
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
File: B5148646F2C451864E20696E4F1C926A098BC8D2.mft (raw, json)
Hash identifier: 25MIOAdXty4Ei58FXTm/WALW/VYpjyN5swn+g/KnebE=
Subject key identifier: 99:02:F6:D2:44:E6:6F:45:E5:E1:97:F6:81:4A:F0:E3:48:E3:35:D8
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial: 6FFA9236E5A8D01FB70242AA6191A7B1A328DC43
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
Manifest number: 6B
Signing time: Tue 28 Jul 2026 21:47:48 +0000
Manifest this update: Tue 28 Jul 2026 21:42:48 +0000
Manifest next update: Wed 29 Jul 2026 22:12:48 +0000
Files and hashes: 1: 34352e3235342e382e302f32332d3233203d3e2034383038.roa (hash: fyh+el9sgg8/Y93qBnXPHlHdezwIV67264v8qH2vob4=)
2: 34352e3235342e382e302f32332d3233203d3e203633363333.roa (hash: OupSETeNES+E6EQKnoTym1IonUo5VuuLCKmGEp4Jhg4=)
3: 34352e3235342e382e302f32342d3234203d3e2034383038.roa (hash: VpZ8FbBlmNhUuL/1VLo0qosPgq8i+8uaHFmEuk5tiDg=)
4: 34352e3235342e382e302f32322d3232203d3e203633363333.roa (hash: QtpkCaAbIIcmF/w+6AQIgwsDzeZjED0NUe3lVS+FSxI=)
5: 34352e3235342e382e302f32332d3233203d3e2034383437.roa (hash: SP+QM9OtW5RmdBJJFM+OJXICimpfberqBDE5B1rJKNk=)
6: 3130332e3232302e35362e302f32322d3232203d3e203538353139.roa (hash: SbUX1LdpKn0uCIj+EVZcsAfOwjyeJW7igJZMkmidqas=)
7: 34352e3235312e39322e302f32322d3232203d3e203538353139.roa (hash: ePQdZvLEBEPecmiRi/mFtngHDwQwodel2INEy7X9N4E=)
8: 34352e3235342e392e302f32342d3234203d3e2034383437.roa (hash: 9KMtusMUgjBGmA/TbBwckDV/WMFxBB9kkTkmv+BGjxQ=)
9: B5148646F2C451864E20696E4F1C926A098BC8D2.crl (hash: M/QuI5mIHi6TkdKjRmJ5Ps9XZk/UsQdJGMkzVV7a2/4=)
10: 34352e3235342e392e302f32342d3234203d3e203633363333.roa (hash: wDkFnkOKolmiwC2jO5CsKf8kF/vNpoZGbBt0vTO4BHw=)
11: 34352e3235312e3130302e302f32322d3232203d3e203538353139.roa (hash: +1W1XexONgisqiQl8crOWAFeeckAYAY5KgqkjbIJosk=)
12: 34352e3235342e382e302f32342d3234203d3e2034383437.roa (hash: +hAqXWTni4XLLYmJ7GcuPp0Na8xp4NPXQIH+R4INNCM=)
13: 3130332e37322e3232342e302f32312d3231203d3e203633363333.roa (hash: +xww1oAoOERvGNhmVfxKYnnGzSx8WBbI8K8RerAoeyI=)
14: 3130332e3232302e36342e302f32322d3232203d3e203538353139.roa (hash: skWq9DVjr/L+lEV4OnmJAyThXYF3upqH3K4mAGCnER0=)
15: 3130332e3232302e36302e302f32322d3232203d3e2039383038.roa (hash: ig0VbLcqHiuOvyohwmjWpHEUrnPZeizj9UxnCfpup+M=)
16: 3130332e37322e3232342e302f32342d3234203d3e203633363333.roa (hash: 8LecJ+E4ZI/jNoQTEs0sKUbACfH6Gj8ANm9cnIrMbr8=)
17: 3130332e3232302e36302e302f32322d3232203d3e203338303139.roa (hash: iShB9cHkCwz5TExfHEI9Gv8GmO4ZLK8Bb54bQbSoCVs=)
18: 34352e3235342e382e302f32342d3234203d3e203633363333.roa (hash: 2wyVk8ZYds07gMgFgv5tN5PEVXabnwJjCcdDeX5PRh4=)
19: 34352e3235342e392e302f32342d3234203d3e2034383038.roa (hash: V9cDWRBADDfMj7Gr+jGNeCURz0MN/608S9KkOjIS7nA=)
20: 34352e3235312e39362e302f32322d3232203d3e203338303139.roa (hash: 4T6XRtxPs6ZSsCkIbcBkih9Lcmxqq8lhG6rNbcuTYQQ=)
21: 34352e3235312e39362e302f32322d3232203d3e2039383038.roa (hash: NH1gynqSs7G2vkZrLnXyhx0zx1/5I1+9TU/pNnIMyi0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:fa:92:36:e5:a8:d0:1f:b7:02:42:aa:61:91:a7:b1:a3:28:dc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Validity
Not Before: Jul 28 21:42:48 2026 GMT
Not After : Jul 29 22:12:48 2026 GMT
Subject: CN=9902F6D244E66F45E5E197F6814AF0E348E335D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:32:3f:62:cd:23:6d:e6:c7:98:df:f1:e0:c8:
7e:be:e4:fc:5b:03:57:8b:4c:f9:ca:0b:e1:62:61:
3b:01:cc:cd:f6:58:61:1a:69:d6:12:90:eb:46:58:
72:27:6c:dc:16:84:81:e2:7a:86:2c:a6:38:5b:99:
89:59:b8:5a:e2:63:db:8a:66:b6:c8:70:cc:87:21:
3f:09:2d:d9:f5:4d:47:80:1d:2d:4c:b5:80:93:28:
e3:de:1d:c4:bd:48:da:9d:00:7e:c9:db:ce:df:d9:
47:6a:a3:ff:5f:7b:25:35:d1:b9:1c:68:ea:7e:06:
45:94:a4:1c:02:08:27:88:63:dc:40:6a:e5:f3:db:
8c:84:a7:c8:85:0e:fb:87:36:d7:54:9a:1a:ee:29:
f7:66:92:ae:eb:c7:d4:c1:99:06:0f:61:93:ea:7b:
02:84:95:da:c5:4d:7b:ef:d2:0d:c0:61:4d:61:36:
61:d3:6f:da:e3:e6:8f:fe:55:20:7e:52:fe:52:c7:
0c:6b:70:65:d3:77:3d:e8:d7:f3:58:c7:1d:07:82:
de:b4:c7:ea:80:9b:3a:51:2b:13:06:25:1d:ea:f2:
01:e2:7a:03:c0:6b:12:6a:78:ff:c2:14:43:da:7c:
cb:9e:0d:b2:72:65:0b:31:95:9d:e4:8e:a2:1a:15:
1b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:02:F6:D2:44:E6:6F:45:E5:E1:97:F6:81:4A:F0:E3:48:E3:35:D8
X509v3 Authority Key Identifier:
keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:09:56:3d:06:ab:20:65:cf:69:ce:e2:5b:71:b0:a4:cd:ff:
b2:20:b0:80:9b:56:55:d3:7d:da:1c:fb:c0:1c:32:b3:13:36:
d5:19:bc:d6:6c:1b:87:2b:b9:1c:b3:14:e3:c7:d3:8a:69:a3:
24:52:b4:14:0c:33:85:c9:20:4b:a0:be:0e:3b:0e:43:5f:7a:
f4:d7:1f:52:8b:d5:b4:9b:39:f2:57:5e:23:b7:43:75:6b:55:
b7:f3:92:97:55:3d:13:5e:95:f9:0e:49:b0:7f:2e:32:f6:7c:
50:e7:c7:38:13:f4:10:51:b4:fd:42:e0:60:e3:d0:a5:44:30:
3f:f5:42:1e:e4:9e:8f:78:0a:96:54:81:69:58:42:65:2f:85:
61:b4:70:77:86:96:3f:04:94:b7:81:30:86:97:6e:c6:23:c0:
87:ec:28:15:81:b2:52:dd:65:db:f0:a3:2c:3e:bd:50:52:39:
c3:42:d6:dc:31:e3:df:11:f9:6e:a1:45:52:2c:36:5f:4a:13:
55:73:c0:7e:b2:fc:d2:34:9c:41:58:6e:f9:4f:f6:53:20:d4:
af:5e:9d:e3:f9:1a:59:fe:3f:61:3a:f2:0b:e5:26:bf:6f:86:
b9:6d:e9:7c:25:ce:fe:d9:fd:cc:49:58:7f:cb:38:25:25:d3:
01:a4:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:12:44 2026 by rpki-client