
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.mft
File: 32BF8200A36B6DAC1374D05EDB3097D701F3BC13.mft (raw, json)
Hash identifier: 8LMHFzFPttJ92v3QGri/7mFZkW+y2wH/UKD7svWE0ac=
Subject key identifier: 91:82:00:45:B1:3A:82:8D:01:E1:8C:84:BE:75:6B:90:1E:5E:1E:54
Authority key identifier: 32:BF:82:00:A3:6B:6D:AC:13:74:D0:5E:DB:30:97:D7:01:F3:BC:13
Certificate issuer: /CN=32BF8200A36B6DAC1374D05EDB3097D701F3BC13
Certificate serial: 2C22775AE5E32516028CB2BA0E6FECBAB4F0C1B4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.mft
Manifest number: 0E
Signing time: Tue 13 Oct 2026 05:02:44 +0000
Manifest this update: Tue 13 Oct 2026 04:57:44 +0000
Manifest next update: Fri 16 Oct 2026 12:22:44 +0000
Files and hashes: 1: 32BF8200A36B6DAC1374D05EDB3097D701F3BC13.crl (hash: nA1WWv2DjbE9lU0yNtb5UXxqEDkO/Qn/q3fZPFM1zfc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.crl
rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 12:22:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:22:77:5a:e5:e3:25:16:02:8c:b2:ba:0e:6f:ec:ba:b4:f0:c1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32BF8200A36B6DAC1374D05EDB3097D701F3BC13
Validity
Not Before: Oct 13 04:57:44 2026 GMT
Not After : Oct 16 12:22:44 2026 GMT
Subject: CN=91820045B13A828D01E18C84BE756B901E5E1E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:77:5a:77:89:ef:c5:72:cf:26:7d:b5:b3:
e7:03:b9:1d:af:ee:17:b1:f5:d3:0f:9f:a9:b1:b9:
f1:97:bf:18:3c:03:ac:77:e8:93:f5:14:31:c7:08:
b2:8c:dd:46:60:d3:2b:df:89:17:b7:33:8a:c1:ea:
6c:b6:c6:14:ae:28:75:07:32:b2:4c:2b:08:b1:b2:
5e:fb:6c:a9:83:97:fa:3d:31:24:45:25:73:4e:fa:
c7:26:c3:f0:82:3d:e3:7b:67:0f:12:b9:8e:7e:d2:
54:8e:bc:c1:05:ee:7a:82:d2:b3:61:cc:f0:fa:be:
4c:25:8d:ae:5c:83:a5:96:a1:bf:29:48:ba:f4:ba:
21:72:77:37:fd:fd:52:e4:87:94:45:5c:cd:23:52:
9b:6b:e3:65:03:8f:90:64:ad:ae:c3:c0:91:3c:a7:
fd:d0:d1:c4:e4:b2:5c:4d:a2:de:2f:f6:f7:6a:78:
28:f7:00:44:23:55:a3:f8:9c:67:48:40:46:7d:af:
95:6f:8f:c3:11:49:27:d6:3c:1e:9d:94:9c:6d:f4:
d8:31:a3:65:48:f2:1e:22:eb:f7:bf:77:85:6c:4d:
9e:48:c5:c8:df:9f:f6:47:e3:46:4f:7a:40:01:be:
c9:64:53:d5:56:46:c1:93:76:fa:b0:31:cf:bc:64:
f3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:82:00:45:B1:3A:82:8D:01:E1:8C:84:BE:75:6B:90:1E:5E:1E:54
X509v3 Authority Key Identifier:
keyid:32:BF:82:00:A3:6B:6D:AC:13:74:D0:5E:DB:30:97:D7:01:F3:BC:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1152048045362249773/0/32BF8200A36B6DAC1374D05EDB3097D701F3BC13.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:25:49:6f:61:35:05:09:43:fa:03:b5:b2:16:bb:8a:7e:a8:
a7:5e:53:62:0e:fb:d2:b5:4d:cf:f4:2f:11:68:34:f9:1e:9d:
0c:1d:68:27:aa:98:38:5f:42:1b:78:91:e1:19:39:b4:d0:bd:
2c:d8:a0:a5:5b:b7:31:3e:5c:e9:1d:94:60:f6:f6:5a:9b:10:
28:60:71:1e:ef:ae:08:cf:43:3c:e6:8c:04:9f:6d:38:3d:eb:
9f:10:cd:41:db:51:2d:12:8d:ea:50:4a:f6:ff:4c:71:f2:1e:
89:6f:0f:7f:2c:f2:4b:41:66:95:ca:a9:af:76:f1:c7:94:91:
e4:84:ba:1b:02:a6:09:66:af:f1:24:9e:fd:da:7b:ec:47:e2:
e0:26:ef:cc:ab:77:17:bb:dd:41:ba:5a:9d:32:39:ba:ab:ee:
8d:52:da:6b:85:70:0a:95:56:24:2f:1e:ab:a5:67:5b:11:e5:
b5:cc:fb:40:91:a9:e9:04:98:4c:34:4e:7f:e7:98:07:df:7e:
1a:b4:f8:04:31:84:49:29:57:63:b6:9a:44:4e:23:fa:87:2e:
e5:6e:27:fd:1c:3c:72:37:c5:ba:c1:dd:76:5e:87:32:cf:8c:
ae:9b:1f:b0:14:57:33:f5:05:f7:2d:09:70:a9:59:32:c7:ca:
32:91:96:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:49:24 2026 by rpki-client