
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
File: F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft (raw, json)
Hash identifier: eGpWWOxN7C57ypNbY0BvrVSbLYb/UOYOBfwnZPllbuI=
Subject key identifier: 6A:A4:6A:A5:B4:3A:DE:DB:72:26:ED:C7:C9:34:57:70:A2:1F:BB:BA
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Certificate issuer: /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial: 56B8130F7CFA30A06DDE379048365B7ED3DEFBBB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
Manifest number: 38
Signing time: Wed 13 May 2026 15:41:05 +0000
Manifest this update: Wed 13 May 2026 15:36:05 +0000
Manifest next update: Thu 14 May 2026 16:38:05 +0000
Files and hashes: 1: F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl (hash: Caby35lj880MK2GnVZchWWFkKziNWuZOo5UBOBacVsI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b8:13:0f:7c:fa:30:a0:6d:de:37:90:48:36:5b:7e:d3:de:fb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Validity
Not Before: May 13 15:36:05 2026 GMT
Not After : May 14 16:38:05 2026 GMT
Subject: CN=6AA46AA5B43ADEDB7226EDC7C9345770A21FBBBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:c7:08:a2:b4:e2:16:0c:cb:76:29:26:48:
c9:d3:fe:1e:28:e2:d7:18:1a:b0:be:20:f4:24:f4:
4d:79:1a:9d:42:0f:a4:8a:1a:4e:5b:d5:ab:35:13:
2e:63:e4:8c:6e:eb:02:03:52:71:e0:66:1c:df:7d:
b2:7e:ed:ba:3c:11:f2:af:2d:7e:e0:e8:e7:f0:ea:
99:d3:2b:a4:0e:0e:5a:10:f9:c9:91:d0:f8:8f:d2:
76:a5:f1:20:99:96:0e:02:35:f4:38:14:55:4c:d8:
3b:97:11:29:89:4f:12:2e:99:5b:17:db:bf:f9:6d:
37:a4:19:bd:d4:6a:a4:8b:68:00:b7:8a:54:f9:81:
2c:32:16:be:86:9c:63:24:67:67:3d:4e:f9:34:04:
e7:2c:73:ec:e4:87:1b:12:0e:74:db:23:f3:fd:89:
80:d1:ca:cc:f5:97:68:8a:9e:d2:13:42:80:57:74:
cb:ed:4e:26:ac:a7:b2:08:fe:f2:9f:6d:b8:4a:36:
6d:33:b8:b7:93:3e:69:06:92:07:08:9f:7e:fb:c3:
38:d3:dd:4e:8b:fa:39:90:17:ca:0c:fb:af:d6:e4:
9c:a6:01:38:fa:cb:c6:06:3f:e0:59:5e:76:a1:9b:
5b:5a:fd:87:23:be:f4:bd:40:2d:99:e5:83:30:c3:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A4:6A:A5:B4:3A:DE:DB:72:26:ED:C7:C9:34:57:70:A2:1F:BB:BA
X509v3 Authority Key Identifier:
keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:45:1f:e8:48:a9:81:b7:86:df:bc:19:8a:7e:68:18:29:9d:
0d:f1:76:e4:44:bb:4c:5f:fb:28:97:6c:7f:39:d4:c5:ea:0f:
6b:b0:6d:4b:96:94:a4:44:b3:de:a3:ae:5a:04:ac:1b:fd:20:
41:26:d5:d3:42:98:92:71:ad:5c:fa:5f:72:42:30:6b:81:2d:
90:ef:3a:70:c8:06:20:62:0a:5e:27:65:c7:60:bf:75:ac:c0:
b2:a9:e2:5c:ea:91:b2:e8:8d:1a:0e:e6:48:09:10:0a:32:88:
25:7e:0b:c9:6c:0a:dc:31:15:b9:de:f9:ae:0c:62:0a:32:1f:
5b:5e:35:a0:3d:ed:b2:45:01:7b:45:94:83:07:19:cd:88:7e:
82:b5:b4:f8:25:d6:f3:64:8d:03:53:f3:68:93:11:22:03:93:
eb:46:51:54:58:e1:80:40:10:ba:f3:a9:86:7b:c7:2a:d0:c4:
22:b2:1e:53:ef:7d:2d:70:58:a4:9a:c1:e6:42:eb:bf:60:ef:
60:76:b8:c3:16:e5:54:df:03:88:00:3b:f3:07:e5:57:e0:fd:
7e:0d:76:2b:4d:24:b5:13:4b:69:cb:ca:ae:f0:73:f6:49:14:
be:13:3a:ae:c8:6b:68:0a:20:a1:63:05:7d:60:e4:00:4c:2d:
bf:ac:a7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:31 2026 by rpki-client