
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft
File: BE564B2EFF08B30078A1960732464840B104EF35.mft (raw, json)
Hash identifier: HvN8MuFVaeiScrDkQHV3RdXEyrDNyqdZMVyRMpa8NuQ=
Subject key identifier: 92:C1:EB:B7:AB:24:1D:AD:D5:E3:34:F1:46:9B:13:F7:7D:65:A7:CA
Authority key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35
Certificate issuer: /CN=BE564B2EFF08B30078A1960732464840B104EF35
Certificate serial: 211F8837DBC7EB2B8D9B97F58581E8BCAD744C35
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft
Manifest number: 77
Signing time: Fri 17 Apr 2026 18:49:48 +0000
Manifest this update: Fri 17 Apr 2026 18:44:48 +0000
Manifest next update: Sat 18 Apr 2026 20:09:48 +0000
Files and hashes: 1: 3136302e33302e3135302e302f32342d3234203d3e20313531323737.roa (hash: Hz4dS18EKG3nO7kHSRjqfjz5kQRRG+x2194Q5ytjmb4=)
2: BE564B2EFF08B30078A1960732464840B104EF35.crl (hash: pnhRyoj4moZoG98rpHSZtC69zwdj0MKt48l7BFnW0/w=)
3: 3136302e33302e3135302e302f32332d3233203d3e20313531323737.roa (hash: SqYoFh9M/RF4hCcPqm6MB7F49di/2cutG0x9fForwa0=)
4: 3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa (hash: YwKh5dq5C2YtmvyvhSiDqYWYBqwzrzASsjUiBDUCUE0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:1f:88:37:db:c7:eb:2b:8d:9b:97:f5:85:81:e8:bc:ad:74:4c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE564B2EFF08B30078A1960732464840B104EF35
Validity
Not Before: Apr 17 18:44:48 2026 GMT
Not After : Apr 18 20:09:48 2026 GMT
Subject: CN=92C1EBB7AB241DADD5E334F1469B13F77D65A7CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:0a:87:bf:91:2a:aa:e0:7a:88:54:ab:a3:
23:e1:fc:0f:3c:3c:94:84:12:fd:8b:7a:e0:6e:d5:
93:28:c5:04:5a:3f:b4:e8:3f:2b:ae:d7:55:b0:32:
39:cc:da:6f:2a:7a:b9:34:3c:96:e7:79:f2:ec:33:
f8:d6:33:f8:fb:c7:56:b9:ba:06:7f:7f:f2:39:b5:
63:27:7b:ae:20:97:f2:f8:04:37:06:4c:28:d7:7d:
c5:0f:e8:1a:5b:0c:1e:54:9b:16:3e:df:42:32:ff:
2d:bd:29:50:a6:8b:6d:f1:55:64:68:f0:8f:cc:14:
b6:e9:8c:d9:7f:3e:c4:2b:14:53:e5:b2:ac:85:cf:
00:28:1b:62:e7:ae:22:14:fa:84:c3:81:fb:d8:ff:
5c:c6:ff:5c:20:6c:ae:9b:af:38:02:41:15:d3:e8:
01:ea:49:bb:30:43:2f:8e:23:7a:47:1b:ad:71:8f:
96:a2:1c:42:24:9c:a8:38:8e:08:66:a9:f1:2e:23:
a6:d9:71:2d:df:b8:49:84:35:8c:8e:c4:d8:91:2d:
d4:ba:7b:71:e7:86:7b:47:e7:49:80:4e:1a:a2:ae:
18:02:fe:16:d3:b8:d4:c5:76:80:64:78:12:37:2e:
c3:e3:f2:0d:8b:8d:d7:8c:88:2c:5f:42:ed:ac:9e:
ee:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C1:EB:B7:AB:24:1D:AD:D5:E3:34:F1:46:9B:13:F7:7D:65:A7:CA
X509v3 Authority Key Identifier:
keyid:BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a1:43:d4:15:2b:74:c9:1d:6b:5c:cb:25:53:32:9a:90:0c:
a5:b5:4e:84:3a:d4:93:75:72:a3:47:74:2c:39:66:6a:60:84:
53:eb:fc:a2:79:0d:ad:7a:e9:fd:cc:07:0b:b8:f0:cc:75:40:
57:7c:af:6f:c7:47:70:0a:f4:36:de:3d:a6:38:12:3c:cf:4a:
1e:5e:72:d9:54:c1:3a:d4:34:23:5c:68:2a:67:b5:72:bb:ff:
6b:ac:41:ef:c1:cc:8a:c2:4d:77:36:76:5d:27:36:52:72:86:
c7:1e:46:ac:23:81:31:1b:61:e7:e3:02:af:15:20:9f:05:45:
29:46:c1:2c:9d:50:a6:1b:ae:0a:11:59:6f:92:40:34:23:9b:
11:1f:92:b1:a6:35:10:29:a1:fb:65:b4:65:35:2d:84:ae:bd:
c1:a6:ef:dc:94:18:98:42:7e:80:df:51:16:62:a3:d0:70:72:
b5:42:79:a7:5b:62:69:35:9a:ea:af:bc:5b:fb:1e:ab:c9:24:
82:db:27:fb:6b:d5:07:4a:4e:db:4a:da:74:0d:dc:f7:66:2d:
02:b2:fe:bb:08:f4:d2:90:1e:02:27:78:51:28:99:cf:a8:b6:
76:68:a0:bf:d2:d9:fc:71:cf:09:9e:06:0d:63:99:a5:7f:e5:
b5:be:61:e4
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUIR+IN9vH6yuNm5f1hYHovK10TDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBC
MTA0RUYzNTAeFw0yNjA0MTcxODQ0NDhaFw0yNjA0MTgyMDA5NDhaMDMxMTAvBgNV
BAMTKDkyQzFFQkI3QUIyNDFEQURENUUzMzRGMTQ2OUIxM0Y3N0Q2NUE3Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKiwqHv5EqquB6iFSroyPh/A88
PJSEEv2LeuBu1ZMoxQRaP7ToPyuu11WwMjnM2m8qerk0PJbnefLsM/jWM/j7x1a5
ugZ/f/I5tWMne64gl/L4BDcGTCjXfcUP6BpbDB5UmxY+30Iy/y29KVCmi23xVWRo
8I/MFLbpjNl/PsQrFFPlsqyFzwAoG2LnriIU+oTDgfvY/1zG/1wgbK6brzgCQRXT
6AHqSbswQy+OI3pHG61xj5aiHEIknKg4jghmqfEuI6bZcS3fuEmENYyOxNiRLdS6
e3HnhntH50mAThqirhgC/hbTuNTFdoBkeBI3LsPj8g2LjdeMiCxfQu2snu4XAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUksHrt6skHa3V4zTxRpsT931lp8owHwYDVR0j
BBgwFoAUvlZLLv8IswB4oZYHMkZIQLEE7zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzM4OTU3MS8xL0JFNTY0QjJFRkYwOEIzMDA3OEExOTYwNzMyNDY0
ODQwQjEwNEVGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQkU1NjRCMkVGRjA4QjMwMDc4QTE5NjA3MzI0NjQ4NDBCMTA0RUYzNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTczODk1NzEvMS9CRTU2NEIyRUZGMDhC
MzAwNzhBMTk2MDczMjQ2NDg0MEIxMDRFRjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqFD1BUrdMkd
a1zLJVMympAMpbVOhDrUk3Vyo0d0LDlmamCEU+v8onkNrXrp/cwHC7jwzHVAV3yv
b8dHcAr0Nt49pjgSPM9KHl5y2VTBOtQ0I1xoKme1crv/a6xB78HMisJNdzZ2XSc2
UnKGxx5GrCOBMRth5+MCrxUgnwVFKUbBLJ1QphuuChFZb5JANCObER+SsaY1ECmh
+2W0ZTUthK69wabv3JQYmEJ+gN9RFmKj0HBytUJ5p1tiaTWa6q+8W/seq8kkgtsn
+2vVB0pO20radA3c92YtArL+uwj00pAeAid4USiZz6i2dmigv9LZ/HHPCZ4GDWOZ
pX/ltb5h5A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:41:07 2026 by rpki-client