
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
File: B0B537B0747D6013B06152AEE77D15203B1916FA.mft (raw, json)
Hash identifier: BkQ7JRoK/REIUlfU/UgmnL3SA5bGPNHHclIw22ickGg=
Subject key identifier: 97:14:12:5A:72:38:E0:13:C8:A8:4D:60:78:4A:43:A8:05:CD:33:D7
Authority key identifier: B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
Certificate issuer: /CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Certificate serial: 042CA8231F2E4C257C4286D44391F016DE8CFC37
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
Manifest number: 6D
Signing time: Fri 09 Oct 2026 17:53:39 +0000
Manifest this update: Fri 09 Oct 2026 17:48:39 +0000
Manifest next update: Tue 13 Oct 2026 04:54:39 +0000
Files and hashes: 1: 3231302e37362e3137322e302f32322d3232203d3e20313334373632.roa (hash: EKUBeXes+M1jDCe7e1kc1oCmCgsBM6tO5sag3Ry34yY=)
2: 3231302e37362e3138342e302f32322d3232203d3e20313334373632.roa (hash: KBOVI2UBdbeXRbsHVeTV6sbjrU6doYtA6rDMtJTlq1U=)
3: 3231302e37362e3138382e302f32322d3232203d3e20313334373632.roa (hash: zI6ePoI0y2Fm1sSqrrUkSajPorMwE/xAmExyk0kFlus=)
4: 3231302e37362e3136342e302f32322d3232203d3e20313334373632.roa (hash: S4Xiq+tsebEtfsCJHFrLqedmnsBo40vyHoPs4f0RABE=)
5: 3231302e37362e3136302e302f32322d3232203d3e20313334373632.roa (hash: SrpaphldTts5AcZEbZ+7FmR5HxvlWebU1eK0VABiMKY=)
6: 3231302e37362e3137362e302f32322d3232203d3e20313334373632.roa (hash: uCOWXNMePOZa/iksUWzRBEjUWdyxzN11zhwz3y1U4Ek=)
7: 3231302e37362e3136382e302f32322d3232203d3e20313334373632.roa (hash: WkFPiKlYJz6jmeh4Y+K4Zer0JOq+QHQvGMcujzWOVz0=)
8: B0B537B0747D6013B06152AEE77D15203B1916FA.crl (hash: K/53WK6MhstPpiA+p5+xqG3AcA9Bz5zjNUC3pb7i5jE=)
9: 3231302e37362e3138302e302f32322d3232203d3e20313334373632.roa (hash: ncGJvfVZz1aXP6VWJdrIhLgknTdYP6bRFVSX0ogc/kg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 04:54:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:2c:a8:23:1f:2e:4c:25:7c:42:86:d4:43:91:f0:16:de:8c:fc:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Validity
Not Before: Oct 9 17:48:39 2026 GMT
Not After : Oct 13 04:54:39 2026 GMT
Subject: CN=9714125A7238E013C8A84D60784A43A805CD33D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:4b:ff:c2:1c:ff:95:de:7d:22:a2:e8:1e:
34:d6:7d:0c:4a:cc:c5:74:b1:2a:f4:c0:81:3e:a6:
15:9a:b1:b7:b7:59:01:00:c2:86:41:47:0f:1a:08:
6e:70:48:7b:f7:04:54:79:dd:88:0f:ac:ce:5c:61:
2f:a2:fa:ea:02:a7:97:bd:7c:a6:7f:8c:ea:66:b2:
b9:8a:40:12:26:38:25:c7:5a:a6:a0:84:b0:e0:ce:
26:6a:8c:5c:c2:14:82:a1:06:b6:76:58:12:3e:ec:
c1:0e:1a:0e:50:19:03:52:68:6f:d9:c0:f5:99:78:
63:31:10:5b:ae:5c:0c:9b:42:d3:69:21:ba:b4:7f:
e7:79:c8:90:f7:e4:cf:dd:94:04:21:b2:af:0f:de:
0f:41:55:35:5d:ba:99:fa:6e:aa:ea:f1:a9:d7:47:
cd:46:45:75:61:7a:1a:5e:68:0e:4e:3f:fb:49:2e:
8b:8f:9b:74:a1:78:54:d6:31:f1:a7:19:9c:58:e9:
16:e5:39:cf:e0:7e:e6:79:ca:30:3b:e3:a2:bd:e9:
d9:4a:c4:6b:34:81:d0:14:f9:d6:74:72:e0:79:b9:
0b:28:e1:39:0f:de:0d:f5:5c:db:92:f1:3b:55:9e:
c3:6b:58:d2:66:3a:fb:ed:81:68:12:2f:22:db:49:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:14:12:5A:72:38:E0:13:C8:A8:4D:60:78:4A:43:A8:05:CD:33:D7
X509v3 Authority Key Identifier:
keyid:B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:50:ad:58:77:73:dc:21:36:dd:41:49:b6:dd:16:8f:89:5d:
f7:72:3a:7f:f0:8f:33:1b:c6:11:22:f4:e3:aa:06:90:6f:fd:
5e:a0:f2:71:dc:83:e7:e9:be:b0:86:c4:2a:34:d6:d2:d7:57:
ad:4d:69:d2:84:af:1c:01:55:57:6a:a3:31:ba:1a:63:e6:aa:
a0:d7:eb:ea:d6:e6:5c:34:7d:8a:94:9b:a9:47:42:4d:ee:c6:
42:aa:43:5a:22:01:27:9f:29:f8:a7:cc:4a:09:17:c6:9a:89:
bc:d3:24:8b:70:b3:ec:eb:e9:f1:71:ea:11:1d:4c:8b:e4:38:
8e:b2:49:30:b6:95:59:d9:7f:53:51:68:a8:c2:7e:7a:6f:e5:
3d:3d:9e:9c:08:4f:80:8a:30:cf:6f:b3:18:d2:08:ce:d2:fc:
79:56:26:a1:f4:b6:de:1c:16:3a:72:b6:96:33:82:cd:51:f0:
16:18:2a:ff:9f:09:a7:ea:7e:4d:a4:df:89:d3:57:0c:88:4f:
53:f1:55:7b:25:65:88:a7:64:d6:e9:20:6d:0a:ba:44:43:d2:
9d:dc:1e:a6:c1:3c:38:b0:49:1a:11:52:66:a7:99:0e:96:ce:
53:9a:d1:68:c4:9c:e3:21:4d:65:5b:1d:f3:69:71:c0:1a:9b:
48:82:e4:b5
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUBCyoIx8uTCV8QobUQ5HwFt6M/DcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBCNTM3QjA3NDdENjAxM0IwNjE1MkFFRTc3RDE1MjAz
QjE5MTZGQTAeFw0yNjEwMDkxNzQ4MzlaFw0yNjEwMTMwNDU0MzlaMDMxMTAvBgNV
BAMTKDk3MTQxMjVBNzIzOEUwMTNDOEE4NEQ2MDc4NEE0M0E4MDVDRDMzRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7/Uv/whz/ld59IqLoHjTWfQxK
zMV0sSr0wIE+phWasbe3WQEAwoZBRw8aCG5wSHv3BFR53YgPrM5cYS+i+uoCp5e9
fKZ/jOpmsrmKQBImOCXHWqaghLDgziZqjFzCFIKhBrZ2WBI+7MEOGg5QGQNSaG/Z
wPWZeGMxEFuuXAybQtNpIbq0f+d5yJD35M/dlAQhsq8P3g9BVTVdupn6bqrq8anX
R81GRXVhehpeaA5OP/tJLouPm3SheFTWMfGnGZxY6RblOc/gfuZ5yjA746K96dlK
xGs0gdAU+dZ0cuB5uQso4TkP3g31XNuS8TtVnsNrWNJmOvvtgWgSLyLbSXcTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUlxQSWnI44BPIqE1geEpDqAXNM9cwHwYDVR0j
BBgwFoAUsLU3sHR9YBOwYVKu530VIDsZFvowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
MjA2NTI5Mjk5NDgwNTc5Ny8wL0IwQjUzN0IwNzQ3RDYwMTNCMDYxNTJBRUU3N0Qx
NTIwM0IxOTE2RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjBCNTM3QjA3NDdENjAxM0IwNjE1MkFFRTc3RDE1MjAzQjE5MTZGQS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMjIwNjUyOTI5OTQ4MDU3OTcvMC9CMEI1MzdCMDc0N0Q2
MDEzQjA2MTUyQUVFNzdEMTUyMDNCMTkxNkZBLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlCtWHdz3CE2
3UFJtt0Wj4ld93I6f/CPMxvGESL046oGkG/9XqDycdyD5+m+sIbEKjTW0tdXrU1p
0oSvHAFVV2qjMboaY+aqoNfr6tbmXDR9ipSbqUdCTe7GQqpDWiIBJ58p+KfMSgkX
xpqJvNMki3Cz7Ovp8XHqER1Mi+Q4jrJJMLaVWdl/U1FoqMJ+em/lPT2enAhPgIow
z2+zGNIIztL8eVYmofS23hwWOnK2ljOCzVHwFhgq/58Jp+p+TaTfidNXDIhPU/FV
eyVliKdk1ukgbQq6REPSndwepsE8OLBJGhFSZqeZDpbOU5rRaMSc4yFNZVsd82lx
wBqbSILktQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:48:01 2026 by rpki-client