
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1152426421591736363/0/79BDEC2D92B303BA6F06338A998430FE16CD50EB.mft
File: 79BDEC2D92B303BA6F06338A998430FE16CD50EB.mft (raw, json)
Hash identifier: g6KTnRqWdvLQjHKY5UrdcUqYxsMFQFfXvF2xrtXBuBM=
Subject key identifier: 51:6D:5D:92:71:14:CD:40:14:AE:31:8D:2D:90:66:62:58:CC:87:67
Authority key identifier: 79:BD:EC:2D:92:B3:03:BA:6F:06:33:8A:99:84:30:FE:16:CD:50:EB
Certificate issuer: /CN=79BDEC2D92B303BA6F06338A998430FE16CD50EB
Certificate serial: 1DA97D08B864E83267AE69FFB46EB5CBA96B60E5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79BDEC2D92B303BA6F06338A998430FE16CD50EB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1152426421591736363/0/79BDEC2D92B303BA6F06338A998430FE16CD50EB.mft
Manifest number: 0D
Signing time: Tue 13 Oct 2026 15:43:09 +0000
Manifest this update: Tue 13 Oct 2026 15:38:09 +0000
Manifest next update: Sat 17 Oct 2026 00:45:09 +0000
Files and hashes: 1: 79BDEC2D92B303BA6F06338A998430FE16CD50EB.crl (hash: LUidzirHDU7eunQZ/VTPADP6XfQB5cm1Lig0U6ipYxc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1152426421591736363/0/79BDEC2D92B303BA6F06338A998430FE16CD50EB.crl
rsync://rpki-rps.cnnic.cn/repo/A1152426421591736363/0/79BDEC2D92B303BA6F06338A998430FE16CD50EB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79BDEC2D92B303BA6F06338A998430FE16CD50EB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 00:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:a9:7d:08:b8:64:e8:32:67:ae:69:ff:b4:6e:b5:cb:a9:6b:60:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79BDEC2D92B303BA6F06338A998430FE16CD50EB
Validity
Not Before: Oct 13 15:38:09 2026 GMT
Not After : Oct 17 00:45:09 2026 GMT
Subject: CN=516D5D927114CD4014AE318D2D90666258CC8767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:49:ec:aa:3e:3f:2b:90:59:30:18:7d:99:
fc:12:e7:6f:63:d5:aa:47:67:84:a3:6b:5a:a5:6c:
71:30:b1:6b:71:c5:33:56:05:88:58:f5:4a:83:e7:
ba:88:4c:49:d5:69:f7:35:84:07:ca:56:6f:51:9d:
53:a0:0d:c8:e1:07:d1:c1:7a:6f:ef:c1:3c:02:cf:
41:38:6e:35:41:26:9b:db:2e:a8:47:e9:11:88:59:
ee:1f:64:42:28:9a:25:b8:0f:ff:04:de:88:1d:63:
5d:b9:01:cd:e0:87:7d:63:fd:b4:1a:be:70:5c:cd:
aa:65:57:65:34:d9:51:a0:52:83:9a:58:58:a3:f2:
c6:08:c5:fa:03:84:79:4e:b5:aa:d3:61:62:2e:3d:
57:36:4f:f5:42:d8:2e:f5:43:60:2d:bf:46:e6:6d:
2f:f3:74:3a:8a:3d:f5:e5:df:32:75:e5:45:5f:78:
68:81:c1:fa:0e:a6:db:32:b4:16:45:50:c5:f3:15:
3b:b4:71:3c:68:40:18:4a:fe:65:60:63:de:7b:02:
56:d8:75:e8:20:aa:a1:c4:d9:75:c0:e6:e8:64:35:
dc:e3:f6:93:dd:f0:d3:c1:08:c7:ff:da:03:cb:c4:
6a:6a:de:f1:3e:1d:86:16:d5:9a:84:fd:05:8d:f9:
27:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6D:5D:92:71:14:CD:40:14:AE:31:8D:2D:90:66:62:58:CC:87:67
X509v3 Authority Key Identifier:
keyid:79:BD:EC:2D:92:B3:03:BA:6F:06:33:8A:99:84:30:FE:16:CD:50:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1152426421591736363/0/79BDEC2D92B303BA6F06338A998430FE16CD50EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/79BDEC2D92B303BA6F06338A998430FE16CD50EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1152426421591736363/0/79BDEC2D92B303BA6F06338A998430FE16CD50EB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4d:3e:86:a0:98:ab:5c:7a:0f:63:e0:be:fa:53:fc:a3:41:
51:c7:a7:61:e9:76:53:be:55:4d:34:3d:fd:d6:08:f6:e9:38:
db:fb:25:93:bb:4f:08:37:82:ef:52:73:7f:bd:e5:09:05:23:
e7:e0:36:fa:8e:af:ac:36:47:71:11:05:43:cf:cc:f0:f4:7c:
ec:5f:d4:d0:05:60:85:08:55:4a:7b:42:45:95:6d:a6:09:32:
f9:2c:f6:91:cb:49:03:e4:52:4d:d3:d6:5c:99:2d:4a:72:ec:
6d:c8:87:a9:26:54:e9:9d:16:c9:84:d0:d5:90:f6:1f:f3:f8:
e2:2e:10:1e:ee:80:4e:30:e9:04:13:86:f9:67:7f:b7:d6:21:
88:98:a9:d8:a3:23:e2:e4:07:4d:ae:ef:90:ae:d1:2d:5f:ee:
d6:f3:ba:97:2e:8e:64:a8:83:ef:20:fb:79:dd:67:a6:94:48:
cf:e1:21:9c:20:79:73:59:67:9b:fd:6a:05:c6:02:09:af:ab:
18:31:f8:f5:eb:37:5b:24:77:a5:3f:a8:a3:0f:17:3c:27:a2:
16:5a:9a:d1:21:28:ca:c5:53:c3:b3:af:f2:92:b4:1e:bb:69:
56:ce:0f:d3:42:6a:e6:49:ac:6a:c6:10:84:0f:cb:80:5e:04:
73:2e:a2:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:48:12 2026 by rpki-client