
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft
File: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft (raw, json)
Hash identifier: SemTl2YQx+SdiPim0pBqSNa2T64AbEAiPGPZtcHw7Vw=
Subject key identifier: C6:23:EB:40:B8:7C:7E:29:AF:63:35:03:FB:2B:4E:F3:00:11:46:0A
Authority key identifier: BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E
Certificate issuer: /CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E
Certificate serial: 7A9EE7AB15EE485AB35C22C74A1B748F3FC4EA22
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft
Manifest number: 2F
Signing time: Sun 22 Feb 2026 21:32:30 +0000
Manifest this update: Sun 22 Feb 2026 21:27:30 +0000
Manifest next update: Mon 23 Feb 2026 22:04:30 +0000
Files and hashes: 1: 3130332e3132322e3234332e302f32342d3234203d3e2039333932.roa (hash: Hi3okpsuFBUG/RUZUO6Rbi9uhExoSW284tYtYSA7mNA=)
2: 3130332e3132322e3234302e302f32342d3234203d3e2039333932.roa (hash: bSy4zW2IElCxDA2VNI5ztYY2bG1LeyFcd9juSfW9E64=)
3: 3130332e3132322e3234322e302f32342d3234203d3e2039333932.roa (hash: 5X1koxoUShTKC/jZlj5TxuXqM9WrXceOn/kntTTRe94=)
4: 3130332e3132322e3234312e302f32342d3234203d3e2039333932.roa (hash: KdZlPUMKIcj3/QZXLQ8AZEqv/C9HEcqh7hcBOedoxZE=)
5: BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl (hash: NBCRQ7aQC0en5w73YRssY30Q++KINUmI8uoOha7NS8E=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:9e:e7:ab:15:ee:48:5a:b3:5c:22:c7:4a:1b:74:8f:3f:c4:ea:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF7230B41A75F66CC3D2372CC0CFFA248AFD961E
Validity
Not Before: Feb 22 21:27:30 2026 GMT
Not After : Feb 23 22:04:30 2026 GMT
Subject: CN=C623EB40B87C7E29AF633503FB2B4EF30011460A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0a:60:6c:ed:16:97:20:17:26:bb:62:5f:88:
67:14:dc:c7:22:94:03:4e:1a:87:47:c7:c6:4e:59:
3a:49:4b:b6:75:1c:5b:df:2f:f4:64:06:f2:0b:81:
b6:d8:f5:58:42:50:05:c5:43:31:8b:80:59:9b:7c:
49:3c:80:ac:09:72:5f:2e:36:4b:bd:d5:da:36:02:
6d:12:ce:5a:7a:fc:8c:59:47:bc:84:6a:e8:5b:b4:
af:6a:67:a5:fe:4d:a6:8c:59:06:48:23:0f:47:59:
41:ae:6d:9c:5c:02:4d:35:07:59:55:79:6b:b0:37:
cc:54:02:53:ef:9f:a8:81:0f:2f:f3:05:11:9e:10:
19:33:ad:18:56:b4:22:74:08:c3:c3:ff:2b:fd:eb:
31:73:57:1f:45:4c:e7:bd:c8:ce:8c:4b:15:37:71:
8d:d0:d2:fd:cd:62:b1:f6:a2:56:e3:f2:21:85:47:
43:7a:2f:07:59:75:f2:00:9e:3c:7e:22:d2:29:c9:
7d:f3:62:5d:5d:04:a6:36:fe:8c:18:97:16:60:5f:
d1:78:9a:10:28:22:48:30:11:e5:b8:68:e1:12:c1:
27:33:e2:c2:cc:7f:04:06:aa:51:21:fb:d1:4c:51:
7d:2a:9d:68:2a:8c:65:08:c2:42:01:d6:81:5d:5a:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:23:EB:40:B8:7C:7E:29:AF:63:35:03:FB:2B:4E:F3:00:11:46:0A
X509v3 Authority Key Identifier:
keyid:BF:72:30:B4:1A:75:F6:6C:C3:D2:37:2C:C0:CF:FA:24:8A:FD:96:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577728002/0/BF7230B41A75F66CC3D2372CC0CFFA248AFD961E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ce:6c:ae:dc:ce:72:e0:65:0f:1e:e4:57:a7:1f:36:8c:29:
1d:8f:b4:49:8f:5f:55:17:ca:53:c6:d7:66:59:ac:7c:c7:ff:
f4:d4:a9:fa:97:b2:7a:b0:3b:4e:85:58:8e:a7:aa:bb:a5:8b:
9f:c2:77:17:a3:e4:a1:e7:87:25:22:51:b8:d0:c4:80:c3:d4:
83:64:7f:97:8a:c1:e8:8b:e8:2c:14:be:c6:27:04:de:6e:ba:
eb:12:92:dc:3d:fa:41:da:65:4c:8b:1b:70:c6:55:d1:aa:d7:
ef:68:40:40:05:bc:5b:fe:4a:1c:b5:31:ca:fe:62:d5:8e:67:
7f:70:b7:e0:c6:01:26:c0:c8:bb:71:9d:57:94:cd:8f:e1:e1:
8b:bd:14:56:2c:a3:a8:99:4f:3e:f9:37:46:e8:48:73:79:b9:
ea:a1:69:35:c8:8c:11:fb:96:1f:37:20:29:ea:58:a0:52:a5:
1c:a3:a2:26:f1:95:73:2a:8a:5f:04:0c:5b:34:52:6a:7b:ec:
47:a5:6c:ac:74:61:3b:d2:34:19:a7:7e:6a:b0:95:ff:5b:e2:
0f:5a:b7:ca:d2:2f:10:5f:e8:e3:aa:7f:a3:7e:f6:5f:a7:f3:
e5:65:14:13:b8:82:94:8b:5b:fe:c2:a1:b6:82:36:6b:01:0b:
b0:a4:0a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:07:15 2026 by rpki-client