
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
File: B8C15036932176BBE4E7217ED5772ACA3DB00427.mft (raw, json)
Hash identifier: NgHMVC6TtxXg37rmvyOzVxq0sTWaPGQvr6lEihT4850=
Subject key identifier: 91:D0:FC:5B:DB:EE:0D:A6:3C:76:B9:AB:6F:96:35:54:42:19:68:93
Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27
Certificate issuer: /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
Certificate serial: 08886973536860EDEE69765605FD38E038CD5133
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
Manifest number: 87
Signing time: Mon 27 Apr 2026 02:48:40 +0000
Manifest this update: Mon 27 Apr 2026 02:43:40 +0000
Manifest next update: Tue 28 Apr 2026 04:30:40 +0000
Files and hashes: 1: 34332e3234372e3130312e302f32342d3234203d3e2034383132.roa (hash: mvUECDvLodFp/11AD5O24Evd5dSLDBKZTKf3mHCuAvc=)
2: 34332e3232342e3234302e302f32342d3234203d3e2034383038.roa (hash: VZdouybWTmMR/dD6/6+ICJKr/ZGHu6EZhyfCeNZnSRA=)
3: 3130332e3233342e3132392e302f32342d3234203d3e2034383131.roa (hash: mw8bGddUMh0smhnu0EDySI9xXIF1U085FD7r5icQb20=)
4: 323430333a336438303a3a2f33322d3332203d3e203138343634.roa (hash: jmZoJtvNeF3nRBqm9mCIeeNh40ogUOoqJVCfZUbJjSw=)
5: B8C15036932176BBE4E7217ED5772ACA3DB00427.crl (hash: 8LX/8gXCP7mv/9ZYekmj1NWfiR1SsoOehRDK+zcE3zE=)
6: 34332e3234372e3130332e302f32342d3234203d3e2034383132.roa (hash: mcRm4nNS2pGUBNGwxEjJhwYd95LI8enACj0yJGkk/8Y=)
7: 3130332e34332e3234302e302f32342d3234203d3e2034383038.roa (hash: /6V8/lHSdyOZ/qsg/Eu2PZkif0ZtiWnLcFDDZfE9+dU=)
8: 3130332e3233342e3132382e302f32342d3234203d3e203137363231.roa (hash: atudpMhY9fm9b2EjCblsA85B+GiQUrV8/Po0z7vcUAY=)
9: 3130332e34332e3234312e302f32342d3234203d3e2034383038.roa (hash: GzguvVAUN/QsRFgpZbpng5ljs24N7/shA4iD6/un6DY=)
10: 3130332e3233342e3132382e302f32342d3234203d3e2034383131.roa (hash: 4e85YMIIgo3G1mvyUkSGL3GPadM0LCSpbYBEPrbGu54=)
11: 34332e3234372e3130302e302f32342d3234203d3e2034383132.roa (hash: dHGyU7geUikrWUH4+V6rrwLj/7DuM2eS0YArF7qmFec=)
12: 34332e3234372e3130322e302f32342d3234203d3e2034383132.roa (hash: cyElE1Bhw1k8N2KlQApQW6apuaMTDy/PfxxWg4X95gQ=)
13: 3130332e3233342e3132392e302f32342d3234203d3e203137363231.roa (hash: hjZZWuzPbHVXr03JjZNZ9eEAXooHh0hek1gV2iAOLKs=)
14: 3130332e3233342e3133312e302f32342d3234203d3e203137363231.roa (hash: RMNTQapEhHCiy0mYS+fxG4lDIlhhdGLWHWapAq2ssyk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 04:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:88:69:73:53:68:60:ed:ee:69:76:56:05:fd:38:e0:38:cd:51:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
Validity
Not Before: Apr 27 02:43:40 2026 GMT
Not After : Apr 28 04:30:40 2026 GMT
Subject: CN=91D0FC5BDBEE0DA63C76B9AB6F96355442196893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:c3:de:df:92:8c:ed:cb:81:96:ef:ef:b2:
90:e6:24:c1:aa:9e:8d:51:38:c0:cb:bc:2b:83:19:
7c:f6:1f:2c:16:2a:b5:b8:fe:72:1f:95:b5:c3:91:
07:14:06:58:84:a2:08:4f:a8:93:e7:6a:1c:c6:a6:
45:0a:d3:e5:8b:62:06:c2:d4:51:d1:59:f8:30:8d:
de:ac:48:1e:72:cb:9e:b5:a7:6a:61:e8:32:13:33:
0b:d4:02:05:b0:99:7e:ea:58:0c:ff:a1:0e:04:d9:
c0:a7:24:d8:e1:f1:91:6b:e1:dd:6e:90:fc:ce:b6:
97:55:0d:6e:6e:c6:81:5f:b4:80:21:f5:4f:4f:a2:
9c:5c:99:a5:f7:da:49:57:68:4e:c7:b3:c9:e9:3e:
74:25:c9:3f:3a:49:ca:61:72:2b:99:9b:62:b5:d1:
52:da:6b:48:69:ae:4e:cc:5e:22:87:9e:40:3f:c2:
47:5a:ae:1a:f5:ab:da:89:c3:2d:ad:91:2c:2a:cc:
0d:d8:ad:2c:ee:9c:4e:69:85:b6:02:f6:57:cc:a3:
17:6d:81:bd:a0:89:24:30:80:f5:9e:ef:63:34:2e:
74:87:5b:a0:fa:a7:24:79:a5:c2:04:4b:c7:1d:34:
e4:98:20:18:ba:df:b2:8c:4f:c5:63:b8:73:3b:61:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D0:FC:5B:DB:EE:0D:A6:3C:76:B9:AB:6F:96:35:54:42:19:68:93
X509v3 Authority Key Identifier:
keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:bd:20:ab:aa:3f:e4:da:b2:73:b0:dc:53:4e:09:a3:1e:77:
fc:43:59:92:ec:bb:9e:36:42:e8:7d:3c:87:68:29:c7:2d:38:
46:5e:92:d6:ae:a3:34:99:00:ec:14:87:96:4c:f0:39:0c:1a:
dc:63:7c:10:d7:b4:ef:1d:f6:75:e1:59:88:39:1e:23:ed:30:
7c:d0:40:1f:e7:f2:70:8c:a6:47:87:aa:9d:50:ff:1e:bd:87:
f4:5b:86:bb:d7:eb:79:82:fc:3f:a6:98:18:04:92:83:ec:2c:
bd:9f:da:5f:28:18:dc:b9:14:be:09:d2:5e:44:b5:2f:c1:97:
22:62:62:ae:6f:82:b1:ca:b8:fa:85:b2:76:28:32:8b:8e:77:
23:f5:a5:ac:27:4e:5b:35:40:77:7a:86:b4:ae:a7:dd:99:d2:
58:aa:a9:db:ca:75:a7:59:da:08:a2:e6:0e:c4:7b:4d:6d:15:
22:b4:dc:c4:8a:b9:38:7e:91:48:a2:c9:68:73:c3:e8:04:b9:
35:fc:c9:c0:47:e7:b0:e6:30:68:c1:10:bd:bc:76:9e:ab:a6:
c3:9f:27:47:88:a3:4f:8c:89:de:2a:e9:a7:58:f7:97:81:2e:
7e:f3:eb:1c:94:ab:3b:27:2d:36:81:02:ab:74:3d:de:6e:3e:
25:3b:68:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:42:41 2026 by rpki-client