
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft
File: 848188DBA8D369CB93B918182269D397DE354F44.mft (raw, json)
Hash identifier: UFDBowHVl7Tm9o2ISqQRPHSoDb9od8q406C2anC2f3A=
Subject key identifier: CD:E2:09:46:90:32:2F:38:F6:AA:1E:8A:5F:78:91:C2:B8:FA:4B:24
Authority key identifier: 84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44
Certificate issuer: /CN=848188DBA8D369CB93B918182269D397DE354F44
Certificate serial: 697D6D94478DF173C037C34D3352B4C677E1FC7A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft
Manifest number: FB
Signing time: Fri 24 Jul 2026 05:50:31 +0000
Manifest this update: Fri 24 Jul 2026 05:45:31 +0000
Manifest next update: Sat 25 Jul 2026 09:45:31 +0000
Files and hashes: 1: 3130332e36302e33322e302f32322d3332203d3e20313039.roa (hash: MzSW+d1QZG9GRLvksmbq6oNyDTlfux+PnhU3TrTlXko=)
2: 3131312e3232332e382e302f32322d3234203d3e203234343039.roa (hash: S/Wh/JVPJO7YKvn1vwUqixNT3YF0XjGX3yFXKcclN04=)
3: 3131312e3232332e382e302f32322d3332203d3e20313039.roa (hash: zQZ+GZ/PmnZiTYYUgL8WbnnthSRy3dbcLyqydGTq64o=)
4: 848188DBA8D369CB93B918182269D397DE354F44.crl (hash: KGBS+NJRTFsJ5dYWtHPqW907HlnFkeYPLPOYBOh765c=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:7d:6d:94:47:8d:f1:73:c0:37:c3:4d:33:52:b4:c6:77:e1:fc:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848188DBA8D369CB93B918182269D397DE354F44
Validity
Not Before: Jul 24 05:45:31 2026 GMT
Not After : Jul 25 09:45:31 2026 GMT
Subject: CN=CDE2094690322F38F6AA1E8A5F7891C2B8FA4B24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:f8:ce:1f:d8:8c:78:eb:64:25:91:93:08:
df:30:4e:50:cd:2c:5d:8a:c1:7c:8c:b5:67:1e:75:
64:b0:b2:a5:70:e1:94:1a:8a:fe:88:66:1b:c2:e3:
bf:06:51:83:17:36:33:e3:b9:4d:66:a4:6a:d6:06:
1e:4d:4d:6b:c5:57:a9:4d:13:be:60:d3:41:65:ea:
d5:5d:01:f0:33:0f:11:d4:42:98:f5:c6:8e:54:53:
a6:58:9f:0c:4e:b2:a1:df:41:a4:e3:7c:8b:db:ad:
ff:bb:45:fb:1b:1e:2b:c0:44:33:d3:81:10:10:ab:
7d:28:19:33:76:bd:9b:c3:ae:52:74:5b:5c:34:ce:
6b:12:6a:96:0d:9f:49:84:e1:f6:73:41:60:1d:e0:
d0:b6:48:fe:ba:a4:b6:4e:c9:77:06:8d:07:bc:e3:
e9:6e:dc:98:fa:0d:24:22:43:82:19:f1:98:92:80:
70:c2:a6:d8:4a:90:94:d9:8c:82:de:20:ba:64:03:
50:58:5c:a5:cf:53:20:b5:57:b4:6f:21:32:16:2e:
2e:23:a9:e7:77:fd:23:b2:ef:ff:5f:ec:81:e4:89:
0b:92:2a:4d:47:42:73:31:2c:6e:e3:57:1e:97:55:
da:fa:0d:6c:f1:6d:2c:a2:2f:9e:e5:0d:b2:1a:9a:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E2:09:46:90:32:2F:38:F6:AA:1E:8A:5F:78:91:C2:B8:FA:4B:24
X509v3 Authority Key Identifier:
keyid:84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0a:63:4e:69:80:23:40:0a:0a:22:01:c8:b5:88:ff:fc:53:
85:49:e1:02:58:55:5e:cf:9b:9c:d2:99:46:43:9d:97:b7:87:
38:1c:55:24:9d:ab:98:72:e8:77:86:78:df:e3:09:c9:2e:7c:
48:6e:e8:c6:f0:7c:56:a2:3e:70:27:e5:4b:e8:d4:19:c6:d1:
6e:40:26:46:ec:9a:de:ba:98:41:aa:bd:31:60:7a:00:c8:21:
05:29:49:9d:49:9e:ca:74:e5:94:ca:5d:5d:7b:78:62:4f:c5:
9b:56:ff:29:36:d2:a8:84:aa:37:25:bd:03:8c:ca:7e:99:df:
f8:ce:7c:39:03:8e:d8:ec:fe:7d:70:35:74:60:95:ee:15:92:
2e:78:55:cf:b9:2e:cb:fc:a2:f5:4c:48:f7:49:4c:45:aa:ee:
1d:98:d5:68:db:82:00:4f:a2:c3:14:74:ad:bc:58:de:b9:d8:
e9:b5:47:7b:63:f8:54:df:14:2c:8d:a5:f8:9f:d4:83:67:86:
47:51:90:c0:36:49:49:df:a4:da:37:8e:5a:55:c2:9b:3f:b2:
45:50:f6:6d:e7:24:36:d6:6b:db:50:09:d3:01:15:08:08:b9:
fd:4b:b7:fe:f9:e6:a6:bc:c2:23:d6:7a:78:b6:ed:5b:8d:24:
6e:3a:46:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:22 2026 by rpki-client