
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft
File: B632502E8D6D2369C51A2346CBA569E60257BDC7.mft (raw, json)
Hash identifier: QxK4pQXV+QYVu5ezAUQkeMyLI+tcz7N4pi4wNd/vCQU=
Subject key identifier: 6B:D8:E5:13:71:C6:CC:9F:97:7E:A4:75:0F:6D:05:07:80:A8:DB:08
Authority key identifier: B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7
Certificate issuer: /CN=B632502E8D6D2369C51A2346CBA569E60257BDC7
Certificate serial: 486644A4D99500C522E7EA910A581C7648F815CF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft
Manifest number: 4B
Signing time: Thu 11 Jun 2026 23:54:34 +0000
Manifest this update: Thu 11 Jun 2026 23:49:34 +0000
Manifest next update: Sat 13 Jun 2026 03:49:34 +0000
Files and hashes: 1: 3130332e3130312e3138302e302f32322d3332203d3e20313337363937.roa (hash: DyYzPlLrqkBaVCuPGLHoXQducvBZJJk5MiJRqpCJOCk=)
2: 3130332e3130312e3138302e302f32322d3332203d3e203536303436.roa (hash: VuVh96LZ9ENVQD/HGtz9Sl/s+j7OTeDSyuCpjWemmUw=)
3: 3130332e37382e3232382e302f32322d3332203d3e2034383337.roa (hash: 61L5aR5bgll/4iVZjJp7bD1aBZNc1/iMX2m/DXeH6tQ=)
4: B632502E8D6D2369C51A2346CBA569E60257BDC7.crl (hash: jCWybODHc09/RPNYAFLUTzEg9m5zmFaSKvZxw6IQHzA=)
5: 3130332e37382e3232382e302f32322d3332203d3e203536303436.roa (hash: +pGX+4RF/lOQKxZj6NDh0Y4S1YBl+3XFNef0tyQCdFY=)
6: 3130332e37382e3232382e302f32322d3332203d3e20313337363937.roa (hash: bt3z6UAXgFoqUQwlcBAwdfCZL7ZO5stc9zJoa9wZ/8M=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl
rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:66:44:a4:d9:95:00:c5:22:e7:ea:91:0a:58:1c:76:48:f8:15:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B632502E8D6D2369C51A2346CBA569E60257BDC7
Validity
Not Before: Jun 11 23:49:34 2026 GMT
Not After : Jun 13 03:49:34 2026 GMT
Subject: CN=6BD8E51371C6CC9F977EA4750F6D050780A8DB08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0b:65:7e:cf:19:58:30:0f:cd:d2:e3:9c:ee:
ef:f2:8e:7d:e9:21:6f:9d:cc:94:8c:c7:91:fe:07:
83:35:db:b3:a7:89:88:82:b1:bf:71:3b:0a:8a:4d:
18:37:08:34:7a:f6:fb:b4:a1:03:4a:79:91:28:15:
93:d6:52:c9:28:24:07:41:11:6b:97:bd:b4:ee:1e:
d4:83:72:41:e6:e4:11:ad:95:d1:cc:ab:81:74:f5:
dc:b5:45:80:13:2a:5b:dc:c4:26:26:4e:30:6b:90:
10:01:fb:63:0e:1c:b6:cb:b3:60:f5:cc:60:6b:4b:
72:12:3c:02:d0:fa:e6:8f:a4:9d:97:63:9b:1b:80:
c1:ae:52:7e:c9:d7:23:be:92:d6:e6:be:ae:2f:45:
10:3f:2a:40:d5:1b:06:08:37:da:38:82:7e:7d:37:
24:18:32:7a:32:d5:01:b0:83:cf:07:cf:90:3f:e8:
9e:67:2b:63:d3:9f:8d:67:5b:c6:52:da:5e:17:68:
08:51:5a:60:3d:0a:b7:21:1b:23:54:a9:cb:bc:aa:
cd:71:64:f0:84:be:53:13:15:87:ab:28:4d:b7:4d:
13:3b:ad:39:a1:b5:3b:cf:24:9f:e7:97:4d:b8:26:
1b:ff:2a:3b:7d:dd:c7:56:e4:dc:6b:73:4b:9a:9a:
b1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D8:E5:13:71:C6:CC:9F:97:7E:A4:75:0F:6D:05:07:80:A8:DB:08
X509v3 Authority Key Identifier:
keyid:B6:32:50:2E:8D:6D:23:69:C5:1A:23:46:CB:A5:69:E6:02:57:BD:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B632502E8D6D2369C51A2346CBA569E60257BDC7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097515813931319299/0/B632502E8D6D2369C51A2346CBA569E60257BDC7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:af:eb:3a:4f:93:54:2c:3f:cd:d8:a5:71:80:97:7a:bd:78:
e4:36:b2:f5:dd:27:83:b7:7a:a3:d0:5b:a2:93:8b:6a:26:5a:
8b:fb:b2:f0:42:b7:fd:52:65:f7:4c:00:50:10:93:c2:34:0d:
d1:f9:9d:69:c4:e8:43:b0:e6:b9:85:7f:c9:d7:56:ca:c3:87:
9b:48:a4:19:50:54:da:54:8e:51:7a:8a:48:1c:cc:b2:32:13:
ae:b0:75:2c:7a:94:db:83:07:a6:3c:ff:f3:d1:73:0c:b3:18:
a4:46:08:f7:ee:fc:29:93:65:5e:96:66:83:6e:e0:a4:14:27:
43:b1:83:af:2a:c7:94:f3:7e:60:25:67:7e:83:ae:6e:e9:36:
f6:e7:50:15:bc:f8:5e:b3:32:97:0c:b8:4c:40:2f:0e:97:d6:
5c:3c:9b:2a:df:38:14:20:7b:7d:cb:0f:92:2b:70:6a:11:15:
8b:18:66:3b:c2:cd:d7:d4:d5:26:8b:8b:fd:1e:38:46:ff:eb:
b2:fa:24:bd:e5:ad:95:43:30:d9:28:a0:58:b4:2d:71:d2:2a:
56:87:db:ee:e4:ea:6b:66:01:93:0f:78:0c:64:1c:7a:24:e1:
e3:ca:d8:5c:17:36:66:cd:4c:0d:e6:c1:53:e4:b2:85:e1:60:
01:1d:73:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:55:47 2026 by rpki-client