
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
File: 1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft (raw, json)
Hash identifier: ze9BLnvxbq33/BnH5FfR4Kq4qEoQYGEgOajXmkMMo6I=
Subject key identifier: A2:29:7A:D0:E4:E5:81:35:87:C3:59:B9:BB:00:39:C4:BE:FA:E7:A6
Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60
Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260
Certificate serial: 4B030AB6657872B2D7A0323089B5A01E447CDABC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
Manifest number: 0100
Signing time: Wed 29 Jul 2026 15:04:38 +0000
Manifest this update: Wed 29 Jul 2026 14:59:38 +0000
Manifest next update: Thu 30 Jul 2026 17:52:38 +0000
Files and hashes: 1: 323430363a333334303a313030303a3a2f33362d3336203d3e2034353338.roa (hash: KYM3ELbMCKp+6MUPgs/9MWB4zCPRVhg9ZZ/E+9boX90=)
2: 323430363a333334303a353030303a3a2f33362d3336203d3e20313339313339.roa (hash: 5rfMn5eyEOjI7bM2Czawl9qh/Q2r3dk7Vnfnov19ExY=)
3: 3130332e3135322e3138372e302f32342d3234203d3e2034353338.roa (hash: o6lFD+f5dTtKS85vpNkoJjfT093vDss7vKbce+n9he8=)
4: 323430363a333334303a3a2f33362d3336203d3e20313339313339.roa (hash: Lst/83lDIO0N/N2Nq/2F8sv1uj1hMNrfV1g3Bwz6W5o=)
5: 323430363a333334303a333030303a3a2f33362d3336203d3e20313339313339.roa (hash: jCyBYSMp8ykpKE+LeC/9B1hTZ/yh1mvHQn0Z7VAq+x4=)
6: 323430363a333334303a3a2f33362d3336203d3e2034353338.roa (hash: LDCeZckdOB3HNfyrblG/HUp2aEy4QfYHhIC/9aeRBsk=)
7: 323430363a333334303a323030303a3a2f33362d3336203d3e2034353338.roa (hash: CmBU2dVpvyOIsoMAXXmFLRqr0wKbUAQ+/Vctfk/YPDs=)
8: 323430363a333334303a3a2f33322d3332203d3e20313339313339.roa (hash: Y8zftJ45Dvevo2D7PvvADIABaUrY/sJOP040cgE1KVE=)
9: 323430363a333334303a333030303a3a2f33362d3336203d3e2034353338.roa (hash: KxqFA71jX/1SUTQx/ZIiBO0VMLglxVE7YKNkj5UtMa0=)
10: 323430363a333334303a343030303a3a2f33362d3336203d3e20313339313339.roa (hash: 8HnFFqnjIHJZkWlM0QDdPbdL83oIu9lm4vlp+eYmuzw=)
11: 3130332e3135322e3138372e302f32342d3234203d3e20313339313339.roa (hash: kCqfJNUXGhTl3zZ3d4DXFlUeQHWwnY2OvVpG1e96QlY=)
12: 323430363a333334303a373030303a3a2f33362d3336203d3e20313339313339.roa (hash: zvRH+HDqvliXXIdWjNbLwD9LGWMiAjyuoh0tmg3Erc8=)
13: 3130332e3135322e3138362e302f32342d3234203d3e2034353338.roa (hash: hjMZAPj25rifMY/aXpuar4ljrWO+9vYryWGUkVjYTDg=)
14: 323430363a333334303a363030303a3a2f33362d3336203d3e20313339313339.roa (hash: jbqqfi/egeAOL6DVld2ACO8m9pxSY6LZ4MiH2qtF6ug=)
15: 323430363a333334303a313030303a3a2f33362d3336203d3e20313339313339.roa (hash: h4mGUiNpYZm69q/o4Nt9VWgzDNZVcdRzU5IuWw9VVtU=)
16: 3130332e3135322e3138362e302f32332d3233203d3e2034353338.roa (hash: uXu75xzi7p2N4G52LvUInjsgT+4K+3ZfMKmO6D+zH9o=)
17: 3130332e3135322e3138362e302f32342d3234203d3e20313339313339.roa (hash: tCqkCgPu3CbJwypKqoPdvpwfBaPceEp0JmkZYHoK9dA=)
18: 323430363a333334303a3a2f33322d3332203d3e2034353338.roa (hash: RtH+EHEQat1TY8rFi6yt5vc0JFGVxnLwJqQpnImtx2g=)
19: 323430363a333334303a323030303a3a2f33362d3336203d3e20313339313339.roa (hash: ad+vPi3e/8acQcmHeQylpwQ95x3uDgPYwNvetYcyS8c=)
20: 3130332e3135322e3138362e302f32332d3233203d3e20313339313339.roa (hash: qjCyivi0dxcfzMAmqMJUlGNdGpx1THcX6jE8xR7VxBI=)
21: 1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl (hash: OKT7QCWN3vzmtI5D+x02rw7g7ERfLDus5994OcytonY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 17:52:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:03:0a:b6:65:78:72:b2:d7:a0:32:30:89:b5:a0:1e:44:7c:da:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260
Validity
Not Before: Jul 29 14:59:38 2026 GMT
Not After : Jul 30 17:52:38 2026 GMT
Subject: CN=A2297AD0E4E5813587C359B9BB0039C4BEFAE7A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:cb:6b:14:dd:77:d6:88:dd:53:96:62:26:
88:dc:ea:10:83:82:33:6b:94:7d:e9:d7:cf:5c:79:
5d:01:c6:66:36:84:d6:e8:eb:94:3c:a0:85:bc:18:
76:20:71:f3:0a:90:3f:e1:75:08:da:74:40:5b:63:
ab:5c:9b:57:ed:18:6c:8a:72:55:45:95:69:a6:ab:
bb:7e:e6:80:3d:51:c0:53:ce:ee:77:5b:a0:f0:a9:
3f:87:e9:5c:d9:06:d4:66:8c:14:1d:07:05:b0:e0:
22:39:31:16:f6:e4:c2:53:ea:21:6a:58:52:a8:a0:
71:61:37:aa:3e:21:1a:1a:4b:65:58:f1:d7:c0:3d:
c1:32:d7:c6:85:24:a0:27:47:eb:11:a0:1b:a6:a3:
e9:cb:9d:04:2b:93:82:25:6d:6d:c2:b1:30:f9:ed:
09:93:b1:61:85:32:1b:49:9f:e4:11:a6:7f:d4:6c:
f6:7f:d9:53:66:11:9c:bb:c3:b6:ab:5c:34:1b:d6:
58:99:49:78:56:c6:c2:5c:fe:6a:4a:68:57:4c:5d:
d6:e3:85:e1:ae:c6:dd:9f:21:02:60:57:5b:d8:29:
46:1c:c0:02:2a:af:63:18:de:ee:84:5a:17:5a:72:
ca:fa:1c:ba:43:37:a1:d9:4b:d6:b6:c4:e5:03:23:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:29:7A:D0:E4:E5:81:35:87:C3:59:B9:BB:00:39:C4:BE:FA:E7:A6
X509v3 Authority Key Identifier:
keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:43:90:f0:ea:31:16:0a:d3:9d:2f:a8:3d:75:d9:c0:c5:0a:
17:81:26:43:94:e2:92:d1:46:24:ed:0b:3c:d4:8a:3b:51:f7:
da:f0:13:69:2d:3e:47:c1:85:1b:79:d8:d5:c0:37:ab:3f:2a:
b7:0e:5b:33:c0:84:32:37:0e:14:db:d6:84:eb:96:15:e7:04:
20:2a:89:bc:b4:3a:70:96:3d:25:a1:c4:02:eb:92:8a:b7:cb:
01:8e:85:57:98:6f:20:d5:f1:a8:1f:dc:8e:6b:84:f9:a1:c5:
68:d5:f8:66:92:29:0d:42:31:d8:03:c2:6a:14:d6:5a:11:1d:
aa:57:10:bf:9a:db:a9:ed:c1:30:88:37:8b:98:a0:56:29:21:
0b:bb:c3:b5:fe:27:9a:b2:19:1a:b9:2a:5a:df:29:96:a2:fb:
43:f3:6e:da:59:ea:fb:ab:90:17:07:cd:ca:63:3a:b5:79:d9:
12:ba:1d:47:db:ec:a3:b0:18:cd:96:71:ca:f2:83:08:16:da:
0f:16:38:8d:03:a6:8d:43:6b:37:12:41:06:e8:1b:a6:f4:2b:
28:42:49:14:be:6e:33:2c:e5:41:97:54:4c:51:bb:d5:2c:79:
9d:1e:27:ff:c9:5a:c2:80:5c:3d:4e:77:13:c0:90:33:be:bd:
46:4a:50:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:04:55 2026 by rpki-client