
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft
File: 91D3B189C67F0A1084A2B93996118237CB692F60.mft (raw, json)
Hash identifier: W/c0mIRzAXP5+4YwKuoT8jSubweer6NyGT7SRUqPukA=
Subject key identifier: 6B:37:06:37:A2:11:5C:69:79:11:79:AB:51:E2:3A:1C:0C:BC:1A:C4
Authority key identifier: 91:D3:B1:89:C6:7F:0A:10:84:A2:B9:39:96:11:82:37:CB:69:2F:60
Certificate issuer: /CN=91D3B189C67F0A1084A2B93996118237CB692F60
Certificate serial: 4AF5CDAD71E285CFB3E74C8DD5B427E804FB7B84
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft
Manifest number: 46
Signing time: Fri 28 Aug 2026 06:47:59 +0000
Manifest this update: Fri 28 Aug 2026 06:42:59 +0000
Manifest next update: Mon 31 Aug 2026 12:37:59 +0000
Files and hashes: 1: 91D3B189C67F0A1084A2B93996118237CB692F60.crl (hash: xWwyXoQ6ufx1lSBVZ+RL2cyP+k2TfLPmhFAoEYfeG+s=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.crl
rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 12:37:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f5:cd:ad:71:e2:85:cf:b3:e7:4c:8d:d5:b4:27:e8:04:fb:7b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91D3B189C67F0A1084A2B93996118237CB692F60
Validity
Not Before: Aug 28 06:42:59 2026 GMT
Not After : Aug 31 12:37:59 2026 GMT
Subject: CN=6B370637A2115C69791179AB51E23A1C0CBC1AC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:97:79:06:43:0f:1c:41:14:91:66:de:15:2d:
c2:9b:b2:d2:dc:ae:19:d4:48:6d:be:7d:a7:bd:fe:
47:bd:18:56:f1:13:89:f3:00:28:4b:87:0e:ee:56:
dc:51:90:12:26:3e:28:da:86:2d:03:16:20:8b:6a:
b5:ff:c3:25:72:8d:2f:d1:f2:55:3c:51:c4:ac:ef:
61:6c:c0:40:ac:ad:bf:b2:41:62:82:4d:94:62:ae:
9b:2c:09:b1:72:58:b1:19:29:e1:a4:67:1c:bb:80:
bf:13:ef:ea:f9:e5:c5:f2:46:94:1c:f4:1f:05:b8:
77:ab:26:fb:a7:ea:34:dc:ad:27:1e:29:46:59:ae:
dc:61:70:cf:45:d5:59:03:d8:c1:f4:d5:c6:8b:01:
bb:c4:0e:61:c5:c0:d3:6d:e4:f4:09:b2:f1:9c:24:
8d:52:ad:00:fa:c1:7a:d8:cf:7d:43:99:f5:27:4e:
8e:03:9b:63:d2:7e:89:6f:c6:1f:48:6c:ad:5c:31:
4d:91:12:13:79:e7:da:21:21:e8:2a:fb:fc:80:c3:
c9:52:5c:1e:7c:e3:bc:49:e3:09:69:cd:90:e2:c5:
08:18:62:39:ea:40:3f:48:97:1d:4f:cf:76:4e:89:
0b:05:88:c3:2d:90:b9:70:9a:ce:38:2f:ff:f0:d0:
e0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:37:06:37:A2:11:5C:69:79:11:79:AB:51:E2:3A:1C:0C:BC:1A:C4
X509v3 Authority Key Identifier:
keyid:91:D3:B1:89:C6:7F:0A:10:84:A2:B9:39:96:11:82:37:CB:69:2F:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f2:9b:b6:e8:6f:08:22:b1:7d:ec:05:2f:18:94:99:3a:d1:
36:23:83:3f:61:52:7c:08:88:86:8c:ce:bb:64:a7:b4:ad:98:
0f:01:32:a2:ec:fc:d3:6b:1d:ed:f7:a2:e1:ad:bd:b0:e3:71:
2e:ad:70:90:04:05:96:0a:79:3e:aa:01:2a:1c:0c:6d:10:64:
dc:c6:a5:57:34:b4:85:dd:d5:7e:a8:69:a2:37:52:a7:04:d7:
3a:a5:a6:10:9c:13:41:53:eb:cd:b7:26:ee:81:c2:51:3d:80:
cf:93:89:3c:50:7a:22:7f:d9:c3:14:9b:53:55:0b:86:a1:45:
be:b0:dc:d7:14:20:6e:42:53:33:5b:53:48:65:e2:d2:a4:db:
c7:f2:a6:76:33:ec:b4:6f:89:33:b0:a3:32:93:e9:38:91:b9:
24:8e:4e:7e:c4:13:6e:0c:d9:4f:b2:2b:43:bf:fb:fd:da:89:
11:8f:4c:c8:e3:13:ed:60:15:b2:e5:f7:7b:a5:52:b7:ea:f4:
aa:b4:1e:85:0b:dc:44:97:5f:a1:02:f2:19:fb:37:bc:57:db:
08:29:d0:d5:ef:d0:4e:bd:a3:7b:ff:de:e3:c3:d0:f4:11:89:
93:56:4c:a1:ab:f4:6c:c7:86:3c:dd:e1:d1:37:4a:43:20:d1:
c9:99:a8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:46:04 2026 by rpki-client