
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft
File: B1B9429336A860467C71053DDEA0565EAE6E7309.mft (raw, json)
Hash identifier: vGyTuBOZlyqI2BmhvIFO4UJBnmNageDACuakn+q7W7M=
Subject key identifier: FC:67:9C:83:CC:E2:B6:D7:ED:16:B1:E5:D8:CF:8C:95:F8:F9:05:E6
Authority key identifier: B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09
Certificate issuer: /CN=B1B9429336A860467C71053DDEA0565EAE6E7309
Certificate serial: 3BDEBBAA8EBE54C63522AF5C7383FE34C3410974
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft
Manifest number: 7C
Signing time: Tue 14 Jul 2026 02:10:09 +0000
Manifest this update: Tue 14 Jul 2026 02:05:09 +0000
Manifest next update: Wed 15 Jul 2026 03:01:09 +0000
Files and hashes: 1: 3130332e3235302e3235322e302f32322d3232203d3e20313436383335.roa (hash: TcninXgld+/IYm/mkUB1iwiaVyhgV1ci7eLEV1ods3M=)
2: B1B9429336A860467C71053DDEA0565EAE6E7309.crl (hash: 3tuzaGEz4h2wheCm71O1GdODoQesiTjggG0mZJfBXc0=)
3: 323430373a643963303a3a2f33322d3332203d3e20313436383335.roa (hash: wqwKDkxoiSR0Ndr/C6yuBFJD2jd6jyNdMok0TyWmcjM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl
rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:de:bb:aa:8e:be:54:c6:35:22:af:5c:73:83:fe:34:c3:41:09:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1B9429336A860467C71053DDEA0565EAE6E7309
Validity
Not Before: Jul 14 02:05:09 2026 GMT
Not After : Jul 15 03:01:09 2026 GMT
Subject: CN=FC679C83CCE2B6D7ED16B1E5D8CF8C95F8F905E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:f7:82:fb:af:08:76:6e:4e:9f:41:aa:d1:
f7:b0:7b:27:e6:8e:83:12:ec:c1:0a:8b:40:9f:85:
14:c9:4b:0c:96:e7:01:d0:5d:05:13:a4:bd:57:ce:
46:21:6f:07:6e:a3:05:b4:bd:88:96:b8:19:15:ee:
67:7d:b9:fb:c7:6c:27:80:11:86:b5:a9:7f:2e:0d:
5a:83:9e:ab:cf:b0:f2:7f:ba:50:94:66:3d:26:4b:
26:b4:7b:f4:f3:ed:15:0a:a8:67:40:19:76:6e:9c:
d8:30:d8:9a:fe:60:6f:9f:f7:25:52:32:36:d5:2c:
38:aa:47:7f:8d:a6:89:c5:bc:48:07:67:12:12:e0:
22:ad:5e:4e:39:65:1c:7e:e2:43:3e:d4:45:08:bf:
54:7d:fc:66:ce:60:b3:b5:29:a0:f6:52:ab:fe:e5:
f1:6f:b1:f1:e4:8e:3c:11:92:08:87:a3:8f:6f:b3:
f9:92:6d:e6:29:f9:2a:d3:c0:a4:bf:2c:60:05:e1:
d7:23:d8:b4:62:f1:3c:49:0a:b3:20:15:ce:bf:1b:
79:14:61:45:67:8a:ff:de:e4:55:48:ae:2b:a5:6f:
e4:2d:83:5f:b5:f3:e1:50:31:17:5a:b7:42:51:ad:
06:ca:13:d3:fd:3a:77:62:12:47:92:29:c2:17:6a:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:67:9C:83:CC:E2:B6:D7:ED:16:B1:E5:D8:CF:8C:95:F8:F9:05:E6
X509v3 Authority Key Identifier:
keyid:B1:B9:42:93:36:A8:60:46:7C:71:05:3D:DE:A0:56:5E:AE:6E:73:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1B9429336A860467C71053DDEA0565EAE6E7309.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096266595270918147/0/B1B9429336A860467C71053DDEA0565EAE6E7309.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e3:61:5f:8d:0d:2d:ad:77:1d:e1:d6:ee:1e:b2:bd:6c:8f:
5c:34:65:fa:68:8c:30:87:a7:e3:8e:33:45:0c:60:97:b9:91:
bb:21:a4:ac:27:05:ae:34:59:b8:d3:d5:8c:24:94:ab:cf:bc:
34:26:bd:16:a0:a8:13:4e:44:a2:88:90:9d:6c:06:d1:73:80:
67:41:9f:ef:80:d6:10:2d:8a:7a:87:42:2d:ca:58:d1:4a:3d:
0b:d7:31:9e:4c:cf:c6:7a:bb:de:9b:6e:ef:63:d8:ea:f1:0e:
5c:cf:f4:20:04:49:e5:7c:fb:d0:5d:87:23:46:7a:3b:00:84:
d3:46:c8:c7:7d:61:69:47:23:06:a1:a2:c4:23:e7:d6:88:35:
d5:36:71:a8:6e:e9:ff:de:91:0d:60:3f:1b:d3:43:d1:02:7d:
e0:9a:63:79:a1:e5:2f:ed:76:72:6a:fa:8e:32:9c:77:18:53:
d7:4e:47:ce:7b:e8:bd:93:6a:a4:8a:e2:07:e3:95:a3:09:93:
b4:de:b8:b8:4f:3b:cf:a9:4f:8d:a1:a3:13:96:a4:aa:da:d3:
41:e2:d1:5f:83:f2:f6:55:91:23:9f:6e:e3:2f:1a:fb:24:31:
9e:3e:66:09:f3:a3:9a:b5:54:41:df:41:b5:d9:b9:c4:8b:19:
84:15:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:09:47 2026 by rpki-client