
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft
File: B1B9429336A860467C71053DDEA0565EAE6E7309.mft (raw, json)
Hash identifier: 2J0eFUXMLyKDJZKG2f3zb+wtNr2aNpiGu9BBsGyNJFo=
Subject key identifier: 7E:53:F1:21:3D:DF:8B:CE:9E:A0:3E:BE:1A:03:F6:08:CC:2A:CB:28
Authority key identifier: B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09
Certificate issuer: /CN=B1B9429336A860467C71053DDEA0565EAE6E7309
Certificate serial: 48000C961874873A1DF814DCDFBC390951988F2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft
Manifest number: 54
Signing time: Sun 14 Jun 2026 03:27:40 +0000
Manifest this update: Sun 14 Jun 2026 03:22:40 +0000
Manifest next update: Mon 15 Jun 2026 03:28:40 +0000
Files and hashes: 1: 323430373a643963303a3a2f33322d3332203d3e20313436383335.roa (hash: wqwKDkxoiSR0Ndr/C6yuBFJD2jd6jyNdMok0TyWmcjM=)
2: B1B9429336A860467C71053DDEA0565EAE6E7309.crl (hash: imdPL4PZ3S9Bhlm0JjT4wpbgqDcKxg/CAAIS0aqSZZA=)
3: 3130332e3235302e3235322e302f32322d3232203d3e20313436383335.roa (hash: TcninXgld+/IYm/mkUB1iwiaVyhgV1ci7eLEV1ods3M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl
rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:00:0c:96:18:74:87:3a:1d:f8:14:dc:df:bc:39:09:51:98:8f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1B9429336A860467C71053DDEA0565EAE6E7309
Validity
Not Before: Jun 14 03:22:40 2026 GMT
Not After : Jun 15 03:28:40 2026 GMT
Subject: CN=7E53F1213DDF8BCE9EA03EBE1A03F608CC2ACB28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:e7:25:d2:a6:0e:56:d9:71:3b:9f:ad:43:
2e:b3:ab:eb:70:01:de:d2:66:d3:e4:e9:8f:ef:a5:
b7:86:f0:3d:99:05:3a:50:1c:ec:bb:a3:f4:4d:82:
44:4f:d5:8e:d5:87:44:62:f0:44:6a:f3:27:48:d6:
05:44:23:8b:0e:6c:0c:9d:45:88:49:61:51:20:77:
2e:4e:62:3a:9a:03:0c:48:fa:01:cb:83:35:f5:a4:
7a:20:c6:87:09:15:b3:26:b1:cd:25:ef:cf:7b:ef:
d3:cc:dd:42:8a:41:10:cc:7c:ca:cf:a2:61:11:1b:
6a:89:9c:92:d2:1e:07:ea:8f:a4:8d:12:83:88:d8:
2b:68:ae:ce:0f:0f:8d:70:93:4a:d0:51:67:23:de:
66:82:2a:88:44:d7:36:82:0d:5c:9b:88:b9:d6:9d:
56:25:76:f4:4d:2a:2c:fd:cc:c3:b4:30:5d:16:80:
0c:e3:74:fc:94:ba:f1:4d:82:37:78:6a:c6:57:d4:
44:10:88:a4:1f:a9:ee:ad:95:4d:79:65:fd:e2:5e:
c7:8e:d7:fc:18:77:be:58:bc:b2:8b:6f:22:67:f4:
4e:c1:a3:44:63:7c:67:2c:cc:bf:cd:50:29:da:da:
40:4d:50:4d:58:f3:92:b7:74:35:8d:03:a3:9b:a0:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:53:F1:21:3D:DF:8B:CE:9E:A0:3E:BE:1A:03:F6:08:CC:2A:CB:28
X509v3 Authority Key Identifier:
keyid:B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:bc:0e:e5:88:d5:f0:15:95:3f:45:03:a6:f3:dc:c3:da:8e:
6c:4a:9b:10:80:ba:ae:72:ac:b4:5d:7e:48:40:fd:d4:9d:4c:
61:3b:99:4d:4e:0c:41:23:ac:4d:98:93:1c:0b:c6:ed:90:b9:
bd:94:09:96:e2:1c:70:d2:51:f3:cb:f0:eb:b0:01:e3:d4:40:
e1:65:d6:96:86:fe:4c:cb:78:4a:43:60:40:68:c3:3a:cf:a2:
f1:29:06:b9:25:a1:a6:d3:cc:78:10:68:74:e5:dd:08:ab:ad:
bd:f3:c4:79:65:21:8e:c3:2c:6a:69:6e:a7:09:54:85:92:a6:
8e:88:43:12:d4:97:6b:b2:db:66:7a:26:35:c5:d7:65:8a:68:
c3:41:b7:81:e2:76:43:fd:6c:f4:a9:38:69:b7:3f:c5:eb:16:
e9:c8:e4:6a:31:f8:9c:16:75:92:67:67:31:12:bc:e1:dc:d0:
de:13:7e:ac:4c:4a:b7:8e:d7:48:af:8d:ab:0a:a7:f3:f2:bf:
4a:94:e1:a5:29:48:03:20:96:ca:52:87:7b:54:dd:97:e8:e8:
4e:3f:eb:c8:64:7c:49:37:10:c9:d5:3f:1b:ce:b9:88:e9:e8:
1a:e3:bd:76:27:c7:af:c5:f1:9f:23:9d:d9:57:ff:e1:64:c4:
8f:24:cf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:41:59 2026 by rpki-client