
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft
File: 12BD80FB666E9FF3B78C5257CB80604CE466A620.mft (raw, json)
Hash identifier: 9dtvaHTZR/Q/4spIwbf0zjh4ARSpdHeZa2VXPPWQcJc=
Subject key identifier: 8F:18:11:6E:86:BF:86:DC:65:3F:2D:01:C1:2F:C8:D9:25:CB:2D:C6
Authority key identifier: 12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20
Certificate issuer: /CN=12BD80FB666E9FF3B78C5257CB80604CE466A620
Certificate serial: 50F882EEEAFC88483A398D10FC534208188B905E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft
Manifest number: 51
Signing time: Fri 28 Aug 2026 06:48:17 +0000
Manifest this update: Fri 28 Aug 2026 06:43:17 +0000
Manifest next update: Mon 31 Aug 2026 15:47:17 +0000
Files and hashes: 1: 323430323a366538303a3a2f33322d3332203d3e20313339313030.roa (hash: vwm0wFYdrshqVC19O/olyhuC+X7rA1oBdsrwCje/4V0=)
2: 12BD80FB666E9FF3B78C5257CB80604CE466A620.crl (hash: z/FhVF/R2nkoX4rOD1L0XERORHf8Jj3m4iNMZxPBSWg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl
rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 15:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:f8:82:ee:ea:fc:88:48:3a:39:8d:10:fc:53:42:08:18:8b:90:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12BD80FB666E9FF3B78C5257CB80604CE466A620
Validity
Not Before: Aug 28 06:43:17 2026 GMT
Not After : Aug 31 15:47:17 2026 GMT
Subject: CN=8F18116E86BF86DC653F2D01C12FC8D925CB2DC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2c:24:a0:e3:7f:9f:01:91:22:af:6d:e5:aa:
ac:76:3f:75:f8:8c:b7:2b:15:b4:29:20:e5:c7:4d:
61:13:b1:ed:96:4c:99:04:39:ae:83:c3:b6:3e:3b:
53:7c:e2:78:fb:fa:9d:cf:6b:b8:d2:f7:e8:13:7d:
cb:e6:de:6c:59:db:35:ab:c7:48:7d:b2:b5:4d:c4:
7d:93:85:f5:99:9f:68:c3:f5:e3:ca:7f:12:7f:ae:
e8:1b:88:21:04:8f:b5:09:b5:07:a2:52:a6:b2:51:
8d:0b:84:b6:83:95:e4:4d:ac:8e:d0:48:bf:76:67:
f7:8b:30:26:44:f0:ca:f3:3e:f4:e3:db:7b:b0:62:
1d:a2:a2:2f:ae:f5:c7:07:47:de:c8:b7:a1:b3:37:
8b:99:87:61:e4:d6:93:03:f7:85:35:0e:20:96:8b:
23:b6:c5:e5:65:9a:80:03:dc:dc:7f:d9:92:2c:5e:
0b:8d:d4:d5:1a:98:d5:34:d2:bc:f7:ce:a2:d9:7e:
e2:81:42:68:b9:4a:f2:43:1b:df:9f:da:64:aa:75:
f1:f5:4a:b8:9e:9c:27:e3:1c:a6:77:2e:1d:26:97:
80:ee:7c:6c:93:7d:41:74:c6:ab:cb:44:ba:03:cb:
a7:a0:56:b9:d4:84:d1:4d:9f:9f:9f:32:95:36:df:
89:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:18:11:6E:86:BF:86:DC:65:3F:2D:01:C1:2F:C8:D9:25:CB:2D:C6
X509v3 Authority Key Identifier:
keyid:12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e6:bb:22:36:c4:e1:ac:a9:cf:d9:0a:1e:79:1c:33:40:61:
6d:d2:a5:c6:75:2f:2c:a9:a2:69:95:0d:b4:0b:13:35:b6:a6:
83:3d:2e:79:be:af:6b:ad:d9:10:3e:77:72:6e:f3:fe:fb:7c:
42:40:97:4d:41:80:7e:e8:82:fa:a1:2d:13:67:69:0a:7d:ac:
81:2d:84:8b:e6:46:a8:32:7c:dc:b4:fa:77:49:2d:62:e4:cb:
0d:b9:50:2a:58:b1:10:d1:39:b5:77:7e:07:b5:cf:60:a9:ae:
5b:9c:81:c2:42:0a:6a:88:93:a1:76:ab:36:cc:a8:ba:2d:d6:
d6:fe:6b:fc:4b:de:55:80:b6:e1:17:97:7b:3a:c6:53:d0:d5:
8e:db:38:c0:e1:78:93:c9:0e:62:45:d7:5f:a0:7e:ca:68:0a:
bf:73:03:e9:a7:c5:aa:4c:84:72:79:9c:31:33:14:48:73:01:
ff:e3:d4:aa:b9:89:e1:4b:92:a7:b3:8e:6b:55:96:19:58:94:
55:a8:ff:16:7b:45:c6:bf:fe:87:b8:59:1c:ea:00:e1:bf:f2:
4f:43:d1:ae:bd:c3:d3:80:ce:3f:42:c8:58:be:c2:c5:08:c7:
15:a1:f6:ee:c8:1b:11:9b:69:fe:71:a2:cf:cf:98:3f:57:30:
24:1a:a1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:07:33 2026 by rpki-client