
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
File: F916D71CF28A7FC30E705FE11476FF473B105CD8.mft (raw, json)
Hash identifier: Ett4ZoKmR9ODBeuQzgIF2S7+hpA+DGU2uZSmhT9laD4=
Subject key identifier: 1D:CF:6A:E8:44:04:ED:C7:B4:4A:BD:8F:E4:EB:FE:89:22:32:C9:BA
Authority key identifier: F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8
Certificate issuer: /CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
Certificate serial: 76E9EDAB13883869D3FE57A57B9F96D56BEEB9D1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
Manifest number: 1C
Signing time: Wed 13 May 2026 09:51:03 +0000
Manifest this update: Wed 13 May 2026 09:46:03 +0000
Manifest next update: Thu 14 May 2026 09:56:03 +0000
Files and hashes: 1: F916D71CF28A7FC30E705FE11476FF473B105CD8.crl (hash: JAVmN0W49kMxLha6BYZN+qWK5cwOcmRznjjAgibZt2c=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl
rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e9:ed:ab:13:88:38:69:d3:fe:57:a5:7b:9f:96:d5:6b:ee:b9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
Validity
Not Before: May 13 09:46:03 2026 GMT
Not After : May 14 09:56:03 2026 GMT
Subject: CN=1DCF6AE84404EDC7B44ABD8FE4EBFE892232C9BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0c:6f:82:f6:46:f4:e8:21:d9:4b:0b:af:6f:
9f:50:75:98:7b:4e:a3:fc:1e:94:4e:20:ec:3c:de:
82:26:24:30:87:b0:53:fe:45:c4:e8:c7:36:da:b1:
46:9f:37:0c:ad:09:d9:ca:51:0c:e7:a8:70:70:8c:
30:b7:8b:e1:cb:ac:fa:ed:24:d7:76:f3:78:95:f5:
7c:dd:c5:90:5d:25:2e:34:a2:fc:3f:1c:8d:84:e7:
99:58:df:8d:63:33:ec:3a:69:a1:2f:43:c2:eb:34:
5b:29:40:a1:bf:71:6d:24:03:f1:63:0d:bb:33:c7:
4e:ce:b9:87:dd:9d:cd:1a:86:3c:22:74:cc:c6:62:
4c:53:34:7b:76:b1:66:0c:94:92:c9:fd:a9:cb:4e:
7d:5c:a4:17:ca:41:63:47:6b:ed:00:bb:1c:bc:6d:
b5:3e:56:b9:68:ee:5c:fc:4a:d6:37:17:96:56:de:
8b:ad:79:77:cf:a3:d4:bf:57:23:d8:7c:89:02:93:
e8:9b:3f:92:1c:e5:13:4d:ed:74:22:09:e7:99:d4:
56:dd:d8:df:3f:35:90:3d:77:b4:49:05:fb:94:f3:
bf:de:7d:db:86:ea:ad:5f:37:2a:39:b8:a8:16:8c:
a3:12:21:90:c0:3f:fb:bd:d1:ca:07:2c:4c:f4:bb:
8a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CF:6A:E8:44:04:ED:C7:B4:4A:BD:8F:E4:EB:FE:89:22:32:C9:BA
X509v3 Authority Key Identifier:
keyid:F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:e9:56:ba:46:54:3e:0c:49:de:f3:28:4a:f9:20:e9:ea:ae:
be:88:94:aa:43:fe:97:4f:91:4a:11:4a:f1:6f:a4:15:63:49:
1e:e4:df:9e:ca:69:e2:09:6f:2c:69:e2:2f:17:58:55:5b:a5:
c6:5b:8a:ce:3f:d0:d6:b1:4b:86:ff:bc:a4:86:6c:8c:ac:f8:
09:81:c5:90:b5:2e:05:64:b2:18:be:2a:c8:8f:2d:a1:9c:64:
e1:da:7a:5b:9c:de:2f:1b:43:ef:c3:1a:cb:78:ea:51:dc:85:
c6:c7:7e:3f:68:60:da:78:55:dd:99:f5:6e:03:05:66:c1:2a:
5d:3e:70:e2:ef:7e:9f:19:ee:8b:20:ed:0c:e4:5e:d3:e5:70:
37:4b:2e:b7:30:b0:0e:76:1b:b7:a6:79:8e:16:36:19:bc:67:
37:0c:66:72:63:58:ff:f2:45:fc:29:e3:3f:fa:dc:41:7a:6d:
95:19:38:a7:92:9f:e1:2b:1c:44:05:63:f3:b6:e9:be:8c:8b:
9d:05:98:1e:f9:3f:53:12:fc:7b:c9:44:35:5b:5d:0f:72:08:
1b:1b:d4:6d:34:6a:67:d3:25:f4:85:ee:75:3b:c7:56:53:02:
37:04:45:97:4d:6c:ab:94:6d:12:11:f3:5d:7a:27:94:b4:2d:
78:5c:e7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:02 2026 by rpki-client