
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
File: 12292A8CE4276ED3C82E79BA376F7A0363A06716.mft (raw, json)
Hash identifier: A8drV6YMCfIwNfsY4bwfSUIBEuvbmrTTODf92nZXUpU=
Subject key identifier: 95:8C:01:5B:AD:2F:D0:D5:3E:A9:86:DD:3D:5E:89:C9:31:08:35:5A
Authority key identifier: 12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16
Certificate issuer: /CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
Certificate serial: 5D709779205304F1A1D81964A79E3B3B1B38B23C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
Manifest number: 013B
Signing time: Mon 12 Oct 2026 15:37:05 +0000
Manifest this update: Mon 12 Oct 2026 15:32:05 +0000
Manifest next update: Thu 15 Oct 2026 20:00:05 +0000
Files and hashes: 1: 12292A8CE4276ED3C82E79BA376F7A0363A06716.crl (hash: cIEqyLcvMB6hTNzLZ4805oL/0blVfeGC2RVdYTyNyuM=)
2: 3134342e37392e3131392e302f32342d3234203d3e20313335353432.roa (hash: zBALkojrGEY7SR5/7+fqt3Odg1/G/Zmmn1B3936v+KM=)
3: 3134342e37392e3131382e302f32342d3234203d3e20313335353432.roa (hash: POleG0l4wno//ZX5b+0oZBB9yM8f+wy3+HMPXea5rYs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 10:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:70:97:79:20:53:04:f1:a1:d8:19:64:a7:9e:3b:3b:1b:38:b2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12292A8CE4276ED3C82E79BA376F7A0363A06716
Validity
Not Before: Oct 12 15:32:05 2026 GMT
Not After : Oct 15 20:00:05 2026 GMT
Subject: CN=958C015BAD2FD0D53EA986DD3D5E89C93108355A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:10:e1:20:4b:78:f6:15:f8:00:44:b7:03:
c5:46:dc:e2:50:b8:10:ae:ab:5e:6d:56:b2:21:1e:
e8:f0:e7:fb:3b:41:f7:69:df:28:d4:18:15:f1:73:
84:38:71:00:8b:a6:e1:45:01:f3:82:38:7a:9f:d3:
b1:96:08:3d:c3:23:eb:76:4c:c4:7f:43:0a:2c:2f:
e8:7e:14:f2:f2:d2:9d:d1:03:5d:11:ed:84:98:be:
18:8a:68:7d:9e:0a:2f:20:e9:1a:ac:8a:50:6d:2c:
bc:5a:65:f6:d0:15:d2:00:d2:26:f8:84:48:71:4f:
32:4a:54:2e:b9:47:4e:96:55:35:1e:99:a4:63:74:
78:56:95:32:a4:d0:9f:90:b5:84:ab:e0:d8:fc:31:
d3:69:88:9d:64:1d:92:c5:de:bc:23:9a:b7:92:bf:
3c:11:81:d4:64:b4:1c:d3:ee:b5:ec:77:92:d6:13:
b5:fc:ef:f8:1c:4c:b4:53:b0:0f:f4:eb:27:0a:7b:
ba:07:67:9a:dc:2d:b4:5a:b7:53:22:18:fe:4c:f8:
65:5a:60:f9:1c:81:1d:ce:d6:e0:96:46:79:82:c3:
2d:df:12:f4:71:64:27:e1:f0:e7:57:7a:a4:4b:ed:
cd:f2:dc:ee:39:be:76:e6:0a:7a:3c:56:f7:4e:ac:
97:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8C:01:5B:AD:2F:D0:D5:3E:A9:86:DD:3D:5E:89:C9:31:08:35:5A
X509v3 Authority Key Identifier:
keyid:12:29:2A:8C:E4:27:6E:D3:C8:2E:79:BA:37:6F:7A:03:63:A0:67:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721662465/0/12292A8CE4276ED3C82E79BA376F7A0363A06716.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a2:87:63:f1:a4:c9:3b:b5:21:e5:2c:3f:7e:12:e2:a7:c3:
19:8e:e2:fe:47:d6:cf:01:af:31:5c:2b:e7:bc:ff:74:2b:58:
f1:8f:67:ec:43:d6:56:99:be:08:54:6d:24:5e:4d:47:a9:7d:
6c:4c:0a:c2:3d:ee:0a:56:94:0c:b8:6f:29:85:0f:e4:d1:13:
37:f9:0a:9d:e4:21:69:c7:85:4c:24:11:3e:4b:fe:31:85:c3:
54:05:dc:40:32:fb:ac:08:c5:ae:f4:a8:23:cc:dc:c6:5c:61:
3d:35:9b:8c:c9:b9:88:18:2e:76:e7:7c:91:94:37:4f:bb:b6:
ae:23:1a:06:e5:d8:96:37:18:87:8b:eb:8c:39:3b:de:db:c7:
98:d1:e6:ce:15:fe:0c:4a:78:2d:7a:f5:b1:09:06:b4:5e:cc:
eb:73:bd:10:2e:11:f4:9a:3d:c9:dc:27:d2:60:b5:5b:a7:f0:
f3:e8:e7:7e:8a:be:11:09:0c:e4:d4:58:ce:21:34:65:de:fe:
3a:e7:42:63:48:4f:53:f0:05:90:f2:c0:7f:d0:e7:6b:68:f3:
14:74:11:7a:ba:1e:1b:1d:d0:67:87:1d:ad:6f:30:13:2d:55:
09:d6:35:e7:ee:47:2a:54:42:05:3e:cc:e9:86:46:56:78:33:
a2:17:20:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:52:49 2026 by rpki-client