
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft
File: 8A05255B735973D13F97609E45A6D000FBCD953B.mft (raw, json)
Hash identifier: sCg7xxYkU4rAcEwkOGfGWzrXsvYLHCKhfXDR9zY4JSA=
Subject key identifier: 6B:5B:4F:08:CF:DA:6B:E2:B8:D9:FC:35:09:EF:AC:C8:B3:75:DC:77
Authority key identifier: 8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B
Certificate issuer: /CN=8A05255B735973D13F97609E45A6D000FBCD953B
Certificate serial: 132F4FA590943EB924C2AED1397680F884F2777F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft
Manifest number: C8
Signing time: Mon 12 Oct 2026 18:32:16 +0000
Manifest this update: Mon 12 Oct 2026 18:27:16 +0000
Manifest next update: Fri 16 Oct 2026 06:21:16 +0000
Files and hashes: 1: 8A05255B735973D13F97609E45A6D000FBCD953B.crl (hash: SvI+0tQBQL4OfpH6CI44pzisslTELaERIehlhCjZLzI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.crl
rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 06:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:2f:4f:a5:90:94:3e:b9:24:c2:ae:d1:39:76:80:f8:84:f2:77:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A05255B735973D13F97609E45A6D000FBCD953B
Validity
Not Before: Oct 12 18:27:16 2026 GMT
Not After : Oct 16 06:21:16 2026 GMT
Subject: CN=6B5B4F08CFDA6BE2B8D9FC3509EFACC8B375DC77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:69:ac:3a:41:34:ec:72:22:c1:75:3e:7d:
74:65:40:a4:49:5d:7d:86:59:d0:ce:3a:ab:84:28:
9a:79:f2:e5:ae:fa:ac:b8:74:4b:c1:8f:95:ef:05:
47:49:ef:cd:a3:50:88:4c:d4:81:d3:a3:32:5a:73:
57:b4:4a:57:4f:26:f3:16:88:ce:f1:f9:2e:e0:d8:
92:1c:fd:87:78:bb:9d:fb:c5:c6:01:10:7b:08:19:
8d:46:d8:21:6a:aa:d7:5f:88:64:b9:28:42:34:ac:
4a:95:bd:40:f2:12:e8:c0:7a:e0:91:e0:6d:10:bc:
45:df:5a:99:2f:a9:19:ab:11:2a:72:60:9c:2b:3e:
77:36:1f:b9:63:d2:6c:58:f7:ef:28:ce:d3:82:c5:
64:7f:f1:eb:22:99:2b:3e:ee:0e:cd:cf:31:19:49:
b1:6f:0c:39:05:be:1d:1b:ef:2a:fb:2e:99:41:6a:
9e:16:fe:7d:5f:ec:c1:ab:6c:6f:64:99:20:a9:ea:
49:05:6d:35:58:88:40:99:c2:94:db:d0:80:07:08:
5e:80:ff:36:33:76:a0:cc:19:3f:19:5d:bf:91:d1:
14:68:4c:39:d7:c9:0f:3c:f3:8a:55:a2:36:ee:90:
d5:37:2d:f6:2a:22:2f:8d:69:3a:1e:12:2d:30:9e:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5B:4F:08:CF:DA:6B:E2:B8:D9:FC:35:09:EF:AC:C8:B3:75:DC:77
X509v3 Authority Key Identifier:
keyid:8A:05:25:5B:73:59:73:D1:3F:97:60:9E:45:A6:D0:00:FB:CD:95:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/8A05255B735973D13F97609E45A6D000FBCD953B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097071812157702145/0/8A05255B735973D13F97609E45A6D000FBCD953B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b9:fe:45:9c:dc:2d:d3:9e:10:70:99:b9:95:7e:25:9b:c5:
f9:c2:ca:92:1b:35:c3:c8:e9:eb:6f:53:47:34:92:7d:4d:a5:
4e:b5:1c:7e:f9:37:33:f4:8d:65:66:31:13:2d:8b:06:cd:83:
8f:82:d2:c5:aa:be:8c:c8:26:a9:f5:25:62:47:0a:1e:2a:05:
30:42:00:62:4a:b6:fb:75:65:f5:17:fe:63:ad:0d:7b:3c:a2:
5c:e7:cc:94:5b:fd:12:67:74:cb:7f:4c:b5:a7:76:b5:34:68:
d1:49:c6:0b:64:b3:d1:bf:e2:fb:6c:65:5e:2f:ab:6a:0f:ee:
83:7b:8f:08:7b:b1:81:19:04:b3:91:21:1d:c9:cd:9e:a2:ff:
4a:d9:81:90:c4:a6:43:e7:ae:27:cf:30:bc:ad:a1:be:ed:54:
8d:f1:ae:6d:91:90:af:62:f5:ba:93:a1:ab:fe:99:38:74:00:
c5:0c:4e:a3:66:9f:96:3a:19:f3:f0:27:8a:5e:eb:b1:58:8a:
35:43:b6:c8:8c:c7:53:f1:15:dd:d8:7a:e2:6c:8b:d2:3e:70:
15:14:7b:be:e6:a8:75:9c:8a:74:12:a5:a5:27:52:6d:87:34:
17:40:a7:73:dd:28:6f:3d:da:ee:fe:23:eb:0e:7d:7d:16:5e:
33:28:39:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:38:08 2026 by rpki-client