
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
File: BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft (raw, json)
Hash identifier: /gw+gxcczu5273gLv7I/vjYkxPiW5JCouQMwowvcinY=
Subject key identifier: 9B:98:08:18:52:C1:2F:7B:39:C4:55:F6:A7:FA:85:5B:16:3C:46:22
Authority key identifier: BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
Certificate issuer: /CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Certificate serial: 789D7A550638E78A4758226242711DC5374AFC80
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
Manifest number: B5
Signing time: Fri 28 Aug 2026 06:48:12 +0000
Manifest this update: Fri 28 Aug 2026 06:43:12 +0000
Manifest next update: Mon 31 Aug 2026 15:15:12 +0000
Files and hashes: 1: 3130332e3130372e302e302f32322d3232203d3e203633353339.roa (hash: 6zTAgkmaPpXVKLTCOKQuSK7E1Hwzah+JQrIRvBH7yYY=)
2: 3130332e3130362e3235322e302f32342d3234203d3e203633353339.roa (hash: OjebkkyM3oRhbRKEa/ClMRTM5FTqpqHf57SkGQbfZE8=)
3: 3130332e3130352e3138342e302f32322d3232203d3e203633353339.roa (hash: vIZJyscaQGumtDa3wtU91Fi20DqtmjLyMeNAkiESD1w=)
4: 3130332e3130362e3235322e302f32322d3232203d3e203633353339.roa (hash: +T58P5mxobh7jbfRCXoFhi8Jj31pQ63DY42YYoVTo/g=)
5: 3130332e3130352e3138342e302f32342d3234203d3e203633353339.roa (hash: ynaQvDQ/GJCP5xnkwYrmbxMiDh24pFyJW7QCadD5pKk=)
6: 3130332e3130342e3235322e302f32342d3234203d3e203633353339.roa (hash: rhSJttFZU6Ofpv/g7R9Ct+5A+REhiRCtsmzIlI/SYOM=)
7: 3130332e3130352e3138322e302f32342d3234203d3e203633353339.roa (hash: 5dtBWCJKUt0qXEUR78d/nAXooGGIAc/Oiel8IgG1O1I=)
8: 3130332e3130362e33362e302f32322d3232203d3e203633353339.roa (hash: TfOhEbexXYJJvm89fhZ3yx6HmJ4i7wpiNwJhA/cKnVc=)
9: 3130332e3130352e3138302e302f32342d3234203d3e203633353339.roa (hash: Zflv93y84coCHuGBf1YXZDdqvktyydrU1e4SpQusyvE=)
10: 3130332e3130322e3231342e302f32342d3234203d3e203633353339.roa (hash: e2tFgUDndDZmuq4ZEV4P73soZ5eVG1yDkdZ2OLVKDLM=)
11: 3130332e3130352e302e302f32322d3232203d3e203633353339.roa (hash: 31zGxJhS2pTXJ1vb53+jYnyELBqiaVCB8H8eztCZm0A=)
12: 3130332e3130342e3235322e302f32322d3232203d3e203633353339.roa (hash: o+tGxD34udiiMnnHfOOlowCZ5/a8leLfBtmuXzRepFY=)
13: 3130332e3130322e3231332e302f32342d3234203d3e203633353339.roa (hash: lEk/emwpLd2KNPHcEzjkD8dtGpcwgFTdqo+fRWykTXI=)
14: BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl (hash: 1X1YKf/Cupx8vCR8J/EROii1yNmkBA8yQVZhgohP9LI=)
15: 3130332e3130352e3138372e302f32342d3234203d3e203633353339.roa (hash: 4RGNaPoLZcADL1NoS4OERenxrli/g6WqyrNzlkvhQSQ=)
16: 3130332e3130352e3138302e302f32322d3232203d3e203633353339.roa (hash: VflfPvnB4xs7QkcHeF9XZhM+eHcytgoNgRAfmO9MsXc=)
17: 3130332e3130352e3138332e302f32342d3234203d3e203633353339.roa (hash: YI8A4Du7yJglcT0lF0pk1o8eqRN7DwDPOjjYvDpez/w=)
18: 3130332e3130342e3235352e302f32342d3234203d3e203633353339.roa (hash: pULXnOTE7ZiNjqBceAXeh10s3iWkDJV1KfgXq9Slp+E=)
19: 3130332e3130362e3235352e302f32342d3234203d3e203633353339.roa (hash: GWNimImsWwSd4p1pU6UVEiTBxArj1+mRzoNaUAcCZv4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 15:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:9d:7a:55:06:38:e7:8a:47:58:22:62:42:71:1d:c5:37:4a:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Validity
Not Before: Aug 28 06:43:12 2026 GMT
Not After : Aug 31 15:15:12 2026 GMT
Subject: CN=9B98081852C12F7B39C455F6A7FA855B163C4622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:f1:34:68:a8:72:70:7b:3f:80:25:cf:6c:
6e:b1:4c:89:10:b7:b1:23:7f:ff:7b:3e:6b:0b:56:
fe:56:22:9e:75:5c:e8:3e:46:d6:bb:31:7a:e4:f8:
69:15:02:8d:7c:5f:18:ef:59:12:1d:47:79:ec:01:
b3:ae:13:91:df:a6:e8:b1:fd:ca:f9:f6:e9:02:8d:
e1:da:e3:b0:9d:a2:4c:91:59:14:20:cf:b5:37:91:
20:ef:aa:f3:0e:04:a8:11:05:92:a6:f3:f4:5f:04:
5d:bb:9d:d1:8f:85:18:d0:79:2b:6f:12:4b:cb:d9:
13:b5:d7:3f:a1:d4:f6:89:44:22:95:91:11:ee:1c:
fe:6b:12:24:5f:14:39:de:64:11:01:cf:b6:49:90:
1e:ff:b9:09:c0:ae:35:d3:b9:60:52:d2:0e:91:d2:
cf:87:bd:4d:e8:0e:5c:f7:47:36:ea:ff:c8:dc:9c:
de:d8:4c:ab:bb:fb:32:26:2a:f0:1e:4f:b1:22:4a:
fb:fb:e0:85:f6:b6:83:3c:bf:11:4b:e0:7d:af:85:
7e:4d:e2:90:b9:60:38:ff:74:49:2a:0f:73:a6:11:
51:e3:86:02:9c:c5:72:63:1c:88:9d:d8:7f:b8:f0:
0f:95:d7:c4:75:82:79:50:d5:ab:31:f8:d6:07:9f:
8f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:98:08:18:52:C1:2F:7B:39:C4:55:F6:A7:FA:85:5B:16:3C:46:22
X509v3 Authority Key Identifier:
keyid:BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7f:d1:bf:bc:cf:9f:48:6e:d7:ad:00:00:0b:f9:04:0a:ce:
6b:98:9c:b2:8a:1c:1f:70:38:50:a9:ae:cd:fe:08:4a:df:5f:
34:f4:37:68:c2:d3:b9:52:82:81:d6:5d:bf:39:d0:9e:ca:16:
e0:41:75:6b:6a:c1:8c:c8:2e:bb:f3:ac:e3:dd:99:5b:0e:ff:
d8:dc:33:0e:bb:aa:77:02:a6:07:e1:ec:c3:c6:92:85:27:87:
0e:47:c3:13:3a:8d:9a:af:db:5b:1d:2f:f8:ee:65:42:3b:e8:
ad:03:df:61:34:f5:2a:9e:20:4a:c6:b4:7e:c8:8e:20:76:07:
e5:8d:73:b7:4e:0a:e4:90:4c:bc:b4:83:0a:78:db:16:18:41:
67:86:c0:13:63:29:6a:95:65:ef:d1:2d:bb:36:16:78:fd:94:
f3:71:33:94:3b:4f:e0:7d:0c:06:77:18:e4:53:d9:a9:06:85:
a1:2e:7f:51:6f:46:a3:5f:c9:f1:0c:4e:28:2b:27:15:c4:9d:
09:c1:fc:76:58:a2:ad:a7:56:42:af:32:f2:b5:08:13:16:74:
e5:f7:46:b5:f1:af:0a:74:66:cc:0c:46:65:bb:23:ff:03:6b:
6b:91:d2:77:18:68:2d:16:68:57:cd:fc:87:d5:83:52:2c:2e:
6c:7d:66:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:07:12 2026 by rpki-client