
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
File: B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft (raw, json)
Hash identifier: UhqS8mV1GV3UXIoFYNpPVxSH2WobiiHW9OdQGKfAPaM=
Subject key identifier: 37:0B:3B:9C:46:BE:59:12:FF:C6:1E:95:50:1C:07:89:3A:F9:CF:A5
Authority key identifier: B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72
Certificate issuer: /CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172
Certificate serial: 59222EBAF60BD34715DAA24B62130C04C4720043
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
Manifest number: 8B
Signing time: Wed 29 Jul 2026 12:04:19 +0000
Manifest this update: Wed 29 Jul 2026 11:59:19 +0000
Manifest next update: Thu 30 Jul 2026 14:01:19 +0000
Files and hashes: 1: 3230332e39312e33322e302f31392d3139203d3e203233383432.roa (hash: ErQU8yFT8y24jJytx9oiI+jAe3QgFI6/xnW3QQs1M28=)
2: 3230332e3137352e3133332e302f32342d3234203d3e203233383432.roa (hash: AlGk3Gjnc1it8DaDJwzzaa6Lz3S7VWaXMCWafM/0c28=)
3: 3230332e3137352e3133352e302f32342d3234203d3e203233383432.roa (hash: cvLyDMila5E87YiOAgD8i7fuOPnJ5FsauY2mlvB/Acs=)
4: B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl (hash: 0rXMPbbisFR7pWAsd997iov1UVRTrEYCI10xCEkWmt8=)
5: 3230332e3137352e3133372e302f32342d3234203d3e203233383432.roa (hash: A9OF+LYDehr6q1VSW8RvE7BSot6C4lLWA5bD1r+geMI=)
6: 3230332e39312e35312e302f32342d3234203d3e203233383432.roa (hash: uIbjQjR2A2bqo/dxkWbU5Bw/TQzIU7lTSy+MSJAp7ow=)
7: 3230332e39312e35322e302f32342d3234203d3e203233383432.roa (hash: BnR9tde6g4JR7s+u2o2QtkVnknrXtCl8GjZCZV9iNhI=)
8: 3230332e3137352e3132382e302f32342d3234203d3e203233383432.roa (hash: XQccSce6jCVjp9IhoZfR0ihzWQ6r0oB8bbRQKHnlpXU=)
9: 3230332e3137352e3132392e302f32342d3234203d3e203233383432.roa (hash: RU2xtjw/Txm3GYZrp74VxjkWhliptSYkSQCNosJydnE=)
10: 3230332e3137352e3133322e302f32342d3234203d3e203233383432.roa (hash: G61Vnl3NFhiopHNvt8syVAgPV6nOy+o1jchqfaqLE9k=)
11: 3230332e3137352e3133342e302f32342d3234203d3e203233383432.roa (hash: +D2YJXhi7gkd5ruX2Q97ZdkQnhtzpkhpP5Bhit0l6oQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl
rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:22:2e:ba:f6:0b:d3:47:15:da:a2:4b:62:13:0c:04:c4:72:00:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172
Validity
Not Before: Jul 29 11:59:19 2026 GMT
Not After : Jul 30 14:01:19 2026 GMT
Subject: CN=370B3B9C46BE5912FFC61E95501C07893AF9CFA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:40:59:26:0c:1f:23:16:11:76:76:d2:04:
a6:df:56:6a:2b:5a:f3:17:b5:ae:54:99:6b:12:41:
68:bc:50:71:8c:cc:79:f4:32:b3:6c:8a:35:6f:e8:
76:bf:3e:d4:b3:77:f2:61:89:c1:9a:55:55:a4:cc:
cf:37:cd:e6:f5:1c:d0:3f:73:5d:e5:57:97:3e:d9:
38:c7:29:b4:6a:59:5e:d3:f2:29:7b:57:bb:28:a6:
7b:79:d2:58:d8:37:c3:04:a3:4f:4f:51:a1:b8:d6:
35:db:82:7c:e3:f0:12:45:3e:06:92:ce:f6:5e:00:
89:7d:84:95:f8:54:a5:ed:13:e8:f9:4c:67:2f:b1:
50:7c:4e:73:39:8d:93:d6:67:5c:48:5e:96:a0:6e:
a2:6c:06:80:40:fd:20:6d:da:ab:1a:76:fa:c4:fc:
c2:bb:ce:83:c6:d3:1c:bc:55:57:e5:60:a9:0c:b8:
69:1d:66:b2:38:68:b5:bb:39:22:d6:04:b3:56:8b:
10:11:d3:0a:72:11:00:89:50:e4:21:cd:88:d5:ea:
78:54:9f:62:e5:e2:ea:05:67:a7:42:5b:81:de:38:
f6:b6:b6:17:e9:a5:b7:04:6c:05:cb:80:e5:1e:1c:
26:a7:d7:3b:a7:a2:dd:8e:5f:1d:da:b8:40:57:c9:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0B:3B:9C:46:BE:59:12:FF:C6:1E:95:50:1C:07:89:3A:F9:CF:A5
X509v3 Authority Key Identifier:
keyid:B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f0:32:16:bf:14:46:96:24:05:8b:83:77:ea:35:67:2e:d6:
04:a7:e9:dd:f9:31:b5:b0:e3:21:e4:81:27:48:df:4a:a1:48:
95:80:ea:31:63:96:e7:70:a7:4c:de:cb:03:d7:87:74:4d:6d:
2a:d6:ab:42:84:2f:0d:75:45:15:73:f6:ce:e1:3d:28:53:c9:
37:8e:6b:11:8e:f3:5e:84:00:49:1b:7f:cc:4c:2b:10:04:79:
12:c2:71:8c:55:7b:c3:2f:bd:44:84:15:9f:86:0d:71:51:19:
ad:5b:f5:4b:20:fd:32:c6:35:fb:4c:d2:92:6f:f0:42:99:d7:
d9:98:5f:b7:f6:e8:50:83:aa:28:44:b5:1f:b1:c1:80:63:6c:
ff:26:fa:4d:bd:f2:4b:92:7b:e2:d1:b1:19:76:37:b4:a2:b2:
a4:2f:4a:c9:d6:02:2c:53:73:1a:9b:9f:d8:65:10:7d:a5:cc:
60:a0:6c:b2:9e:f2:6b:8f:8b:fa:e2:0f:b3:2e:f8:e6:c2:a9:
ab:48:cf:75:7a:02:28:72:9c:51:6c:9b:47:77:88:44:83:6b:
93:ed:49:78:61:09:d0:7e:b3:0a:78:65:7c:2b:3c:d1:b7:47:
29:30:15:1c:01:54:75:e7:1d:2e:10:d5:de:fa:4c:b8:61:86:
28:25:f2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:04:55 2026 by rpki-client