
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft
File: BCAF99574819590D7B82611FFD862F69D879E4F4.mft (raw, json)
Hash identifier: WwRxhaZHy7I8cyE69UXeyj8xRL2HpxDHROlL52lQcE4=
Subject key identifier: 1F:D6:A9:4A:C3:49:AB:67:82:1F:87:3D:CC:F8:AC:F9:50:32:B5:97
Authority key identifier: BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4
Certificate issuer: /CN=BCAF99574819590D7B82611FFD862F69D879E4F4
Certificate serial: 5C1EBD0548A42C4B27711A0BDC35547D3765D413
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft
Manifest number: C1
Signing time: Sat 13 Jun 2026 18:32:06 +0000
Manifest this update: Sat 13 Jun 2026 18:27:06 +0000
Manifest next update: Sun 14 Jun 2026 20:36:06 +0000
Files and hashes: 1: 323430363a623634303a3130303a3a2f34382d3438203d3e20313339313338.roa (hash: 3DWH8QZD9QKUnWi0WnBhlc2RTcPFl9dxwdk3/tKrTsQ=)
2: 3130332e3135302e3136352e302f32342d3234203d3e20313339313338.roa (hash: 14wWl4f/eejAqbSr8vmyRduAkdVyOOg0dDedkjz5oTA=)
3: 3130332e3135302e3136342e302f32342d3234203d3e20313339313338.roa (hash: 8slgrQA00gnB4sB2slm+VUvN1QUdZjNfayccdxu95ek=)
4: 323430363a623634303a343130303a3a2f34382d3438203d3e20313339313338.roa (hash: G0nS6E+pOBefRdlYp/Tb4uZte54/xNpcMlUdNK0a/1I=)
5: BCAF99574819590D7B82611FFD862F69D879E4F4.crl (hash: rPrWIv3NXORiY/ktvpxzf/VDQxipA/e0VLOCC/G3ihk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:1e:bd:05:48:a4:2c:4b:27:71:1a:0b:dc:35:54:7d:37:65:d4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCAF99574819590D7B82611FFD862F69D879E4F4
Validity
Not Before: Jun 13 18:27:06 2026 GMT
Not After : Jun 14 20:36:06 2026 GMT
Subject: CN=1FD6A94AC349AB67821F873DCCF8ACF95032B597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3e:98:7c:28:6a:fe:41:b5:28:29:11:4b:d4:
68:88:c9:32:f5:97:d7:9f:e8:9c:51:bb:3b:c8:3c:
8b:1e:4c:18:95:e3:25:f9:16:8d:80:65:e5:ed:7b:
a6:30:e0:ba:7c:b8:11:9d:5c:1f:9e:46:e5:dd:f4:
eb:11:b2:11:83:ed:62:4f:61:05:07:01:15:d2:ec:
8f:cf:81:9e:53:6b:07:3d:f3:1a:cb:cd:34:f1:eb:
fa:1e:53:d1:32:1c:36:a0:54:8c:2b:2d:b2:dd:72:
cb:a7:bd:da:b9:fc:71:e9:80:2e:09:f3:f2:d7:9d:
47:2f:e1:05:e1:29:ed:cf:6d:2d:54:81:58:dd:18:
38:f4:96:33:21:81:e3:88:81:ac:60:4a:4a:e3:cf:
68:d8:bd:a6:79:09:df:7b:da:87:3f:27:7a:65:31:
53:ff:6e:92:db:48:e4:82:86:d5:bc:c3:e9:86:32:
6b:0d:c8:97:09:eb:51:8b:45:d7:8f:d1:34:67:ed:
cf:fa:c3:7a:99:10:78:ea:4b:55:9c:30:fb:94:21:
01:77:d3:c4:09:38:24:f8:9b:6a:d0:a6:dc:7e:c6:
36:de:fd:ca:6d:e4:d3:b7:0b:e1:8a:5c:bd:16:ca:
7f:6c:81:2f:56:93:7c:66:e9:d4:f0:1d:0b:ef:0a:
07:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D6:A9:4A:C3:49:AB:67:82:1F:87:3D:CC:F8:AC:F9:50:32:B5:97
X509v3 Authority Key Identifier:
keyid:BC:AF:99:57:48:19:59:0D:7B:82:61:1F:FD:86:2F:69:D8:79:E4:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCAF99574819590D7B82611FFD862F69D879E4F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972336643/0/BCAF99574819590D7B82611FFD862F69D879E4F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1b:6c:56:0a:21:f7:44:91:9e:45:93:13:36:95:30:c1:db:
19:e7:c7:2e:80:d2:7b:06:21:0b:76:c4:0e:6a:8f:62:8b:e8:
d2:13:97:7d:b5:a0:59:f9:b1:47:20:36:f0:dc:35:47:8c:ee:
fb:d7:d8:12:bc:e5:d6:53:29:2d:62:58:e1:61:21:5f:d0:25:
35:20:98:41:cb:f6:9b:1d:9a:40:56:6e:02:8d:1a:05:f7:06:
a5:4e:19:64:a7:9c:04:d7:0b:0a:41:4e:45:8b:e9:a1:ef:96:
da:21:f5:cc:3d:d1:cc:49:21:7a:3e:51:43:d2:33:ef:aa:be:
7b:b2:cf:22:97:b2:87:d5:a4:71:e5:ea:7d:be:71:78:65:b6:
3b:35:7b:9d:bb:78:44:71:35:0f:2b:5c:0c:e2:c6:bf:d9:30:
23:de:f1:1d:4b:66:a1:48:da:c5:5e:7c:b8:95:5d:73:88:52:
c3:a3:d7:d1:3e:15:dc:1d:34:86:b2:9b:90:c7:70:15:31:31:
70:e8:a1:6b:eb:0e:1e:53:2c:6c:fa:15:87:0c:21:ed:93:c4:
20:9c:fd:ba:c5:eb:3d:59:f8:56:ba:66:b7:8d:a7:92:d0:73:
a3:35:f9:6b:0c:b0:17:18:7d:09:83:59:65:82:36:a6:da:ab:
f8:85:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:36:34 2026 by rpki-client