
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
File: 82611B8148EDC9354240ABCE432147501DAE52D1.mft (raw, json)
Hash identifier: cAwbmTOc/pkrkxcCZ0/7ptUVKH8xWN5MYg8Aqr0eaaw=
Subject key identifier: 33:ED:56:81:CC:1D:A0:7C:77:BC:6E:F9:C7:F3:18:3A:CF:54:E3:0C
Authority key identifier: 82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1
Certificate issuer: /CN=82611B8148EDC9354240ABCE432147501DAE52D1
Certificate serial: 7ED8ACA04484EEB569E66BB1576804368BF894C3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
Manifest number: 7D
Signing time: Sun 11 Oct 2026 03:45:12 +0000
Manifest this update: Sun 11 Oct 2026 03:40:12 +0000
Manifest next update: Wed 14 Oct 2026 08:22:12 +0000
Files and hashes: 1: 82611B8148EDC9354240ABCE432147501DAE52D1.crl (hash: H0UTRJPw/MIzOyeOaU5LLFV4yQqtp3UllKe1Pwd3c4Y=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.crl
rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 08:22:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:d8:ac:a0:44:84:ee:b5:69:e6:6b:b1:57:68:04:36:8b:f8:94:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82611B8148EDC9354240ABCE432147501DAE52D1
Validity
Not Before: Oct 11 03:40:12 2026 GMT
Not After : Oct 14 08:22:12 2026 GMT
Subject: CN=33ED5681CC1DA07C77BC6EF9C7F3183ACF54E30C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:8f:a6:97:e1:31:f5:50:4b:77:72:92:a7:
9c:08:e6:e6:8a:f4:8b:d0:33:6f:bf:46:ef:fa:b8:
ea:2e:70:aa:0f:a4:fc:33:3c:c8:f4:91:6b:ec:7a:
ea:6a:d0:08:f8:e8:1c:3a:48:c7:b2:e1:00:dd:c9:
52:b3:b9:61:66:8f:30:86:39:98:b3:0b:85:62:b4:
bf:b0:35:b5:33:7a:c3:82:93:7d:7e:ad:a4:4d:61:
2e:74:40:17:71:0c:c1:e3:4b:23:2a:b2:f9:9a:1d:
02:ef:f1:1f:70:57:b8:d9:06:34:17:83:6e:35:a1:
e3:de:06:c5:17:51:1d:9b:55:b3:1a:d5:3e:9e:d2:
38:1d:7f:25:f6:24:d8:6a:66:8d:fc:fb:09:e9:e4:
03:dc:b7:70:c2:68:5c:6b:27:83:10:18:e1:68:40:
bc:a8:6a:fc:c0:f5:55:26:53:65:db:e1:d3:b5:3d:
3d:52:f6:6b:d6:3d:14:4b:ac:e5:5b:8a:56:be:27:
7f:0f:40:fc:d0:9a:ce:bd:bd:57:a3:fa:d5:64:1d:
7d:41:ff:a7:9c:7e:e8:5c:d8:3f:30:47:d6:46:14:
40:88:78:f4:00:cf:6b:01:ef:10:7b:a0:7e:dd:a2:
b8:35:a3:b7:7a:bc:3c:1d:76:29:15:bf:e1:1e:22:
4f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:ED:56:81:CC:1D:A0:7C:77:BC:6E:F9:C7:F3:18:3A:CF:54:E3:0C
X509v3 Authority Key Identifier:
keyid:82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:0e:23:15:4f:d6:85:f7:99:49:d9:9a:dc:db:cd:ae:5d:07:
51:ed:2d:0f:3e:84:fd:b1:78:77:14:93:4b:6c:9f:3c:97:3a:
84:18:09:f8:bb:84:61:7f:a0:0e:df:3b:6f:a5:7e:f2:ef:4e:
00:3b:e6:04:b9:38:49:96:b9:75:54:93:50:58:01:b6:38:2b:
8f:28:fc:31:b4:be:3d:1f:b6:2c:34:ca:0b:7c:bd:e1:67:12:
1f:d4:c2:33:28:2b:f3:3e:54:1b:91:6f:7b:8f:e8:31:fc:ff:
6d:b6:4e:57:5a:ac:a6:12:bd:c8:59:70:3b:60:4e:82:fd:ab:
ce:6b:0c:8d:c2:f8:51:6e:63:e7:b4:fa:2a:cb:49:29:e8:61:
d9:c4:41:91:78:5e:a3:11:1d:2b:5d:38:eb:16:00:67:7b:78:
19:28:de:61:a6:22:50:30:bf:42:b8:90:79:0a:ec:95:27:37:
99:10:47:5c:ce:dd:2d:93:9f:91:8b:09:a0:bf:32:4d:a4:fa:
81:c7:69:04:e0:bc:ba:68:bb:8a:81:75:ab:fd:5a:60:f2:92:
eb:9e:bb:17:bb:85:12:80:31:9b:56:80:18:d3:09:70:ac:54:
45:35:e4:c8:2b:b0:d9:7b:91:c9:b7:08:a1:8c:cf:7a:2e:6e:
15:7b:9a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 06:20:58 2026 by rpki-client