
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft
File: B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft (raw, json)
Hash identifier: lXULJGnF6KlINhxrCHRsWrJ6jHCBwYXwSPNhJOINyIc=
Subject key identifier: E0:A0:28:3E:BE:D4:EF:71:C5:37:42:5E:DF:C2:58:BC:52:2B:83:D9
Authority key identifier: B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA
Certificate issuer: /CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA
Certificate serial: 5F2F10EA20E9F91A5F47DC5DB2F394A2B0EEDC3C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft
Manifest number: C3
Signing time: Fri 16 Oct 2026 05:27:15 +0000
Manifest this update: Fri 16 Oct 2026 05:22:15 +0000
Manifest next update: Mon 19 Oct 2026 15:03:15 +0000
Files and hashes: 1: B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl (hash: yPQpZ9HVw7g/uqUV197BsH7m8VYTEc76munrJDK0Yqo=)
2: 3130332e32312e3134302e302f32322d3232203d3e2034383132.roa (hash: yl0VnVjOJBB11Ksw/l6MI8tE6HFSWJZk+mBrBZTIapM=)
3: 3130332e32312e3134302e302f32332d3233203d3e2034383131.roa (hash: tcwtXl101EjdJnvoeZCk6mNf34pYvQGTfA6kEOpTAGA=)
4: 3231302e31362e3138382e302f32332d3233203d3e2034383131.roa (hash: I/skHLzMxhJEW53hMQb4kjDQldjO0bhyqUNU6juFZXk=)
5: 3231302e31362e3139302e302f32332d3233203d3e2034383131.roa (hash: 2XbC/CUrdrlSv7pBB2C4Ttv+wtm+9ZIR2uM6HjETEdI=)
6: 3231302e31362e3138362e302f32332d3233203d3e2034383131.roa (hash: b4O2YO4xELxbphJVo2XTIR7dTO1KnPDV5e00+BSpHO8=)
7: 3130332e32312e3134322e302f32332d3233203d3e2034383131.roa (hash: zeQy36951EhzMb9y4+nhGStpafM9i+ny55leHQjqlo4=)
8: 3231302e31362e3138352e302f32342d3234203d3e2034383132.roa (hash: bXqNYBH6dqp3XhjyABQOELGhYbAAx/VDEKU/yFMCeZM=)
9: 3231302e31362e3138302e302f32342d3234203d3e2034383132.roa (hash: pVbEirpbRHZqbSynsD8vPGMaGo+q4kutYI9/gkSkdY8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl
rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 11:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:2f:10:ea:20:e9:f9:1a:5f:47:dc:5d:b2:f3:94:a2:b0:ee:dc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA
Validity
Not Before: Oct 16 05:22:15 2026 GMT
Not After : Oct 19 15:03:15 2026 GMT
Subject: CN=E0A0283EBED4EF71C537425EDFC258BC522B83D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:5f:e3:72:e3:3f:02:a9:9d:ae:86:c4:be:
8d:4c:31:62:dd:27:ae:ff:a1:87:38:c2:b0:2f:b0:
ad:30:0d:b5:fb:61:aa:0a:9d:e6:f5:1d:65:cd:41:
82:05:5d:40:5e:9b:66:76:a2:8c:09:1f:4c:e5:77:
c6:df:66:22:13:91:19:c0:74:ec:fc:32:e1:8c:da:
b5:16:8a:cc:d0:34:03:26:4d:10:39:7c:3c:1a:d6:
ac:54:ed:82:95:31:3d:90:50:b9:c4:25:78:31:a2:
0e:1b:be:0e:79:20:1b:77:00:9b:b2:fa:bf:bf:f0:
ae:dd:3b:79:e8:50:a5:04:ec:3b:2b:6d:27:1f:0b:
74:83:46:02:e4:6d:11:f3:ee:f6:e0:6b:e3:13:8e:
14:87:8a:b5:21:e7:b0:5a:8f:3c:b6:63:18:6e:38:
06:ee:9f:57:aa:ed:ff:ed:84:a0:e6:5f:13:42:3e:
e6:72:4a:2d:05:6a:88:54:4b:5a:55:ee:78:2e:6f:
f8:05:e0:d7:8d:95:dd:27:a5:58:78:93:cf:29:ff:
28:ff:6d:77:fe:df:8e:69:13:b6:a6:47:07:a6:8f:
91:95:d1:67:09:c0:f0:4d:2b:ca:0d:de:29:79:d4:
90:b1:43:35:da:7a:d9:31:b4:06:81:c9:7b:40:c0:
5b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A0:28:3E:BE:D4:EF:71:C5:37:42:5E:DF:C2:58:BC:52:2B:83:D9
X509v3 Authority Key Identifier:
keyid:B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4d:df:9f:f0:89:ba:f9:4f:98:a7:a1:04:72:a0:e3:cd:37:
52:0d:c6:b0:c3:c4:34:42:31:61:67:52:91:5b:b1:f4:f1:5d:
b9:c9:7a:72:48:05:12:8d:6e:5b:45:06:fc:0a:39:41:55:a9:
cb:a0:b5:15:a9:10:22:ba:fd:a7:77:85:a2:d8:d7:9f:4a:59:
5f:0f:ac:cb:2f:69:0d:94:6e:22:74:d4:57:a0:ba:91:e6:f8:
37:4f:1e:bb:ec:2c:de:55:48:d5:42:8d:07:81:fd:54:b1:33:
bd:e1:fd:ef:c5:9c:f1:9d:fb:a9:02:34:39:dc:d8:9e:9e:d9:
63:85:23:e4:10:6e:56:f9:e3:6f:4b:22:53:01:ad:f6:e6:00:
8e:9b:e9:44:12:e6:93:07:a6:cc:a3:05:16:9d:60:63:67:bb:
13:56:15:a8:94:11:bb:4f:a3:80:9c:5a:ad:b3:1e:94:35:bc:
1e:e8:45:2b:af:3b:56:e5:83:19:19:e3:25:19:7f:1c:d6:80:
66:e4:9c:1d:da:c7:26:53:a8:21:f0:e2:28:be:b8:1f:3b:c2:
0d:bc:37:94:2e:48:6d:ff:1c:09:45:5e:38:13:f1:dc:e6:6e:
55:4e:2d:1e:12:7d:3a:6d:fa:13:1c:95:95:30:73:39:b2:33:
09:69:94:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 05:09:50 2026 by rpki-client