
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft
File: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft (raw, json)
Hash identifier: JpGh6lcXjL6wfuxBnZLEm7I/QPOUGCogV3mj7FfDeg4=
Subject key identifier: 4B:96:8A:EB:76:5B:F8:27:68:9A:BD:9D:2E:36:C8:0A:34:41:0A:BE
Authority key identifier: F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43
Certificate issuer: /CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043
Certificate serial: 390F4BBD6CCCA564BFB4C61B8555FA48D83F377A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft
Manifest number: 01
Signing time: Wed 13 May 2026 08:58:27 +0000
Manifest this update: Wed 13 May 2026 08:53:27 +0000
Manifest next update: Thu 14 May 2026 12:56:27 +0000
Files and hashes: 1: F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl (hash: yT07yIDzCd8a3CnahyTzcUlU3RR2lHVZeb5lN7Y0HPg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl
rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:0f:4b:bd:6c:cc:a5:64:bf:b4:c6:1b:85:55:fa:48:d8:3f:37:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F8BCDF52657E11F7CA8F45EAB8D002BB008F2043
Validity
Not Before: May 13 08:53:27 2026 GMT
Not After : May 14 12:56:27 2026 GMT
Subject: CN=4B968AEB765BF827689ABD9D2E36C80A34410ABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9a:26:72:e5:cb:15:e2:7d:17:48:9d:49:9f:
44:87:4a:ed:1c:40:12:16:51:d8:d1:b9:bd:f0:8d:
70:44:37:01:21:ba:96:d3:14:6d:20:17:3e:1f:54:
91:e3:d5:d5:2a:cb:03:07:20:88:f1:b2:3f:b4:f1:
f1:1f:2e:f8:3e:6e:b7:5e:ef:bc:68:02:d6:84:53:
e9:05:9f:0a:63:be:85:9c:9f:f0:75:69:03:d2:b3:
58:ec:18:3b:06:9f:c8:ca:0f:6b:df:9e:3c:46:ca:
a9:14:26:f2:21:ab:a0:4b:13:f7:ba:46:cf:ee:d5:
14:d5:99:78:20:3f:13:c4:42:46:6e:de:66:a7:d2:
a9:96:ea:21:f0:06:58:78:5d:12:c8:56:99:76:d3:
4f:09:86:96:0b:10:a0:f8:ee:3d:bf:cc:42:ca:69:
97:e3:64:c0:10:f5:51:cf:a7:37:f7:10:69:b8:18:
91:84:ea:05:a1:4e:e2:97:fe:1a:c0:90:f3:35:cd:
3e:40:f3:13:94:44:59:38:e6:3a:a3:eb:86:a4:f3:
47:7d:08:34:48:d6:00:f1:a0:19:e4:51:8a:1f:27:
2c:1f:c9:4d:4c:34:d6:3e:b0:c4:05:b5:c3:fb:f8:
4b:e9:d7:a0:40:6a:14:35:9a:69:ca:1b:a8:22:fc:
83:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:96:8A:EB:76:5B:F8:27:68:9A:BD:9D:2E:36:C8:0A:34:41:0A:BE
X509v3 Authority Key Identifier:
keyid:F8:BC:DF:52:65:7E:11:F7:CA:8F:45:EA:B8:D0:02:BB:00:8F:20:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106868040269561873/0/F8BCDF52657E11F7CA8F45EAB8D002BB008F2043.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ec:66:68:33:af:6a:f7:06:46:34:7e:02:fd:ff:9e:62:a8:
ad:af:b0:4e:82:50:6c:b1:7f:16:22:62:19:23:f3:40:f9:5b:
bd:5a:08:d4:81:f7:82:d4:d0:47:b2:2e:14:da:68:66:e9:7e:
cd:64:6e:52:26:e0:c7:89:da:8d:59:73:49:aa:b0:cd:6c:ee:
2a:be:c7:33:d9:0d:37:22:10:cc:40:22:10:a1:d5:47:f4:11:
de:6e:22:72:e9:a6:26:0f:8d:c5:b3:13:45:7e:09:8f:1a:8a:
46:09:34:0a:0d:16:07:c1:91:07:50:1d:2b:4d:c4:80:25:ab:
50:e7:a0:ec:6e:27:15:4c:fa:58:ac:d7:1d:56:a2:ca:77:b6:
e2:20:49:70:68:cc:17:b0:72:30:d3:44:01:ed:e4:3b:f7:77:
e7:9a:c9:28:3f:e0:fc:3b:de:1f:6f:16:65:6c:0a:3a:44:d5:
56:85:2b:f6:10:dc:0d:4d:b7:65:10:0d:65:05:80:21:5e:f4:
7c:0e:8c:73:42:ca:4c:00:d8:ea:11:c4:dd:bf:c7:32:5b:7c:
77:1b:0a:60:75:47:9d:ec:ad:4c:b8:65:16:4f:6d:69:28:04:
39:0e:28:9c:38:03:c8:47:49:1d:50:d9:e4:87:9a:53:f6:cb:
5a:24:20:3d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUOQ9LvWzMpWS/tMYbhVX6SNg/N3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjhCQ0RGNTI2NTdFMTFGN0NBOEY0NUVBQjhEMDAyQkIw
MDhGMjA0MzAeFw0yNjA1MTMwODUzMjdaFw0yNjA1MTQxMjU2MjdaMDMxMTAvBgNV
BAMTKDRCOTY4QUVCNzY1QkY4Mjc2ODlBQkQ5RDJFMzZDODBBMzQ0MTBBQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvmiZy5csV4n0XSJ1Jn0SHSu0c
QBIWUdjRub3wjXBENwEhupbTFG0gFz4fVJHj1dUqywMHIIjxsj+08fEfLvg+brde
77xoAtaEU+kFnwpjvoWcn/B1aQPSs1jsGDsGn8jKD2vfnjxGyqkUJvIhq6BLE/e6
Rs/u1RTVmXggPxPEQkZu3man0qmW6iHwBlh4XRLIVpl2008JhpYLEKD47j2/zELK
aZfjZMAQ9VHPpzf3EGm4GJGE6gWhTuKX/hrAkPM1zT5A8xOURFk45jqj64ak80d9
CDRI1gDxoBnkUYofJywfyU1MNNY+sMQFtcP7+Evp16BAahQ1mmnKG6gi/IPZAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUS5aK63Zb+Cdomr2dLjbICjRBCr4wHwYDVR0j
BBgwFoAU+LzfUmV+EffKj0XquNACuwCPIEMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg2ODA0MDI2OTU2MTg3My8wL0Y4QkNERjUyNjU3RTExRjdDQThGNDVFQUI4RDAw
MkJCMDA4RjIwNDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjhCQ0RGNTI2NTdFMTFGN0NBOEY0NUVBQjhEMDAyQkIwMDhGMjA0My5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDY4NjgwNDAyNjk1NjE4NzMvMC9GOEJDREY1MjY1N0Ux
MUY3Q0E4RjQ1RUFCOEQwMDJCQjAwOEYyMDQzLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuxmaDOvavcG
RjR+Av3/nmKora+wToJQbLF/FiJiGSPzQPlbvVoI1IH3gtTQR7IuFNpoZul+zWRu
Uibgx4najVlzSaqwzWzuKr7HM9kNNyIQzEAiEKHVR/QR3m4icummJg+NxbMTRX4J
jxqKRgk0Cg0WB8GRB1AdK03EgCWrUOeg7G4nFUz6WKzXHVaiyne24iBJcGjMF7By
MNNEAe3kO/d355rJKD/g/DveH28WZWwKOkTVVoUr9hDcDU23ZRANZQWAIV70fA6M
c0LKTADY6hHE3b/HMlt8dxsKYHVHneytTLhlFk9taSgEOQ4onDgDyEdJHVDZ5Iea
U/bLWiQgPQ==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:05 2026 by rpki-client