
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
File: F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft (raw, json)
Hash identifier: PjLrlWpjqDryIp6PyxZFa3F0x7iiraZ6OwiO5McivWs=
Subject key identifier: 53:2F:2A:5B:B1:4A:8F:29:8B:1A:6D:44:10:BD:7E:EB:53:57:7C:F2
Authority key identifier: F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5
Certificate issuer: /CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5
Certificate serial: 7150D4DC539AACCB5B3470C16550A04FDC2086BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
Manifest number: 98
Signing time: Fri 24 Jul 2026 15:11:32 +0000
Manifest this update: Fri 24 Jul 2026 15:06:32 +0000
Manifest next update: Sat 25 Jul 2026 17:13:32 +0000
Files and hashes: 1: F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl (hash: 8Mk6U6X6Tgy4Hy3ST+bNIU2QH5ZeVsP48M+lNT9E5TQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl
rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:50:d4:dc:53:9a:ac:cb:5b:34:70:c1:65:50:a0:4f:dc:20:86:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F318297F7E2B1C94849A4BB67A10F029D86E28A5
Validity
Not Before: Jul 24 15:06:32 2026 GMT
Not After : Jul 25 17:13:32 2026 GMT
Subject: CN=532F2A5BB14A8F298B1A6D4410BD7EEB53577CF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:10:6c:30:75:73:33:44:32:81:26:0c:77:
fa:94:47:6e:1b:65:67:a8:3b:77:1c:61:0a:3a:01:
72:fe:c3:59:9e:b3:c9:be:f6:b4:b3:04:a2:ac:0d:
9c:8e:e1:71:59:c3:e2:dc:d6:86:6c:c3:cf:ff:52:
52:16:c8:be:f2:04:29:6e:25:3e:8e:86:c2:36:87:
ae:bc:92:7a:0d:6d:5a:9d:07:ea:a4:1d:27:2f:5b:
f1:a6:87:f8:d1:f3:68:a8:e4:0c:04:5e:0f:db:b9:
e1:2b:c3:28:9f:82:94:93:16:2f:b9:4f:28:37:90:
82:82:09:c2:da:8d:7d:3c:b6:72:10:8a:d6:09:84:
4e:26:6f:f9:7b:f4:f1:65:03:74:62:ab:34:74:ef:
93:20:02:4a:61:4a:0a:bd:9b:66:50:0d:6b:fe:f5:
80:56:64:5b:e6:ec:22:34:17:05:f0:0f:da:da:48:
cc:82:52:7c:5a:92:db:a0:4e:63:f1:8a:aa:6f:ec:
75:73:9c:01:36:8c:44:be:cb:e5:bb:e1:f2:70:e5:
e1:47:c1:06:67:25:2d:9d:0c:d8:5f:43:3d:84:b1:
4b:fe:48:d0:47:6c:6d:bc:20:d3:70:4b:42:5a:14:
36:c8:3e:4c:fe:90:f9:d6:e5:54:92:a6:bc:aa:5d:
29:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2F:2A:5B:B1:4A:8F:29:8B:1A:6D:44:10:BD:7E:EB:53:57:7C:F2
X509v3 Authority Key Identifier:
keyid:F3:18:29:7F:7E:2B:1C:94:84:9A:4B:B6:7A:10:F0:29:D8:6E:28:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F318297F7E2B1C94849A4BB67A10F029D86E28A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482174977/0/F318297F7E2B1C94849A4BB67A10F029D86E28A5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:3a:6a:5b:45:46:39:d4:e1:f3:7e:3b:b0:80:ac:06:36:88:
20:fd:3e:26:df:b3:36:93:85:0e:26:1e:e9:00:19:fc:96:0f:
5d:b6:02:54:a3:7b:63:c2:83:dc:19:e2:b2:87:38:bf:bf:18:
54:d8:8a:9f:d0:7c:a6:b0:ab:50:d3:4f:90:0c:ac:87:bc:15:
4e:ab:26:43:9b:e6:02:9e:85:d9:04:8c:74:b8:15:a1:37:0a:
c6:37:d1:8f:36:12:8e:2d:d7:89:15:b6:a0:5c:77:a4:b6:ee:
39:c1:d6:61:26:dc:20:5b:cb:b0:42:7e:40:8e:46:48:9f:f9:
53:91:d9:02:2b:80:ce:46:77:6e:97:28:c4:34:fa:88:65:ce:
b1:7a:a3:56:0e:b4:a3:73:3c:c3:30:37:b3:ef:98:29:b5:bc:
da:84:8f:0e:95:44:2f:c6:8e:e5:34:f7:fa:14:e4:b1:89:4c:
7a:ce:b7:fd:66:a8:c5:c2:b2:2b:55:d3:ef:26:ec:19:84:14:
2d:34:ba:c3:91:74:92:88:62:56:56:da:73:bd:60:c5:11:7b:
9d:44:e1:a1:60:d4:d3:2c:fc:64:62:d9:ae:d1:41:7c:af:e6:
63:ef:fe:d7:07:e7:7b:d1:f8:3b:ef:4d:5e:ea:80:00:e2:3c:
95:f6:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:40 2026 by rpki-client