3:04:8b:5d:
db:60:7a:38:96:23:b5:4f:7e:0f:8e:e3:a6:36:f2:
73:f6:bc:85:be:cc:f5:54:18:73:92:2e:9a:75:59:
d9:da:7d:12:51:3c:45:d2:f2:54:c0:d1:19:8f:90:
0a:e8:f1:cd:b2:a4:43:bb:e4:e9:e7:fc:a1:65:c1:
33:b7:03:cf:e9:c3:aa:c5:35:f2:bb:95:bf:91:39:
6b:e8:7f:89:b8:1b:4f:5f:f3:00:7f:5c:5e:63:88:
81:24:61:99:11:3d:90:bd:6e:56:3a:98:fc:e5:1d:
f4:08:d0:3e:16:2c:3f:af:4d:63:05:ba:e1:2b:6e:
b7:c2:1e:9a:5b:fd:d3:4e:bc:ba:fd:9b:12:6d:9a:
31:8c:17:de:8f:8b:a3:f3:e9:eb:77:5d:e4:42:43:
5a:a3:6c:b4:44:7c:8b:f4:36:62:54:61:3a:66:5d:
f7:fa:42:84:4b:65:5e:bd:d7:8f:e5:ae:cb:5a:e8:
07:ab:0b:e5:bb:d8:82:1d:b6:93:5c:0a:10:0d:b9:
db:3d:02:6a:b0:a4:1c:4a:6f:fd:71:71:c1:12:d1:
41:51:aa:1d:65:4f:8f:ae:cd:06:a3:67:03:45:2f:
9d:7c:50:29:97:a4:c5:65:85:51:0d:8d:98:db:9a:
40:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1C:B7:A5:04:E0:56:B2:FA:24:2E:69:CF:20:37:30:17:61:E5:E6
X509v3 Authority Key Identifier:
keyid:82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:47:29:59:fa:93:56:6e:35:b2:03:5c:45:d2:e5:e0:e2:67:
1a:d4:df:6c:b9:06:ed:41:86:9e:c0:0a:fc:35:e1:88:69:a1:
0c:9b:85:1e:75:3d:07:4a:bd:ce:6e:06:f6:58:4c:af:c3:07:
bd:92:e6:8f:47:4a:8d:bf:38:2a:dc:04:cf:cf:ba:c2:f9:40:
19:f7:9e:9c:38:c6:29:06:eb:6e:9d:bc:b7:43:d4:29:48:7f:
a2:83:75:2b:e1:3a:2d:0b:05:67:ba:d9:a4:dc:3b:60:aa:fc:
47:50:b1:e7:64:6d:a1:dc:86:c8:e4:6b:74:b9:1e:c8:29:47:
65:e2:59:b1:9c:63:32:d5:68:eb:21:42:3e:73:a0:bb:16:a8:
5d:c1:42:28:7e:cc:56:59:96:c6:7b:14:62:ae:1f:6e:43:56:
22:70:d4:90:82:73:5f:ad:85:0d:99:cf:df:75:fa:83:19:99:
7c:82:db:ad:58:8f:e3:c2:46:ed:b7:64:8b:c5:ea:0d:f2:15:
6b:b4:35:94:57:a0:ca:31:18:1a:88:89:aa:12:a6:cf:d5:76:
2e:74:4e:bc:59:1e:ce:39:bc:dc:2a:27:f5:6e:55:7a:39:a0:
3d:59:e7:43:4f:b9:2c:ef:aa:ed:c2:25:c8:c3:38:18:27:a9:
b4:7b:9c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:02:23 2026 by rpki-client