
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
File: 1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft (raw, json)
Hash identifier: CYdFLAgEA6/DTB8f0RArybUFbVHoKRo6cORheWHmEME=
Subject key identifier: 81:91:9A:3D:F2:CD:65:FA:96:19:BF:F6:E2:DF:4E:E6:40:1B:A7:C2
Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60
Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260
Certificate serial: 3B16B3B66E3F95C47B95CCAC3A75D63D4643D4FC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
Manifest number: 71
Signing time: Mon 13 Apr 2026 07:54:17 +0000
Manifest this update: Mon 13 Apr 2026 07:49:17 +0000
Manifest next update: Tue 14 Apr 2026 10:32:17 +0000
Files and hashes: 1: 323430363a333334303a373030303a3a2f33362d3336203d3e20313339313339.roa (hash: zvRH+HDqvliXXIdWjNbLwD9LGWMiAjyuoh0tmg3Erc8=)
2: 3130332e3135322e3138362e302f32342d3234203d3e2034353338.roa (hash: hjMZAPj25rifMY/aXpuar4ljrWO+9vYryWGUkVjYTDg=)
3: 323430363a333334303a313030303a3a2f33362d3336203d3e20313339313339.roa (hash: h4mGUiNpYZm69q/o4Nt9VWgzDNZVcdRzU5IuWw9VVtU=)
4: 3130332e3135322e3138362e302f32332d3233203d3e20313339313339.roa (hash: qjCyivi0dxcfzMAmqMJUlGNdGpx1THcX6jE8xR7VxBI=)
5: 323430363a333334303a3a2f33362d3336203d3e2034353338.roa (hash: LDCeZckdOB3HNfyrblG/HUp2aEy4QfYHhIC/9aeRBsk=)
6: 323430363a333334303a343030303a3a2f33362d3336203d3e20313339313339.roa (hash: 8HnFFqnjIHJZkWlM0QDdPbdL83oIu9lm4vlp+eYmuzw=)
7: 323430363a333334303a3a2f33322d3332203d3e20313339313339.roa (hash: Y8zftJ45Dvevo2D7PvvADIABaUrY/sJOP040cgE1KVE=)
8: 323430363a333334303a363030303a3a2f33362d3336203d3e20313339313339.roa (hash: jbqqfi/egeAOL6DVld2ACO8m9pxSY6LZ4MiH2qtF6ug=)
9: 323430363a333334303a323030303a3a2f33362d3336203d3e20313339313339.roa (hash: ad+vPi3e/8acQcmHeQylpwQ95x3uDgPYwNvetYcyS8c=)
10: 3130332e3135322e3138372e302f32342d3234203d3e2034353338.roa (hash: o6lFD+f5dTtKS85vpNkoJjfT093vDss7vKbce+n9he8=)
11: 3130332e3135322e3138362e302f32332d3233203d3e2034353338.roa (hash: uXu75xzi7p2N4G52LvUInjsgT+4K+3ZfMKmO6D+zH9o=)
12: 323430363a333334303a353030303a3a2f33362d3336203d3e20313339313339.roa (hash: 5rfMn5eyEOjI7bM2Czawl9qh/Q2r3dk7Vnfnov19ExY=)
13: 323430363a333334303a313030303a3a2f33362d3336203d3e2034353338.roa (hash: KYM3ELbMCKp+6MUPgs/9MWB4zCPRVhg9ZZ/E+9boX90=)
14: 1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl (hash: 1++OGeCN5NEyXTBBlLE9Cf7iT63/o3NRpHRiuGsDL14=)
15: 323430363a333334303a333030303a3a2f33362d3336203d3e2034353338.roa (hash: KxqFA71jX/1SUTQx/ZIiBO0VMLglxVE7YKNkj5UtMa0=)
16: 323430363a333334303a333030303a3a2f33362d3336203d3e20313339313339.roa (hash: jCyBYSMp8ykpKE+LeC/9B1hTZ/yh1mvHQn0Z7VAq+x4=)
17: 3130332e3135322e3138362e302f32342d3234203d3e20313339313339.roa (hash: tCqkCgPu3CbJwypKqoPdvpwfBaPceEp0JmkZYHoK9dA=)
18: 323430363a333334303a3a2f33322d3332203d3e2034353338.roa (hash: RtH+EHEQat1TY8rFi6yt5vc0JFGVxnLwJqQpnImtx2g=)
19: 323430363a333334303a3a2f33362d3336203d3e20313339313339.roa (hash: Lst/83lDIO0N/N2Nq/2F8sv1uj1hMNrfV1g3Bwz6W5o=)
20: 3130332e3135322e3138372e302f32342d3234203d3e20313339313339.roa (hash: kCqfJNUXGhTl3zZ3d4DXFlUeQHWwnY2OvVpG1e96QlY=)
21: 323430363a333334303a323030303a3a2f33362d3336203d3e2034353338.roa (hash: CmBU2dVpvyOIsoMAXXmFLRqr0wKbUAQ+/Vctfk/YPDs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:16:b3:b6:6e:3f:95:c4:7b:95:cc:ac:3a:75:d6:3d:46:43:d4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260
Validity
Not Before: Apr 13 07:49:17 2026 GMT
Not After : Apr 14 10:32:17 2026 GMT
Subject: CN=81919A3DF2CD65FA9619BFF6E2DF4EE6401BA7C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:2b:0a:f3:e1:88:bf:b0:1f:69:44:c0:97:
41:c9:f8:d9:d9:43:77:50:80:10:3e:61:da:38:a3:
a5:3f:e1:19:1c:df:fd:d9:8c:1b:1f:c3:7b:fd:47:
74:33:51:42:57:b0:52:4b:50:18:a7:94:d1:a9:48:
e2:f5:46:2d:cd:4e:a5:0d:b2:16:ae:63:12:42:03:
6b:8a:d6:89:ae:b4:02:68:5c:af:e9:8e:45:96:5e:
05:89:52:f7:b0:39:be:7a:92:a4:02:b0:eb:52:48:
34:f0:b6:4c:86:b4:d8:62:03:15:9e:7b:25:f1:0a:
52:8e:9f:25:81:23:8c:bd:cf:ed:7a:90:25:85:37:
a2:f6:bd:81:2a:bc:22:d7:2f:f6:9c:8d:56:25:6e:
2b:7e:6d:0a:06:72:bf:77:fb:41:43:76:01:e0:11:
89:6f:a2:be:a2:72:96:ce:95:75:7a:47:01:9e:4f:
10:4b:6f:92:a9:eb:92:11:4a:e9:95:5c:db:60:67:
df:46:e2:e4:2e:1c:fd:be:5d:7b:23:50:02:e4:ac:
12:4b:8c:84:6f:d5:46:59:35:f0:d7:55:a2:55:2c:
dd:0d:42:29:c4:89:b8:3d:82:16:3e:79:8f:ce:08:
87:37:88:ab:2c:53:29:bb:7c:5d:3e:0f:61:c2:b1:
7f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:91:9A:3D:F2:CD:65:FA:96:19:BF:F6:E2:DF:4E:E6:40:1B:A7:C2
X509v3 Authority Key Identifier:
keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ae:6a:70:bc:6f:0e:a8:85:7a:27:2f:4b:26:90:51:3a:ea:
c3:cc:48:1a:90:f8:5a:df:ff:fb:a4:93:13:b1:0a:a6:c6:e0:
ad:5e:a7:71:5d:ae:22:c2:94:c0:36:bd:89:4e:17:70:ff:71:
4d:40:08:e2:e4:1e:50:c9:99:04:f7:0b:55:ee:31:de:2f:0c:
69:1a:11:b1:ad:a5:f4:b6:a2:0f:29:74:83:91:67:37:da:47:
2e:b0:aa:46:3f:d9:46:6b:a4:3a:a1:70:da:a8:4f:65:c7:82:
56:5b:4a:57:ab:52:af:0f:b0:97:0c:df:7a:30:cb:49:28:cf:
12:7c:6a:08:14:22:0f:4e:a3:0a:23:70:77:50:83:52:62:53:
38:e7:97:84:6b:34:13:9a:42:9b:73:4e:5b:96:9f:e5:50:29:
81:15:2c:7b:0d:9b:f2:95:44:76:a4:cc:37:24:50:b5:ef:41:
47:11:9b:03:c2:83:0e:59:ec:99:b1:09:d0:5a:67:ca:44:d6:
b9:05:dc:34:06:d8:08:52:fd:af:43:fa:53:ae:cb:62:13:46:
ed:bd:43:2c:53:0c:09:48:f8:0c:11:df:85:7a:81:c9:e0:7b:
65:48:8f:a5:1c:01:23:04:fc:e3:ed:ef:58:e7:46:5b:b0:00:
ab:ba:0d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:29:31 2026 by rpki-client