
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft
File: BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft (raw, json)
Hash identifier: Z2XlRN08rwyT0FLkKi6gt7VEQmxcdjetZgkG9UMT5AY=
Subject key identifier: 90:04:F7:BC:AE:40:26:BC:41:71:B2:C0:5F:02:44:E7:A2:5C:2A:6D
Authority key identifier: BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E
Certificate issuer: /CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E
Certificate serial: 0C6BCC6DAF0489A8041FBBD417E8F077814E74A6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft
Manifest number: 50
Signing time: Sat 13 Jun 2026 20:57:13 +0000
Manifest this update: Sat 13 Jun 2026 20:52:13 +0000
Manifest next update: Sun 14 Jun 2026 21:12:13 +0000
Files and hashes: 1: 323430353a653034303a3a2f33322d3332203d3e2030.roa (hash: DKLyV2KtLLJej+jvamj+qWgUgiE4opa5BOdT4u0VoM4=)
2: 34352e3131322e3233362e302f32322d3232203d3e2030.roa (hash: 79syriVhn4xwLEus8js+X0J+/iXzcPB/T/pLWwKsJIA=)
3: 3130332e35322e3130342e302f32322d3232203d3e2030.roa (hash: amnUeudqHKhFal12dB15vFvsAAj6H5215eeQCVL2GRo=)
4: BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl (hash: ZG7OK+WW5w5MFgPdPUpyh/odvXbrcuArUhuGtXsQMmc=)
5: 3130332e3131362e37362e302f32322d3232203d3e2030.roa (hash: IDv+HZXXzEWHWmfSMhOY3RcTrRAQuK39NAu6AzmFTUE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:6b:cc:6d:af:04:89:a8:04:1f:bb:d4:17:e8:f0:77:81:4e:74:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E
Validity
Not Before: Jun 13 20:52:13 2026 GMT
Not After : Jun 14 21:12:13 2026 GMT
Subject: CN=9004F7BCAE4026BC4171B2C05F0244E7A25C2A6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cb:4c:74:92:a3:fe:06:ae:5f:00:d2:f3:d1:
30:d2:41:f3:47:fc:fc:3d:36:1e:23:c4:86:5a:ca:
6c:00:84:ef:20:d4:f9:de:9a:17:b4:8a:63:9f:bc:
c2:28:e0:a8:01:6f:b6:12:1d:7c:30:49:f8:c5:3a:
f2:a9:4f:f3:79:25:49:f6:2c:ac:be:c4:eb:56:d0:
e4:1a:d1:39:47:13:3d:72:7b:22:78:e5:72:76:32:
ce:b1:2e:41:bf:72:dd:da:ad:64:76:35:39:f0:56:
74:a7:7b:aa:3c:9a:4b:10:c6:9b:b0:22:03:2a:3f:
88:e6:c8:65:f0:9b:df:96:49:39:a1:f7:53:c5:59:
57:ae:4f:2a:e7:30:87:b0:10:47:64:f8:02:f4:e5:
0e:60:e6:76:7d:96:da:e8:42:99:0a:c8:e5:20:f2:
d1:22:03:f8:d2:47:0f:a5:16:9b:81:d1:79:22:6c:
90:78:98:3e:be:af:eb:32:b0:19:e8:ad:98:4d:de:
3b:ba:4e:f9:b0:9b:a7:5f:1a:31:a5:c1:c3:2c:c3:
9b:2f:cd:4a:90:5a:bb:97:91:35:f4:a4:1f:72:25:
e0:83:f0:b8:92:89:29:39:cd:f3:03:1f:98:51:42:
38:7d:32:5f:fb:cf:11:02:2d:7e:08:29:c9:5a:50:
e2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:04:F7:BC:AE:40:26:BC:41:71:B2:C0:5F:02:44:E7:A2:5C:2A:6D
X509v3 Authority Key Identifier:
keyid:BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5f:a7:e7:59:3d:37:fd:3c:b3:a9:e6:f8:38:81:10:1b:a9:
65:4e:61:28:07:28:97:af:41:ae:80:dd:8b:98:a7:f3:d7:92:
64:0c:56:4c:f3:c0:56:66:60:92:d0:f9:cf:6d:a0:13:a6:a8:
5c:ce:2b:8b:39:57:c1:a6:75:4e:6b:a2:63:a4:3a:d2:f5:2c:
61:4c:e0:07:b9:0c:87:cf:b7:19:bb:11:2e:00:fc:04:e4:4c:
14:3a:31:d9:a4:20:79:5d:40:fd:ca:99:4a:9f:19:dc:ad:05:
ac:0b:7e:15:01:87:38:a3:0d:a8:d8:3d:33:98:b4:f8:58:bf:
b4:e7:cf:c6:ee:45:73:36:40:20:2e:cc:e7:47:76:54:da:fa:
ba:8e:bd:b2:05:2c:02:5b:c4:ae:83:bb:bd:c0:39:e2:07:c9:
d6:0b:02:14:6c:7c:97:ac:04:c1:20:30:59:18:91:23:0f:90:
88:17:e8:81:ca:68:ae:ff:af:82:e2:d8:f4:2b:fa:fb:11:41:
e3:2c:6d:2c:b9:c2:83:87:65:64:fd:37:3b:5b:87:e6:13:41:
6d:ec:99:ee:e6:1c:4c:bb:d2:e9:5a:a4:91:22:33:7f:88:3c:
20:54:c9:81:f5:52:fa:4a:ec:dd:43:b6:be:63:fe:32:3c:41:
b5:7e:03:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:32:10 2026 by rpki-client