
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
File: 9256C7E8713211251A9F619DBC38D99394ABAA9D.mft (raw, json)
Hash identifier: Ns7MK4u9qf7Ug7Kph9IuJG98f3eS5gqsF6F6ViREjRg=
Subject key identifier: F8:A0:B3:53:A3:87:F2:09:8A:FC:CE:32:4F:10:39:F7:05:BA:85:C6
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial: 027528E4E4BE74174DDD34CDCC1713CD10ADA6D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
Manifest number: 26
Signing time: Wed 13 May 2026 04:25:56 +0000
Manifest this update: Wed 13 May 2026 04:20:56 +0000
Manifest next update: Thu 14 May 2026 06:24:56 +0000
Files and hashes: 1: 9256C7E8713211251A9F619DBC38D99394ABAA9D.crl (hash: bn5ZJTNerePfKWc0KxYWuYnCRd35xjUfnYipClT/6Rw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:24:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:75:28:e4:e4:be:74:17:4d:dd:34:cd:cc:17:13:cd:10:ad:a6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Validity
Not Before: May 13 04:20:56 2026 GMT
Not After : May 14 06:24:56 2026 GMT
Subject: CN=F8A0B353A387F2098AFCCE324F1039F705BA85C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e5:95:84:52:98:3a:c0:1d:f9:ab:ea:c4:49:
6d:6c:51:86:e0:fa:a3:20:cc:28:cd:4e:2c:f7:ce:
42:5a:a4:30:3b:25:40:18:da:a2:f9:21:e9:82:7a:
a8:c0:f2:c6:cc:59:bd:d9:00:4d:f0:7b:81:1d:17:
f1:8d:95:25:aa:0d:f8:73:21:d4:78:37:65:7b:6b:
b3:10:17:f5:0a:97:d0:ed:99:38:8a:2c:4d:5d:81:
f5:99:72:53:eb:f0:41:f8:30:ee:62:d3:ac:a8:35:
6e:6f:fe:b8:d8:a4:38:9c:a4:31:16:e1:f2:2f:83:
72:28:3f:c1:20:04:4d:03:4e:3d:6c:19:87:a1:e4:
fb:1c:2a:b5:96:1e:c4:8b:68:6d:d1:58:e8:6f:a5:
67:5f:f1:2a:13:73:d4:8e:0d:1b:f6:75:63:77:9d:
f6:29:89:62:bd:20:1e:8d:54:db:cf:9e:5e:ff:37:
4b:57:b2:34:18:a9:8d:3e:ca:c5:d4:01:1a:87:87:
c8:17:14:a0:4f:c7:7c:27:02:57:0a:38:62:22:2f:
d5:fa:1d:5d:50:fb:3c:a8:51:0a:ca:e0:e8:32:71:
ac:21:a2:45:fd:2a:cf:5e:84:00:a6:8f:37:98:a4:
a3:a4:3c:ae:0a:82:6a:36:15:ad:fa:78:b3:78:f8:
30:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A0:B3:53:A3:87:F2:09:8A:FC:CE:32:4F:10:39:F7:05:BA:85:C6
X509v3 Authority Key Identifier:
keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0b:63:06:57:9e:1e:41:da:9e:e0:dd:44:e2:74:c2:f3:01:
25:a2:60:59:32:0e:39:6f:1b:c0:63:e7:55:b7:86:2a:20:37:
59:cf:0a:f9:61:26:fa:3a:5e:a7:41:e0:6b:76:f0:9b:38:ea:
1c:bd:47:3a:7d:89:56:33:79:6b:e7:5e:28:c3:42:11:28:5b:
ad:b8:11:dc:91:41:71:78:37:52:ea:1a:e0:e5:08:f9:11:e5:
b8:d7:3b:b2:9f:47:80:0f:45:f5:0c:af:7f:f6:46:0b:3f:b4:
f2:60:37:ae:e5:3b:bf:87:e5:52:af:76:e0:a6:e1:c7:c8:fc:
ea:f9:83:04:88:93:ea:93:7d:25:64:46:f1:45:b7:e5:5f:44:
1a:74:46:34:9f:15:94:ed:c6:4c:1c:ce:6f:1c:47:bf:c3:1b:
93:ea:d6:30:7f:7d:6b:20:92:6c:a8:7c:de:93:b0:35:ef:ea:
64:5e:89:36:53:51:f7:77:73:e5:ef:ce:00:cc:5d:84:7e:17:
4f:06:26:10:ca:b2:01:ac:fb:15:73:04:a2:50:5b:bb:aa:a0:
d7:34:b9:e3:37:4c:5e:83:db:db:be:f8:3c:a2:fa:07:7c:5a:
24:44:fe:c3:c7:f3:f9:0c:36:1f:33:8f:04:ce:45:37:50:93:
d8:0b:9d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:27 2026 by rpki-client