
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
File: 97B5B7009501E4718F06B9B36D215369C958203F.mft (raw, json)
Hash identifier: PpayOz81hd3lHfrKTPvoii4r7AUBUNxYea+N988P34c=
Subject key identifier: E3:29:AE:F2:CE:A3:8E:93:CF:0D:91:FF:25:81:87:B7:7E:89:2C:54
Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F
Certificate issuer: /CN=97B5B7009501E4718F06B9B36D215369C958203F
Certificate serial: 797EADAB04ABF12984C4F89459358D99DCF5A513
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
Manifest number: 5A
Signing time: Fri 27 Mar 2026 06:48:29 +0000
Manifest this update: Fri 27 Mar 2026 06:43:29 +0000
Manifest next update: Sat 28 Mar 2026 08:15:29 +0000
Files and hashes: 1: 97B5B7009501E4718F06B9B36D215369C958203F.crl (hash: IaqgQuABB+0Xrvi02MxriA9roq5JeP/SchKKUh07us8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 03:32:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:7e:ad:ab:04:ab:f1:29:84:c4:f8:94:59:35:8d:99:dc:f5:a5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F
Validity
Not Before: Mar 27 06:43:29 2026 GMT
Not After : Mar 28 08:15:29 2026 GMT
Subject: CN=E329AEF2CEA38E93CF0D91FF258187B77E892C54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:0e:82:ad:4c:42:c3:87:91:8a:b7:8c:13:
26:7b:4c:47:d8:60:0e:7b:99:f5:f0:2b:cf:29:5d:
0d:33:eb:50:90:b3:0b:5d:ab:65:bc:c7:64:99:67:
22:80:a7:e4:c4:0a:80:75:36:92:8a:d9:67:13:72:
2d:04:4a:dc:86:e6:68:43:e4:e5:35:e6:84:5b:25:
65:f0:bc:0d:db:04:97:dd:3c:1e:48:ae:4b:d0:23:
93:4b:cd:ee:b9:62:64:68:de:43:08:0a:d1:80:44:
75:76:41:36:61:bf:ed:78:10:e9:36:04:79:14:b4:
4a:56:c2:31:41:cd:87:f8:0a:67:43:6d:a1:ba:c7:
57:64:a7:1c:90:72:9c:5d:22:44:e6:9f:57:21:fc:
ab:cf:2a:c6:2b:4a:74:35:64:8a:88:96:52:5a:11:
fa:6e:af:61:a0:01:ca:cc:a1:c0:fa:60:48:5e:ce:
2b:9a:60:0b:2f:81:b6:10:53:59:2d:5b:12:2c:bf:
1a:e9:c7:d0:ef:9b:5f:d6:82:56:50:3c:0e:db:9e:
39:81:6c:ba:43:94:ef:51:77:74:08:4c:d7:a0:6c:
67:86:2e:44:d6:17:86:d5:7b:c0:81:5e:91:aa:32:
2f:7a:55:00:3d:a4:1a:86:1b:8e:29:31:d3:20:cb:
d4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:29:AE:F2:CE:A3:8E:93:CF:0D:91:FF:25:81:87:B7:7E:89:2C:54
X509v3 Authority Key Identifier:
keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:53:fe:bf:fb:04:9e:54:03:b3:39:8c:b5:34:32:ab:fd:6c:
e6:40:4b:a4:ae:24:eb:c6:2a:f6:5c:54:ca:60:8f:b0:b7:8c:
94:ff:da:2b:7e:50:24:78:dc:6d:45:ec:e6:8c:37:0c:ec:e0:
31:f2:4b:60:0c:2e:86:3b:f2:43:a5:9b:26:3d:26:65:4f:95:
7e:d7:93:ef:15:39:aa:a8:21:d5:6c:0e:cb:88:31:92:a8:2f:
ea:3f:e2:52:ae:10:ce:18:f1:ec:67:66:c3:f5:4d:80:30:16:
d0:c7:51:50:57:df:4a:9e:c0:18:24:05:de:63:32:63:95:68:
a6:cc:ac:46:f5:22:65:de:a3:6e:51:0c:c5:76:a0:d3:5f:2c:
b1:0e:4d:1a:ea:5c:91:da:07:ad:bd:75:67:d8:72:a2:2b:9d:
2c:3a:29:37:1f:f2:a4:9b:db:4c:98:ee:33:0b:f7:c7:b1:3d:
8b:de:d9:9b:ae:12:76:b5:92:de:74:bd:03:65:3b:c4:7d:05:
d1:0b:4e:76:fd:82:d6:ff:39:44:46:11:b6:a3:11:b3:b5:27:
a3:fc:e8:bc:26:d4:69:1e:b2:3d:07:4b:4f:04:0d:61:9b:a2:
c7:a1:ff:fd:db:50:d0:d8:9d:e6:a5:55:9a:19:7d:3f:a8:77:
bb:25:03:a0
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUeX6tqwSr8SmExPiUWTWNmdz1pRMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlD
OTU4MjAzRjAeFw0yNjAzMjcwNjQzMjlaFw0yNjAzMjgwODE1MjlaMDMxMTAvBgNV
BAMTKEUzMjlBRUYyQ0VBMzhFOTNDRjBEOTFGRjI1ODE4N0I3N0U4OTJDNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUrw6CrUxCw4eRireMEyZ7TEfY
YA57mfXwK88pXQ0z61CQswtdq2W8x2SZZyKAp+TECoB1NpKK2WcTci0EStyG5mhD
5OU15oRbJWXwvA3bBJfdPB5IrkvQI5NLze65YmRo3kMICtGARHV2QTZhv+14EOk2
BHkUtEpWwjFBzYf4CmdDbaG6x1dkpxyQcpxdIkTmn1ch/KvPKsYrSnQ1ZIqIllJa
Efpur2GgAcrMocD6YEheziuaYAsvgbYQU1ktWxIsvxrpx9Dvm1/WglZQPA7bnjmB
bLpDlO9Rd3QITNegbGeGLkTWF4bVe8CBXpGqMi96VQA9pBqGG44pMdMgy9RpAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU4ymu8s6jjpPPDZH/JYGHt36JLFQwHwYDVR0j
BBgwFoAUl7W3AJUB5HGPBrmzbSFTaclYID8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTExNzc1NzYxMjAzNS8xLzk3QjVCNzAwOTUwMUU0NzE4RjA2QjlCMzZEMjE1
MzY5Qzk1ODIwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlDOTU4MjAzRi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMS85N0I1QjcwMDk1MDFF
NDcxOEYwNkI5QjM2RDIxNTM2OUM5NTgyMDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvFP+v/sEnlQD
szmMtTQyq/1s5kBLpK4k68Yq9lxUymCPsLeMlP/aK35QJHjcbUXs5ow3DOzgMfJL
YAwuhjvyQ6WbJj0mZU+VfteT7xU5qqgh1WwOy4gxkqgv6j/iUq4Qzhjx7Gdmw/VN
gDAW0MdRUFffSp7AGCQF3mMyY5VopsysRvUiZd6jblEMxXag018ssQ5NGupckdoH
rb11Z9hyoiudLDopNx/ypJvbTJjuMwv3x7E9i97Zm64SdrWS3nS9A2U7xH0F0QtO
dv2C1v85REYRtqMRs7Uno/zovCbUaR6yPQdLTwQNYZuix6H//dtQ0Nid5qVVmhl9
P6h3uyUDoA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:32:57 2026 by rpki-client