
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
File: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft (raw, json)
Hash identifier: iYy/XB5OYf34F7q4M7ueDevkbgCmwlYrhaxFy1ALPgI=
Subject key identifier: E9:F8:0C:F8:BE:9A:6C:0C:1C:0B:A8:90:A1:E2:94:27:B4:55:AE:9F
Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
Certificate issuer: /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Certificate serial: 6CB0F46004B28174CAA4E903BD50A40543AB893A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
Manifest number: C0
Signing time: Thu 11 Jun 2026 20:39:23 +0000
Manifest this update: Thu 11 Jun 2026 20:34:23 +0000
Manifest next update: Fri 12 Jun 2026 22:45:23 +0000
Files and hashes: 1: 3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa (hash: pP2K3HiVYBHdGBjx/LhUqM1IgWlPl0rSVXLA0eShH2g=)
2: 3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa (hash: 1Ufsi2cApRq4VzMpVC5wUXBntzWTIoNYV52b6m40FTU=)
3: 3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa (hash: d4N+6+ZvyPWMnoQuXQvtFWn2iecqQr50dVgRsFkdfMk=)
4: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl (hash: U1NhB6DlUAHI8k/g8YBEocOq7a8hQH4cDbhrWNvzIKg=)
5: 3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa (hash: IgDPyqOj/L0PxUnz7eU6yhqxHUKS38LqOYL7vjB0wuA=)
6: 3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa (hash: 5JsD0wX1QDBSopdnoRNZCwKiwO2b9FDGs7UbU+U0hhI=)
7: 3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa (hash: VlVCVPXjjW4YexrI/H0GFGSpaR7DLmyFK6sA+2KWcH0=)
8: 3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa (hash: zKTHFw5A/5A4GJfDVGwpemfdwlWQX4xJwt4nMBMvrMw=)
9: 3130332e3131362e3134382e302f32342d3234203d3e203231383539.roa (hash: hb8LpnbbXDFD6nnVASx9otFeKHSuMrRCIYTSzaGK/QY=)
10: 3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa (hash: Pq91xvCrN3/5zWnvVJSEMqoONxXt9OWTFN9DsvUS+cs=)
11: 3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa (hash: GZ2WOW7JsZPc5s/Q2qJ2w1atwdfDkqEf0lhuZ8+9zHo=)
12: 3130332e3131362e3135312e302f32342d3332203d3e203138313836.roa (hash: t4rYVjYfVv+8FXJ3wpB9gzjdLdiETsT5N2UFAEaCOnM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:b0:f4:60:04:b2:81:74:ca:a4:e9:03:bd:50:a4:05:43:ab:89:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Validity
Not Before: Jun 11 20:34:23 2026 GMT
Not After : Jun 12 22:45:23 2026 GMT
Subject: CN=E9F80CF8BE9A6C0C1C0BA890A1E29427B455AE9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:0f:12:f1:8a:77:8b:7c:6c:1c:6f:84:25:
e6:3e:e5:ac:5b:d7:2e:00:9b:cd:cb:f6:84:7e:61:
6a:18:72:f1:d7:9c:8c:8a:52:31:93:d3:a9:fd:5b:
aa:e7:7a:8f:a9:22:7d:22:76:21:9a:fc:68:f9:d9:
96:9c:98:f4:60:b2:0a:fc:61:68:5e:4f:f5:a4:63:
43:5a:06:cd:d7:1a:77:00:de:42:f7:bd:4e:d6:40:
72:7b:35:56:63:3b:15:87:f5:d5:03:03:7d:6a:2a:
a7:06:fd:1d:bf:4a:0a:e0:ee:20:ae:07:cb:b8:18:
3f:06:aa:bd:d1:a9:75:5c:86:c2:f4:d9:fc:a8:6d:
01:7c:75:a1:70:4e:63:9a:38:6e:0e:cd:41:9b:7f:
d4:9a:5c:b4:de:0e:f0:06:46:3a:87:05:50:99:82:
4c:c2:5d:46:76:14:0a:aa:4f:c1:34:6f:f8:e8:b9:
34:1a:4d:bc:e1:d2:1f:2f:63:5f:b0:84:89:50:36:
26:d9:97:e5:f1:d4:2b:12:9d:bb:28:21:f1:5a:71:
47:e3:ec:dd:bf:1d:33:bb:a8:fb:94:a2:17:cb:ef:
2c:4e:04:89:9a:d8:6d:b2:47:38:12:86:a9:bd:07:
a0:f4:13:13:f0:a4:42:b1:e1:41:52:7f:ef:8d:0c:
50:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F8:0C:F8:BE:9A:6C:0C:1C:0B:A8:90:A1:E2:94:27:B4:55:AE:9F
X509v3 Authority Key Identifier:
keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:aa:0b:cf:a7:d6:05:15:14:46:0c:6a:2b:87:fa:fe:17:de:
2e:00:f5:d9:b8:69:09:d1:03:db:7a:e9:05:19:cd:c2:51:1f:
51:31:56:77:05:e5:fd:14:01:02:aa:c8:f1:6a:be:e1:0b:89:
e9:99:58:d7:9e:58:7e:47:85:5a:5c:5c:ce:ac:bf:85:34:98:
fa:19:0e:05:95:7f:80:d0:a6:be:0b:cf:46:bd:fa:bf:78:ab:
7d:12:4e:00:47:13:f7:24:37:30:20:8d:cd:d7:60:af:ae:b4:
1d:29:6e:98:23:3c:f8:80:ce:eb:35:75:da:ab:88:9e:99:85:
23:71:c5:74:aa:78:89:79:75:d3:d0:90:ef:a4:71:35:e0:5b:
20:0e:fc:b8:06:6e:d3:77:ca:13:fe:dc:e1:96:71:92:00:ff:
41:40:89:68:8e:54:76:f6:2e:96:fe:74:cb:b2:1a:ea:15:17:
37:ac:7d:54:3a:b7:36:d3:af:b0:71:59:86:b0:44:a3:b9:11:
e4:2b:a1:bc:69:c2:3c:e0:75:1a:cb:32:67:e9:7f:c1:c0:99:
98:30:64:91:9b:cf:94:90:65:19:ac:7b:85:94:de:fc:14:67:
44:e6:7e:ef:57:92:61:ec:f0:f9:51:48:67:6e:30:a7:7c:e7:
6e:94:53:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:46:55 2026 by rpki-client