
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
File: B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft (raw, json)
Hash identifier: VUSHPFbeq2QNjaA0766bvRhhiQl8/bP+OoYti2Q2qr8=
Subject key identifier: 10:37:2C:72:BC:FA:A0:78:2B:A7:7A:F1:78:E0:37:D0:D0:55:72:BF
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial: 69EB3012A8801FA13899451E37CF63A7B7F8D883
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
Manifest number: 8B
Signing time: Fri 17 Apr 2026 08:41:08 +0000
Manifest this update: Fri 17 Apr 2026 08:36:08 +0000
Manifest next update: Sat 18 Apr 2026 11:27:08 +0000
Files and hashes: 1: B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl (hash: tflUOG3PcDiJt/U6ls+ojtjBMXbXl7qtkhizU4+i0NU=)
2: 3131392e32332e302e302f31362d3234203d3e203337393633.roa (hash: cx1sOfb5xW2/Xf15D2rpaL/lETIhxiEt9i8EJhKrg6E=)
3: 323430363a323838303a3a2f33322d3438203d3e203337393633.roa (hash: rWCQVTBmLmXUSKc3bxnDItzi3nNjAIwB9tZw96f2FAA=)
4: 36302e3230352e302e302f31362d3234203d3e203337393633.roa (hash: qwwF5A0JJ6nFBOZg5wYlWgUNuVpu2phH0DDJZkpZgXM=)
5: 3131362e36322e302e302f31362d3234203d3e203337393633.roa (hash: JL4sfXHpEsaOzs3NoDK1xoTbKkD+6oEUVCwWmCfTuJ8=)
6: 35392e3131302e302e302f31362d3234203d3e203337393633.roa (hash: /UuE+qfWK+I0fiLLJ5G1+T6+v+m5NU4fGU9YLuU8L2Q=)
7: 3131382e3137382e302e302f31362d3234203d3e203337393633.roa (hash: +O2TXpzep3vj9ZiXgpzn1odmEEygFr+fK3zS8m3HD2Q=)
8: 3131322e3132342e302e302f31362d3234203d3e203337393633.roa (hash: Mk/05zpZqtgnYq/+gGO7xCjBwe9RIZVxgBhE9qeWpDc=)
9: 3132312e38392e302e302f31362d3234203d3e203337393633.roa (hash: aRmlBdC/MnO13qZTP+OkxSC+OOrQhcoCciBB6RX77hE=)
10: 3131322e3132362e302e302f31362d3234203d3e203337393633.roa (hash: azRrezG+l+poPSWi8QrlWFGHsPHHzef6/dDX2yt64dc=)
11: 3130312e3230302e302e302f31352d3234203d3e203337393633.roa (hash: zn/9l4qN57XLrwIEN7kb5sfk9KGOUZN72QrDd+bpvRE=)
12: 323430353a653030303a3a2f33322d3438203d3e203337393633.roa (hash: LLk+wL4dYmNtV+Ttmv8QW35kUZaNPcs2hOl7TcDkV+Y=)
13: 3130312e3133322e302e302f31352d3234203d3e203337393633.roa (hash: PgEayyjblxwmQtn5/ykMvfP/SGAD+IM6RqvWkL7jT/M=)
14: 3138322e39322e302e302f31362d3234203d3e203337393633.roa (hash: OdF/UP9CvtI3ZgrFewffgy2Px7nIf73GB0Xi10doB34=)
15: 3135372e3131392e3139322e302f32322d3234203d3e203337393633.roa (hash: NvYcvgpbx6I9/r422RHq98K59aloqU/WXru2lzELV3o=)
16: 3132302e35352e302e302f31362d3234203d3e203337393633.roa (hash: H+y/VzVbADmTJObePIg1uBs+BFcu4tKAHAOJgFR0ga8=)
17: 3131382e3139302e302e302f31362d3234203d3e203337393633.roa (hash: xQW9ojol45re4iNCAQGqC8ODlHa5bqX39lPKMWNMbPQ=)
18: 323430383a343031363a3a2f33322d3332203d3e203234343239.roa (hash: JY6EyEHObFN70WtIyyCcgFcMUMI20Yh+7uSNKIo60Bg=)
19: 3131342e3231352e302e302f31362d3234203d3e203337393633.roa (hash: asRVDvkw9n5PwBBtla9aZDKA3N+T6k8ahpr54j5ukgA=)
20: 3131322e3132342e302e302f31352d3135203d3e203337393633.roa (hash: HrxzZSXdX7+SXiAtVFXWEaXNTmRFpOf1krlUUQGaq4Y=)
21: 3131352e32382e302e302f31352d3234203d3e203337393633.roa (hash: XnPKl+/JEplwm/WK08Thtb7z0ksM1JvmzW9Ppeb6mYM=)
22: 3131322e3132342e302e302f31342d3134203d3e203337393633.roa (hash: RlIzuqtLZFY/AyZ+gI2Uy7dDwcT3KJRDY+Kan/fqhVU=)
23: 3231382e3234342e3132382e302f31392d3234203d3e203337393633.roa (hash: iyBkW1fLx32WzjJy8ihcbOC8GoVMn0HY64Rilhb95zY=)
24: 3131342e35352e302e302f31362d3234203d3e203337393633.roa (hash: g8wkK1g2kNElzyj6dk/ukUFxRPxia6hbos25iyD1Eaw=)
25: 3131322e3132372e302e302f31362d3234203d3e203337393633.roa (hash: goE3v337E72XTpSyZ1GGzQZcIkJqpGaZayoHHRYCyyI=)
26: 3131322e37342e302e302f31362d3234203d3e203337393633.roa (hash: G3zmSVUd68hJoAuRfhCoY9LP5i9XMd7UlDxZdZGEgDc=)
27: 3131322e3132352e302e302f31362d3234203d3e203337393633.roa (hash: aVwCtUf4CHRKNiIbNF2n4nOJkda7r3fi/o0daicqHfo=)
28: 323430373a626330303a3a2f33322d3438203d3e203337393633.roa (hash: +haY8UqkEWYU9s9FGkdagnnD2aOzR+OUWWpUy84haQI=)
29: 3132332e35362e302e302f31352d3234203d3e203337393633.roa (hash: G4wfVtoubfJaFDIDeGXFZRkYA5B45naBkWWgLxWDVac=)
30: 3131322e3132362e302e302f31352d3135203d3e203337393633.roa (hash: FdOZEfGKClBYoXB7pc6OA0OyxtCs3v7jL0QmWrkPMgg=)
31: 3131302e37352e3136302e302f31392d3234203d3e203337393633.roa (hash: AX13UDzWLylbr13Btw7BngjcEx5xvvCKa+6nkDSrP2k=)
32: 3135372e3131392e3139322e302f32332d3233203d3e203337393633.roa (hash: d85GdIxTHF9Rw1pywiDP/VQLaUyACze09vZCzp1zdMw=)
33: 3130362e31342e302e302f31352d3234203d3e203337393633.roa (hash: X9B3G/0KPD2nenQ2JO1Gt14x3vOlzC4plr3DaVVr8hY=)
34: 3131302e37362e33322e302f32302d3234203d3e203337393633.roa (hash: GEmJCg1FWBS4Zq8EQZHgl+GeCc9jHAdD/syjPDLZqcQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 11:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:eb:30:12:a8:80:1f:a1:38:99:45:1e:37:cf:63:a7:b7:f8:d8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Validity
Not Before: Apr 17 08:36:08 2026 GMT
Not After : Apr 18 11:27:08 2026 GMT
Subject: CN=10372C72BCFAA0782BA77AF178E037D0D05572BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:80:b0:44:bf:54:41:51:b7:62:00:ce:7f:17:
3e:07:c5:f4:f8:d0:2d:ab:20:f4:8d:91:a1:0b:8e:
7c:4d:40:16:5a:c4:73:92:a3:3b:5e:48:60:99:77:
37:47:18:ec:64:55:a1:4f:01:15:f3:93:f5:89:34:
c1:f5:9e:c2:d2:dd:35:d0:51:f6:63:e2:9b:16:b4:
ae:98:e5:4b:b9:fb:c7:b0:32:ba:d6:3b:20:40:26:
94:ce:15:5f:9f:6b:9e:95:3c:8e:ec:be:29:4b:80:
6c:8c:33:fb:f5:fc:30:b6:2b:27:43:b3:a5:69:42:
87:05:9c:c3:67:28:9d:0f:6d:48:fd:eb:45:fc:4e:
7c:6e:39:58:3c:64:ec:46:86:ea:db:3e:fa:91:5d:
e8:28:f0:d4:d3:52:31:3f:69:a8:54:f9:87:3e:9d:
1d:91:85:73:df:c4:03:87:81:73:9c:e5:c3:e4:c5:
92:70:86:46:80:88:2a:92:8f:c5:4c:dc:4f:96:fe:
b4:fd:33:30:03:e1:ae:be:71:a5:15:d0:c8:ff:94:
d1:53:4e:24:e7:ca:ba:da:76:a6:5b:32:20:e8:eb:
46:12:0c:97:a5:26:a6:77:9d:45:50:2b:b6:21:27:
97:55:b8:db:09:f3:7d:5f:7a:0d:7b:f3:a4:19:30:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:37:2C:72:BC:FA:A0:78:2B:A7:7A:F1:78:E0:37:D0:D0:55:72:BF
X509v3 Authority Key Identifier:
keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a5:c6:f3:81:b9:59:4a:89:cc:f2:c3:5f:0f:3c:bd:47:95:
ee:fb:7f:e0:56:df:c4:67:f1:6e:15:a4:93:a9:35:e4:9b:59:
a2:d2:5e:c4:af:3d:52:1a:03:1c:cb:f3:6f:30:45:37:87:94:
96:82:3e:4c:35:df:fb:1c:24:f9:25:f1:c0:c1:dd:07:7b:d6:
28:79:15:6d:91:bb:c0:91:04:be:a2:cd:99:d5:23:f7:65:91:
c6:5c:c3:d4:44:47:2d:58:25:fc:18:0c:50:85:7a:49:fc:8f:
f7:f6:d8:8c:84:03:f5:dc:81:63:cd:ab:0e:4e:eb:d3:75:8f:
3e:8e:56:f0:ac:ba:21:7a:c3:85:d6:bb:bd:6c:d7:2c:3f:1a:
77:9b:d8:5e:d3:45:e0:77:d4:11:90:95:ef:24:34:7c:c1:8f:
f4:31:ed:5f:b8:ce:4c:56:b9:df:13:50:37:ec:46:74:3a:da:
d3:80:e6:79:3b:7c:97:cf:06:0c:53:fb:54:90:ba:7c:85:69:
5d:13:53:29:f7:60:44:46:6b:c1:3c:93:5e:84:aa:4b:9c:5d:
18:55:fe:6b:3e:eb:ec:27:e6:d9:59:39:6e:5a:68:0a:5a:52:
2b:e3:55:d2:36:7b:0d:c0:da:da:c3:df:7d:a1:2f:9f:ab:e9:
58:8b:93:77
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUaeswEqiAH6E4mUUeN89jp7f42IMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx
NTdEMEM4RTAeFw0yNjA0MTcwODM2MDhaFw0yNjA0MTgxMTI3MDhaMDMxMTAvBgNV
BAMTKDEwMzcyQzcyQkNGQUEwNzgyQkE3N0FGMTc4RTAzN0QwRDA1NTcyQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDggLBEv1RBUbdiAM5/Fz4HxfT4
0C2rIPSNkaELjnxNQBZaxHOSozteSGCZdzdHGOxkVaFPARXzk/WJNMH1nsLS3TXQ
UfZj4psWtK6Y5Uu5+8ewMrrWOyBAJpTOFV+fa56VPI7svilLgGyMM/v1/DC2KydD
s6VpQocFnMNnKJ0PbUj960X8TnxuOVg8ZOxGhurbPvqRXego8NTTUjE/aahU+Yc+
nR2RhXPfxAOHgXOc5cPkxZJwhkaAiCqSj8VM3E+W/rT9MzAD4a6+caUV0Mj/lNFT
TiTnyrradqZbMiDo60YSDJelJqZ3nUVQK7YhJ5dVuNsJ831feg1786QZMMmVAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUEDcscrz6oHgrp3rxeOA30NBVcr8wHwYDVR0j
BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5
MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU4ODc2NDQwOTA2MzAxNDUvMC9CM0NBRkI1OUYxMEIw
M0FEMjEwNkU4MjE1REJCOTAzRjE1N0QwQzhFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6XG84G5WUqJ
zPLDXw88vUeV7vt/4FbfxGfxbhWkk6k15JtZotJexK89UhoDHMvzbzBFN4eUloI+
TDXf+xwk+SXxwMHdB3vWKHkVbZG7wJEEvqLNmdUj92WRxlzD1ERHLVgl/BgMUIV6
SfyP9/bYjIQD9dyBY82rDk7r03WPPo5W8Ky6IXrDhda7vWzXLD8ad5vYXtNF4HfU
EZCV7yQ0fMGP9DHtX7jOTFa53xNQN+xGdDra04DmeTt8l88GDFP7VJC6fIVpXRNT
KfdgREZrwTyTXoSqS5xdGFX+az7r7Cfm2Vk5blpoClpSK+NV0jZ7DcDa2sPffaEv
n6vpWIuTdw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:12 2026 by rpki-client