
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft
File: C074E80FFDB9B886B42838EA88032DC68025A5B3.mft (raw, json)
Hash identifier: KKeW3I/QmSb97V5LZqXXRitSE/hf3yUvWQvscYvkegE=
Subject key identifier: 54:93:4D:D3:C6:C1:A9:8B:61:C6:A0:36:C6:8B:26:86:0C:C7:D9:3D
Authority key identifier: C0:74:E8:0F:FD:B9:B8:86:B4:28:38:EA:88:03:2D:C6:80:25:A5:B3
Certificate issuer: /CN=C074E80FFDB9B886B42838EA88032DC68025A5B3
Certificate serial: 2F662A3729904AE2701068F5C9762749BB732772
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft
Manifest number: CF
Signing time: Tue 13 Oct 2026 01:47:38 +0000
Manifest this update: Tue 13 Oct 2026 01:42:38 +0000
Manifest next update: Fri 16 Oct 2026 09:06:38 +0000
Files and hashes: 1: C074E80FFDB9B886B42838EA88032DC68025A5B3.crl (hash: pQ8OXtSEEuySFLLF9hpELrwJTaYlLUq6aAJf/7lFc4w=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:66:2a:37:29:90:4a:e2:70:10:68:f5:c9:76:27:49:bb:73:27:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C074E80FFDB9B886B42838EA88032DC68025A5B3
Validity
Not Before: Oct 13 01:42:38 2026 GMT
Not After : Oct 16 09:06:38 2026 GMT
Subject: CN=54934DD3C6C1A98B61C6A036C68B26860CC7D93D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:51:04:aa:ef:b2:16:ea:8b:b6:e0:ec:db:9e:
ce:01:52:eb:88:17:61:68:e5:3e:af:c7:21:65:43:
ff:3c:3b:c8:04:3e:18:02:e7:08:ce:d2:9b:74:c9:
5d:ba:46:9f:b1:04:38:0f:83:59:fd:09:4d:13:8e:
ef:29:e5:50:6f:4b:c0:5a:61:19:60:94:6d:87:15:
bd:5a:b0:16:01:70:ac:80:6b:27:06:ea:c6:6e:f8:
59:70:48:8e:64:67:66:88:40:f2:6a:1c:c8:be:a8:
68:49:5e:f0:b1:d4:a2:e8:e9:cf:11:41:e7:21:fb:
23:1b:b7:91:ca:06:7c:59:cd:53:26:58:47:10:2a:
d2:49:0d:f7:82:b7:1e:56:22:09:23:1b:cb:5a:47:
8b:3a:49:93:3a:c2:e1:96:61:2b:7e:21:04:22:51:
ae:f8:64:bb:8b:ff:0c:c5:c1:fd:6d:e4:f6:d9:5c:
96:ce:8a:a4:cf:74:2f:e7:5f:59:08:0a:13:dc:63:
aa:b5:07:69:c0:85:e2:08:b8:17:c1:27:87:42:6f:
0d:71:4b:8a:6b:d8:f7:90:18:62:19:31:1f:8c:42:
3f:7c:ec:8e:12:50:7e:3e:12:04:91:6b:80:8a:bd:
89:08:14:64:bb:b8:0f:76:d1:26:86:9c:e0:c9:92:
9f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:93:4D:D3:C6:C1:A9:8B:61:C6:A0:36:C6:8B:26:86:0C:C7:D9:3D
X509v3 Authority Key Identifier:
keyid:C0:74:E8:0F:FD:B9:B8:86:B4:28:38:EA:88:03:2D:C6:80:25:A5:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C074E80FFDB9B886B42838EA88032DC68025A5B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295709187/0/C074E80FFDB9B886B42838EA88032DC68025A5B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:01:ac:62:41:f2:e8:8d:a8:63:af:51:20:ec:e1:cf:f6:fa:
66:2b:73:b7:5b:ac:d9:74:e0:19:f3:ac:65:a5:96:d2:ee:ca:
e7:bb:b2:23:c3:f3:dc:78:d6:7a:0e:23:5a:23:d4:82:23:ce:
62:63:c6:48:e7:30:fe:05:6a:49:ea:f2:a5:a7:0a:b6:00:f0:
8e:f5:52:4f:69:d3:8d:bd:f5:6a:c6:db:16:c0:5a:68:47:88:
fd:7c:3b:43:38:9c:de:0d:d0:02:ae:db:18:a3:47:41:b7:46:
c7:a7:41:1d:dd:22:26:21:f4:85:a7:9c:45:78:60:ab:a2:6a:
ce:a9:54:a3:6b:63:88:af:f4:c3:d0:2a:c3:0d:c7:26:a9:df:
5b:90:df:8c:ab:6f:05:7a:82:0b:15:28:c6:2a:06:21:5c:03:
81:00:32:92:7e:84:70:34:8e:05:01:3a:72:2a:8a:cc:38:db:
a8:17:57:63:16:97:e3:7f:c0:e2:60:ba:44:24:1a:a0:8a:36:
e6:f0:cd:41:8f:65:6d:cb:57:b3:b3:74:bd:2e:f9:16:f7:02:
2a:2b:9d:13:b0:bf:3c:6b:b2:62:f7:d0:39:86:ea:5b:05:37:
cf:e3:09:7c:73:ac:05:9d:86:e3:e3:2a:2a:73:18:5f:60:6b:
c8:3c:d6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:04:16 2026 by rpki-client