
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft
File: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft (raw, json)
Hash identifier: IUQYTE7Yvvr+AiAJpbz4nDHO74CaSZUH8/xtvK+fTtg=
Subject key identifier: 70:51:99:0A:75:46:11:00:03:68:E3:38:75:F8:41:7F:30:2B:E9:EA
Authority key identifier: B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D
Certificate issuer: /CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D
Certificate serial: 58CD0FE04538E08E1CBAE01EE4324EAA16700D6B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft
Manifest number: 4C
Signing time: Wed 29 Jul 2026 03:13:16 +0000
Manifest this update: Wed 29 Jul 2026 03:08:16 +0000
Manifest next update: Thu 30 Jul 2026 07:07:16 +0000
Files and hashes: 1: 3130332e31342e3133322e302f32332d3233203d3e2034383337.roa (hash: yPZ2e1NPGAMvQsQSyK2kLR5rDUrX/7UynvFoCiT9BQ8=)
2: B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl (hash: bUx6/Lf/C3fglYlkRm7sUsnc0P1R2+wJ7EQsHMqdekU=)
3: 3130332e31342e3133322e302f32342d3234203d3e20313430373236.roa (hash: Ph1dlsU1gsZp5Js2bzwU2W0EFG5DOnt4Suxc6EJUP4U=)
4: 3130332e31342e3133332e302f32342d3234203d3e20313430373236.roa (hash: V+qv7ptj/i5Q0Kg0lA4vCRODMLzJgZmqRhPGd63kKfo=)
5: 3130332e31342e3133342e302f32332d3233203d3e20313430373236.roa (hash: PohPnTPBADShmZdUjAc+ol5RV4sbT3451odzVbu+B7Y=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl
rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:cd:0f:e0:45:38:e0:8e:1c:ba:e0:1e:e4:32:4e:aa:16:70:0d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B65F792F84FA1E900DA4D2DA49DCC537F063FD6D
Validity
Not Before: Jul 29 03:08:16 2026 GMT
Not After : Jul 30 07:07:16 2026 GMT
Subject: CN=7051990A754611000368E33875F8417F302BE9EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:4d:24:50:29:93:69:b3:ef:4e:cc:fc:77:
20:b1:a9:2c:90:26:0e:2c:56:dd:6e:84:7f:75:f1:
db:ce:84:01:d2:5f:11:7a:55:37:0b:39:71:5a:bf:
52:d5:7c:e5:2c:8e:61:dc:c5:c6:9b:84:ff:56:e0:
52:f9:57:4b:10:0f:a8:d9:14:b8:9a:fa:f8:70:7c:
4a:df:6a:f5:2a:ee:d6:21:a3:cc:db:06:d8:a6:61:
01:fd:29:07:9d:a8:03:67:90:d6:8c:fe:76:9b:6a:
a7:5d:a2:7a:75:d7:d5:dd:e3:be:6d:27:bb:31:0d:
29:6f:b0:f8:00:99:f2:10:ea:bf:7d:0f:52:50:63:
26:e5:cf:87:5a:15:2f:35:25:db:0b:83:3b:93:99:
cf:40:aa:64:e5:f3:67:6a:ca:ec:44:9b:49:d9:b6:
32:b9:cb:a8:0e:be:c6:93:43:f1:ca:1f:45:8d:c5:
ec:12:b7:f5:59:90:f8:6a:29:50:b3:1f:09:7e:6c:
7c:94:e6:b7:47:40:83:3b:97:66:7a:d1:2b:c1:e2:
59:bf:0b:f2:ab:1c:2b:cf:02:3a:16:6c:33:a7:fc:
49:7a:9f:72:b2:7c:b3:8f:60:ab:fc:4b:36:1b:fb:
69:2f:c4:7d:cf:67:ec:79:05:da:da:17:5a:da:ff:
cd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:51:99:0A:75:46:11:00:03:68:E3:38:75:F8:41:7F:30:2B:E9:EA
X509v3 Authority Key Identifier:
keyid:B6:5F:79:2F:84:FA:1E:90:0D:A4:D2:DA:49:DC:C5:37:F0:63:FD:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114949758058758169/0/B65F792F84FA1E900DA4D2DA49DCC537F063FD6D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8b:71:5b:ac:72:29:6b:91:7f:12:a9:08:74:f0:ee:c1:8f:
26:d9:82:da:0c:b1:0f:4a:fb:9f:62:a7:75:28:e5:d0:f8:ce:
e7:bf:47:a3:9f:3e:75:6e:71:8b:00:8f:60:df:9b:97:8a:18:
06:73:3e:57:88:c0:1e:68:8d:f0:3e:77:09:fc:1b:68:60:12:
f6:8e:7c:c8:11:f3:ca:c0:4a:d1:44:bc:7d:8e:64:ca:97:83:
c3:24:d1:79:4d:dd:b0:c5:67:09:1b:0b:6a:11:6c:f6:62:86:
44:34:30:9a:79:dd:02:6c:8b:08:6b:59:ac:82:82:72:78:82:
08:bf:9f:13:bb:d5:d0:21:e0:45:f0:9b:c8:81:1d:e1:22:db:
4e:a3:9e:8c:99:db:8d:a1:dc:c0:d3:79:e3:da:96:84:d8:c2:
fe:46:4a:16:18:e0:2e:47:b5:3b:97:9a:ca:1b:6f:3a:3d:3d:
f3:12:f3:46:8f:8a:fc:a2:ac:7d:7a:cd:27:51:ae:6b:3a:bd:
99:3b:c4:f1:4b:ea:dc:74:07:3d:ae:23:f2:ef:a2:d8:21:58:
46:cd:68:64:bd:d3:8a:c4:8b:a3:6b:f5:b7:4d:fe:ff:cf:5a:
4a:96:bb:e2:ac:f8:c8:a7:b6:78:28:34:5e:57:16:38:d3:b9:
6a:3c:33:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:19:05 2026 by rpki-client