
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft
File: 8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft (raw, json)
Hash identifier: mLXXEkJHbNL38pRdk/GYHWCIzjzuUzhhC7/CM1HQbdY=
Subject key identifier: 32:2C:88:46:C6:6F:A6:14:D7:20:C9:D2:74:77:AE:74:9C:DC:3E:B1
Authority key identifier: 8E:37:F0:EF:BE:28:81:7D:E0:E6:35:BA:8F:CB:D7:56:CD:76:EE:8C
Certificate issuer: /CN=8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C
Certificate serial: 56046BBDDF6AFEE60FB02B1A7C5549C1F48B4CC4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft
Manifest number: 4E
Signing time: Mon 12 Oct 2026 06:11:43 +0000
Manifest this update: Mon 12 Oct 2026 06:06:43 +0000
Manifest next update: Thu 15 Oct 2026 13:56:43 +0000
Files and hashes: 1: 8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl (hash: 9eNdS9/HHyht7CT1K1xWfkh5UAEmJn7SP8j+7IQgBtw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl
rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:04:6b:bd:df:6a:fe:e6:0f:b0:2b:1a:7c:55:49:c1:f4:8b:4c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C
Validity
Not Before: Oct 12 06:06:43 2026 GMT
Not After : Oct 15 13:56:43 2026 GMT
Subject: CN=322C8846C66FA614D720C9D27477AE749CDC3EB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1b:3a:b2:76:39:1b:90:66:01:a3:12:cb:db:
fd:b8:0a:ed:cb:78:98:15:8a:3a:03:7c:98:bf:0e:
86:88:d9:5c:23:95:ca:e6:ee:bc:56:38:97:fc:26:
7c:d4:bb:d9:b7:83:a1:f4:f4:cc:8f:b0:e3:90:82:
10:a6:26:6b:9c:ee:ab:08:86:5b:d5:32:c8:4c:2f:
f3:1b:5a:33:d5:65:22:6e:a6:3e:92:83:32:4b:69:
34:01:0d:88:36:87:80:45:ca:81:c6:16:fc:27:bd:
89:59:cf:6d:51:d0:3c:76:7d:37:5a:d8:b9:01:9d:
0e:b2:fe:df:72:2a:1d:b7:4f:20:a4:f6:55:5b:9b:
c2:45:65:99:c1:72:7f:a8:11:fc:c8:f7:bf:27:4a:
a2:ff:ec:58:12:3e:cf:82:32:21:d3:f8:69:32:ec:
ac:3e:58:80:15:e7:93:13:1b:92:a1:03:32:93:cf:
b5:bb:96:d0:e2:19:f6:8b:ba:84:bc:c9:7f:2e:96:
85:c0:b9:68:8f:30:be:6a:12:6c:7f:d5:63:16:07:
3c:c2:fe:e6:3e:b5:ca:6e:07:1c:6b:20:01:55:c5:
a0:ad:3f:11:f2:41:d7:a3:f9:e0:72:98:5e:f8:d9:
d0:df:57:98:6b:c9:87:24:37:a2:e2:a4:c2:43:3e:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2C:88:46:C6:6F:A6:14:D7:20:C9:D2:74:77:AE:74:9C:DC:3E:B1
X509v3 Authority Key Identifier:
keyid:8E:37:F0:EF:BE:28:81:7D:E0:E6:35:BA:8F:CB:D7:56:CD:76:EE:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1130438714586038313/0/8E37F0EFBE28817DE0E635BA8FCBD756CD76EE8C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d1:ef:d0:12:8a:91:26:0c:4a:db:0a:ce:ab:0d:d6:93:ce:
d0:16:61:1a:2d:7b:7d:b4:3e:cc:8b:f0:9d:d4:20:01:96:fa:
f5:5c:90:d6:b3:ad:37:a6:2a:60:a5:b5:cd:d1:33:97:a8:22:
68:ab:fb:0b:7f:11:b5:99:20:85:d6:51:d0:4f:72:61:73:a3:
f9:4c:3d:8e:5f:02:5e:75:cd:29:f7:ae:70:7a:3a:09:ac:07:
a2:44:f2:75:a1:dc:54:8c:bd:ad:77:7e:d3:e9:cc:a2:37:d9:
81:31:df:f7:4b:7c:5f:92:20:03:ab:b8:44:01:1a:54:47:92:
09:be:4d:82:89:35:65:57:94:b3:2e:ee:a7:51:1f:7c:91:f6:
e3:b5:af:70:af:9d:e0:de:68:23:b3:d8:12:5e:e4:2d:71:15:
c3:f3:5f:f2:6e:0e:cc:57:4c:d4:86:3a:65:1c:3e:78:76:f6:
b1:64:fe:05:a8:1d:8c:9a:ff:ec:6d:c4:c1:f3:c3:63:f1:8c:
84:9f:ef:39:84:4b:1f:67:3f:68:11:0d:c6:dd:58:15:6d:86:
86:5d:77:da:d7:1a:d5:27:39:46:20:98:bf:7f:a1:9d:c3:46:
6d:bd:b6:87:b5:dd:50:3c:19:cd:92:c2:80:64:83:88:5d:1e:
d6:88:9e:f7
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUVgRrvd9q/uYPsCsafFVJwfSLTMQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUzN0YwRUZCRTI4ODE3REUwRTYzNUJBOEZDQkQ3NTZD
RDc2RUU4QzAeFw0yNjEwMTIwNjA2NDNaFw0yNjEwMTUxMzU2NDNaMDMxMTAvBgNV
BAMTKDMyMkM4ODQ2QzY2RkE2MTRENzIwQzlEMjc0NzdBRTc0OUNEQzNFQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3GzqydjkbkGYBoxLL2/24Cu3L
eJgVijoDfJi/DoaI2Vwjlcrm7rxWOJf8JnzUu9m3g6H09MyPsOOQghCmJmuc7qsI
hlvVMshML/MbWjPVZSJupj6SgzJLaTQBDYg2h4BFyoHGFvwnvYlZz21R0Dx2fTda
2LkBnQ6y/t9yKh23TyCk9lVbm8JFZZnBcn+oEfzI978nSqL/7FgSPs+CMiHT+Gky
7Kw+WIAV55MTG5KhAzKTz7W7ltDiGfaLuoS8yX8uloXAuWiPML5qEmx/1WMWBzzC
/uY+tcpuBxxrIAFVxaCtPxHyQdej+eBymF742dDfV5hryYckN6LipMJDPsTTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUMiyIRsZvphTXIMnSdHeudJzcPrEwHwYDVR0j
BBgwFoAUjjfw774ogX3g5jW6j8vXVs127owwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz
MDQzODcxNDU4NjAzODMxMy8wLzhFMzdGMEVGQkUyODgxN0RFMEU2MzVCQThGQ0JE
NzU2Q0Q3NkVFOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOEUzN0YwRUZCRTI4ODE3REUwRTYzNUJBOEZDQkQ3NTZDRDc2RUU4Qy5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMzA0Mzg3MTQ1ODYwMzgzMTMvMC84RTM3RjBFRkJFMjg4
MTdERTBFNjM1QkE4RkNCRDc1NkNENzZFRThDLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtdHv0BKKkSYM
StsKzqsN1pPO0BZhGi17fbQ+zIvwndQgAZb69VyQ1rOtN6YqYKW1zdEzl6giaKv7
C38RtZkghdZR0E9yYXOj+Uw9jl8CXnXNKfeucHo6CawHokTydaHcVIy9rXd+0+nM
ojfZgTHf90t8X5IgA6u4RAEaVEeSCb5Ngok1ZVeUsy7up1EffJH247WvcK+d4N5o
I7PYEl7kLXEVw/Nf8m4OzFdM1IY6ZRw+eHb2sWT+BagdjJr/7G3EwfPDY/GMhJ/v
OYRLH2c/aBENxt1YFW2Ghl132tca1Sc5RiCYv3+hncNGbb22h7XdUDwZzZLCgGSD
iF0e1oie9w==
-----END CERTIFICATE-----
Generated at Tue Oct 13 02:54:54 2026 by rpki-client