
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft
File: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft (raw, json)
Hash identifier: sy00/BvfGDmZmuvKixRztEat62gFCzjU8cUzR0EMxRE=
Subject key identifier: 7E:65:47:D3:61:04:5D:55:7E:00:78:E4:4D:45:E4:6B:54:68:F2:05
Authority key identifier: B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D
Certificate issuer: /CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D
Certificate serial: 15C8CABD0C456744DD503E7E88A8A666364896B6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft
Manifest number: 80
Signing time: Wed 23 Sep 2026 14:50:16 +0000
Manifest this update: Wed 23 Sep 2026 14:45:16 +0000
Manifest next update: Sat 26 Sep 2026 20:12:16 +0000
Files and hashes: 1: 3130332e31342e3133322e302f32342d3234203d3e20313430373236.roa (hash: Ph1dlsU1gsZp5Js2bzwU2W0EFG5DOnt4Suxc6EJUP4U=)
2: 3130332e31342e3133332e302f32342d3234203d3e20313430373236.roa (hash: V+qv7ptj/i5Q0Kg0lA4vCRODMLzJgZmqRhPGd63kKfo=)
3: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl (hash: IPdfeqPKmZbftOoRJizUlARS2a6KIPgiE2n2hlGpX6c=)
4: 3130332e31342e3133342e302f32332d3233203d3e20313430373236.roa (hash: PohPnTPBADShmZdUjAc+ol5RV4sbT3451odzVbu+B7Y=)
5: 3130332e31342e3133322e302f32332d3233203d3e2034383337.roa (hash: yPZ2e1NPGAMvQsQSyK2kLR5rDUrX/7UynvFoCiT9BQ8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl
rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 20:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c8:ca:bd:0c:45:67:44:dd:50:3e:7e:88:a8:a6:66:36:48:96:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D
Validity
Not Before: Sep 23 14:45:16 2026 GMT
Not After : Sep 26 20:12:16 2026 GMT
Subject: CN=7E6547D361045D557E0078E44D45E46B5468F205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:7e:5f:e4:bd:0a:13:c4:02:ba:f5:0d:8f:
46:92:39:8c:02:a9:2d:8f:6e:5f:7d:5b:4f:38:7f:
03:f5:67:18:1e:98:1c:bf:ef:15:73:4f:4f:6f:c2:
c3:cf:f4:41:e5:1f:99:c6:51:cd:39:49:6d:9b:c4:
a7:0c:4f:19:a7:9c:1b:7d:7d:ae:83:0e:3e:0a:ed:
d0:aa:a0:8a:21:5b:ad:cc:6e:74:0d:4d:31:6d:25:
83:f2:c1:e0:51:a9:3c:59:a8:ba:c3:bb:0b:7a:6e:
bd:4f:44:ed:8c:cd:d6:c0:ad:ac:63:65:09:1c:50:
19:8d:28:85:06:d2:37:84:ac:22:47:f8:cf:3d:44:
be:66:08:c1:b0:22:f1:79:da:c3:f3:f7:c2:51:02:
61:d9:7d:c9:8e:50:f6:46:35:c5:5d:01:e6:79:25:
26:02:41:20:4a:d9:c3:e6:71:1b:28:55:6b:57:28:
87:da:a4:be:24:3e:43:bb:0f:b2:b2:cc:db:0f:14:
38:e6:d7:94:be:a2:11:7f:1e:ce:65:2d:81:e6:8f:
03:fd:9d:66:7f:0a:54:02:fd:6b:09:13:0b:cd:0e:
42:25:eb:3a:8c:96:10:4e:0d:98:5a:57:15:ae:c0:
41:04:bc:75:24:c6:01:ed:86:5d:4e:1e:7d:21:e0:
af:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:65:47:D3:61:04:5D:55:7E:00:78:E4:4D:45:E4:6B:54:68:F2:05
X509v3 Authority Key Identifier:
keyid:B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4f:61:11:fd:a3:a6:11:59:1a:24:72:45:b1:d4:94:aa:27:
87:68:b3:eb:30:94:70:30:f8:5f:0d:f9:c6:35:17:f7:a7:cb:
b4:01:8c:af:13:61:c1:6d:77:35:d2:05:35:2a:8c:e1:3f:72:
13:63:2b:1d:b9:31:af:21:fd:bf:11:4a:1e:00:74:22:34:8e:
1a:7e:fc:25:56:54:95:e4:06:64:c7:89:0f:28:31:da:4d:90:
cf:23:01:88:d4:e0:74:60:ff:45:77:8e:9d:41:f5:4b:69:31:
b4:0f:2c:e8:b3:2b:4a:2c:af:8f:d0:f6:8c:0c:fd:78:5a:e0:
c7:3c:45:d4:4c:8c:c3:be:cd:49:6b:15:95:26:27:e0:67:b2:
2e:c8:ec:d0:d2:68:7d:83:b5:94:0c:4c:76:5c:31:cc:c8:e9:
e5:15:e9:39:24:6e:50:81:0b:b5:6a:5d:de:0b:cd:61:fd:24:
f6:20:fa:d3:7c:40:60:a9:9c:23:bd:41:a2:e3:a6:47:5c:9c:
7e:3e:0d:5a:e1:36:dc:41:d6:11:7a:f3:80:11:24:76:3c:9e:
2f:af:51:56:a0:79:bc:b5:c2:ab:1b:0e:3e:b3:b3:75:19:e6:
2a:52:c2:76:78:26:40:01:ce:64:a7:84:ec:54:c8:f2:cf:78:
c2:72:bd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:13:43 2026 by rpki-client