
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft
File: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft (raw, json)
Hash identifier: eKG2p2yvq3PQF7Upq4kKEXP0CYUAmf5KZVtUDsk9BTU=
Subject key identifier: FE:3F:9C:EA:37:2E:DD:AF:5E:76:FC:EE:B4:76:85:DE:B1:63:5E:7B
Authority key identifier: 49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E
Certificate issuer: /CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E
Certificate serial: 633C1345826BA38E13B9521C710AEEB9E4E78B42
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft
Manifest number: 2D
Signing time: Wed 13 May 2026 03:00:54 +0000
Manifest this update: Wed 13 May 2026 02:55:54 +0000
Manifest next update: Thu 14 May 2026 03:16:54 +0000
Files and hashes: 1: 49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl (hash: xR+INOeySEUCPe6w/EQoIPwSr8t+tHIQ6umieRybCSI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl
rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:3c:13:45:82:6b:a3:8e:13:b9:52:1c:71:0a:ee:b9:e4:e7:8b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ECF12F237C18CFE0DD3E1D3F99E290380A282E
Validity
Not Before: May 13 02:55:54 2026 GMT
Not After : May 14 03:16:54 2026 GMT
Subject: CN=FE3F9CEA372EDDAF5E76FCEEB47685DEB1635E7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:cc:15:75:1b:d4:9d:6e:ae:73:b9:02:64:
6a:99:83:60:b2:d7:81:b8:4b:d9:8c:04:a4:04:b7:
77:17:68:79:86:e5:3f:5a:69:75:af:7f:bc:4e:30:
dd:b4:d3:38:10:27:ed:31:42:73:df:68:c9:ac:3f:
0b:47:1d:3d:fb:1a:0a:72:df:0b:40:77:f1:1a:26:
dc:84:36:56:e7:29:ff:e6:02:a9:2b:92:23:29:86:
6b:32:81:c6:4a:eb:8c:4a:0b:95:ab:9e:07:c4:3e:
29:6c:06:cf:96:c7:0d:a7:62:f7:e6:88:b7:55:0e:
44:2e:8d:5f:03:81:7f:90:7c:7e:e3:25:5d:f4:46:
f0:c9:92:fa:80:63:57:67:bf:7c:6d:54:b4:38:68:
8e:2f:2a:4e:8e:ab:82:d5:cf:fa:81:5a:3e:fb:c3:
32:a5:07:b8:53:73:dd:a2:83:ed:d7:fe:3f:b5:aa:
7f:4e:1b:86:3a:40:86:09:eb:d9:d3:04:dd:da:66:
97:00:ff:39:30:18:07:94:bb:c1:92:d9:ae:f1:e5:
7f:8f:94:ae:97:25:62:4d:46:61:05:c0:42:b0:a5:
9a:3b:05:9a:0d:f4:96:f1:b0:c6:40:dd:89:d9:9b:
dd:76:9e:57:d3:14:12:57:f5:6b:12:18:4b:75:c4:
cf:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3F:9C:EA:37:2E:DD:AF:5E:76:FC:EE:B4:76:85:DE:B1:63:5E:7B
X509v3 Authority Key Identifier:
keyid:49:EC:F1:2F:23:7C:18:CF:E0:DD:3E:1D:3F:99:E2:90:38:0A:28:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254417411/0/49ECF12F237C18CFE0DD3E1D3F99E290380A282E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1d:a6:2a:8b:a3:37:2e:c8:40:81:ca:ec:a2:23:b2:da:5c:
6d:23:86:4b:50:c3:d2:68:28:52:99:97:9f:cf:a4:5d:35:60:
27:f2:24:f5:39:e6:85:34:e0:8a:ef:f8:6e:9d:4e:0e:1c:66:
c3:31:fe:4a:97:2a:64:3e:ca:53:30:6c:99:eb:85:40:f1:62:
8e:66:b0:c5:64:99:be:14:35:de:b4:f8:81:99:f6:4d:dc:32:
dc:52:b3:7c:2a:88:bb:c4:01:ea:af:53:53:e1:49:10:36:c2:
85:9c:ea:b2:85:c0:0d:5c:b0:9c:af:1a:c1:b9:8a:ee:e5:28:
fd:d7:fb:e4:79:8e:2f:56:4e:99:c7:b6:8c:d2:68:73:ca:1d:
7a:2b:ba:d6:64:f1:30:af:1c:51:f6:9f:64:ab:0a:8a:5a:fb:
ef:cc:f8:12:48:32:3a:88:00:fc:d2:0a:61:44:95:07:b0:4f:
81:2f:b9:0f:a0:89:37:9b:ac:2d:70:ee:f6:0c:00:0b:62:7c:
47:fe:ef:e4:8c:4a:df:56:63:b2:56:2c:af:a1:7a:37:84:76:
cb:ba:f3:d2:dc:2d:ae:33:e2:9c:6a:31:f5:05:8e:51:df:86:
e0:a4:15:ac:9a:5c:88:ea:db:b3:87:90:d6:ac:0c:93:c8:4f:
7b:20:d7:d1
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUYzwTRYJro44TuVIccQruueTni0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlFQ0YxMkYyMzdDMThDRkUwREQzRTFEM0Y5OUUyOTAz
ODBBMjgyRTAeFw0yNjA1MTMwMjU1NTRaFw0yNjA1MTQwMzE2NTRaMDMxMTAvBgNV
BAMTKEZFM0Y5Q0VBMzcyRUREQUY1RTc2RkNFRUI0NzY4NURFQjE2MzVFN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuScwVdRvUnW6uc7kCZGqZg2Cy
14G4S9mMBKQEt3cXaHmG5T9aaXWvf7xOMN200zgQJ+0xQnPfaMmsPwtHHT37Ggpy
3wtAd/EaJtyENlbnKf/mAqkrkiMphmsygcZK64xKC5WrngfEPilsBs+Wxw2nYvfm
iLdVDkQujV8DgX+QfH7jJV30RvDJkvqAY1dnv3xtVLQ4aI4vKk6Oq4LVz/qBWj77
wzKlB7hTc92ig+3X/j+1qn9OG4Y6QIYJ69nTBN3aZpcA/zkwGAeUu8GS2a7x5X+P
lK6XJWJNRmEFwEKwpZo7BZoN9JbxsMZA3YnZm912nlfTFBJX9WsSGEt1xM+9AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU/j+c6jcu3a9edvzutHaF3rFjXnswHwYDVR0j
BBgwFoAUSezxLyN8GM/g3T4dP5nikDgKKC4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDg4NDcyNzI1NDQxNzQxMS8wLzQ5RUNGMTJGMjM3QzE4Q0ZFMEREM0UxRDNGOTlF
MjkwMzgwQTI4MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDlFQ0YxMkYyMzdDMThDRkUwREQzRTFEM0Y5OUUyOTAzODBBMjgyRS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ4ODQ3MjcyNTQ0MTc0MTEvMC80OUVDRjEyRjIzN0Mx
OENGRTBERDNFMUQzRjk5RTI5MDM4MEEyODJFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgh2mKoujNy7I
QIHK7KIjstpcbSOGS1DD0mgoUpmXn8+kXTVgJ/Ik9TnmhTTgiu/4bp1ODhxmwzH+
SpcqZD7KUzBsmeuFQPFijmawxWSZvhQ13rT4gZn2Tdwy3FKzfCqIu8QB6q9TU+FJ
EDbChZzqsoXADVywnK8awbmK7uUo/df75HmOL1ZOmce2jNJoc8odeiu61mTxMK8c
UfafZKsKilr778z4EkgyOogA/NIKYUSVB7BPgS+5D6CJN5usLXDu9gwAC2J8R/7v
5IxK31ZjslYsr6F6N4R2y7rz0twtrjPinGox9QWOUd+G4KQVrJpciOrbs4eQ1qwM
k8hPeyDX0Q==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:03 2026 by rpki-client