
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
File: F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft (raw, json)
Hash identifier: z1gVKRlHOAepc/vioxGUb0L4aaaA7ZYXZlqiWulOTvM=
Subject key identifier: 0F:38:45:F4:53:1F:08:2B:08:4F:B3:F1:28:CF:77:40:D2:2A:DE:86
Authority key identifier: F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85
Certificate issuer: /CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485
Certificate serial: 07D8E7EBEA2DD7C97CDCE311A97E400AD24DC0E1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
Manifest number: 012F
Signing time: Mon 12 Oct 2026 04:41:33 +0000
Manifest this update: Mon 12 Oct 2026 04:36:33 +0000
Manifest next update: Thu 15 Oct 2026 12:59:33 +0000
Files and hashes: 1: F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl (hash: jacHrbVPSyEDF6E0N3qKLbK0RQ6Sa5SAf2ShT1XHpCs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl
rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:d8:e7:eb:ea:2d:d7:c9:7c:dc:e3:11:a9:7e:40:0a:d2:4d:c0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0E2B456D4CD7113232621ECBF792F4A62F9F485
Validity
Not Before: Oct 12 04:36:33 2026 GMT
Not After : Oct 15 12:59:33 2026 GMT
Subject: CN=0F3845F4531F082B084FB3F128CF7740D22ADE86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:b7:63:d2:dd:72:7d:f6:1f:c2:db:9e:85:
16:0f:77:f5:fd:f0:4b:0f:d9:76:3f:f0:ae:ac:c6:
04:3f:00:74:12:2a:21:c0:b6:51:0e:fb:19:7d:1a:
9c:42:e5:92:57:ba:ea:97:e0:d5:c6:32:06:dc:17:
02:0e:e0:13:f0:14:28:9b:fd:71:05:d7:98:75:b7:
60:5f:2e:47:d1:d6:1e:5d:5b:47:67:40:0e:38:73:
ec:09:34:75:54:bd:a3:3c:e1:f9:0d:4b:74:9d:f9:
dc:08:0f:88:c5:84:97:31:58:00:26:46:86:1f:4b:
28:dd:bc:eb:7f:3b:4d:ae:f8:f0:33:aa:b4:ef:cb:
bd:f6:f0:f1:99:8d:34:43:3f:d7:ae:8d:c1:c1:c8:
92:e8:95:19:e6:59:6a:d4:03:cf:51:00:57:62:00:
06:52:73:05:6d:f0:09:8b:46:65:be:04:5d:d2:63:
99:07:4d:3b:63:1c:78:b7:47:ba:8c:0b:2f:e5:d5:
a5:72:b6:ef:ef:cb:a5:3a:91:08:3b:7a:48:ee:b6:
4d:8d:5f:a3:26:e7:71:59:4c:07:48:f2:b6:35:4f:
41:98:f5:4c:ce:79:d3:6d:31:a8:68:f1:64:b1:df:
58:0a:dc:37:5d:43:4e:3d:bb:5f:c2:77:ed:54:d1:
3f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:38:45:F4:53:1F:08:2B:08:4F:B3:F1:28:CF:77:40:D2:2A:DE:86
X509v3 Authority Key Identifier:
keyid:F0:E2:B4:56:D4:CD:71:13:23:26:21:EC:BF:79:2F:4A:62:F9:F4:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0E2B456D4CD7113232621ECBF792F4A62F9F485.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388778498/0/F0E2B456D4CD7113232621ECBF792F4A62F9F485.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3c:35:84:1f:fb:16:ae:17:72:a7:2f:86:15:1e:c9:75:e4:
2b:03:aa:1e:a7:69:f9:cd:60:e4:86:74:dc:87:5f:b4:5a:db:
f9:e6:7b:f8:c6:15:a5:ef:c6:37:44:23:46:63:60:4d:53:3d:
02:03:a3:b0:5a:0a:6a:2b:40:f2:5b:5f:bc:35:28:b2:90:85:
23:e8:50:e8:97:cc:d7:98:3c:ce:33:6d:00:3b:e9:8f:a2:02:
9b:e3:ee:67:97:07:b5:f2:ad:a2:fb:9d:26:e7:98:a3:99:84:
db:d4:d0:7a:56:25:fa:4e:a7:03:7e:f5:79:1d:38:c6:79:bb:
9d:83:e8:23:01:7a:64:80:89:bf:e9:e1:19:9d:72:d4:83:62:
46:74:5e:35:9e:40:5f:f5:10:b7:bb:89:4b:d7:12:be:4f:fb:
15:38:25:e1:77:9f:36:1b:c6:19:03:8e:64:c3:fd:c4:dd:9d:
47:14:82:29:16:d9:5a:b1:46:fc:1f:0d:3b:5f:d5:db:54:e6:
f5:fa:9a:8b:71:a0:ec:19:3a:8d:da:e6:30:48:b0:a9:51:fe:
db:ea:6f:6b:85:36:f5:0f:1e:75:66:32:8d:02:1b:f7:c8:3d:
90:72:46:fc:37:76:6e:f4:00:81:1a:09:19:d7:63:3a:12:b5:
3b:f1:4d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 13:36:39 2026 by rpki-client