
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
File: B1F9550677201454EB206CCFD059783FCDDB44F0.mft (raw, json)
Hash identifier: /828dsR74ALq74cMpmHwekNXiORJbfPDxZlcjfniM7k=
Subject key identifier: FB:EA:F7:23:F8:8F:EA:5A:C2:F3:7F:D3:3C:75:7B:E2:95:0F:E1:69
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 4A286881C6B4A54BE336A19D8598BF47276A62AA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
Manifest number: 7A
Signing time: Fri 17 Apr 2026 07:33:04 +0000
Manifest this update: Fri 17 Apr 2026 07:28:04 +0000
Manifest next update: Sat 18 Apr 2026 07:52:04 +0000
Files and hashes: 1: 3130332e36302e3136342e302f32322d3332203d3e203536303436.roa (hash: JGee1jbT/oJkUuUxiQKutxXa0Yh+wmoesb3hIUiU5SE=)
2: 34332e3235342e3139322e302f32322d3332203d3e20313333303333.roa (hash: r3XpPj1FYm8r25RMxCEfXoeyc9BUGQNJDYDBp+PrjQI=)
3: 34352e3234382e382e302f32322d3232203d3e203632343638.roa (hash: PRQJYfAdJbDuylQLPpP0OmrWCtfzAtohw68L22CpuFQ=)
4: 34332e3235342e3139322e302f32322d3332203d3e203632343638.roa (hash: bobpjRftY4EVuVK7RVubsSzMLbBd0b7awOTlrxaV/28=)
5: 3130332e31392e3233322e302f32322d3232203d3e20313333303333.roa (hash: 36wbu1SRDiLaujfYKA/iSyCAeDESkUTmIlUT9M35B30=)
6: 34352e3234382e382e302f32322d3232203d3e20313333303333.roa (hash: qsctuPBSfA+Dx7b6pLOln9nnloiMUANcbyygIqgY4OQ=)
7: B1F9550677201454EB206CCFD059783FCDDB44F0.crl (hash: WGUjMZSudoE1vI7A/d1Jk07lUm/mSMpuVwzQXkV7MCU=)
8: 3130332e36302e3136342e302f32322d3232203d3e203632343638.roa (hash: auyuE2h/GPKANCvbz6Bw8Yi8e4eCZJDu9XTdgBKbank=)
9: 3130332e36302e3136342e302f32322d3232203d3e20313333303333.roa (hash: vvsbD3Qmkj+urJIzHpJtcmG8mKUbyHobxkx5+Svk+iM=)
10: 3130332e31392e3233322e302f32322d3232203d3e203632343638.roa (hash: FIyKRHnh6ANBsNFHBDZY9OW6prlllmKtfsx4VFw8aRA=)
11: 3130332e36302e3136342e302f32322d3332203d3e2034383337.roa (hash: dZGyd9JNPLiYHO0TnfSl7bhsG5Ez1osZjPWrZetk+u8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:28:68:81:c6:b4:a5:4b:e3:36:a1:9d:85:98:bf:47:27:6a:62:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: Apr 17 07:28:04 2026 GMT
Not After : Apr 18 07:52:04 2026 GMT
Subject: CN=FBEAF723F88FEA5AC2F37FD33C757BE2950FE169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:1b:1f:dc:5e:a1:8d:67:45:bb:2b:46:f6:
44:44:88:1e:c0:b0:5c:f1:92:68:da:67:a0:3d:f0:
d4:ba:f9:f1:02:b9:fd:2f:37:ce:b7:7b:7d:f4:f9:
98:1b:a4:ce:57:5e:f2:1b:9d:f3:bb:64:81:5d:b8:
94:ed:54:0f:0f:07:e6:a4:cb:35:43:e7:28:23:03:
26:d6:b9:ab:5a:eb:a0:4f:8f:00:7a:f0:a8:f5:e7:
94:9a:32:12:fd:bd:96:34:81:6b:91:d9:0a:b4:93:
33:5a:f1:26:16:41:8b:31:8c:5a:62:10:79:c3:72:
95:46:4a:da:f0:68:55:b0:b4:89:4f:a4:a2:54:13:
44:31:ab:78:92:84:25:72:f7:43:36:20:d4:cd:ad:
30:02:fa:c5:85:47:f5:9f:2f:6c:bf:8e:8e:5e:35:
4d:95:e1:e5:85:a3:83:76:31:ed:0b:30:0d:c6:2c:
04:86:35:2f:b2:57:88:0d:6e:1b:f4:73:bf:d3:11:
87:7e:9c:e2:5f:23:cd:66:17:22:89:b2:9b:23:ee:
0d:86:eb:37:7a:4c:14:fe:72:b2:93:e5:68:b3:d4:
2b:68:c5:ac:a0:22:55:49:ea:7b:7b:ab:93:8b:ed:
0c:01:da:9d:b5:c2:80:90:0f:59:cd:be:03:9d:1c:
bc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EA:F7:23:F8:8F:EA:5A:C2:F3:7F:D3:3C:75:7B:E2:95:0F:E1:69
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b5:37:18:96:67:b5:9b:8b:d2:8c:c4:21:4f:2d:29:67:72:
d8:b2:d0:04:2b:cd:70:3c:0c:bd:8f:41:31:f6:f5:14:d7:9a:
53:74:7a:1d:18:e0:74:5a:d6:67:e4:b1:ee:fb:c0:89:9b:c8:
b2:fc:78:73:9a:89:11:c0:e3:74:e9:7d:2d:2d:58:6c:84:1d:
b4:1e:e8:a2:aa:a3:b1:6b:ea:eb:f4:07:39:c6:34:8c:f8:2c:
09:4f:04:76:94:36:ce:86:da:1b:34:5b:c7:89:8d:76:c9:17:
5d:f0:cb:95:45:65:a0:2d:6d:c7:85:fe:78:db:23:6e:e9:49:
77:22:49:c5:90:22:38:e9:5e:ee:f2:0f:9d:66:5a:91:70:d0:
ca:c5:7c:ae:74:70:2b:0e:c0:25:51:32:1e:a8:e8:da:bb:7b:
01:59:36:74:d1:c9:09:91:10:5e:cf:19:9f:aa:2f:46:90:f6:
fc:20:36:05:00:db:d3:04:f3:30:e1:de:2b:c6:1d:00:8f:45:
45:8f:fc:24:1c:2d:d5:61:0f:15:31:2e:25:08:eb:98:33:31:
b3:09:29:5c:35:d1:4b:4f:cd:1c:01:e1:ec:03:35:4d:ba:36:
97:83:9d:58:17:4b:a4:84:3e:32:0f:95:a4:d6:70:d5:66:7b:
22:58:8f:99
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUSihogca0pUvjNqGdhZi/RydqYqowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD
RERCNDRGMDAeFw0yNjA0MTcwNzI4MDRaFw0yNjA0MTgwNzUyMDRaMDMxMTAvBgNV
BAMTKEZCRUFGNzIzRjg4RkVBNUFDMkYzN0ZEMzNDNzU3QkUyOTUwRkUxNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5hsf3F6hjWdFuytG9kREiB7A
sFzxkmjaZ6A98NS6+fECuf0vN863e330+ZgbpM5XXvIbnfO7ZIFduJTtVA8PB+ak
yzVD5ygjAybWuata66BPjwB68Kj155SaMhL9vZY0gWuR2Qq0kzNa8SYWQYsxjFpi
EHnDcpVGStrwaFWwtIlPpKJUE0Qxq3iShCVy90M2INTNrTAC+sWFR/WfL2y/jo5e
NU2V4eWFo4N2Me0LMA3GLASGNS+yV4gNbhv0c7/TEYd+nOJfI81mFyKJspsj7g2G
6zd6TBT+crKT5Wiz1CtoxaygIlVJ6nt7q5OL7QwB2p21woCQD1nNvgOdHLxxAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU++r3I/iP6lrC83/TPHV74pUP4WkwHwYDVR0j
BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3
ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4MTU0ODkvMC9CMUY5NTUwNjc3MjAx
NDU0RUIyMDZDQ0ZEMDU5NzgzRkNEREI0NEYwLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLU3GJZntZuL
0ozEIU8tKWdy2LLQBCvNcDwMvY9BMfb1FNeaU3R6HRjgdFrWZ+Sx7vvAiZvIsvx4
c5qJEcDjdOl9LS1YbIQdtB7ooqqjsWvq6/QHOcY0jPgsCU8EdpQ2zobaGzRbx4mN
dskXXfDLlUVloC1tx4X+eNsjbulJdyJJxZAiOOle7vIPnWZakXDQysV8rnRwKw7A
JVEyHqjo2rt7AVk2dNHJCZEQXs8Zn6ovRpD2/CA2BQDb0wTzMOHeK8YdAI9FRY/8
JBwt1WEPFTEuJQjrmDMxswkpXDXRS0/NHAHh7AM1Tbo2l4OdWBdLpIQ+Mg+VpNZw
1WZ7IliPmQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:13:25 2026 by rpki-client