
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft
File: 6845D331C417296D3A93181DD9010591B1F70D50.mft (raw, json)
Hash identifier: ipZW40Rrj1os83SYeYV5yrB4o1QrMcIY50MSTfMNgts=
Subject key identifier: 08:BF:1E:A1:B0:FE:9C:EB:30:F4:6F:70:A7:72:27:B3:66:F6:8F:B1
Authority key identifier: 68:45:D3:31:C4:17:29:6D:3A:93:18:1D:D9:01:05:91:B1:F7:0D:50
Certificate issuer: /CN=A91209740000/serialNumber=6845D331C417296D3A93181DD9010591B1F70D50
Certificate serial: 155518307712DE413D35CFA66802AD7B06E15E22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft
Manifest number: 02EA
Signing time: Sun 27 Sep 2026 10:53:07 +0000
Manifest this update: Sun 27 Sep 2026 10:48:07 +0000
Manifest next update: Wed 30 Sep 2026 13:30:07 +0000
Files and hashes: 1: 6845D331C417296D3A93181DD9010591B1F70D50.crl (hash: kepaw6Mk2OoqtF6RGAmAHJ6XYz/PX75B3zETAinYWug=)
2: AS45090.roa (hash: HEeeGmrOuHbjsvEBYWjApEe9XYDpObqvfUUdLqGqjVU=)
3: AS132203.roa (hash: LCoS0er/7zh/bY2O8Xb/4U/28JPzEL9/b42FKGTNuk0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.crl
rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 13:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:55:18:30:77:12:de:41:3d:35:cf:a6:68:02:ad:7b:06:e1:5e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91209740000, serialNumber=6845D331C417296D3A93181DD9010591B1F70D50
Validity
Not Before: Sep 27 10:48:07 2026 GMT
Not After : Sep 30 13:30:07 2026 GMT
Subject: CN=08BF1EA1B0FE9CEB30F46F70A77227B366F68FB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:da:49:f9:ba:de:fd:34:a1:86:26:9d:79:
2f:8a:b3:91:d7:2d:34:69:3c:be:b3:2f:83:9d:ba:
e4:bb:8b:2e:23:1e:5f:4f:ae:7c:91:49:03:26:99:
27:f4:d0:6c:30:46:6a:61:3c:ad:b2:e7:df:35:81:
95:fe:8f:e8:14:02:a9:9f:84:f4:1c:57:62:fe:06:
67:bd:67:5b:89:b1:2d:db:1c:01:7b:29:b2:56:4f:
db:f9:9b:f1:90:fe:5d:fe:2a:77:2b:70:8d:2e:20:
06:0c:0c:96:45:0a:b8:e9:d8:34:be:03:e2:fc:c5:
20:d8:8c:5b:36:4d:ff:94:bc:2d:39:4b:d3:90:71:
86:a6:56:d3:29:4e:c0:fc:86:fd:a9:54:38:f4:e7:
20:6a:eb:0d:0e:5b:72:22:cb:fc:10:c3:75:74:ed:
9f:30:85:14:31:ce:b1:22:92:4d:04:76:b5:70:16:
97:df:42:ba:b8:d3:92:06:e8:c8:ca:26:6e:d9:1b:
26:e0:b1:34:88:1f:85:2b:a4:ca:c1:57:fd:2b:db:
35:ff:85:e0:5d:c6:00:71:8e:a5:71:7f:7d:23:02:
c3:2c:3a:16:ab:aa:13:f0:60:53:0b:5f:60:89:33:
95:fe:4d:e5:ff:72:65:47:6c:db:f7:a7:3a:fd:b1:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BF:1E:A1:B0:FE:9C:EB:30:F4:6F:70:A7:72:27:B3:66:F6:8F:B1
X509v3 Authority Key Identifier:
keyid:68:45:D3:31:C4:17:29:6D:3A:93:18:1D:D9:01:05:91:B1:F7:0D:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ae:f1:f5:2a:ae:ab:e1:1a:25:9c:b3:ae:22:e6:4a:ed:fa:
6d:83:04:f9:12:0e:fd:ae:9b:6f:fc:2d:28:60:45:b5:3d:d9:
1a:da:dd:28:f8:24:27:75:b3:7f:17:b5:3a:b9:f9:b4:c6:08:
f6:2b:82:b4:c9:f9:fe:d5:ce:40:45:ff:6b:42:03:97:55:34:
98:07:67:8f:5a:a3:1e:f6:82:a5:a3:50:15:42:5e:5b:a7:7f:
51:84:a9:f1:a3:73:a9:1c:bc:f4:6a:d3:0a:da:de:d2:a5:79:
f6:7b:4d:8f:02:c1:47:77:b5:72:7b:44:1c:dd:f4:52:96:a6:
d4:64:3d:43:2c:9e:ff:ae:0b:ff:45:78:b2:6d:da:85:50:8b:
0f:3f:46:de:4a:09:17:9c:e3:f7:f6:42:03:8f:0b:8f:68:a6:
a2:7a:c8:aa:4f:15:65:41:ce:02:22:29:3d:13:64:e6:91:7d:
7a:a6:ab:f1:f5:a4:79:78:71:54:f5:54:8d:48:56:0e:a1:01:
c6:75:d9:5f:db:ab:f5:e3:e1:a7:4e:3e:59:9d:7f:59:99:12:
85:56:b1:a3:31:85:46:a0:d8:0f:ae:e9:b6:69:cf:24:c1:85:
86:f0:50:99:3a:9c:31:fe:83:d0:bb:85:ac:b2:8c:5e:4b:7d:
e8:b2:52:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:34:18 2026 by rpki-client