
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
File: 1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft (raw, json)
Hash identifier: TBHlCY+xAuyx6hSBJ++EKc510Z2X/4usK5rmuoaHMWk=
Subject key identifier: 5A:81:2A:34:4D:58:91:E0:C9:61:2D:92:CE:48:15:17:FD:1E:54:47
Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60
Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260
Certificate serial: 35CA790BB006029C87A3A3F92A538CF0CCAA2002
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
Manifest number: 77
Signing time: Fri 17 Apr 2026 18:34:47 +0000
Manifest this update: Fri 17 Apr 2026 18:29:47 +0000
Manifest next update: Sat 18 Apr 2026 19:43:47 +0000
Files and hashes: 1: 323430363a333334303a3a2f33322d3332203d3e20313339313339.roa (hash: Y8zftJ45Dvevo2D7PvvADIABaUrY/sJOP040cgE1KVE=)
2: 323430363a333334303a313030303a3a2f33362d3336203d3e2034353338.roa (hash: KYM3ELbMCKp+6MUPgs/9MWB4zCPRVhg9ZZ/E+9boX90=)
3: 323430363a333334303a313030303a3a2f33362d3336203d3e20313339313339.roa (hash: h4mGUiNpYZm69q/o4Nt9VWgzDNZVcdRzU5IuWw9VVtU=)
4: 323430363a333334303a373030303a3a2f33362d3336203d3e20313339313339.roa (hash: zvRH+HDqvliXXIdWjNbLwD9LGWMiAjyuoh0tmg3Erc8=)
5: 323430363a333334303a323030303a3a2f33362d3336203d3e2034353338.roa (hash: CmBU2dVpvyOIsoMAXXmFLRqr0wKbUAQ+/Vctfk/YPDs=)
6: 323430363a333334303a333030303a3a2f33362d3336203d3e20313339313339.roa (hash: jCyBYSMp8ykpKE+LeC/9B1hTZ/yh1mvHQn0Z7VAq+x4=)
7: 323430363a333334303a333030303a3a2f33362d3336203d3e2034353338.roa (hash: KxqFA71jX/1SUTQx/ZIiBO0VMLglxVE7YKNkj5UtMa0=)
8: 3130332e3135322e3138362e302f32342d3234203d3e20313339313339.roa (hash: tCqkCgPu3CbJwypKqoPdvpwfBaPceEp0JmkZYHoK9dA=)
9: 3130332e3135322e3138362e302f32342d3234203d3e2034353338.roa (hash: hjMZAPj25rifMY/aXpuar4ljrWO+9vYryWGUkVjYTDg=)
10: 323430363a333334303a363030303a3a2f33362d3336203d3e20313339313339.roa (hash: jbqqfi/egeAOL6DVld2ACO8m9pxSY6LZ4MiH2qtF6ug=)
11: 323430363a333334303a3a2f33362d3336203d3e20313339313339.roa (hash: Lst/83lDIO0N/N2Nq/2F8sv1uj1hMNrfV1g3Bwz6W5o=)
12: 3130332e3135322e3138362e302f32332d3233203d3e20313339313339.roa (hash: qjCyivi0dxcfzMAmqMJUlGNdGpx1THcX6jE8xR7VxBI=)
13: 323430363a333334303a3a2f33362d3336203d3e2034353338.roa (hash: LDCeZckdOB3HNfyrblG/HUp2aEy4QfYHhIC/9aeRBsk=)
14: 3130332e3135322e3138372e302f32342d3234203d3e2034353338.roa (hash: o6lFD+f5dTtKS85vpNkoJjfT093vDss7vKbce+n9he8=)
15: 323430363a333334303a3a2f33322d3332203d3e2034353338.roa (hash: RtH+EHEQat1TY8rFi6yt5vc0JFGVxnLwJqQpnImtx2g=)
16: 323430363a333334303a353030303a3a2f33362d3336203d3e20313339313339.roa (hash: 5rfMn5eyEOjI7bM2Czawl9qh/Q2r3dk7Vnfnov19ExY=)
17: 323430363a333334303a343030303a3a2f33362d3336203d3e20313339313339.roa (hash: 8HnFFqnjIHJZkWlM0QDdPbdL83oIu9lm4vlp+eYmuzw=)
18: 3130332e3135322e3138372e302f32342d3234203d3e20313339313339.roa (hash: kCqfJNUXGhTl3zZ3d4DXFlUeQHWwnY2OvVpG1e96QlY=)
19: 3130332e3135322e3138362e302f32332d3233203d3e2034353338.roa (hash: uXu75xzi7p2N4G52LvUInjsgT+4K+3ZfMKmO6D+zH9o=)
20: 1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl (hash: vzU3sD2yUW/OirusP1Ogas4zZjb+BQVmiv0ouIuxR0Q=)
21: 323430363a333334303a323030303a3a2f33362d3336203d3e20313339313339.roa (hash: ad+vPi3e/8acQcmHeQylpwQ95x3uDgPYwNvetYcyS8c=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ca:79:0b:b0:06:02:9c:87:a3:a3:f9:2a:53:8c:f0:cc:aa:20:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260
Validity
Not Before: Apr 17 18:29:47 2026 GMT
Not After : Apr 18 19:43:47 2026 GMT
Subject: CN=5A812A344D5891E0C9612D92CE481517FD1E5447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7b:04:cd:09:04:cc:40:30:c8:27:28:55:dc:
7b:9a:35:ac:97:74:01:4e:36:58:4f:07:17:04:fd:
7e:75:f8:5b:7a:02:d3:17:3a:6d:aa:0e:8d:80:85:
81:6a:4d:fd:00:ad:e2:36:17:ef:b0:fa:2d:cd:b5:
85:c2:e1:5b:64:d6:9d:51:36:96:40:53:1c:0c:5b:
94:e6:b1:81:34:1e:c7:60:55:6a:10:c1:75:d2:66:
15:37:29:22:cc:6a:38:04:19:35:92:2a:63:4e:3c:
b6:e7:4f:93:6f:fc:af:1a:6b:e8:a1:c6:70:67:46:
e3:3e:b6:ef:73:b8:fb:18:10:f0:af:12:cc:37:84:
dc:02:f1:d7:21:83:b8:dd:ff:4a:16:d0:31:ee:fc:
bc:ab:bf:ce:64:f7:4f:4b:fe:43:b8:61:13:5e:16:
6a:f4:8f:3f:00:05:d7:ec:e7:c0:ef:69:c2:61:53:
32:ae:17:0b:fa:18:16:51:53:b0:dd:44:4a:6c:db:
73:84:67:b5:94:d1:2e:6b:8b:2d:da:9e:13:06:37:
7c:0d:44:00:e7:04:fb:ab:00:33:68:6f:be:4f:81:
d4:03:1a:a4:43:6c:e9:cd:2c:a7:2f:f4:e6:b6:86:
1c:4e:2e:98:6d:a7:9c:75:cd:92:02:4e:63:3a:3c:
f0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:81:2A:34:4D:58:91:E0:C9:61:2D:92:CE:48:15:17:FD:1E:54:47
X509v3 Authority Key Identifier:
keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:23:ab:90:50:a5:14:e4:8d:08:7a:0a:aa:36:9e:84:3e:77:
a5:6d:7b:86:2f:4f:eb:5c:63:a1:ba:82:b1:bd:50:84:64:de:
fa:c9:9b:9a:fc:de:64:02:21:ca:f7:6f:a5:fe:54:99:c3:71:
18:9e:d4:55:2b:0e:43:fc:91:07:02:24:4c:38:6c:12:b1:3b:
18:d0:9b:73:a4:da:d6:55:57:35:0c:9c:a6:9b:79:47:71:65:
1b:af:d1:89:4a:3c:9e:a2:f3:de:a7:1d:28:41:6c:1a:cd:a2:
32:a0:c9:0a:ab:f6:8d:08:4a:0f:67:ea:26:f3:55:1a:84:a3:
f6:0e:37:d5:3f:8d:78:7e:3b:64:c2:a8:25:8e:51:8d:3f:9d:
02:df:26:c3:c9:2b:a4:94:db:45:c1:5d:61:31:1f:57:47:35:
12:d8:29:20:4b:df:d3:fa:67:0b:f8:ce:ab:cc:12:db:54:e5:
16:ba:b4:18:1f:a3:bb:3e:80:cb:7d:74:68:c7:78:92:5d:bc:
38:2c:6e:3f:10:71:0b:ad:2c:ca:8c:d0:e1:6d:7b:b2:53:ed:
7e:26:53:78:12:b5:0a:10:64:aa:81:41:77:92:8e:85:65:0a:
72:4b:80:10:25:62:14:a6:98:a6:7c:43:e0:c1:f1:f4:95:1d:
9a:eb:9b:fc
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUNcp5C7AGApyHo6P5KlOM8MyqIAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JE
RUI4RjI2MDAeFw0yNjA0MTcxODI5NDdaFw0yNjA0MTgxOTQzNDdaMDMxMTAvBgNV
BAMTKDVBODEyQTM0NEQ1ODkxRTBDOTYxMkQ5MkNFNDgxNTE3RkQxRTU0NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXewTNCQTMQDDIJyhV3HuaNayX
dAFONlhPBxcE/X51+Ft6AtMXOm2qDo2AhYFqTf0AreI2F++w+i3NtYXC4Vtk1p1R
NpZAUxwMW5TmsYE0HsdgVWoQwXXSZhU3KSLMajgEGTWSKmNOPLbnT5Nv/K8aa+ih
xnBnRuM+tu9zuPsYEPCvEsw3hNwC8dchg7jd/0oW0DHu/Lyrv85k909L/kO4YRNe
Fmr0jz8ABdfs58DvacJhUzKuFwv6GBZRU7DdREps23OEZ7WU0S5riy3anhMGN3wN
RADnBPurADNob75PgdQDGqRDbOnNLKcv9Oa2hhxOLphtp5x1zZICTmM6PPAxAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUWoEqNE1YkeDJYS2SzkgVF/0eVEcwHwYDVR0j
BBgwFoAUG/B3mQs+8veUeLZXtMOve9648mAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MzIyMTk3MjQwMjE3OS8wLzFCRjA3Nzk5MEIzRUYyRjc5NDc4QjY1N0I0QzNB
RjdCREVCOEYyNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMUJGMDc3OTkwQjNFRjJGNzk0NzhCNjU3QjRDM0FGN0JERUI4RjI2MC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzI0MDIxNzkvMC8xQkYwNzc5OTBCM0VG
MkY3OTQ3OEI2NTdCNEMzQUY3QkRFQjhGMjYwLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6yOrkFClFOSN
CHoKqjaehD53pW17hi9P61xjobqCsb1QhGTe+smbmvzeZAIhyvdvpf5UmcNxGJ7U
VSsOQ/yRBwIkTDhsErE7GNCbc6Ta1lVXNQycppt5R3FlG6/RiUo8nqLz3qcdKEFs
Gs2iMqDJCqv2jQhKD2fqJvNVGoSj9g431T+NeH47ZMKoJY5RjT+dAt8mw8krpJTb
RcFdYTEfV0c1EtgpIEvf0/pnC/jOq8wS21TlFrq0GB+juz6Ay310aMd4kl28OCxu
PxBxC60syozQ4W17slPtfiZTeBK1ChBkqoFBd5KOhWUKckuAECViFKaYpnxD4MHx
9JUdmuub/A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:18:11 2026 by rpki-client