
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.mft
File: B4E055792301140D1D1A5A462561EA2D919B364F.mft (raw, json)
Hash identifier: z8gHG69vp9cqFcGuNx2Pp72A8zKcZperDo2VCA2CG7Q=
Subject key identifier: 14:45:98:FE:F3:5E:10:85:F5:1C:0C:A4:6F:EF:A4:74:EB:29:E6:C7
Authority key identifier: B4:E0:55:79:23:01:14:0D:1D:1A:5A:46:25:61:EA:2D:91:9B:36:4F
Certificate issuer: /CN=B4E055792301140D1D1A5A462561EA2D919B364F
Certificate serial: 5C9C16751068319C5BADFD2F302D72A3B2E33CB5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B4E055792301140D1D1A5A462561EA2D919B364F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.mft
Manifest number: A8
Signing time: Sun 11 Oct 2026 07:45:25 +0000
Manifest this update: Sun 11 Oct 2026 07:40:25 +0000
Manifest next update: Wed 14 Oct 2026 15:53:25 +0000
Files and hashes: 1: B4E055792301140D1D1A5A462561EA2D919B364F.crl (hash: 8UgqANvFcyLmhdVOLcDWJIf5OMSHqmp+keVSFQDNF+Q=)
2: 34332e3234302e3133322e302f32322d3234203d3e203234313530.roa (hash: jVEJd6Stwsj4FgqTnZi4F5XiOZe2zj2W9PoBFNwMHNY=)
3: 3138302e3232322e3232342e302f31392d3139203d3e2030.roa (hash: vjmIOvhTHPqGB9SEcbONpbKJUnTcCeAfQoCta91pN8E=)
4: 34332e3235302e32382e302f32322d3232203d3e2030.roa (hash: Dwg0AMc8vqTt2/APQLB8BZVnqH8sUz6MYb9gl8qRr6w=)
5: 323430313a373730303a3a2f33322d3438203d3e203234313530.roa (hash: A1bFyoXn+Qi+2HYDffyfZXtT/g0fgcHyY9I/jWV+9Gc=)
6: 36302e3235352e302e302f31362d3136203d3e2034383337.roa (hash: hVqEpWChokz50Ic9m0j0ZGweJb20l6nJdkckYTZtAu4=)
7: 3130332e34312e3136302e302f32322d3232203d3e2030.roa (hash: 79bzDErVxKW8cSzUSLhYySUZ1UCRsino04OgI92wp/s=)
8: 323430313a313230303a3a2f33322d3438203d3e203234313530.roa (hash: 2+lzdXkRiCcp6Xe0ez+nXFxyOhziIUqa2UxIndCZJxc=)
9: 3130332e352e3235322e302f32322d3232203d3e2030.roa (hash: 808eMujT6dDDTD5hcNXc9a/h4qRsQr7ZWu+330oqHKM=)
10: 36302e3235352e302e302f31362d3234203d3e203234313530.roa (hash: YqktsVTCEGNig6nSEXxQ2axz42D3/TI1pVKtJV6iakg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B4E055792301140D1D1A5A462561EA2D919B364F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 15:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:9c:16:75:10:68:31:9c:5b:ad:fd:2f:30:2d:72:a3:b2:e3:3c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4E055792301140D1D1A5A462561EA2D919B364F
Validity
Not Before: Oct 11 07:40:25 2026 GMT
Not After : Oct 14 15:53:25 2026 GMT
Subject: CN=144598FEF35E1085F51C0CA46FEFA474EB29E6C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:c1:c7:cc:ca:47:f3:81:49:f8:d4:bc:81:
75:18:28:01:06:97:4a:fb:06:80:26:2a:ba:92:4a:
2e:3b:79:1a:aa:03:ba:f7:f6:5d:69:82:3c:4a:38:
c1:21:0a:c3:c5:68:1f:02:f4:a4:5f:a5:2d:80:31:
87:37:a7:ed:b3:59:e6:02:93:e6:fd:20:ba:93:08:
49:45:14:7e:dd:e0:a1:b3:a0:a4:ee:0d:5c:69:e0:
06:c0:0c:39:24:63:ad:6e:ff:92:fb:e2:34:ea:d1:
33:cb:1d:4e:12:5b:03:7d:16:84:8c:49:90:ad:5d:
e5:8b:7e:7f:99:b7:cf:2b:9f:20:89:48:10:07:13:
2d:b0:d0:1d:eb:2e:72:ec:03:0b:c8:e2:c9:ca:79:
92:78:1b:c9:4c:1b:03:c8:90:de:37:87:76:6e:91:
6e:7c:2f:58:79:49:64:ca:6a:fe:34:58:ca:32:71:
ab:c0:4a:1c:e2:c2:4f:ca:23:fb:06:ef:c0:69:85:
4b:5a:7a:61:f3:93:fa:78:4e:91:fc:c9:f9:ae:bd:
cd:6c:c1:9b:8f:8c:61:9f:40:ab:ac:ed:85:10:29:
b5:1a:bc:a9:07:dc:16:f5:73:3a:67:ed:04:9d:25:
e6:a6:80:37:e6:f4:e0:f5:fc:15:88:c1:13:4f:75:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:45:98:FE:F3:5E:10:85:F5:1C:0C:A4:6F:EF:A4:74:EB:29:E6:C7
X509v3 Authority Key Identifier:
keyid:B4:E0:55:79:23:01:14:0D:1D:1A:5A:46:25:61:EA:2D:91:9B:36:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B4E055792301140D1D1A5A462561EA2D919B364F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:17:02:6c:d2:41:3e:c0:b8:3e:30:96:78:0f:8f:7a:15:87:
73:f3:40:db:ee:f6:ca:6a:81:77:a9:45:9a:7a:21:5c:b0:42:
5c:c3:22:27:a2:44:ce:db:c7:48:37:5e:77:65:f0:66:e5:47:
12:0a:74:ad:63:2b:3d:c4:b7:7e:12:54:c4:d7:af:55:71:e5:
4c:3a:ad:d2:35:ae:35:8d:7f:7e:d5:f7:79:2b:1c:d1:09:49:
44:41:c3:2a:9f:6c:78:f5:de:c0:5c:c4:e5:cc:4f:c4:3b:61:
f8:a9:e4:44:e0:8a:52:e8:b2:8e:60:34:16:d1:7a:60:70:86:
2b:3c:72:22:f9:7a:9a:b4:55:d2:36:df:b8:0e:0c:ef:0b:89:
17:c4:b1:0a:58:be:56:0c:dd:2b:09:e8:77:39:0f:b9:f0:1e:
71:17:16:fd:f7:ed:14:06:44:89:c7:8d:ee:65:71:20:45:57:
f6:b2:a1:34:0b:15:77:8d:52:4a:a0:4c:23:61:0d:ae:cf:09:
18:92:66:93:1c:7f:64:2e:de:25:a3:7f:63:b8:64:92:e8:61:
b7:67:44:12:17:de:d5:2b:67:19:d6:24:72:83:af:df:53:27:
7a:82:6a:37:a5:d4:0b:84:12:42:a8:21:c0:51:08:c3:38:f9:
70:55:e8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:23:47 2026 by rpki-client