
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft
File: BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft (raw, json)
Hash identifier: dlpkvtcXgulWP5Li49kmDFS0mLu3ZSirHUHV5CwYlSo=
Subject key identifier: 91:4F:69:B8:95:7F:2E:99:C6:D7:1E:13:EA:47:F7:CD:95:92:32:37
Authority key identifier: BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E
Certificate issuer: /CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E
Certificate serial: 500CE007A5835A68834DB8342D79E35186E5CFD9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft
Manifest number: C6
Signing time: Sun 04 Oct 2026 21:33:16 +0000
Manifest this update: Sun 04 Oct 2026 21:28:16 +0000
Manifest next update: Thu 08 Oct 2026 00:54:16 +0000
Files and hashes: 1: 34352e3131322e3233362e302f32322d3232203d3e2030.roa (hash: 79syriVhn4xwLEus8js+X0J+/iXzcPB/T/pLWwKsJIA=)
2: 323430353a653034303a3a2f33322d3332203d3e2030.roa (hash: DKLyV2KtLLJej+jvamj+qWgUgiE4opa5BOdT4u0VoM4=)
3: 3130332e3131362e37362e302f32322d3232203d3e2030.roa (hash: IDv+HZXXzEWHWmfSMhOY3RcTrRAQuK39NAu6AzmFTUE=)
4: BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl (hash: tzNCsqYjunti5ZopDrisdkWhvZdva9UGCv7r4u4pjAw=)
5: 3130332e35322e3130342e302f32322d3232203d3e2030.roa (hash: amnUeudqHKhFal12dB15vFvsAAj6H5215eeQCVL2GRo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl
rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 00:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:0c:e0:07:a5:83:5a:68:83:4d:b8:34:2d:79:e3:51:86:e5:cf:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC0038FB81B8F669133DF399272C7BEEBC78A04E
Validity
Not Before: Oct 4 21:28:16 2026 GMT
Not After : Oct 8 00:54:16 2026 GMT
Subject: CN=914F69B8957F2E99C6D71E13EA47F7CD95923237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:68:f3:59:52:67:1c:6c:98:24:25:85:58:
72:9b:5d:5d:97:70:cc:da:a2:58:0d:6b:e6:ba:14:
25:45:f9:f6:41:72:38:e0:d0:df:6e:6c:06:50:ef:
5f:33:a5:80:9f:ef:00:92:ee:17:3c:2f:68:e9:66:
3a:70:7e:e4:66:64:aa:1c:fa:6a:93:15:28:00:d8:
da:52:7b:de:0a:62:b8:eb:74:bd:c4:af:49:33:42:
8d:9e:1a:5e:eb:16:82:60:d9:c2:24:57:77:f0:60:
f7:9f:76:41:ce:04:7a:81:9f:41:22:cf:de:01:b6:
7c:f1:0f:6e:14:e8:a8:09:d1:bc:8d:3d:5c:c2:00:
75:b1:e4:80:a0:6b:e3:94:31:69:a6:98:b2:b5:9d:
5a:7f:08:65:bd:5b:aa:7f:ed:ed:71:01:c0:79:3c:
df:3c:72:cb:a0:d9:78:20:b4:cc:bd:3b:30:83:30:
4e:dc:9c:8f:e2:a0:8c:26:eb:75:f1:aa:25:60:1a:
d3:cf:8d:b6:c2:df:44:24:d6:6c:68:76:73:d6:2d:
d5:3b:d3:2e:f0:54:10:27:b7:18:f0:f7:cf:6b:ac:
3a:c2:3a:8c:c3:cf:2f:d1:14:25:7c:9a:94:e9:df:
a7:07:20:bf:92:77:b2:13:3f:a8:13:6e:f7:e8:8d:
91:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4F:69:B8:95:7F:2E:99:C6:D7:1E:13:EA:47:F7:CD:95:92:32:37
X509v3 Authority Key Identifier:
keyid:BC:00:38:FB:81:B8:F6:69:13:3D:F3:99:27:2C:7B:EE:BC:78:A0:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC0038FB81B8F669133DF399272C7BEEBC78A04E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097368392639184898/0/BC0038FB81B8F669133DF399272C7BEEBC78A04E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:1b:62:76:6c:f3:b4:32:25:12:54:2c:bf:59:1a:4c:ea:c0:
e2:77:e2:95:1a:a1:c7:ba:bf:7f:6b:38:dc:f6:52:6b:38:d6:
47:f0:48:01:06:a5:d9:d6:63:b6:e0:38:56:a9:b7:e0:8b:73:
93:57:1d:1a:1e:0d:2f:5f:ad:39:94:bf:ad:1a:91:bd:11:ce:
c7:04:e6:72:36:42:9f:ac:ea:da:87:c9:1f:68:c7:38:19:75:
fb:8f:c2:10:da:60:52:e8:7b:34:aa:80:1a:2f:76:62:4b:e4:
ac:2c:89:8f:75:15:ce:b3:d3:1f:a8:42:ff:78:ae:37:93:21:
2e:a4:17:eb:11:9b:5f:f3:13:fd:a6:ac:6d:5e:4c:7f:39:3b:
5b:a6:4a:bc:0a:11:28:d0:31:13:d7:a7:1e:2b:b4:cd:89:97:
d3:3e:f5:dc:9a:3a:82:06:4e:28:ca:5e:00:77:47:d3:6d:68:
fc:d9:15:19:a1:1e:e1:81:7d:f4:bb:06:72:9d:ba:68:19:fd:
e5:69:83:1a:1d:c9:39:22:b2:e9:4f:bd:26:e4:63:ac:4c:91:
4b:59:80:30:49:33:75:d4:27:5d:db:f9:42:ff:f4:c8:aa:a2:
36:85:a8:a6:90:fe:ca:f7:80:c9:f5:ff:f4:8d:bf:90:77:b2:
8b:5a:23:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:12:29 2026 by rpki-client