
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft
File: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft (raw, json)
Hash identifier: nMpfOIpldG3VjZwx/3GKJeA9/nZErE7a7/rp+pzriWk=
Subject key identifier: AD:E0:A6:D6:95:B9:E6:4A:E8:07:12:61:AB:46:85:38:CB:9B:9A:03
Authority key identifier: BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2
Certificate issuer: /CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2
Certificate serial: 224E99F7828B1C2C33C324FAE521614B89DEC7F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft
Manifest number: 24
Signing time: Sat 13 Jun 2026 22:57:25 +0000
Manifest this update: Sat 13 Jun 2026 22:52:25 +0000
Manifest next update: Mon 15 Jun 2026 00:20:25 +0000
Files and hashes: 1: BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl (hash: Tt9ztCxuj3eN0uBB1KdRyaJZpYoGYpzSVhUDKM5pAAE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl
rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:4e:99:f7:82:8b:1c:2c:33:c3:24:fa:e5:21:61:4b:89:de:c7:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2
Validity
Not Before: Jun 13 22:52:25 2026 GMT
Not After : Jun 15 00:20:25 2026 GMT
Subject: CN=ADE0A6D695B9E64AE8071261AB468538CB9B9A03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a9:ec:c8:e5:e3:ff:62:d2:ca:6e:cf:2f:16:
97:1e:20:a3:4a:8c:d2:0d:02:ee:1a:57:9e:99:2a:
8c:63:b9:55:df:fe:62:34:4f:4c:ac:a5:16:54:f8:
86:be:22:08:53:60:56:76:6c:19:a5:3e:3d:ae:27:
50:6b:52:98:db:01:15:32:5c:45:d3:1b:2a:bd:06:
98:42:93:31:a2:8a:2b:26:a3:3e:6c:3c:0a:b0:58:
de:02:f4:9f:be:6e:df:8e:c6:87:f6:51:2c:d7:5b:
ef:0c:fc:39:17:0e:57:1e:49:c1:ca:e6:80:94:37:
79:c7:f5:fc:e7:02:25:d5:1e:aa:4f:6f:db:b8:14:
b3:01:f5:b8:b9:3f:d4:77:1b:67:f6:01:22:f2:6a:
01:51:2d:35:a7:25:dd:08:ec:3b:b6:03:c2:6f:36:
b7:17:71:e6:5b:87:7f:d8:7e:59:35:8f:09:fc:df:
5a:64:bf:83:c6:45:06:3b:3a:42:41:62:6f:51:06:
e4:5c:ed:3f:69:b7:ee:55:96:93:da:fb:c1:e5:8d:
91:dd:1a:7c:b5:1b:ce:7e:4e:1f:21:fb:d9:32:bf:
14:cc:73:f7:30:f9:b5:cd:ae:f3:a9:11:f3:7b:1b:
3b:83:3b:43:9f:df:eb:91:1e:73:f7:b5:8d:b3:e5:
fc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E0:A6:D6:95:B9:E6:4A:E8:07:12:61:AB:46:85:38:CB:9B:9A:03
X509v3 Authority Key Identifier:
keyid:BB:4D:1B:FB:F0:06:AC:36:48:AF:5B:19:57:5E:92:DB:C5:DE:76:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108663550978555925/0/BB4D1BFBF006AC3648AF5B19575E92DBC5DE76D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:49:28:83:f4:48:5c:cb:c4:ac:03:37:92:57:71:50:28:2c:
74:c1:4e:9e:d0:28:9f:a4:aa:5a:19:fa:1b:e8:b9:2f:ff:8e:
56:be:ea:cf:c3:a5:af:ed:d8:3f:ff:ed:c6:b4:7d:4e:d1:c5:
49:fb:99:32:09:95:91:66:77:7c:46:84:db:cb:21:fa:84:5f:
a7:1d:87:e1:ad:98:0b:db:f2:f6:3e:25:3c:79:5a:d8:27:97:
3a:c5:56:45:00:3b:f2:c7:68:7c:80:30:b8:b6:81:a2:f4:bc:
26:a0:1d:c5:df:28:e6:8d:b0:9a:b9:56:53:9e:72:6f:da:6a:
48:e3:74:5d:c7:4c:fc:5c:b6:8a:c0:9e:09:3e:55:d8:7b:3b:
a5:ac:0e:20:fa:cc:7a:47:74:09:f8:cb:fa:dd:ae:e2:cf:cd:
b0:c8:ec:56:46:49:b1:96:f7:54:26:aa:49:ad:97:59:61:43:
be:31:cb:13:1c:e5:fc:3b:a9:a3:76:82:ba:a9:4d:fb:e1:e4:
50:4a:25:fb:2e:c4:83:86:96:c9:d8:a8:37:1e:ef:4d:84:5e:
1a:9a:27:3c:15:a3:f5:0d:1a:90:67:5b:e6:cf:78:4e:33:36:
f7:6b:6e:5d:41:6a:0e:81:52:6a:d0:ba:77:92:50:20:c1:97:
35:be:87:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:57 2026 by rpki-client