
$ rpki-client -vvf rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.mft
File: 4CA5079D5112F15EE26CBCBBB02400EA57228E8F.mft (raw, json)
Hash identifier: upvGNMyNNZ11BjrynK0TXHRS6LQdKcgj5VlPpyA4BrE=
Subject key identifier: 0B:8D:AB:C3:AF:A6:12:8F:9A:BF:F0:2E:CC:C5:20:7F:64:21:E9:5F
Authority key identifier: 4C:A5:07:9D:51:12:F1:5E:E2:6C:BC:BB:B0:24:00:EA:57:22:8E:8F
Certificate issuer: /CN=4CA5079D5112F15EE26CBCBBB02400EA57228E8F
Certificate serial: 4D98CEB600EE58A712C797AEB98A5E1F6562DA04
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.cer
Subject info access: rsync://rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.mft
Manifest number: A1
Signing time: Fri 17 Apr 2026 01:48:39 +0000
Manifest this update: Fri 17 Apr 2026 01:43:39 +0000
Manifest next update: Sat 18 Apr 2026 04:17:39 +0000
Files and hashes: 1: 326131343a373538303a663830303a3a2f34302d3438203d3e203531303837.roa (hash: 6wqby/Mrx9cd27NqiWdmDbK4L+jiWVktq5w3hJHDKq8=)
2: 4CA5079D5112F15EE26CBCBBB02400EA57228E8F.crl (hash: sILznoxU3XKUulHHFxjAVClaB1xwZW39LCe2vzH8EBM=)
Validation: OK
Signature path: rsync://rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.crl
rsync://rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:98:ce:b6:00:ee:58:a7:12:c7:97:ae:b9:8a:5e:1f:65:62:da:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4CA5079D5112F15EE26CBCBBB02400EA57228E8F
Validity
Not Before: Apr 17 01:43:39 2026 GMT
Not After : Apr 18 04:17:39 2026 GMT
Subject: CN=0B8DABC3AFA6128F9ABFF02ECCC5207F6421E95F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:0a:ba:7a:cf:e4:7e:47:0c:f3:36:98:df:d7:
09:c9:11:bd:da:66:43:b3:45:37:86:c3:72:94:9d:
0a:41:61:e8:4f:35:d3:00:3c:aa:71:bc:61:66:a7:
88:f8:a7:48:af:2e:90:10:2e:66:ce:fe:f2:5c:92:
54:1b:10:0b:24:a6:97:33:25:db:21:92:dc:80:41:
e2:a1:cd:9e:0b:07:59:e9:01:22:82:c0:de:96:f7:
f6:6e:10:a0:7e:f4:47:4a:a5:eb:0a:c9:0e:32:ea:
44:7d:05:75:16:9d:ba:8a:0e:0c:1d:19:92:c1:46:
b0:90:63:f8:7f:58:86:79:b7:69:76:08:10:51:19:
4b:9a:a5:5f:b3:bb:70:ab:3e:26:0d:0d:b4:a3:88:
d4:7c:76:bf:5e:dd:1e:a8:8b:ea:f3:cc:7d:37:f9:
eb:17:b0:ad:95:d8:96:1a:77:82:72:af:1e:ef:49:
c8:f7:f8:ab:c9:5e:ee:88:2b:94:61:f7:f0:63:f7:
21:c3:4b:b2:1d:45:71:97:8f:98:a8:fb:0d:ff:91:
07:45:18:62:0e:9b:42:d7:5b:ef:4a:a5:30:cc:eb:
96:ae:90:60:12:a4:8f:f0:07:6e:3a:90:3a:85:3e:
60:92:c4:54:61:36:f0:69:a3:b3:e8:a0:be:c4:60:
08:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8D:AB:C3:AF:A6:12:8F:9A:BF:F0:2E:CC:C5:20:7F:64:21:E9:5F
X509v3 Authority Key Identifier:
keyid:4C:A5:07:9D:51:12:F1:5E:E2:6C:BC:BB:B0:24:00:EA:57:22:8E:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:2b:e2:27:e2:29:73:43:e1:85:7d:5e:57:bb:12:0a:7e:5c:
eb:20:c6:d0:eb:08:5c:62:82:4d:4f:76:2a:83:af:6f:70:dc:
cf:4b:ad:b3:5e:25:01:1c:ad:0b:6e:ab:35:a4:8f:47:5a:c3:
75:93:b3:8c:16:d9:3f:6a:05:75:2c:bc:21:e4:aa:4c:7d:33:
ba:88:9c:e2:08:6c:31:3c:3e:70:07:17:a1:ea:1a:0d:99:21:
f2:b6:1d:c3:1a:8e:51:3e:0a:df:16:57:e9:35:7d:1c:0b:2d:
15:f3:ba:12:25:0c:ed:26:a6:90:a0:58:65:92:59:1b:2c:53:
fa:a8:bc:c5:ed:06:d3:ce:15:07:47:09:b8:64:79:76:4c:a1:
4b:40:76:8c:4e:2f:a6:d0:ef:56:4d:ff:3a:7b:f0:42:a6:04:
e9:6e:b8:5f:9a:7a:c2:2f:10:e9:db:88:20:ea:b4:42:71:99:
89:2e:81:dc:d7:e1:eb:77:14:f6:96:22:08:9c:75:8b:43:0e:
30:8f:fa:c7:e9:c0:d3:5c:df:a8:82:a1:a7:4e:30:e5:de:b7:
fe:d6:e4:63:8e:5f:db:56:75:cd:42:ab:a0:3d:8f:03:38:c1:
26:ca:b7:20:3c:7b:2d:d2:f4:07:5b:0c:1d:20:c9:ff:5c:52:
6e:50:18:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:23:14 2026 by rpki-client