
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft
File: 8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft (raw, json)
Hash identifier: uWB7a7YbNSSYzFG+hwJmMg38TkjuDxxQwiKuN+h8h2k=
Subject key identifier: 33:50:BF:52:1D:0F:4F:20:25:15:12:83:2F:E9:05:2A:30:C3:C0:42
Authority key identifier: 8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E
Certificate issuer: /CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E
Certificate serial: 3FB1678FB08B36C2CA2E0E5A903E83A289ED0F37
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft
Manifest number: DD
Signing time: Wed 14 Oct 2026 16:44:23 +0000
Manifest this update: Wed 14 Oct 2026 16:39:23 +0000
Manifest next update: Sun 18 Oct 2026 01:27:23 +0000
Files and hashes: 1: 8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl (hash: oy61BYTTi06xdf1xadu3NU9xxOa/jCdMDjOIzpshPRw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl
rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 12:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b1:67:8f:b0:8b:36:c2:ca:2e:0e:5a:90:3e:83:a2:89:ed:0f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C62FBF48757B88A81B2B470B3A9E6B46C38C14E
Validity
Not Before: Oct 14 16:39:23 2026 GMT
Not After : Oct 18 01:27:23 2026 GMT
Subject: CN=3350BF521D0F4F20251512832FE9052A30C3C042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:34:e6:44:f8:45:a1:51:7e:74:ae:81:b4:d2:
99:c5:b7:01:be:47:42:3c:72:8d:dd:bd:95:bb:1c:
f6:4a:04:57:7a:80:42:03:f0:93:0e:b6:03:be:76:
95:dc:e2:f0:d5:40:da:d7:0b:65:b2:04:5f:d7:b6:
a2:4a:29:91:bc:2f:f4:9e:c5:15:95:4f:16:50:98:
5e:68:93:0a:f1:04:5c:02:ed:a5:38:7f:6e:6a:e9:
54:ee:eb:df:bb:27:70:92:b8:65:02:51:a5:e4:7f:
e1:b1:81:af:3d:cf:79:54:1d:0e:5d:d3:7d:30:53:
7f:49:71:77:41:39:c0:3c:58:6c:48:0d:d4:57:22:
d9:a5:7c:db:f7:04:96:10:53:ec:af:7a:db:78:37:
13:eb:4a:ac:8b:54:cf:f3:dc:2d:64:c7:69:38:1c:
a1:7a:d2:d2:7a:63:b2:b9:ba:af:ec:8a:3d:08:2f:
5d:78:f5:fb:c6:a6:4e:2b:10:b0:a5:01:35:1b:dd:
0a:23:3c:b6:ee:66:53:94:cc:f9:57:d4:eb:e9:75:
d3:70:ad:ec:4a:c4:1b:72:89:37:21:93:60:5b:4f:
2a:54:31:a2:6c:53:b5:81:dc:a0:36:7c:6f:d3:1a:
a9:d3:a3:17:da:6e:a2:d9:03:90:8e:0f:06:a8:9d:
3f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:50:BF:52:1D:0F:4F:20:25:15:12:83:2F:E9:05:2A:30:C3:C0:42
X509v3 Authority Key Identifier:
keyid:8C:62:FB:F4:87:57:B8:8A:81:B2:B4:70:B3:A9:E6:B4:6C:38:C1:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091558670602338307/0/8C62FBF48757B88A81B2B470B3A9E6B46C38C14E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ec:0c:00:46:31:0c:de:34:f5:1a:ef:4a:fb:f0:37:d4:67:
11:32:d1:c2:e7:2b:29:53:ed:dd:7b:2c:66:8b:82:02:2e:07:
62:e5:fc:47:07:3a:95:bd:2f:7d:d3:3a:a8:4c:d7:bc:61:d4:
22:d4:9a:85:a1:80:93:7e:91:b3:c8:43:16:bb:a3:a9:e2:d8:
9c:92:e3:e6:43:99:9b:77:93:8f:6c:c1:78:cf:1b:d8:f4:1d:
4d:c5:77:18:32:26:f3:f7:ba:b9:1a:8f:10:7d:08:8d:2d:20:
74:29:95:27:1f:ef:c6:c6:92:8b:23:0f:cd:97:f4:2b:01:3b:
31:13:5f:42:e8:ae:31:02:85:c1:ae:88:a8:b4:49:5b:da:d2:
86:ec:af:68:0b:9e:c5:f6:c6:80:07:30:9e:91:29:e8:00:dc:
72:7e:2f:62:29:fb:fe:77:b9:6c:3b:68:24:fa:a3:d3:7d:3b:
32:5b:90:e9:96:a8:98:26:2e:1e:bf:1a:05:72:47:7b:39:3c:
0e:60:3c:92:41:ec:a6:b7:98:d4:36:99:74:5f:d5:22:88:13:
b5:4f:63:1d:9a:41:23:05:c9:e3:2d:7a:79:f0:dc:01:ab:89:
a4:67:a8:80:18:7c:81:ff:08:88:eb:3a:18:48:2c:47:27:23:
1c:15:cd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:33:52 2026 by rpki-client