
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft
File: B632502E8D6D2369C51A2346CBA569E60257BDC7.mft (raw, json)
Hash identifier: Xk5AQvKqJ2wlCrvMCgIHWad0WqbadpJYofUBibe3SQU=
Subject key identifier: E2:CE:2F:E4:2C:C7:39:0A:7F:1C:27:81:95:6E:1B:43:22:F1:8B:39
Authority key identifier: B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7
Certificate issuer: /CN=B632502E8D6D2369C51A2346CBA569E60257BDC7
Certificate serial: A7190564237630EEC9BC5D6653338B3C4D2AED
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft
Manifest number: 4D
Signing time: Sat 13 Jun 2026 12:16:49 +0000
Manifest this update: Sat 13 Jun 2026 12:11:49 +0000
Manifest next update: Sun 14 Jun 2026 14:29:49 +0000
Files and hashes: 1: 3130332e37382e3232382e302f32322d3332203d3e20313337363937.roa (hash: bt3z6UAXgFoqUQwlcBAwdfCZL7ZO5stc9zJoa9wZ/8M=)
2: B632502E8D6D2369C51A2346CBA569E60257BDC7.crl (hash: dyJf5oPv86sA9L35Rnc2I8yijG3rqgzRp05hINHmSfg=)
3: 3130332e37382e3232382e302f32322d3332203d3e2034383337.roa (hash: 61L5aR5bgll/4iVZjJp7bD1aBZNc1/iMX2m/DXeH6tQ=)
4: 3130332e37382e3232382e302f32322d3332203d3e203536303436.roa (hash: +pGX+4RF/lOQKxZj6NDh0Y4S1YBl+3XFNef0tyQCdFY=)
5: 3130332e3130312e3138302e302f32322d3332203d3e203536303436.roa (hash: VuVh96LZ9ENVQD/HGtz9Sl/s+j7OTeDSyuCpjWemmUw=)
6: 3130332e3130312e3138302e302f32322d3332203d3e20313337363937.roa (hash: DyYzPlLrqkBaVCuPGLHoXQducvBZJJk5MiJRqpCJOCk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl
rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a7:19:05:64:23:76:30:ee:c9:bc:5d:66:53:33:8b:3c:4d:2a:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B632502E8D6D2369C51A2346CBA569E60257BDC7
Validity
Not Before: Jun 13 12:11:49 2026 GMT
Not After : Jun 14 14:29:49 2026 GMT
Subject: CN=E2CE2FE42CC7390A7F1C2781956E1B4322F18B39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:21:52:ef:d8:bc:f7:57:5f:34:34:e1:91:d9:
52:4e:e3:38:fa:21:81:70:b1:24:5b:18:ae:62:cd:
b8:9e:47:61:99:13:09:00:a0:a8:f5:e2:9d:96:6d:
2e:ff:72:c5:93:bb:fd:e3:de:61:01:76:ac:8e:45:
65:f4:d7:aa:12:d1:c0:80:5b:88:38:92:6b:f9:a5:
e6:f1:29:db:bf:23:33:fa:b3:a1:ea:a3:d0:cf:cd:
ca:46:bc:8e:e9:26:de:9b:9f:4f:13:96:6d:c1:f3:
6a:ae:32:bf:7c:40:c1:e0:59:44:e2:ab:0e:e9:81:
0f:39:11:43:0a:6d:bd:b0:b6:eb:9d:4c:eb:ec:9f:
5c:c3:e7:60:20:19:5d:7d:ad:db:12:b2:54:a7:ef:
75:1a:7e:dc:bf:5e:08:b1:f9:bd:02:c2:61:81:09:
64:fe:93:e9:22:d4:fa:80:67:ea:91:1f:bc:69:c1:
16:5c:70:85:27:5e:47:4b:60:7a:de:ba:de:e5:77:
84:a1:22:51:04:76:34:58:b5:15:ff:49:92:27:86:
74:79:a9:ee:cb:ba:e9:af:5c:99:6d:3f:7d:79:c4:
70:2f:7c:9a:75:56:a1:12:65:e9:12:35:3f:65:12:
ea:1e:c7:0c:b5:a6:ca:6d:4f:c4:4d:3d:31:47:4b:
88:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CE:2F:E4:2C:C7:39:0A:7F:1C:27:81:95:6E:1B:43:22:F1:8B:39
X509v3 Authority Key Identifier:
keyid:B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f6:98:0d:20:aa:b4:82:e8:00:4c:33:00:23:a6:3f:af:a4:
68:f0:9c:eb:7b:44:73:6d:52:bc:f8:ac:92:41:20:22:c5:62:
b0:ae:06:0f:04:b6:0c:99:73:9a:00:a2:74:ad:24:48:d8:73:
ad:26:5a:44:51:8a:d1:8c:8e:66:1e:fc:b1:32:9b:21:8e:ca:
fe:1b:28:9f:28:01:13:0c:3b:1b:aa:a5:2a:4a:1c:0e:41:d3:
71:5b:7c:ac:00:01:fc:68:3e:da:6e:2c:15:8d:96:06:46:07:
ac:a7:23:2e:2c:d2:6c:d5:e0:d4:07:b6:3a:c9:fa:b3:42:6e:
18:a1:c1:d2:dd:82:09:c7:fe:85:69:ab:db:f4:46:99:de:bf:
6c:85:80:b1:f5:ea:1c:2f:e2:bc:63:94:d1:ab:40:8d:bc:17:
7c:03:13:58:81:70:5a:72:23:67:fd:2b:6e:e7:2b:73:1f:d4:
d8:d1:7f:c2:55:0a:8a:8e:2a:b8:4b:b6:bf:16:78:19:7a:b6:
39:20:c6:d9:60:9f:7b:de:cb:b4:07:38:a7:21:d8:79:fa:03:
44:07:41:9b:16:f3:cb:e5:c3:0d:a5:61:e7:b5:63:0a:7b:75:
57:27:5d:66:6f:f7:41:74:fb:84:98:18:37:88:b7:7e:57:ac:
8c:83:da:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:11:52 2026 by rpki-client