
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
File: B361C757B6D70C317FD018CE921CC13F568B00D8.mft (raw, json)
Hash identifier: Pt5l8ky/drx1PstdXCSHZTpr0VvLKJhsSR8QgkAE7jo=
Subject key identifier: 92:25:5D:4F:72:14:6D:DE:6A:43:4F:7A:F8:FB:F7:D7:6A:20:19:94
Authority key identifier: B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8
Certificate issuer: /CN=B361C757B6D70C317FD018CE921CC13F568B00D8
Certificate serial: 67EFCCC1459439947485A2953ABDDEA4F69C11BE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
Manifest number: 7A
Signing time: Fri 17 Apr 2026 22:34:48 +0000
Manifest this update: Fri 17 Apr 2026 22:29:48 +0000
Manifest next update: Sun 19 Apr 2026 02:08:48 +0000
Files and hashes: 1: 323430323a326536303a3a2f33322d3438203d3e20313531323331.roa (hash: bgR/NVrBsnz+F/Uqm+DFCd1LSczUrvNifQljXjBX0Cw=)
2: 3130332e3130342e3135322e302f32322d3234203d3e20313531323331.roa (hash: UU8+VwXx5kLXE1vREUzKeaHXeDerUJ/54dl+hLa2H6g=)
3: B361C757B6D70C317FD018CE921CC13F568B00D8.crl (hash: e7tG4DMlQZjsxyv0qw82WVGUI8y4gVhagIqFzccaLfc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ef:cc:c1:45:94:39:94:74:85:a2:95:3a:bd:de:a4:f6:9c:11:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B361C757B6D70C317FD018CE921CC13F568B00D8
Validity
Not Before: Apr 17 22:29:48 2026 GMT
Not After : Apr 19 02:08:48 2026 GMT
Subject: CN=92255D4F72146DDE6A434F7AF8FBF7D76A201994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:61:fd:6f:58:a4:ef:71:77:7e:c9:dd:85:d3:
79:e5:f5:44:3b:88:0f:d9:8e:31:c6:41:7d:24:c2:
2b:e1:8e:89:bb:53:db:09:8c:fd:ff:d0:e7:3a:4f:
ee:8c:f2:9e:72:fe:c4:09:c1:66:65:31:ab:bc:35:
31:ad:22:e0:90:09:b5:c3:03:a0:03:6b:ab:b1:e6:
9a:7d:a5:d2:f7:4a:62:34:35:98:a5:57:e5:c3:eb:
26:b4:58:80:13:d3:2a:9f:99:d7:b2:a6:2d:b8:aa:
b2:fa:d8:83:e4:15:dd:90:a3:0c:52:06:1a:cb:9e:
ec:f2:ad:a8:1e:76:d9:7e:5f:7e:51:61:35:90:12:
85:d0:b2:bc:9c:a9:49:4a:5d:1f:17:31:78:97:f0:
5f:38:2e:15:aa:af:20:eb:e7:6e:6f:19:1d:39:ab:
42:fa:66:56:68:0c:9e:2c:aa:0c:a0:96:fc:00:54:
98:06:73:f7:b4:e4:8f:9d:b1:ba:8e:64:32:88:4a:
a9:34:2c:a9:1e:e7:21:f1:9b:28:21:b6:6c:76:8b:
bb:95:39:1e:29:5a:ea:7c:8c:a2:b4:fa:4a:cd:e0:
d8:b2:c5:ed:e6:cb:01:60:f2:6e:a0:c9:85:da:06:
62:bd:d8:9b:a2:a5:29:26:9b:f5:f1:d3:5d:86:a9:
13:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:25:5D:4F:72:14:6D:DE:6A:43:4F:7A:F8:FB:F7:D7:6A:20:19:94
X509v3 Authority Key Identifier:
keyid:B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:db:86:ab:57:70:48:78:80:00:55:f6:d0:b0:bb:16:eb:bb:
52:34:43:6a:79:47:60:5c:49:ed:89:92:88:28:e8:6e:13:45:
59:00:fc:4f:ed:ae:b1:c1:e5:50:55:9a:d2:4f:c5:1c:ed:b3:
60:cf:22:fb:1b:73:64:57:37:f9:39:0f:25:22:ac:bb:ab:41:
97:01:f8:2f:a1:8b:d5:17:24:aa:38:58:b3:96:14:70:bb:d3:
d8:e7:27:ab:3a:ef:6f:95:80:91:7b:9e:53:16:b0:e9:15:0e:
1e:de:41:1b:50:6d:11:08:52:d6:88:cd:8e:5d:12:eb:41:1b:
cf:e4:c0:e1:52:63:03:d8:1e:c2:3e:93:0e:41:52:63:2c:8b:
91:8a:a0:87:f1:64:95:1a:bc:d8:57:e4:a3:21:c3:00:fc:6a:
0d:da:37:ff:96:d4:e0:dd:0f:f2:90:5d:12:51:9b:7e:1c:1d:
c7:3f:1e:df:03:4f:8c:da:7f:0a:ed:3a:c0:36:36:8e:6d:09:
8d:22:bb:2d:39:0e:b7:34:a3:5a:29:c8:4e:fc:13:c4:10:3b:
f0:08:86:d7:87:bb:a1:57:60:c6:23:1a:4d:c8:a6:49:75:c5:
07:a6:3c:3a:b0:61:0d:66:ef:35:ac:8f:3b:2c:a8:10:e7:71:
f3:87:f1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:03:53 2026 by rpki-client