
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
File: B8C15036932176BBE4E7217ED5772ACA3DB00427.mft (raw, json)
Hash identifier: P4Is8FuoxK1ARC6JAX+oTIteaVV1nCmssOulddEjB8I=
Subject key identifier: F0:B8:FE:49:0D:C5:F5:83:E4:48:6B:65:87:C8:FC:4E:7A:C2:3E:30
Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27
Certificate issuer: /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
Certificate serial: 44BFEA4D094DFBA6A31AD0A9F590A69238678279
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
Manifest number: C3
Signing time: Thu 11 Jun 2026 13:23:49 +0000
Manifest this update: Thu 11 Jun 2026 13:18:49 +0000
Manifest next update: Fri 12 Jun 2026 15:40:49 +0000
Files and hashes: 1: 3130332e3233342e3132392e302f32342d3234203d3e203137363231.roa (hash: hjZZWuzPbHVXr03JjZNZ9eEAXooHh0hek1gV2iAOLKs=)
2: 34332e3232342e3234302e302f32342d3234203d3e2034383038.roa (hash: VZdouybWTmMR/dD6/6+ICJKr/ZGHu6EZhyfCeNZnSRA=)
3: 3130332e3233342e3132382e302f32342d3234203d3e203137363231.roa (hash: atudpMhY9fm9b2EjCblsA85B+GiQUrV8/Po0z7vcUAY=)
4: 34332e3234372e3130332e302f32342d3234203d3e2034383132.roa (hash: mcRm4nNS2pGUBNGwxEjJhwYd95LI8enACj0yJGkk/8Y=)
5: 34332e3234372e3130312e302f32342d3234203d3e2034383132.roa (hash: mvUECDvLodFp/11AD5O24Evd5dSLDBKZTKf3mHCuAvc=)
6: 3130332e34332e3234312e302f32342d3234203d3e2034383038.roa (hash: GzguvVAUN/QsRFgpZbpng5ljs24N7/shA4iD6/un6DY=)
7: 3130332e3233342e3132392e302f32342d3234203d3e2034383131.roa (hash: mw8bGddUMh0smhnu0EDySI9xXIF1U085FD7r5icQb20=)
8: B8C15036932176BBE4E7217ED5772ACA3DB00427.crl (hash: bd3joTUWixxAG6Z3SFbEDOOw+Abs5ilDDPXGjj+VSUg=)
9: 3130332e3233342e3133312e302f32342d3234203d3e203137363231.roa (hash: RMNTQapEhHCiy0mYS+fxG4lDIlhhdGLWHWapAq2ssyk=)
10: 3130332e3233342e3132382e302f32342d3234203d3e2034383131.roa (hash: 4e85YMIIgo3G1mvyUkSGL3GPadM0LCSpbYBEPrbGu54=)
11: 34332e3234372e3130322e302f32342d3234203d3e2034383132.roa (hash: cyElE1Bhw1k8N2KlQApQW6apuaMTDy/PfxxWg4X95gQ=)
12: 3130332e34332e3234302e302f32342d3234203d3e2034383038.roa (hash: /6V8/lHSdyOZ/qsg/Eu2PZkif0ZtiWnLcFDDZfE9+dU=)
13: 34332e3234372e3130302e302f32342d3234203d3e2034383132.roa (hash: dHGyU7geUikrWUH4+V6rrwLj/7DuM2eS0YArF7qmFec=)
14: 323430333a336438303a3a2f33322d3332203d3e203138343634.roa (hash: jmZoJtvNeF3nRBqm9mCIeeNh40ogUOoqJVCfZUbJjSw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 15:40:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:bf:ea:4d:09:4d:fb:a6:a3:1a:d0:a9:f5:90:a6:92:38:67:82:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
Validity
Not Before: Jun 11 13:18:49 2026 GMT
Not After : Jun 12 15:40:49 2026 GMT
Subject: CN=F0B8FE490DC5F583E4486B6587C8FC4E7AC23E30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:15:32:bc:23:8b:fe:ba:67:f6:48:4d:f0:bf:
34:79:57:4d:73:17:13:6c:76:a8:65:b0:30:13:3e:
d6:33:38:84:f3:f8:99:71:a9:4b:91:8c:98:a9:f3:
cd:1d:ae:22:5a:08:8f:c6:5f:9c:ce:7a:ee:56:98:
82:b7:52:60:e4:e3:18:c8:97:55:b3:39:ff:57:6e:
25:91:4e:fa:f7:fc:82:76:7a:12:d5:86:44:83:36:
2c:f4:3f:ad:d6:df:58:86:b4:cc:db:95:6f:37:b8:
dc:5d:09:24:2d:1a:1c:63:55:6f:25:6b:45:be:f1:
f4:cc:8b:83:20:8d:73:0e:35:81:b5:c7:55:82:49:
ec:c9:a6:1b:7e:4b:b6:69:5d:63:d7:0b:5d:9e:e8:
55:43:66:9c:3b:af:f6:be:24:1a:d7:48:80:e4:1e:
78:eb:46:f4:1a:32:88:af:09:60:cf:06:a5:ac:c4:
0b:1a:45:f9:f8:41:34:13:f4:c0:ff:be:9e:3e:41:
5c:32:fe:ae:30:96:81:e0:eb:d6:48:97:45:88:cc:
75:2e:a1:32:f3:22:1d:f4:b0:e7:24:f9:41:84:e8:
00:65:6b:80:8a:2e:67:06:ef:f5:55:c7:2b:1b:61:
92:82:8b:11:8c:60:df:64:ae:23:63:90:38:43:10:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B8:FE:49:0D:C5:F5:83:E4:48:6B:65:87:C8:FC:4E:7A:C2:3E:30
X509v3 Authority Key Identifier:
keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fc:d9:2b:c3:0b:04:77:ed:66:ec:40:1c:70:d7:4c:49:91:
51:2c:88:78:25:e4:26:0e:f8:65:3a:2a:50:90:88:9a:e3:70:
1c:9f:64:53:0c:e0:e8:76:42:98:d4:43:c1:31:28:06:54:39:
11:e2:89:c7:e1:c9:57:21:e7:7c:2b:2f:6c:78:f2:6e:da:ff:
33:e6:24:19:9e:6b:d0:13:fd:79:92:d0:e6:b9:4b:56:ef:7b:
16:b8:84:da:3a:ea:9d:31:1c:55:41:81:df:41:a2:3e:94:78:
76:db:85:6a:98:98:55:14:8c:32:63:0b:29:3c:58:ff:34:18:
90:d0:d4:7c:d2:24:81:04:bf:b9:86:19:ab:03:bd:67:99:18:
7c:de:d0:0c:bd:3a:d7:db:ff:b5:20:5a:a2:4f:f2:04:e0:ea:
4c:d9:c3:73:5b:83:6d:a0:9a:6b:1a:b2:a3:10:cb:f4:da:e2:
21:7c:6c:02:22:36:75:7e:f5:69:49:85:5b:f8:12:c6:4d:d6:
c3:3e:28:88:3f:b2:f3:a7:bb:a9:e9:d3:be:27:c9:e5:35:5f:
ee:b9:bf:60:18:15:79:09:8c:fc:db:ab:c9:d1:a2:06:a4:f7:
21:30:57:0d:80:b2:20:d8:ff:b8:44:ed:03:a5:66:87:58:66:
07:86:10:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:33 2026 by rpki-client