
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
File: B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft (raw, json)
Hash identifier: lN72q+bilo5Cnk/hZZhWprPl/aog2zXXiTtCdAAkYuQ=
Subject key identifier: 9D:AC:66:65:50:DD:88:A7:16:C0:FB:E6:71:1A:4F:BB:1F:46:F0:73
Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Certificate serial: 4B55490AA9E6D5F458B3ADBB03AE2F6EE3FD11D6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
Manifest number: 56
Signing time: Sat 13 Jun 2026 05:56:19 +0000
Manifest this update: Sat 13 Jun 2026 05:51:19 +0000
Manifest next update: Sun 14 Jun 2026 08:42:19 +0000
Files and hashes: 1: 34332e3233312e3137302e302f32342d3234203d3e203539303435.roa (hash: ON/OMHXBvndmKDHTVNcxmsA4rCStsITi7ntUN0vX/M0=)
2: 34332e3233312e3136352e302f32342d3234203d3e2034383038.roa (hash: d/XWda+qAId3HrqJLJ/ELxQxJigM0ZDtn3cu5cPMToM=)
3: 34332e3233312e3136362e302f32342d3234203d3e2034383038.roa (hash: Pb8V+5FTCdgjn6SiwLlLtlSOYYlOhjvC3VA+VAV8O8c=)
4: 323430333a343238303a3a2f34382d3438203d3e203233373234.roa (hash: JU3XnXtyT8UelE8ZUTUzJFF4EsTcd3qBE1P0ThkMbkc=)
5: B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl (hash: pe9ezO7tEQ9CKMJ4fWWqFKYT7WnM0FkfCIk+ILXcjO8=)
6: 34332e3233312e3136382e302f32342d3234203d3e203539303435.roa (hash: B4/9VepgzCAqS2VDHVYZOohdO8xJ6CFEpvbnisx0SuY=)
7: 34332e3233312e3137302e302f32342d3234203d3e2034383038.roa (hash: 9m6TuvcMhFLuF6l6KNP/vCLSN7cJPoFDY1yMsJdOZms=)
8: 34332e3233312e3136322e302f32342d3234203d3e2034383038.roa (hash: ejDFxPmWT+05HCia7pY1Rse7RbdQUNfTamQE0Gdm3Jo=)
9: 3130332e3233342e35362e302f32322d3232203d3e2034383337.roa (hash: m6QWCJVxxGzot6OqoJwSEys5DCxqMAuQiUrRofADMgg=)
10: 34332e3233312e3136342e302f32342d3234203d3e2034383038.roa (hash: uyXBkHjNtSnoZeCj7/Cxh8i8AfdLFlQpCwN7RMB6PU8=)
11: 34332e3233312e3136362e302f32342d3234203d3e203539303435.roa (hash: 7js4KyKImpomSg+LF70j2/SfmbowekJ3CaRqBA+USmU=)
12: 34332e3233312e3136372e302f32342d3234203d3e203539303435.roa (hash: /9Rp3paE32Mb7xbU1V9yI0KtWtVbueQdmeDgHK5tXtQ=)
13: 323430333a343238303a3a2f34382d3438203d3e2034383038.roa (hash: ULN0wtNAWUAoiI/+nHBlAPQmAmTvce/5E9zhhIxyRyk=)
14: 3130332e3232372e3132322e302f32342d3234203d3e203233373234.roa (hash: /gTohF8KvDpAztOs0o8krBaVNqaJojl9cS4McTId4nk=)
15: 34332e3233312e3136322e302f32342d3234203d3e203233373234.roa (hash: BdQR9FXri1FMEeb1fzW3vWWtY74O1uVL20hYCCh8JN8=)
16: 34332e3233312e3136302e302f32342d3234203d3e203233373234.roa (hash: 24FDnRvLCzn0ANWhhM/3WAQ1SR667x669CQVFjAXkT8=)
17: 34332e3233312e3136342e302f32342d3234203d3e203539303435.roa (hash: TRXaBDgn4/52ym6X+l5H4r05polWjFlZPvb9W1ytskA=)
18: 3130332e3233342e35362e302f32342d3234203d3e2034383337.roa (hash: 81y+N8iirHBRsPfSRpGYFqPsiFIpyNpIgp6HeQiYS5w=)
19: 34332e3233312e3137312e302f32342d3234203d3e203539303435.roa (hash: EUbA6Gg+pJUPRNOqrh6PFcQ/lcvsOyFkVpMhKtDxR5Y=)
20: 3130332e3232372e3132332e302f32342d3234203d3e203233373234.roa (hash: 0AJrwoJqWyS7mm02LUhjXruCkjbSDcdGfNe21l9Twws=)
21: 34332e3233312e3136382e302f32342d3234203d3e2034383038.roa (hash: eO91F7hb156INMh0wkLF9i4co0ne3A8qbTScqpey0H8=)
22: 34332e3233312e3136392e302f32342d3234203d3e2034383038.roa (hash: WC6hkAfwb7PGjQi+Xc5kuTF3CQ7uP1+avO0icjfJOuI=)
23: 34332e3233312e3136312e302f32342d3234203d3e203539303435.roa (hash: 358nj2S4xIzsoF5ZCAuIBT3be/At+L9A5PxfyFNWokY=)
24: 34332e3233312e3136312e302f32342d3234203d3e2034383038.roa (hash: 8nIeiB251IaYlgVWGWgYRtlBq7njmt2I6qe1VI8ltrQ=)
25: 34332e3233312e3136372e302f32342d3234203d3e203233373234.roa (hash: A2ZcgYufZNsYqIVGV/dEfam7F/PbIk4Us5BfawUJzrQ=)
26: 34332e3233312e3136352e302f32342d3234203d3e203539303435.roa (hash: P2w3Cn8q6VBjPyjAE+aGySX201BOvmk4osx5NsrSLsM=)
27: 323430333a343238303a3a2f34382d3438203d3e203539303435.roa (hash: A9wLbcJvXASqzaeNLxcQMZsYx9mTSfRFmMcvE8+RJRg=)
28: 34332e3233312e3136322e302f32342d3234203d3e203539303435.roa (hash: le6HeP8YIpiihcpiK4OmSEaq5HwNDyRlkrLrogtJAfM=)
29: 3130332e3233342e35372e302f32342d3234203d3e2034383337.roa (hash: vdF+HI1oNr6kqh078qMmmr8oRIUvuhnWsColzplNCkA=)
30: 34332e3233312e3136332e302f32342d3234203d3e2034383038.roa (hash: DcHKH8AMXCvgpm186lSssTzK4qmxlvaVy6ZMdS2SLbo=)
31: 34332e3233312e3136312e302f32342d3234203d3e203233373234.roa (hash: rjzSBfM4QFloW2G0lnm7U5heJ8Y10odYzplLbPiFyvw=)
32: 34332e3233312e3137302e302f32342d3234203d3e203233373234.roa (hash: DQqP/JMnMTlVRUIOIfUyrIq2HzHGNivtyoIhGcE1fgU=)
33: 34332e3233312e3136392e302f32342d3234203d3e203233373234.roa (hash: vohP9zABgWu50ks5+/FiNfLsUoOf43m8skFJ6SSVAxs=)
34: 3130332e3232372e3132302e302f32332d3233203d3e2034383337.roa (hash: Sx+7NoTmtU5tLHhBcnSWpMNO747BDHdsVxguRe0fQqw=)
35: 34332e3233312e3136332e302f32342d3234203d3e203233373234.roa (hash: pcpus7lziotmJzbcDYGefZ16mC5ZQevR5pHmZItnRKo=)
36: 34332e3233312e3136392e302f32342d3234203d3e203539303435.roa (hash: 4bufmTh61WaAmqfKiVanOVT2UB50zhRGG1caW8ZhWoI=)
37: 34332e3233312e3136302e302f32342d3234203d3e203539303435.roa (hash: k8nCn4GHRCXa4bAadqGp/HXrDu2HbCC1RzZ2PjlcArw=)
38: 34332e3233312e3136302e302f32342d3234203d3e2034383038.roa (hash: eMSzssgVCrnjIF6VL8PSJ+HoJtZ3e3YyeZ8hFIcqN/Y=)
39: 34332e3233312e3136372e302f32342d3234203d3e2034383038.roa (hash: MQCBmxAJSDHPnHo1i75aRqt3aiM6O3RFbLkUM1Vtt/Q=)
40: 34332e3233312e3136332e302f32342d3234203d3e203539303435.roa (hash: HlBnZJtRyN9WWrXETRSPEzDLZRrvouzm35CF758gaP0=)
41: 34332e3233312e3136382e302f32342d3234203d3e203233373234.roa (hash: FERWDVlfu2BkKhCRK6RX8fqrYkNHGQ7nNw4fQbLjZLY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 08:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:55:49:0a:a9:e6:d5:f4:58:b3:ad:bb:03:ae:2f:6e:e3:fd:11:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Validity
Not Before: Jun 13 05:51:19 2026 GMT
Not After : Jun 14 08:42:19 2026 GMT
Subject: CN=9DAC666550DD88A716C0FBE6711A4FBB1F46F073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ec:96:e4:d5:44:72:76:ef:bf:8c:3e:97:77:
f2:5c:69:17:6b:8a:39:be:17:49:b8:ca:f7:35:21:
91:d0:65:3a:a6:70:e5:93:47:5d:f9:81:69:25:8b:
89:4a:31:63:6a:76:d0:fd:e2:e7:71:6d:0d:a2:d2:
70:38:b1:ba:5c:eb:54:e7:75:e9:a8:5e:eb:33:aa:
41:99:aa:2d:4c:05:2f:10:86:c3:62:d6:30:3f:2f:
23:8d:88:3e:bf:ea:19:b8:65:4f:64:a0:1d:e3:ed:
31:03:57:73:1c:b6:0b:0d:eb:61:e7:90:0f:00:f0:
cf:a3:91:c6:ae:22:58:22:45:99:36:dd:6b:6c:d0:
13:7d:34:f3:1d:9a:aa:6c:92:c5:58:c0:ea:93:2e:
62:49:1f:85:1b:bc:4c:05:4e:5c:40:31:54:50:3f:
ab:30:87:71:f3:2e:ee:ab:82:dc:fe:e9:d8:f7:33:
71:ae:b5:ec:73:d2:d8:6b:44:34:49:7a:e5:9b:6a:
0a:51:cc:c3:da:6d:28:4a:a3:ed:ff:d2:c6:c8:c6:
61:e0:30:8c:51:f1:ca:f2:5c:28:4d:ea:4b:f2:84:
52:81:fd:5a:51:f2:59:c7:94:f5:2e:51:4f:99:2d:
c2:fd:c9:b8:84:42:5c:c5:7c:e7:05:05:81:b5:d7:
ab:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AC:66:65:50:DD:88:A7:16:C0:FB:E6:71:1A:4F:BB:1F:46:F0:73
X509v3 Authority Key Identifier:
keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:7f:53:df:8f:d7:9f:46:e1:43:31:a0:9e:6f:70:df:96:f3:
2d:15:38:9c:b5:0a:33:d6:86:3a:15:82:bf:0c:1b:c4:00:15:
fa:5c:94:c8:df:d1:66:2e:e9:b0:35:f5:98:a0:5d:c8:3f:aa:
0c:fd:61:c2:2b:e0:6e:4d:d2:d6:58:e1:8a:de:49:20:51:5f:
db:2a:23:66:5f:fb:32:b4:50:d3:2e:4e:2e:ff:94:0b:a6:7b:
97:0e:78:1a:18:04:62:a8:4c:39:4e:45:5f:88:db:a2:e5:ae:
b3:b3:87:be:db:b1:d7:20:16:2a:45:81:51:ea:74:5b:59:64:
e0:88:ad:6e:03:9a:3f:ea:44:c3:65:00:8c:3f:af:13:35:08:
36:26:29:e6:3a:fa:1d:0f:37:58:56:5e:80:c4:2d:ff:5c:8f:
7a:f5:f6:19:a8:05:e8:20:b8:33:87:1f:11:09:67:ad:88:ed:
cd:01:94:1a:40:81:2c:9e:e1:7c:1f:df:e5:17:52:8f:75:b4:
85:01:ba:ac:63:ca:be:9f:90:57:0d:88:d4:8a:b5:94:16:c7:
c3:ea:c9:5a:64:44:2c:a8:e9:03:b9:ad:c6:7d:4c:c7:c0:c4:
be:7a:30:46:f1:d6:47:e5:5d:5a:1f:62:84:40:d0:d5:5e:7b:
66:93:8e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:45:13 2026 by rpki-client