
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
File: BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft (raw, json)
Hash identifier: nYjYnYEvb/vV882bRLXr/RlKb8KUA7ODP0t8Rm6BX2g=
Subject key identifier: 51:BF:1E:E2:8A:17:B8:D0:9F:D6:0B:85:2D:75:E8:8E:F4:22:CC:6D
Authority key identifier: BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
Certificate issuer: /CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Certificate serial: 41C6DAFE19CFD58210C0A3CD46F919ED01315BF8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
Manifest number: CA
Signing time: Thu 15 Oct 2026 19:51:56 +0000
Manifest this update: Thu 15 Oct 2026 19:46:56 +0000
Manifest next update: Mon 19 Oct 2026 00:13:56 +0000
Files and hashes: 1: 3130332e3130352e3138322e302f32342d3234203d3e203633353339.roa (hash: 5dtBWCJKUt0qXEUR78d/nAXooGGIAc/Oiel8IgG1O1I=)
2: 3130332e3130352e3138332e302f32342d3234203d3e203633353339.roa (hash: YI8A4Du7yJglcT0lF0pk1o8eqRN7DwDPOjjYvDpez/w=)
3: 3130332e3130322e3231332e302f32342d3234203d3e203633353339.roa (hash: lEk/emwpLd2KNPHcEzjkD8dtGpcwgFTdqo+fRWykTXI=)
4: 3130332e3130362e3235322e302f32322d3232203d3e203633353339.roa (hash: +T58P5mxobh7jbfRCXoFhi8Jj31pQ63DY42YYoVTo/g=)
5: 3130332e3130372e302e302f32322d3232203d3e203633353339.roa (hash: 6zTAgkmaPpXVKLTCOKQuSK7E1Hwzah+JQrIRvBH7yYY=)
6: 3130332e3130342e3235322e302f32322d3232203d3e203633353339.roa (hash: o+tGxD34udiiMnnHfOOlowCZ5/a8leLfBtmuXzRepFY=)
7: 3130332e3130352e3138342e302f32342d3234203d3e203633353339.roa (hash: ynaQvDQ/GJCP5xnkwYrmbxMiDh24pFyJW7QCadD5pKk=)
8: 3130332e3130362e3235352e302f32342d3234203d3e203633353339.roa (hash: GWNimImsWwSd4p1pU6UVEiTBxArj1+mRzoNaUAcCZv4=)
9: 3130332e3130352e3138342e302f32322d3232203d3e203633353339.roa (hash: vIZJyscaQGumtDa3wtU91Fi20DqtmjLyMeNAkiESD1w=)
10: 3130332e3130342e3235322e302f32342d3234203d3e203633353339.roa (hash: rhSJttFZU6Ofpv/g7R9Ct+5A+REhiRCtsmzIlI/SYOM=)
11: BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl (hash: 54EK4tBLgsbarXAxAYQmdcctwrYkoePWfyw7jXXg8S0=)
12: 3130332e3130352e3138302e302f32322d3232203d3e203633353339.roa (hash: VflfPvnB4xs7QkcHeF9XZhM+eHcytgoNgRAfmO9MsXc=)
13: 3130332e3130352e3138302e302f32342d3234203d3e203633353339.roa (hash: Zflv93y84coCHuGBf1YXZDdqvktyydrU1e4SpQusyvE=)
14: 3130332e3130362e33362e302f32322d3232203d3e203633353339.roa (hash: TfOhEbexXYJJvm89fhZ3yx6HmJ4i7wpiNwJhA/cKnVc=)
15: 3130332e3130362e3235322e302f32342d3234203d3e203633353339.roa (hash: OjebkkyM3oRhbRKEa/ClMRTM5FTqpqHf57SkGQbfZE8=)
16: 3130332e3130322e3231342e302f32342d3234203d3e203633353339.roa (hash: e2tFgUDndDZmuq4ZEV4P73soZ5eVG1yDkdZ2OLVKDLM=)
17: 3130332e3130342e3235352e302f32342d3234203d3e203633353339.roa (hash: pULXnOTE7ZiNjqBceAXeh10s3iWkDJV1KfgXq9Slp+E=)
18: 3130332e3130352e302e302f32322d3232203d3e203633353339.roa (hash: 31zGxJhS2pTXJ1vb53+jYnyELBqiaVCB8H8eztCZm0A=)
19: 3130332e3130352e3138372e302f32342d3234203d3e203633353339.roa (hash: 4RGNaPoLZcADL1NoS4OERenxrli/g6WqyrNzlkvhQSQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 00:13:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c6:da:fe:19:cf:d5:82:10:c0:a3:cd:46:f9:19:ed:01:31:5b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Validity
Not Before: Oct 15 19:46:56 2026 GMT
Not After : Oct 19 00:13:56 2026 GMT
Subject: CN=51BF1EE28A17B8D09FD60B852D75E88EF422CC6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:75:6f:79:40:0b:ed:d6:41:73:3a:43:55:d8:
1a:f4:9d:af:ca:ac:7a:a6:5b:ef:42:ec:f1:77:a7:
1e:03:1a:c6:0b:14:f9:5b:02:f4:56:9d:80:f4:d0:
c8:08:2c:f4:c8:23:36:33:dc:eb:e6:2c:d3:11:5d:
ec:cb:df:3f:d9:12:7c:c1:8b:20:59:7e:32:42:42:
47:f2:06:71:ed:13:8a:9e:8c:c7:fa:4a:7d:e6:16:
42:94:ef:60:21:00:1f:77:71:a9:16:2a:84:2a:4b:
11:1e:85:92:ce:1a:eb:12:c8:ab:8e:9a:90:e4:60:
3a:94:8e:f6:a3:3f:6d:ed:e9:37:b9:4d:d4:83:53:
15:3d:c7:c6:88:ec:9e:9a:65:73:da:49:07:0a:d1:
aa:50:c2:32:4f:01:ed:19:11:e5:63:bb:0c:c8:77:
e3:fd:b8:a5:b5:d4:e8:c6:f1:da:f0:5f:07:e1:72:
78:34:73:4b:06:94:41:1c:bc:c9:a3:e3:ce:bb:85:
94:69:96:d4:6f:d0:4d:8f:83:53:86:80:21:38:4a:
87:69:5d:1d:36:63:73:d9:a2:12:01:01:ec:56:14:
02:eb:97:67:c2:c3:10:4d:44:f2:80:b8:2e:ef:bd:
3b:9b:a7:37:88:9e:73:c8:cd:ad:2d:05:95:9e:c2:
a4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BF:1E:E2:8A:17:B8:D0:9F:D6:0B:85:2D:75:E8:8E:F4:22:CC:6D
X509v3 Authority Key Identifier:
keyid:BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8c:f1:32:d3:5e:2c:42:43:1a:f4:95:fb:99:d5:04:94:85:
f2:69:45:40:51:ce:59:01:8a:9c:b1:7f:96:2c:09:87:70:2b:
6e:15:98:53:8f:d3:46:24:90:10:99:0c:4d:e8:13:ce:95:b8:
c0:d1:c8:14:54:ff:f2:55:b2:1c:39:05:4a:94:e7:da:01:07:
7b:9c:a9:db:ac:3b:12:eb:aa:5a:78:89:10:e1:a9:19:fe:b7:
10:21:08:3a:2e:5c:58:4e:e5:ce:f7:16:4a:56:0e:af:c9:d5:
fa:d8:e3:72:21:09:b6:48:7f:78:5b:6c:b6:72:b0:39:88:a1:
5f:df:6e:39:1f:72:5b:ac:ab:09:5c:38:71:9a:ff:18:84:4a:
87:f3:9d:44:c4:4a:97:32:15:d6:49:7c:f4:d6:f7:dc:a2:f0:
4c:1e:1d:98:21:e9:90:b6:69:03:00:19:b4:80:ef:d3:5d:14:
3d:6c:4e:bc:60:90:01:8e:fd:87:fd:37:5b:2a:d5:68:ea:20:
35:d4:64:90:89:97:c7:17:2d:7a:c5:79:f7:3b:d6:4c:7e:59:
5e:b9:11:bc:3a:0d:c2:42:74:48:d7:b7:fb:f1:37:90:b7:e4:
46:29:5b:fa:4a:e6:d2:54:dd:46:d8:a6:ed:c8:b7:bd:48:75:
30:9c:cd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:35:40 2026 by rpki-client