
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft
File: 951830FAEB53F8097C135F16292E2995BBCF3DC4.mft (raw, json)
Hash identifier: uM2Lze11WTKVb6148Gjw4Jd1wnrSkm53b/XyQDwoRuA=
Subject key identifier: 60:5F:E2:00:DB:2B:1D:0E:18:18:57:36:36:B0:9D:E4:69:E9:DE:DF
Authority key identifier: 95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4
Certificate issuer: /CN=951830FAEB53F8097C135F16292E2995BBCF3DC4
Certificate serial: 3A59A4B5FC30BDA35190D354FD2D4D8DE461BE76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft
Manifest number: C6
Signing time: Sat 10 Oct 2026 14:19:46 +0000
Manifest this update: Sat 10 Oct 2026 14:14:46 +0000
Manifest next update: Tue 13 Oct 2026 22:29:46 +0000
Files and hashes: 1: 951830FAEB53F8097C135F16292E2995BBCF3DC4.crl (hash: XEccJqGaiOB9Xzm5e6zMx7nX3rIHBjs0NwZiWsSOjrA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl
rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 22:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:59:a4:b5:fc:30:bd:a3:51:90:d3:54:fd:2d:4d:8d:e4:61:be:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951830FAEB53F8097C135F16292E2995BBCF3DC4
Validity
Not Before: Oct 10 14:14:46 2026 GMT
Not After : Oct 13 22:29:46 2026 GMT
Subject: CN=605FE200DB2B1D0E1818573636B09DE469E9DEDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:4a:83:df:a7:6b:97:83:74:5e:e1:13:b4:
34:fa:e0:4a:da:e1:ed:02:41:0a:b8:c5:c2:87:29:
97:dc:65:37:48:0b:9e:7f:6c:d6:d1:f8:76:c1:32:
dd:b0:dc:aa:44:52:19:0c:e5:6a:c2:f5:3e:93:10:
2c:11:fa:68:01:b8:2e:ae:83:b4:fb:1a:26:e4:7c:
7e:a3:4a:ad:e8:b3:22:3c:dc:df:a9:59:bd:70:84:
a4:05:b8:12:2a:b9:04:8c:bf:5d:95:e7:ec:b5:4c:
de:ac:1d:2a:d9:46:07:e9:ed:e1:7a:f1:34:a5:2b:
7e:6c:bd:c7:b9:75:17:68:fa:6e:b1:91:15:81:3c:
f6:d6:c2:26:c4:9c:3b:40:bb:83:6c:57:93:da:22:
c4:85:55:ec:d8:dd:8d:15:5a:85:b9:17:8b:d5:c8:
cf:78:b6:00:f0:6e:62:ba:fb:25:5c:70:eb:a0:0b:
f1:29:6d:ab:b7:17:04:c2:3c:24:a6:26:56:4c:4d:
40:fe:e7:f9:fc:85:b5:23:92:69:fd:db:8b:83:a1:
50:e1:a1:07:ee:fd:8c:d4:ca:ed:9c:ac:74:6e:94:
04:52:ac:2e:9c:9b:8e:f5:ba:f5:8e:87:f3:31:97:
59:60:ec:d5:8f:23:11:02:cc:20:a6:dd:c8:cc:b6:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5F:E2:00:DB:2B:1D:0E:18:18:57:36:36:B0:9D:E4:69:E9:DE:DF
X509v3 Authority Key Identifier:
keyid:95:18:30:FA:EB:53:F8:09:7C:13:5F:16:29:2E:29:95:BB:CF:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/951830FAEB53F8097C135F16292E2995BBCF3DC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097366082127134723/0/951830FAEB53F8097C135F16292E2995BBCF3DC4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:90:24:9e:f8:79:f2:01:2d:bd:09:37:38:ee:75:fc:e1:a4:
bd:77:f9:40:49:4f:a1:b0:87:5a:62:11:bb:a9:b8:c5:93:bb:
26:c4:81:fc:53:af:b6:d1:75:9c:4c:80:1c:bd:7c:95:2a:6c:
ef:1e:cc:e0:6e:fe:8c:19:c9:d0:4e:56:17:78:1f:e4:4f:bc:
8e:ba:28:f8:b7:1d:b3:2c:e6:80:a4:8e:f4:a1:b1:ec:8f:02:
ac:37:de:6e:f7:0f:95:9c:a0:4e:62:01:7e:93:e4:cb:be:19:
7f:1d:97:01:04:48:02:37:d2:cc:23:53:bb:b3:35:c3:c9:c8:
46:bc:c4:10:b0:b1:c3:a4:d8:8a:6a:81:56:2f:62:66:d5:df:
9e:2b:9e:d9:13:03:d1:da:47:0d:13:0b:59:1c:52:7d:e2:91:
d7:10:39:34:30:62:a7:4c:37:3e:96:9c:5d:61:14:6e:80:06:
74:50:1b:68:c9:e5:e0:0f:a9:4b:e7:0c:33:2e:aa:67:e9:a7:
6a:62:11:7a:3a:e4:5a:98:31:b5:c4:c2:dc:3e:29:c7:b2:a7:
b1:ae:7f:2f:21:6c:21:25:51:63:34:fc:9f:9a:f0:58:d5:22:
01:0b:5d:44:0c:5f:f4:05:52:f1:9f:d4:b2:ee:57:97:a2:f0:
31:ce:95:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 13:12:20 2026 by rpki-client