
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
File: B361C757B6D70C317FD018CE921CC13F568B00D8.mft (raw, json)
Hash identifier: 1AxGvCOxg48fQfuWdj2eSdg0G+UcLDu8v17zWlfybkQ=
Subject key identifier: A2:63:1E:62:35:31:64:9F:FC:DE:AA:24:0C:74:AA:BA:76:39:85:EC
Authority key identifier: B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8
Certificate issuer: /CN=B361C757B6D70C317FD018CE921CC13F568B00D8
Certificate serial: 259F2792509F99B0993E911D32B771F7E044543D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
Manifest number: 012B
Signing time: Fri 28 Aug 2026 06:48:00 +0000
Manifest this update: Fri 28 Aug 2026 06:43:00 +0000
Manifest next update: Mon 31 Aug 2026 10:10:00 +0000
Files and hashes: 1: 323430323a326536303a3a2f33322d3438203d3e20313531323331.roa (hash: bgR/NVrBsnz+F/Uqm+DFCd1LSczUrvNifQljXjBX0Cw=)
2: B361C757B6D70C317FD018CE921CC13F568B00D8.crl (hash: FAVweBa2ILYWnS9kXknULi9HMixU/uHTz4XJwP0qZrY=)
3: 3130332e3130342e3135322e302f32322d3234203d3e20313531323331.roa (hash: UU8+VwXx5kLXE1vREUzKeaHXeDerUJ/54dl+hLa2H6g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 10:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:9f:27:92:50:9f:99:b0:99:3e:91:1d:32:b7:71:f7:e0:44:54:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B361C757B6D70C317FD018CE921CC13F568B00D8
Validity
Not Before: Aug 28 06:43:00 2026 GMT
Not After : Aug 31 10:10:00 2026 GMT
Subject: CN=A2631E623531649FFCDEAA240C74AABA763985EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:ab:53:ac:1a:d4:fa:5d:93:5e:c6:2c:9a:
24:15:de:b8:f8:06:29:52:62:0d:9c:0a:96:a9:10:
2b:c6:e3:0d:41:ce:fa:f4:56:bb:7e:d1:a0:c2:88:
cf:98:63:6f:81:16:59:c8:51:03:19:d6:05:b8:73:
eb:56:da:78:4f:a9:8e:82:77:67:aa:56:9f:f0:ec:
10:d8:9a:77:7b:fd:04:65:d8:92:66:0b:a8:8b:b5:
f0:d2:ed:64:12:5d:d3:df:f0:83:33:c3:79:bc:87:
00:57:4d:e1:dc:3e:c7:ec:5f:01:25:44:b8:35:af:
35:b3:1d:df:d8:54:d3:34:a0:3b:98:1d:5a:ab:60:
91:d3:e7:8b:f7:d4:83:f0:14:30:38:1d:09:2a:a2:
1e:f5:15:19:20:dd:35:59:a2:12:08:07:99:0a:d4:
01:33:d6:28:7a:d5:73:2d:49:6d:31:d7:77:17:43:
2c:e9:b0:d0:48:da:83:f6:fd:8f:aa:0e:25:01:de:
29:01:86:44:02:b1:d7:64:06:7e:fe:cf:7b:43:b5:
58:8f:f2:6d:47:c8:5a:cd:b8:27:1e:5d:af:6f:a4:
bc:d4:8e:47:e9:ea:87:73:69:3f:5f:74:a5:89:d6:
2f:89:1e:a9:4d:c8:cf:12:25:ce:36:dc:1a:33:38:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:63:1E:62:35:31:64:9F:FC:DE:AA:24:0C:74:AA:BA:76:39:85:EC
X509v3 Authority Key Identifier:
keyid:B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d4:ba:da:31:24:74:8c:72:56:f7:c6:f0:0b:86:d6:67:6f:
7c:a5:4b:d4:45:6f:cc:d6:9c:d9:3b:9a:c6:21:19:7e:27:6f:
2e:ec:7f:3b:91:a5:9a:ce:4e:96:10:26:d9:e5:08:16:f1:64:
09:01:86:15:b1:e2:fd:c1:6e:c8:a0:64:00:d4:98:1f:c1:85:
4d:77:60:6d:f8:5e:0b:0d:7f:f9:aa:0e:94:46:22:ce:34:66:
63:a6:b3:b5:7a:c7:37:7b:46:53:ee:8c:83:05:d6:07:de:2c:
a3:08:c2:27:89:5f:0a:84:0a:c0:d4:ee:35:3b:bc:53:f6:6c:
63:a6:a3:8d:b8:e5:e6:df:71:cc:e6:27:62:4f:5f:36:3b:35:
24:5f:c3:94:f3:45:19:36:37:18:80:63:bf:87:99:32:2e:43:
b6:85:49:38:d9:3b:9d:43:2a:ca:87:ec:ce:4d:c1:0c:ce:c1:
fa:87:18:b8:f1:0b:9d:6d:c9:27:b7:6d:c0:98:71:dd:3a:8b:
ec:cc:ca:98:15:4d:f3:09:b5:c0:0c:74:0b:ec:b2:27:53:9a:
e2:59:ba:3a:b3:60:f8:2b:14:6c:65:f9:cc:77:6b:c6:ff:fc:
05:d2:2b:26:8d:07:b9:de:06:c6:91:f2:0e:51:16:82:a1:c7:
3e:36:3c:16
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUJZ8nklCfmbCZPpEdMrdx9+BEVD0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1
NjhCMDBEODAeFw0yNjA4MjgwNjQzMDBaFw0yNjA4MzExMDEwMDBaMDMxMTAvBgNV
BAMTKEEyNjMxRTYyMzUzMTY0OUZGQ0RFQUEyNDBDNzRBQUJBNzYzOTg1RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS0qtTrBrU+l2TXsYsmiQV3rj4
BilSYg2cCpapECvG4w1Bzvr0Vrt+0aDCiM+YY2+BFlnIUQMZ1gW4c+tW2nhPqY6C
d2eqVp/w7BDYmnd7/QRl2JJmC6iLtfDS7WQSXdPf8IMzw3m8hwBXTeHcPsfsXwEl
RLg1rzWzHd/YVNM0oDuYHVqrYJHT54v31IPwFDA4HQkqoh71FRkg3TVZohIIB5kK
1AEz1ih61XMtSW0x13cXQyzpsNBI2oP2/Y+qDiUB3ikBhkQCsddkBn7+z3tDtViP
8m1HyFrNuCceXa9vpLzUjkfp6odzaT9fdKWJ1i+JHqlNyM8SJc423BozOIgTAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUomMeYjUxZJ/83qokDHSqunY5hewwHwYDVR0j
BBgwFoAUs2HHV7bXDDF/0BjOkhzBP1aLANgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MzIyMTk3MjAwODk2My8wL0IzNjFDNzU3QjZENzBDMzE3RkQwMThDRTkyMUND
MTNGNTY4QjAwRDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1NjhCMDBEOC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwMDg5NjMvMC9CMzYxQzc1N0I2RDcw
QzMxN0ZEMDE4Q0U5MjFDQzEzRjU2OEIwMEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNS62jEkdIxy
VvfG8AuG1mdvfKVL1EVvzNac2TuaxiEZfidvLux/O5Glms5OlhAm2eUIFvFkCQGG
FbHi/cFuyKBkANSYH8GFTXdgbfheCw1/+aoOlEYizjRmY6aztXrHN3tGU+6MgwXW
B94sowjCJ4lfCoQKwNTuNTu8U/ZsY6ajjbjl5t9xzOYnYk9fNjs1JF/DlPNFGTY3
GIBjv4eZMi5DtoVJONk7nUMqyofszk3BDM7B+ocYuPELnW3JJ7dtwJhx3TqL7MzK
mBVN8wm1wAx0C+yyJ1Oa4lm6OrNg+CsUbGX5zHdrxv/8BdIrJo0Hud4GxpHyDlEW
gqHHPjY8Fg==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:19:32 2026 by rpki-client