
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
File: 3F0AED0297682970CEA1257B1985DB5901444FE7.mft (raw, json)
Hash identifier: zmCCZ7ADfTrP/Mkxey823qcazEr4ee7awum+OUBaCJ4=
Subject key identifier: D7:DF:00:59:19:EE:5D:05:6E:2E:D6:A8:45:8C:CB:C6:27:19:D2:F7
Authority key identifier: 3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7
Certificate issuer: /CN=3F0AED0297682970CEA1257B1985DB5901444FE7
Certificate serial: 6A38C18B2B942C64DD24ECA83AD3F7D516C72FEE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
Manifest number: 06
Signing time: Wed 13 May 2026 05:15:57 +0000
Manifest this update: Wed 13 May 2026 05:10:57 +0000
Manifest next update: Thu 14 May 2026 07:00:57 +0000
Files and hashes: 1: 3F0AED0297682970CEA1257B1985DB5901444FE7.crl (hash: exJGXSRdviBlWnKkpLcn5b7i3mQy3kooFCKhzfg+XE4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl
rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:38:c1:8b:2b:94:2c:64:dd:24:ec:a8:3a:d3:f7:d5:16:c7:2f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F0AED0297682970CEA1257B1985DB5901444FE7
Validity
Not Before: May 13 05:10:57 2026 GMT
Not After : May 14 07:00:57 2026 GMT
Subject: CN=D7DF005919EE5D056E2ED6A8458CCBC62719D2F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cd:68:6c:f2:6d:2d:15:9f:69:db:07:55:bf:
b0:56:ee:d8:4f:a4:7d:d9:78:a0:69:92:a0:16:7e:
86:98:48:2c:fb:fc:fe:b8:97:92:fc:d1:b7:4d:16:
be:bb:ee:1b:38:5d:07:f0:d6:29:4e:99:13:49:3c:
fc:2b:d6:f4:69:91:71:b6:52:7a:a9:e9:44:7d:0b:
75:f3:fa:9c:51:9f:b3:18:27:ff:2d:a9:cc:7a:b6:
51:84:06:c8:f3:76:cd:8c:79:99:3f:68:7b:63:57:
b3:09:e5:9f:b5:f3:17:21:ed:d8:2e:12:d1:ef:c7:
d5:dc:4a:c2:9c:5a:f4:16:85:09:c5:2c:ea:00:ff:
09:4e:51:7d:db:ff:8d:44:7e:7c:f7:f1:18:49:6d:
fd:75:8c:ab:ce:43:28:03:f9:87:36:3a:87:fe:70:
af:a4:f9:83:52:45:64:42:9f:64:d4:9c:42:ee:11:
70:0d:05:77:f5:64:2d:7f:21:1b:e5:fa:33:a9:8a:
df:3c:38:10:1d:74:e2:c3:d4:ab:41:58:a6:f8:6b:
66:1b:6c:2c:75:85:3c:ef:c9:cc:85:6d:5c:77:70:
77:96:2a:d9:54:a1:c5:b6:c3:39:41:d2:7d:5f:bc:
40:3e:e9:91:19:9a:ed:ec:e6:ea:a1:c5:d6:d1:76:
4d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DF:00:59:19:EE:5D:05:6E:2E:D6:A8:45:8C:CB:C6:27:19:D2:F7
X509v3 Authority Key Identifier:
keyid:3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fd:14:2e:2b:0f:30:1c:b5:b5:fc:bf:70:09:c6:ac:2b:8a:
71:3f:53:80:88:46:03:4e:ff:95:8b:f2:ff:91:0f:6a:a2:f7:
b7:d4:3b:00:04:d9:74:c9:8c:b0:e3:10:c9:ad:0e:37:04:5e:
1a:d8:6a:73:d6:02:3e:c4:9d:ee:c4:e5:a2:be:cb:84:82:11:
bc:cf:28:cb:dc:7d:60:25:2e:0b:5b:01:8a:20:44:3d:71:82:
d8:72:73:5e:00:00:cc:88:2d:54:6e:3d:cd:29:7b:f0:16:60:
96:f2:a4:de:55:11:7e:31:50:9e:a9:74:00:6f:8b:70:e1:ca:
2d:5c:ab:b8:c2:20:a6:d8:d2:aa:dc:66:40:f2:0d:36:0e:45:
29:ae:0f:cc:72:df:d9:94:18:0a:4d:14:68:30:c5:91:93:13:
eb:93:91:d3:3a:dd:62:2d:61:3d:c1:87:c5:30:cd:e3:28:68:
85:c4:85:95:9c:6c:14:03:9c:a3:24:98:0d:73:ad:fc:f0:65:
1d:81:4f:8f:55:53:9a:61:de:0f:20:9d:d2:72:32:ae:df:3d:
e6:b4:58:d6:ee:ef:a7:9f:6e:95:c0:b3:17:1c:13:71:a0:f4:
6e:2b:42:75:db:ad:1b:c9:20:d4:5d:b5:48:d7:3e:16:1f:e8:
29:85:2a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:06 2026 by rpki-client