
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft
File: BE564B2EFF08B30078A1960732464840B104EF35.mft (raw, json)
Hash identifier: rMEzDL1GtEMqGjcTstjGcjRTY4h1q9rblqonvY7OpV0=
Subject key identifier: 44:E5:7C:91:E3:01:CC:CE:23:53:E2:39:E1:3A:B8:A1:22:E0:A7:46
Authority key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35
Certificate issuer: /CN=BE564B2EFF08B30078A1960732464840B104EF35
Certificate serial: 2C4339E6A2042BF7994DA2CD4FAE33E8752C80F2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft
Manifest number: EC
Signing time: Tue 14 Jul 2026 04:40:28 +0000
Manifest this update: Tue 14 Jul 2026 04:35:28 +0000
Manifest next update: Wed 15 Jul 2026 08:00:28 +0000
Files and hashes: 1: 3136302e33302e3135302e302f32332d3233203d3e20313531323737.roa (hash: SqYoFh9M/RF4hCcPqm6MB7F49di/2cutG0x9fForwa0=)
2: BE564B2EFF08B30078A1960732464840B104EF35.crl (hash: ZmvaMcK21n4YVKSkloWZpdpxJb4xgNEJJYKuuo+IVEE=)
3: 3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa (hash: YwKh5dq5C2YtmvyvhSiDqYWYBqwzrzASsjUiBDUCUE0=)
4: 3136302e33302e3135302e302f32342d3234203d3e20313531323737.roa (hash: Hz4dS18EKG3nO7kHSRjqfjz5kQRRG+x2194Q5ytjmb4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:43:39:e6:a2:04:2b:f7:99:4d:a2:cd:4f:ae:33:e8:75:2c:80:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE564B2EFF08B30078A1960732464840B104EF35
Validity
Not Before: Jul 14 04:35:28 2026 GMT
Not After : Jul 15 08:00:28 2026 GMT
Subject: CN=44E57C91E301CCCE2353E239E13AB8A122E0A746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:43:86:50:fa:fc:c9:5b:23:36:8d:ba:08:
71:23:73:d3:53:68:85:de:e6:dc:fa:c8:de:1e:ba:
05:e3:27:f9:e8:d0:de:da:7e:2e:61:45:12:ec:5b:
3c:af:cd:1e:8d:7f:c4:c3:a6:bd:30:12:fc:29:c5:
4a:39:fc:a2:35:83:75:2e:dd:7d:e7:0c:ba:59:65:
ad:2b:06:fe:96:9c:9a:10:5a:51:fa:ab:6e:24:2c:
39:7b:fb:8e:fe:cf:54:f5:3f:0a:c1:4f:20:9f:54:
82:dc:fb:51:a9:92:5a:c1:02:7b:22:b5:c1:7a:38:
66:8c:34:00:6c:5c:13:4c:2b:e8:4f:e0:8e:8c:08:
dd:08:97:61:9f:f0:a2:da:59:8d:52:c6:29:12:2a:
44:db:14:6f:d8:34:ed:5e:47:5a:53:d5:20:70:b8:
b0:03:cb:4d:6f:36:16:de:83:58:39:f6:13:e3:05:
81:51:36:61:7a:cf:94:ca:31:13:e9:1e:b0:f8:a3:
54:3c:db:42:13:39:d4:ba:6d:92:02:cb:f1:62:3e:
8d:f4:63:d9:1a:9e:73:11:29:44:c0:1f:bd:4a:62:
ca:b1:34:f1:8a:a9:4d:41:5c:4e:9d:e0:87:a1:68:
4b:f0:0f:15:1b:db:73:2c:6f:62:2c:c8:d8:40:e6:
bc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E5:7C:91:E3:01:CC:CE:23:53:E2:39:E1:3A:B8:A1:22:E0:A7:46
X509v3 Authority Key Identifier:
keyid:BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b3:f8:b7:e8:53:af:3c:0d:81:90:68:ae:20:3f:85:37:52:
4b:6c:e1:9a:96:73:1f:46:41:17:5d:b9:14:8d:b1:6b:64:20:
b4:f0:2c:57:f1:04:b5:5f:8b:52:c8:a2:e6:b3:64:8f:33:99:
c8:ec:e4:31:bd:fa:5e:f2:5a:6f:04:f4:94:1d:fb:10:3c:ab:
81:6d:50:dc:b5:79:b2:4e:73:c2:47:28:4d:1f:29:1f:92:f2:
45:f9:d0:af:de:58:65:65:e9:9a:cb:59:22:27:aa:0d:6d:7c:
6c:49:81:3e:9b:a4:0a:ac:9c:6a:64:f3:ca:76:27:72:29:71:
6c:23:58:b8:15:ed:81:4b:ad:d9:b3:64:76:fd:56:d3:11:13:
db:6b:c2:5b:bf:60:46:ed:d0:b9:8c:0f:50:ff:e7:7a:bc:a4:
85:a5:11:0a:09:8b:f7:0b:7b:1c:1b:e7:5c:4e:a1:1a:79:ca:
36:d4:4d:9f:9c:48:f9:c5:eb:9a:9b:73:11:52:5f:ed:13:85:
6b:fd:ea:53:55:7b:50:12:ee:9c:66:ae:7e:86:8b:93:70:2d:
52:f1:b1:b6:d1:b0:5c:3f:f6:fa:bb:6e:31:c0:dd:3e:dc:3f:
55:35:42:ce:01:78:e7:35:05:72:1e:13:48:2e:08:b4:82:15:
ca:51:98:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 00:15:39 2026 by rpki-client