
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
File: 1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft (raw, json)
Hash identifier: VuodZ68x3GT3jnAnRvEUaeQpO5GIi4xqK3bm0kQBlic=
Subject key identifier: 93:DE:7D:AD:F9:E2:36:18:72:99:1F:D9:49:CE:21:AF:D1:07:5D:F6
Authority key identifier: 1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
Certificate issuer: /CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Certificate serial: 2725692695FB20FFF68E9DE347B9B8CD34EAC816
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
Manifest number: 57
Signing time: Wed 25 Mar 2026 22:18:28 +0000
Manifest this update: Wed 25 Mar 2026 22:13:28 +0000
Manifest next update: Fri 27 Mar 2026 02:02:28 +0000
Files and hashes: 1: 1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl (hash: tb6IA5R15HFutfe3f+jYYIcWpLvqeC04kk6qHyYHl2I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 02:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:25:69:26:95:fb:20:ff:f6:8e:9d:e3:47:b9:b8:cd:34:ea:c8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077
Validity
Not Before: Mar 25 22:13:28 2026 GMT
Not After : Mar 27 02:02:28 2026 GMT
Subject: CN=93DE7DADF9E2361872991FD949CE21AFD1075DF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:cf:1d:5e:2f:ef:10:fa:3b:93:d1:fb:fe:
ce:31:98:31:16:e0:e7:e9:6a:d5:10:94:61:00:13:
81:49:e3:e8:35:55:08:b8:c1:75:18:46:07:91:27:
14:05:91:5b:97:56:f8:b7:44:a2:e1:ed:4c:5b:de:
10:a6:37:ca:7c:a3:00:0b:6e:08:b4:fd:f8:5f:fa:
14:d4:54:1a:7b:b3:57:0f:84:19:d1:67:ac:25:4a:
98:e4:ae:69:2e:6f:47:ac:03:22:52:04:6e:e7:47:
96:30:02:b8:81:12:9e:5f:bf:cf:8a:d7:61:b8:88:
a3:98:39:ed:c8:4c:d0:85:7c:42:00:f8:43:f5:d8:
75:79:fc:25:7a:57:77:a2:88:c7:8d:e1:5b:ac:4a:
41:54:25:9a:7a:46:7e:cd:f3:85:4c:e2:77:d8:8e:
cd:85:40:90:e6:5b:92:e6:87:dc:d8:aa:7b:ad:c7:
76:1c:a2:c7:be:56:ff:7d:af:c8:bc:0b:0f:55:00:
1a:a6:29:22:7b:c1:3c:be:cb:86:88:99:e3:79:e2:
49:26:ee:4a:d6:a5:d1:fe:5b:06:bb:36:fa:a6:e2:
fc:81:3c:5a:3e:9b:3b:d5:55:88:34:e7:39:90:97:
6d:34:3b:57:2a:32:9e:26:40:4b:b4:3b:ce:c8:60:
7c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DE:7D:AD:F9:E2:36:18:72:99:1F:D9:49:CE:21:AF:D1:07:5D:F6
X509v3 Authority Key Identifier:
keyid:1E:0C:6D:40:B8:6B:2C:C5:DE:FE:DF:8E:42:F6:BA:84:51:C6:F0:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/1/1E0C6D40B86B2CC5DEFEDF8E42F6BA8451C6F077.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:61:d8:59:60:b6:ed:c4:e8:5a:c8:8c:14:95:4e:f7:8b:e3:
84:86:43:be:96:3b:5b:42:6d:33:61:98:ac:ae:1b:a1:cf:d7:
d0:ee:4b:b1:5d:6b:7c:10:6e:9d:54:a1:0d:69:cc:5f:18:a9:
ef:da:78:90:b5:80:4a:b5:85:02:bc:66:a7:12:75:9a:82:1c:
f3:14:b1:90:aa:82:d3:9f:f4:3d:d8:a5:4f:5c:2d:e8:22:12:
b9:01:eb:35:3b:cf:29:a4:83:f8:54:4a:64:e2:a1:21:38:4e:
a6:d6:cf:92:e7:d6:8e:19:c7:fd:61:5b:bb:52:ad:f5:f7:3a:
15:9e:8d:f8:d9:bd:0c:5f:3a:fc:63:2e:d3:02:3a:b8:3e:cb:
12:22:e2:68:71:7f:0e:85:c8:e9:2e:e2:82:da:c4:05:fc:75:
a9:c9:7e:63:15:57:47:39:31:84:4f:1c:5f:b0:57:d8:59:87:
76:09:8e:51:a7:14:43:ea:c9:d3:67:3e:ee:01:76:8a:63:01:
89:dc:4a:29:fe:0f:5f:95:b2:28:dc:2d:a2:14:1c:32:98:ad:
b4:b2:ac:b5:a2:81:95:e1:67:c2:dc:7b:05:00:f1:26:32:8d:
ba:15:fc:9b:1c:ea:ef:c5:96:d6:cd:2a:f3:ca:7a:e2:91:35:
32:35:1a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:34:28 2026 by rpki-client