
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft
File: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft (raw, json)
Hash identifier: GApnYBtfzW4q4Rk9PdozxF3J73wRlCo0ChTdCiMAiQg=
Subject key identifier: 91:36:9A:A2:FD:C1:E8:D3:AB:AA:7C:C7:96:DA:BE:D5:0E:A5:50:F3
Authority key identifier: B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1
Certificate issuer: /CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1
Certificate serial: 3EB7E973D0E8AD99EB34CC4C46851176688F342F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft
Manifest number: 8A
Signing time: Sun 11 Oct 2026 23:51:13 +0000
Manifest this update: Sun 11 Oct 2026 23:46:13 +0000
Manifest next update: Thu 15 Oct 2026 00:39:13 +0000
Files and hashes: 1: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl (hash: Ko9HugjXQBEwnerwyHlBxq4oN+EOZn0bzjKcmlyTUVU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl
rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 00:39:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:b7:e9:73:d0:e8:ad:99:eb:34:cc:4c:46:85:11:76:68:8f:34:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1
Validity
Not Before: Oct 11 23:46:13 2026 GMT
Not After : Oct 15 00:39:13 2026 GMT
Subject: CN=91369AA2FDC1E8D3ABAA7CC796DABED50EA550F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:2c:f2:90:84:3b:c7:47:d3:af:00:b4:ac:
b4:72:b4:32:a4:a6:9b:11:ac:86:41:28:3d:bf:ec:
1b:f2:fa:74:14:ae:e7:77:32:be:b8:fa:cf:94:f2:
a2:8d:6a:fa:dc:c1:8d:a5:41:4c:5f:b8:b7:88:09:
f2:42:4c:e6:86:70:38:ea:51:78:0b:42:9a:28:83:
6b:14:08:bf:a0:2d:89:22:9c:6d:50:7b:b8:c3:2a:
28:0a:15:5d:c6:ac:15:e4:ca:04:83:2b:8a:f4:1a:
d0:f3:8d:33:db:fd:3b:b0:e2:15:1a:cd:22:c6:fd:
63:ff:88:c9:11:61:ac:04:98:d3:fe:d3:bf:16:e1:
00:35:5b:03:ad:d2:f3:9a:94:30:6a:f8:ed:4d:c6:
e2:55:bf:53:13:0d:14:bc:0e:a0:9c:a2:47:eb:c3:
c2:60:d2:ac:f2:f6:f0:43:20:49:04:cf:7d:e3:ff:
2c:08:d8:50:e0:12:1f:e0:ad:94:d6:75:4d:25:12:
ea:af:b0:c7:08:d7:70:6a:a4:d9:66:17:86:3a:50:
fa:60:50:6e:d0:56:0a:19:e4:01:0d:00:73:61:3e:
7a:ba:47:e6:cb:81:ae:fe:e3:7f:b8:02:74:61:63:
b3:ae:14:b9:01:f8:6a:13:06:d0:85:68:e5:09:1f:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:36:9A:A2:FD:C1:E8:D3:AB:AA:7C:C7:96:DA:BE:D5:0E:A5:50:F3
X509v3 Authority Key Identifier:
keyid:B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:93:8b:fa:cf:f0:c8:fc:6d:a6:ae:3d:f1:ae:33:37:50:55:
da:97:44:13:24:c1:f0:97:b2:a0:9a:da:cb:4f:00:b3:81:d3:
b9:c1:0a:72:16:26:09:a7:0e:31:97:ce:14:be:9c:86:18:60:
6b:d9:b7:0e:ed:64:76:3d:a3:a4:63:ef:36:18:bd:9a:b3:88:
04:59:e2:2d:69:2b:81:08:6c:66:e2:44:40:e2:70:86:43:fb:
d5:41:1e:f4:97:32:61:d4:ed:ff:24:f0:95:d2:bb:91:0c:4f:
a6:57:7d:17:56:59:9e:33:fd:55:33:b3:e5:16:c5:1c:7d:d4:
5e:4a:c3:5f:dc:21:d6:f1:8c:d8:dc:20:80:73:3d:30:11:79:
fe:b8:8e:2f:38:51:d0:09:c6:4c:5e:d1:34:7d:33:66:80:d0:
ac:4c:53:08:ef:2a:28:12:8d:db:b6:40:27:c8:fc:d8:56:9d:
ab:d9:73:50:65:60:3f:68:b9:cc:e1:81:c1:e2:5d:55:01:68:
1d:62:29:a1:83:b4:db:d5:22:d8:25:b5:b1:95:33:e9:d5:09:
ba:42:23:6c:2b:53:5d:b8:5a:67:be:60:df:91:00:ea:c7:0e:
22:df:eb:ea:12:7c:a4:4d:15:86:db:80:67:32:65:02:88:30:
9e:21:03:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:20:52 2026 by rpki-client