
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
File: 82611B8148EDC9354240ABCE432147501DAE52D1.mft (raw, json)
Hash identifier: WK+yM6D/zMTyBoEjzKfkl1Gv8aAkmy+qHQGqPbTLRe4=
Subject key identifier: 6B:DE:81:A8:AC:C4:D4:E9:BC:19:05:C5:9C:E0:D1:2B:28:C8:70:9D
Authority key identifier: 82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1
Certificate issuer: /CN=82611B8148EDC9354240ABCE432147501DAE52D1
Certificate serial: 7174E3DF10338808407D995156EFA330B5503EDE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
Manifest number: 39
Signing time: Thu 23 Jul 2026 09:28:19 +0000
Manifest this update: Thu 23 Jul 2026 09:23:19 +0000
Manifest next update: Fri 24 Jul 2026 13:09:19 +0000
Files and hashes: 1: 82611B8148EDC9354240ABCE432147501DAE52D1.crl (hash: RtmYPr5SOM6KSxdwuP6NaxRUZYO6teCxUp8KX4ayTNo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.crl
rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:74:e3:df:10:33:88:08:40:7d:99:51:56:ef:a3:30:b5:50:3e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82611B8148EDC9354240ABCE432147501DAE52D1
Validity
Not Before: Jul 23 09:23:19 2026 GMT
Not After : Jul 24 13:09:19 2026 GMT
Subject: CN=6BDE81A8ACC4D4E9BC1905C59CE0D12B28C8709D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:d8:a3:bb:ba:23:63:be:54:1a:36:08:29:
c1:1a:bb:19:d8:fb:a4:73:be:e7:d8:a3:e5:95:b9:
db:d1:bf:56:8e:0b:fa:6e:c0:e3:d7:55:70:62:9f:
f5:6c:8d:6f:c4:09:8f:17:a9:1b:e8:4e:e0:ca:43:
f9:04:17:f4:ba:b2:3a:79:b4:79:5a:93:9a:5a:90:
f6:e6:2d:a0:b1:9e:3f:07:bc:7d:0e:3a:ea:1a:c9:
a9:54:af:0e:4a:08:89:1d:94:9f:3f:49:13:5f:a2:
b5:01:2e:5d:92:ba:35:7f:51:f6:09:4f:45:d1:22:
1c:a7:bd:d0:c6:43:67:04:b4:ce:bf:e9:d1:27:12:
da:0f:68:84:2b:54:af:9f:4d:f6:37:f9:1f:46:8c:
47:13:34:17:e1:8c:89:5d:61:53:ab:0b:99:b5:43:
c3:70:06:20:6b:cc:3d:85:5d:ff:f2:69:4c:b0:5f:
34:9f:17:25:43:c5:ee:d5:69:a0:7f:3d:c7:47:f6:
a7:c7:5f:f8:0c:33:09:68:de:5b:7f:00:95:d6:18:
18:67:88:5c:7f:1d:71:11:4a:a7:05:4d:81:a7:e4:
8c:d5:a3:7c:77:70:3f:58:9a:54:af:3d:74:5d:43:
a3:5a:c2:3e:96:1e:b2:3c:52:c2:40:9d:d5:97:b4:
87:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DE:81:A8:AC:C4:D4:E9:BC:19:05:C5:9C:E0:D1:2B:28:C8:70:9D
X509v3 Authority Key Identifier:
keyid:82:61:1B:81:48:ED:C9:35:42:40:AB:CE:43:21:47:50:1D:AE:52:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/82611B8148EDC9354240ABCE432147501DAE52D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117335108752244761/0/82611B8148EDC9354240ABCE432147501DAE52D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f1:d5:37:82:5a:c0:b9:34:3a:fc:a9:b7:eb:d6:18:41:8a:
2d:f8:97:41:44:80:0f:0f:e0:d9:fa:08:46:1d:e9:ba:67:8d:
5f:cd:a9:00:49:05:ad:33:3f:12:83:63:2a:8b:58:d4:27:4f:
d1:fc:5c:8c:7b:f6:f9:4e:00:85:47:a1:b2:b8:df:9b:a1:1e:
47:9f:7a:8d:1a:5c:85:4b:d8:d0:58:19:57:09:32:b8:d3:f1:
8f:fd:9a:59:b9:a5:4d:d1:dc:7b:f9:21:51:88:92:1d:7c:9c:
11:1b:2d:1e:b6:69:f3:58:32:50:ad:61:d3:dc:8b:d8:d8:be:
84:02:86:90:19:9a:c5:e3:c6:6d:2d:cf:b2:e5:9d:58:66:c5:
e5:93:28:b2:d0:9d:c1:28:5e:96:38:b9:7a:93:02:d1:0a:36:
2d:f3:6f:51:bb:4b:f5:b4:bd:83:51:4d:e3:ac:21:18:03:a0:
2f:3b:68:76:1b:a9:55:22:4f:4e:39:25:fd:f5:f1:4b:cb:59:
b3:f9:50:d8:31:df:3d:c1:9d:fd:4e:8f:da:71:ab:87:27:73:
28:60:04:25:ed:74:d1:1d:bc:41:86:fa:91:e0:92:27:fd:68:
fc:fe:71:f5:52:af:37:7e:ed:ae:94:b5:7f:27:aa:82:ce:77:
f1:e5:7d:71
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUcXTj3xAziAhAfZlRVu+jMLVQPt4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI2MTFCODE0OEVEQzkzNTQyNDBBQkNFNDMyMTQ3NTAx
REFFNTJEMTAeFw0yNjA3MjMwOTIzMTlaFw0yNjA3MjQxMzA5MTlaMDMxMTAvBgNV
BAMTKDZCREU4MUE4QUNDNEQ0RTlCQzE5MDVDNTlDRTBEMTJCMjhDODcwOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ddiju7ojY75UGjYIKcEauxnY
+6RzvufYo+WVudvRv1aOC/puwOPXVXBin/VsjW/ECY8XqRvoTuDKQ/kEF/S6sjp5
tHlak5pakPbmLaCxnj8HvH0OOuoayalUrw5KCIkdlJ8/SRNforUBLl2SujV/UfYJ
T0XRIhynvdDGQ2cEtM6/6dEnEtoPaIQrVK+fTfY3+R9GjEcTNBfhjIldYVOrC5m1
Q8NwBiBrzD2FXf/yaUywXzSfFyVDxe7VaaB/PcdH9qfHX/gMMwlo3lt/AJXWGBhn
iFx/HXERSqcFTYGn5IzVo3x3cD9YmlSvPXRdQ6Nawj6WHrI8UsJAndWXtIcTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUa96BqKzE1Om8GQXFnODRKyjIcJ0wHwYDVR0j
BBgwFoAUgmEbgUjtyTVCQKvOQyFHUB2uUtEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NzMzNTEwODc1MjI0NDc2MS8wLzgyNjExQjgxNDhFREM5MzU0MjQwQUJDRTQzMjE0
NzUwMURBRTUyRDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODI2MTFCODE0OEVEQzkzNTQyNDBBQkNFNDMyMTQ3NTAxREFFNTJEMS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMTczMzUxMDg3NTIyNDQ3NjEvMC84MjYxMUI4MTQ4RURD
OTM1NDI0MEFCQ0U0MzIxNDc1MDFEQUU1MkQxLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvHVN4JawLk0
Ovypt+vWGEGKLfiXQUSADw/g2foIRh3pumeNX82pAEkFrTM/EoNjKotY1CdP0fxc
jHv2+U4AhUehsrjfm6EeR596jRpchUvY0FgZVwkyuNPxj/2aWbmlTdHce/khUYiS
HXycERstHrZp81gyUK1h09yL2Ni+hAKGkBmaxePGbS3PsuWdWGbF5ZMostCdwShe
lji5epMC0Qo2LfNvUbtL9bS9g1FN46whGAOgLztodhupVSJPTjkl/fXxS8tZs/lQ
2DHfPcGd/U6P2nGrhydzKGAEJe100R28QYb6keCSJ/1o/P5x9VKvN37trpS1fyeq
gs538eV9cQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:41 2026 by rpki-client