
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
File: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft (raw, json)
Hash identifier: ji1+GtDKLRdNzWwC+SFhfcvIOhmAkx0aZgQEzJwWXcI=
Subject key identifier: 16:83:77:0F:AD:E1:38:B0:0E:C9:7B:41:3B:13:4D:1A:07:F7:F7:0B
Authority key identifier: 1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09
Certificate issuer: /CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09
Certificate serial: 545DFE41AD9F2AE7AD666247856283507516E3B4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
Manifest number: B0
Signing time: Sun 11 Oct 2026 23:41:12 +0000
Manifest this update: Sun 11 Oct 2026 23:36:12 +0000
Manifest next update: Thu 15 Oct 2026 06:04:12 +0000
Files and hashes: 1: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl (hash: YWugzi6MAIRG11kiEKwJyZwYvcUAz5sQXNhET0tS/D8=)
2: 3130332e37332e3131362e302f32322d3232203d3e203233363530.roa (hash: N6BZpHQs84IIbiebI1UWzRjDUYpAVV5g6fmxbbjciew=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl
rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:5d:fe:41:ad:9f:2a:e7:ad:66:62:47:85:62:83:50:75:16:e3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09
Validity
Not Before: Oct 11 23:36:12 2026 GMT
Not After : Oct 15 06:04:12 2026 GMT
Subject: CN=1683770FADE138B00EC97B413B134D1A07F7F70B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3d:d0:c1:86:83:9d:ee:15:3e:68:39:87:79:
99:1f:2d:30:a6:d4:08:32:2c:a0:cb:bd:6c:8f:d6:
33:f8:5c:6e:48:f5:0c:80:83:48:61:66:85:d5:1e:
75:01:92:54:85:e3:c9:d2:e3:b7:31:5d:ef:20:63:
42:83:09:41:59:81:15:b3:c4:e8:fb:4b:9f:4b:9a:
6f:bd:cc:1b:5e:5f:7c:e2:a3:6f:bf:41:24:09:aa:
49:c8:bd:d5:e1:dc:b7:2b:b5:15:7a:f1:b7:15:36:
12:e6:75:b0:f2:94:a8:e0:89:4a:ab:82:9e:24:23:
72:76:14:42:d6:85:af:48:e7:4a:7e:cf:8a:2e:bb:
df:c3:32:d5:fd:de:2e:6a:26:63:ff:1c:7e:13:84:
97:a5:08:88:3a:bb:52:25:78:45:9c:c2:c8:03:d3:
40:0e:89:07:89:8c:0f:f1:20:36:ce:28:75:39:13:
ad:97:1b:10:fe:84:3f:dc:60:5a:1f:fd:38:13:b3:
fd:8b:2f:cf:e5:ad:69:7d:f6:5c:8d:3b:66:9c:2f:
67:b6:38:b2:43:a4:77:bb:01:ab:b2:5a:38:63:58:
ce:7e:2d:18:fe:ca:87:c8:ed:63:e0:c6:bc:bd:d9:
1d:24:f8:ee:70:f2:04:2e:8f:9b:1a:e9:ae:54:9b:
cc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:83:77:0F:AD:E1:38:B0:0E:C9:7B:41:3B:13:4D:1A:07:F7:F7:0B
X509v3 Authority Key Identifier:
keyid:1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:b3:1e:9b:07:1f:04:f7:6f:c0:7d:dc:32:b4:1e:5b:e6:da:
c9:d9:24:48:77:76:db:1b:23:41:b4:a3:75:ec:05:af:ab:80:
e8:bb:b1:02:4f:cf:b4:41:e5:01:da:9e:d2:e7:94:78:61:da:
65:65:ea:5c:26:75:16:f4:e1:db:2a:cb:db:c6:5e:e1:da:84:
a0:04:18:99:de:b5:3c:92:f7:08:84:58:5e:69:f0:16:53:33:
fa:c6:1c:51:6d:e6:75:ff:74:1e:51:a6:5a:3b:13:d0:7b:6f:
44:fc:d6:72:a7:5d:a5:b1:30:03:53:c7:03:a7:6b:ef:a9:e5:
d0:39:96:09:b8:9e:dd:ce:34:b3:30:9b:e3:ca:54:39:d9:f6:
a8:c3:86:8c:1b:bc:7f:c0:69:8b:ab:4b:71:3c:22:82:0c:bb:
29:79:20:19:87:32:c1:4b:f9:3b:c3:12:c8:a4:e6:f0:4a:28:
d6:23:26:de:6d:c3:4d:21:33:72:5c:cb:55:99:19:97:df:e1:
08:bc:57:b8:65:82:50:19:5e:1a:b3:3e:8a:90:4c:6f:00:c5:
68:dd:40:98:ac:62:2d:34:35:45:c5:06:7d:2b:36:39:d8:8f:
36:e4:83:5c:ae:83:b2:60:8b:9b:b8:84:4e:75:b7:fc:d5:09:
b3:c0:82:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:52:24 2026 by rpki-client