
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
File: B1F9550677201454EB206CCFD059783FCDDB44F0.mft (raw, json)
Hash identifier: LiopSPkQ+sjCJUGlinUJJ82EfbOeVo6YR0VMbhLTg2k=
Subject key identifier: F9:E9:16:B7:46:28:3A:A9:AE:53:97:F8:97:5E:45:B2:9B:B3:71:14
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 68E956255A13F05AC2378AE229EA414F10156E60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
Manifest number: 3F
Signing time: Fri 06 Mar 2026 20:23:21 +0000
Manifest this update: Fri 06 Mar 2026 20:18:21 +0000
Manifest next update: Sat 07 Mar 2026 22:14:21 +0000
Files and hashes: 1: 34332e3235342e3139322e302f32322d3332203d3e203632343638.roa (hash: bobpjRftY4EVuVK7RVubsSzMLbBd0b7awOTlrxaV/28=)
2: 34352e3234382e382e302f32322d3232203d3e20313333303333.roa (hash: qsctuPBSfA+Dx7b6pLOln9nnloiMUANcbyygIqgY4OQ=)
3: 34352e3234382e382e302f32322d3232203d3e203632343638.roa (hash: PRQJYfAdJbDuylQLPpP0OmrWCtfzAtohw68L22CpuFQ=)
4: 3130332e36302e3136342e302f32322d3232203d3e203632343638.roa (hash: auyuE2h/GPKANCvbz6Bw8Yi8e4eCZJDu9XTdgBKbank=)
5: B1F9550677201454EB206CCFD059783FCDDB44F0.crl (hash: QYakUxug3j8qax/QC6thXxCDTjcKBL1WMcXSZKwPTX0=)
6: 3130332e31392e3233322e302f32322d3232203d3e20313333303333.roa (hash: 36wbu1SRDiLaujfYKA/iSyCAeDESkUTmIlUT9M35B30=)
7: 3130332e31392e3233322e302f32322d3232203d3e203632343638.roa (hash: FIyKRHnh6ANBsNFHBDZY9OW6prlllmKtfsx4VFw8aRA=)
8: 3130332e36302e3136342e302f32322d3232203d3e20313333303333.roa (hash: vvsbD3Qmkj+urJIzHpJtcmG8mKUbyHobxkx5+Svk+iM=)
9: 34332e3235342e3139322e302f32322d3332203d3e20313333303333.roa (hash: r3XpPj1FYm8r25RMxCEfXoeyc9BUGQNJDYDBp+PrjQI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 22:14:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e9:56:25:5a:13:f0:5a:c2:37:8a:e2:29:ea:41:4f:10:15:6e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: Mar 6 20:18:21 2026 GMT
Not After : Mar 7 22:14:21 2026 GMT
Subject: CN=F9E916B746283AA9AE5397F8975E45B29BB37114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5f:8c:f9:af:22:30:f2:d2:f6:91:6e:3c:13:
fa:60:79:52:90:85:fb:d6:bd:41:06:91:dc:1f:76:
0d:40:50:53:8f:10:8e:ab:55:4d:d2:f0:4c:26:0a:
91:54:ad:47:e2:6a:40:46:16:6e:a2:64:4f:b3:1e:
15:a9:92:ee:c1:67:a4:a4:3b:f3:5d:e7:23:d7:a1:
0c:81:4a:dd:9a:63:98:9a:fc:8b:ee:8c:58:3a:27:
eb:21:cd:49:61:b9:6a:de:51:6c:4b:30:bb:32:90:
9e:95:ac:75:48:cb:58:61:1f:e1:51:ea:03:95:6b:
b5:94:32:05:e0:f6:e1:7d:ad:5e:69:b1:5a:99:a7:
be:19:a3:31:47:68:cb:0f:fd:4b:79:4e:a1:28:a1:
bd:c3:07:4d:fd:ab:dd:bd:17:38:d8:f4:89:66:74:
f7:45:cd:8a:bf:9a:73:ac:7c:08:2e:4b:f5:a8:7a:
34:f7:bb:56:5b:fb:9c:b0:ba:06:a2:16:39:31:f3:
a1:60:aa:6c:9b:1e:63:30:41:b8:31:50:4e:ee:cf:
f3:c5:01:27:6f:3d:47:ba:31:5b:2c:a1:65:2f:96:
c4:7b:e5:cb:94:92:c0:cb:de:b9:ba:7c:84:67:cb:
16:b2:06:59:34:b5:f0:5e:c3:7a:9d:7b:5f:9a:70:
c7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E9:16:B7:46:28:3A:A9:AE:53:97:F8:97:5E:45:B2:9B:B3:71:14
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e1:b0:d2:e8:aa:78:1c:d8:5a:75:79:d0:81:dc:29:f0:20:
46:8d:78:d9:12:aa:8e:26:0b:08:06:ab:de:17:8b:55:cf:d5:
68:7f:f7:41:ce:78:84:e3:9d:82:91:ad:1f:b2:f3:d8:a8:5c:
60:94:4d:8f:af:c3:89:ce:69:61:37:cd:86:f0:28:5d:b3:9a:
e6:f9:fc:a7:0e:cf:ac:01:f2:c0:c2:4d:29:a3:73:b7:2b:0f:
6c:f4:cb:3d:24:6d:93:95:28:a0:ba:99:a1:fb:e0:e4:da:4a:
a7:dd:d1:b7:96:db:71:40:a8:01:6f:23:9f:5f:ea:2c:19:54:
38:cd:b9:c6:68:22:4f:6d:ec:99:ec:22:03:7c:35:2f:e2:0b:
18:3f:df:d7:11:46:2d:f1:3e:f6:3d:05:00:c7:6e:97:0b:b2:
f1:4e:77:98:c2:5c:a8:4b:65:08:5e:b1:cb:80:d9:d6:68:21:
99:21:78:ab:2a:30:66:4d:20:ff:38:b2:f1:81:10:e2:93:88:
d6:14:a8:be:b0:a6:a3:dd:14:98:66:87:76:ea:11:df:02:19:
c6:42:f6:ad:c6:d1:8c:c6:4b:b4:1b:bc:c9:08:09:94:6a:b0:
d3:9d:12:5f:82:45:ad:55:2f:3f:7f:61:91:41:0b:91:ef:4f:
4f:29:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:40:51 2026 by rpki-client