
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
File: D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft (raw, json)
Hash identifier: kVqGLK+kxKcDSwEVHO9swumQfR6fuJkn/PyMkc3A5bY=
Subject key identifier: 53:6E:21:35:CA:DC:CF:F8:86:B2:18:93:21:4B:F3:F7:00:CB:E0:10
Authority key identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04
Certificate issuer: /CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
Certificate serial: 7CA91AD655975C2B57A27B0E7FC34B213073FE59
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
Manifest number: 011B
Signing time: Fri 24 Jul 2026 11:16:03 +0000
Manifest this update: Fri 24 Jul 2026 11:11:03 +0000
Manifest next update: Sat 25 Jul 2026 14:22:03 +0000
Files and hashes: 1: D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl (hash: di5nyNnKQbaaGI+/KGQoOAvRfwbN1m6mYM4pd+accpQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 14:22:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:a9:1a:d6:55:97:5c:2b:57:a2:7b:0e:7f:c3:4b:21:30:73:fe:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704
Validity
Not Before: Jul 24 11:11:03 2026 GMT
Not After : Jul 25 14:22:03 2026 GMT
Subject: CN=536E2135CADCCFF886B21893214BF3F700CBE010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:7a:31:65:5f:bd:dd:88:ac:68:fe:2a:9d:
6f:6e:f7:99:d5:68:59:3d:57:3b:5a:10:fa:03:a0:
2b:ca:0a:9f:b7:b7:1c:29:2f:b6:d8:26:e6:dd:c2:
61:4f:60:45:02:9b:c4:e6:95:3e:7a:a7:ad:3c:c8:
f1:af:aa:b6:03:b5:17:98:03:46:51:d4:d9:52:ac:
bb:d2:c1:31:8b:f6:29:16:78:9a:e3:e1:2e:54:4f:
7d:a2:83:e6:2b:dc:4a:b8:43:30:0c:f6:12:b4:1f:
5b:c8:6a:e6:19:27:71:e4:da:eb:c4:da:fe:73:e8:
52:b2:f3:03:76:66:d2:1b:b6:b0:e2:c7:50:5f:4c:
b4:ce:43:88:73:30:3c:aa:a4:b5:dc:6b:92:0c:a0:
70:25:99:7e:b1:02:86:94:71:e3:97:58:43:ed:e1:
65:80:d6:5f:4d:26:b6:5d:14:6f:b6:0b:76:b2:f9:
cc:80:93:b5:52:63:df:9a:92:f5:c0:93:70:de:1e:
d1:f0:8e:c8:58:6d:2d:e6:e8:2f:4d:ca:ab:37:3d:
1f:34:05:6e:74:25:d0:b2:c6:a8:f2:9b:1b:ac:b6:
a0:20:4a:14:ad:4c:65:5c:fd:e3:e8:03:03:7c:c2:
85:43:9b:2c:35:fe:12:86:bd:27:16:ba:53:91:91:
d1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6E:21:35:CA:DC:CF:F8:86:B2:18:93:21:4B:F3:F7:00:CB:E0:10
X509v3 Authority Key Identifier:
keyid:D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6a:da:85:5d:66:87:4a:4e:aa:c1:9c:72:96:40:45:e0:d0:
d9:63:d5:7e:cd:b7:c2:d9:bc:af:cc:9f:48:7c:e2:75:30:f0:
17:e1:0a:b9:9b:47:63:eb:66:d6:9e:0c:47:57:af:8b:f0:19:
3f:11:f9:77:5d:52:cc:1e:7c:2d:fb:78:c9:f4:ba:e0:62:06:
d3:f7:50:fc:99:34:0e:34:08:c4:75:70:f8:ad:1a:49:09:f5:
93:7d:a1:8a:57:0d:b2:e2:59:79:34:f9:98:96:d3:1d:0f:ad:
05:e4:89:2d:73:67:a8:23:df:81:7d:9b:08:d8:41:12:06:1e:
41:f4:fe:a5:f4:d8:d1:e2:b0:17:3f:57:c8:f8:58:e7:f8:fe:
c3:82:86:63:fb:80:9f:1f:68:69:80:be:94:a8:c9:cf:85:23:
ca:8d:99:e5:c0:8a:27:8d:43:37:09:63:41:d7:65:3c:0f:c8:
43:94:4c:c7:7c:ec:7f:58:39:07:67:45:b7:16:5d:0d:2d:ff:
2c:65:24:c8:e5:5c:e5:3c:08:60:f0:35:3c:2f:95:13:83:52:
d5:b1:80:a8:cf:5d:dd:c3:a1:a8:07:a1:b3:78:bf:8c:4e:5c:
da:56:96:3a:59:7b:85:df:d8:9e:e7:c6:87:93:27:84:fc:aa:
99:cf:20:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:38:57 2026 by rpki-client