
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft
File: 56BE48FB7406C26DE662EBF89202C679B0854CE8.mft (raw, json)
Hash identifier: ja7Zvd8qrq0xAKTuAYdUB0IMvJgM5I/LTh02gASR1ho=
Subject key identifier: 02:86:04:F2:FF:7C:D3:92:22:6F:9B:C3:64:66:8B:7A:60:C3:93:87
Authority key identifier: 56:BE:48:FB:74:06:C2:6D:E6:62:EB:F8:92:02:C6:79:B0:85:4C:E8
Certificate issuer: /CN=56BE48FB7406C26DE662EBF89202C679B0854CE8
Certificate serial: 055FF8ADA88F4D0DAC10F22796FCC0BF0902DD65
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56BE48FB7406C26DE662EBF89202C679B0854CE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft
Manifest number: 3F
Signing time: Wed 13 May 2026 08:41:03 +0000
Manifest this update: Wed 13 May 2026 08:36:03 +0000
Manifest next update: Thu 14 May 2026 10:48:03 +0000
Files and hashes: 1: 56BE48FB7406C26DE662EBF89202C679B0854CE8.crl (hash: LB043uRPqwVWcIvaFQ2zTkDhZAIyQYPtMA8DEGjLdDg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56BE48FB7406C26DE662EBF89202C679B0854CE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 10:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:5f:f8:ad:a8:8f:4d:0d:ac:10:f2:27:96:fc:c0:bf:09:02:dd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56BE48FB7406C26DE662EBF89202C679B0854CE8
Validity
Not Before: May 13 08:36:03 2026 GMT
Not After : May 14 10:48:03 2026 GMT
Subject: CN=028604F2FF7CD392226F9BC364668B7A60C39387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:84:da:a1:70:2e:5a:da:d0:03:16:e0:57:27:
d9:21:6e:09:de:ad:31:3f:d9:77:81:00:f7:f8:e2:
85:bb:ba:c2:e3:3f:a0:f3:20:fb:00:8f:0c:20:56:
08:51:40:17:6d:c4:0c:ba:c1:3f:f1:ee:9a:1c:01:
33:3c:ce:da:52:78:c3:71:15:0b:5a:9c:b3:9c:64:
8d:bd:12:ee:a8:b6:71:d2:e4:0c:ca:5e:2e:7f:3a:
2d:50:d3:72:09:08:98:f4:b3:30:c9:57:eb:e4:b8:
73:9a:37:75:12:21:e0:84:36:ce:68:f6:55:f4:5a:
7a:16:b7:3b:3d:b9:a2:96:ee:d7:00:57:75:51:51:
9d:5f:48:8c:41:8a:da:15:12:4e:42:31:39:53:e0:
70:85:e7:8c:cc:f4:96:52:af:01:4f:f5:f3:51:55:
56:f7:34:41:a3:f0:41:1a:a9:43:b1:e6:9c:33:df:
7f:c5:13:b8:d5:82:19:77:50:09:bc:2f:eb:83:21:
f3:eb:49:e2:fb:9a:4e:3a:c5:fd:f7:d9:2e:52:9d:
e3:cd:6f:dd:09:79:5a:d7:dc:14:09:5d:8e:d0:30:
ee:37:67:f7:90:9b:1c:10:e9:c7:60:e4:f0:1e:75:
93:cb:6f:b4:b8:a5:31:16:8c:c2:64:55:cb:42:1d:
3a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:86:04:F2:FF:7C:D3:92:22:6F:9B:C3:64:66:8B:7A:60:C3:93:87
X509v3 Authority Key Identifier:
keyid:56:BE:48:FB:74:06:C2:6D:E6:62:EB:F8:92:02:C6:79:B0:85:4C:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56BE48FB7406C26DE662EBF89202C679B0854CE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089726678676013057/0/56BE48FB7406C26DE662EBF89202C679B0854CE8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b2:89:38:b7:16:43:98:3d:c6:e5:1b:5b:f9:64:da:f0:df:
d7:d9:9a:35:36:4c:b2:59:e2:8e:d7:29:94:ed:12:01:3f:69:
b2:23:f4:2a:c5:23:16:0d:0d:68:be:c4:ec:75:3e:ce:f3:a1:
64:53:d7:f1:65:b4:fc:0d:d2:d0:47:f2:42:6e:94:f6:15:be:
fa:90:9e:fd:d0:db:b9:26:1c:f3:8f:2e:08:52:6e:38:5c:b1:
1d:5a:77:be:4c:74:ac:25:d4:d6:13:d2:fc:c1:59:5a:16:71:
63:e2:ad:75:6a:0e:4f:0e:be:29:e7:e9:ea:7d:62:ff:5d:5b:
03:cd:99:24:9c:e9:a8:85:ce:ec:85:39:ab:c4:e2:14:f5:bf:
8d:1e:1d:9d:a9:3b:f5:69:0a:33:9f:00:f5:82:fa:9a:d9:7a:
2e:52:97:db:11:1a:ca:93:98:98:72:ff:fe:c9:9a:35:b9:24:
59:80:74:af:58:5c:10:6f:71:da:9e:05:71:36:12:f7:3d:ad:
e5:53:d7:8e:4f:41:ab:b6:bc:7c:62:64:39:45:d3:a1:12:0f:
39:c7:20:99:b4:5f:85:fc:f9:b4:72:54:53:56:93:74:a8:71:
79:6a:7c:82:8b:68:28:d9:5f:29:8f:98:85:0a:46:97:f1:91:
13:7d:43:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:17:11 2026 by rpki-client