
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft
File: B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft (raw, json)
Hash identifier: 7DKXO7yom2yfvEG2fWeRXLoZrnguwWDLG/+2VC1C0V0=
Subject key identifier: 87:07:3C:BA:30:BF:0E:37:2E:6E:A0:B6:52:B6:29:D2:1F:48:07:81
Authority key identifier: B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA
Certificate issuer: /CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA
Certificate serial: 1B5DD5D3049DFCE6E33D5E8EF7965075A6B80CBA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft
Manifest number: 46
Signing time: Thu 11 Jun 2026 03:28:11 +0000
Manifest this update: Thu 11 Jun 2026 03:23:11 +0000
Manifest next update: Fri 12 Jun 2026 06:05:11 +0000
Files and hashes: 1: 3231302e31362e3138362e302f32332d3233203d3e2034383131.roa (hash: b4O2YO4xELxbphJVo2XTIR7dTO1KnPDV5e00+BSpHO8=)
2: B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl (hash: q6thJ2IdnpqtX40qrRoRtAfSyUxH+IuYZqanG6SGYJQ=)
3: 3231302e31362e3138302e302f32342d3234203d3e2034383132.roa (hash: pVbEirpbRHZqbSynsD8vPGMaGo+q4kutYI9/gkSkdY8=)
4: 3130332e32312e3134302e302f32322d3232203d3e2034383132.roa (hash: yl0VnVjOJBB11Ksw/l6MI8tE6HFSWJZk+mBrBZTIapM=)
5: 3231302e31362e3138382e302f32332d3233203d3e2034383131.roa (hash: I/skHLzMxhJEW53hMQb4kjDQldjO0bhyqUNU6juFZXk=)
6: 3130332e32312e3134302e302f32332d3233203d3e2034383131.roa (hash: tcwtXl101EjdJnvoeZCk6mNf34pYvQGTfA6kEOpTAGA=)
7: 3130332e32312e3134322e302f32332d3233203d3e2034383131.roa (hash: zeQy36951EhzMb9y4+nhGStpafM9i+ny55leHQjqlo4=)
8: 3231302e31362e3139302e302f32332d3233203d3e2034383131.roa (hash: 2XbC/CUrdrlSv7pBB2C4Ttv+wtm+9ZIR2uM6HjETEdI=)
9: 3231302e31362e3138352e302f32342d3234203d3e2034383132.roa (hash: bXqNYBH6dqp3XhjyABQOELGhYbAAx/VDEKU/yFMCeZM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl
rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 06:05:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:5d:d5:d3:04:9d:fc:e6:e3:3d:5e:8e:f7:96:50:75:a6:b8:0c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA
Validity
Not Before: Jun 11 03:23:11 2026 GMT
Not After : Jun 12 06:05:11 2026 GMT
Subject: CN=87073CBA30BF0E372E6EA0B652B629D21F480781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:69:16:45:5c:98:ea:41:b8:93:c0:c9:52:25:
c4:1e:3f:70:e4:d1:53:c6:80:b3:c5:29:6a:46:43:
dd:f5:77:59:ad:24:93:63:0c:26:56:0a:2c:7e:d2:
e9:a4:fe:6c:00:d6:aa:6f:6c:d6:36:59:7b:96:ab:
1f:e7:e6:40:99:16:bd:22:e2:dd:48:c0:23:ed:49:
1b:0e:55:9c:60:5a:e0:c0:6f:04:9a:84:f8:d8:22:
e0:eb:ba:75:ab:0d:71:a4:33:e7:da:22:63:f0:84:
c3:60:cd:f7:35:48:da:61:dc:43:db:d9:5a:f2:63:
53:b7:d1:0f:2e:2e:e4:f2:13:de:ea:e6:17:d6:e3:
16:a7:66:bf:39:bc:cd:ae:2a:41:8f:e8:d7:27:97:
79:eb:20:9e:72:c6:56:9c:70:92:de:f4:6a:6c:16:
61:78:5b:b0:8f:9c:a1:1d:5c:51:20:ce:6c:e0:86:
99:27:4f:0d:0a:76:ea:06:09:eb:ec:fc:15:ce:6d:
c4:18:a9:61:11:9d:7e:99:63:e9:f0:f2:54:3f:06:
83:bf:6d:7f:5c:a4:40:29:e6:ba:7d:96:ae:20:21:
0d:77:cb:66:5b:5b:e1:60:03:63:74:51:b2:14:8d:
bd:44:bf:0a:15:c9:6f:e1:c4:ae:fe:24:75:4e:2f:
76:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:07:3C:BA:30:BF:0E:37:2E:6E:A0:B6:52:B6:29:D2:1F:48:07:81
X509v3 Authority Key Identifier:
keyid:B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:67:7d:7b:dd:42:2a:8f:15:f9:44:1c:47:b0:23:1b:9c:28:
bc:8b:e9:1b:ea:6e:07:4b:05:bc:5f:70:40:50:88:6c:9b:95:
30:0d:7b:92:6b:7e:91:98:86:5d:cb:7b:4d:d6:38:96:db:3d:
91:dd:67:a2:9b:15:b4:0a:34:c3:0c:79:2d:14:7a:b8:75:75:
3b:8b:d3:29:e9:dd:e7:33:fe:de:83:6e:35:ea:1b:b0:36:83:
6c:90:25:e1:b9:42:d3:b1:d7:82:3d:3c:33:c5:0d:62:8b:cf:
36:f9:48:43:07:c0:ed:58:01:a4:42:2f:f4:76:ef:b6:91:19:
bd:3b:05:cb:a1:81:23:05:10:02:51:00:a1:2c:a0:6c:6f:ee:
87:47:6d:51:71:1d:bb:3c:7f:64:55:a4:55:53:d4:fd:ab:f9:
b2:c3:36:30:10:4a:60:e0:20:2d:92:e3:ad:cd:b5:fd:f2:b8:
64:08:da:ab:17:7c:26:93:6b:6c:c7:02:63:15:5e:54:35:0b:
05:99:37:ba:a1:58:b2:52:c5:c0:f5:10:35:a3:c8:41:ff:07:
9c:cc:ce:65:eb:16:42:81:50:af:5b:cb:14:a7:68:4e:ae:3c:
91:70:8d:39:4c:65:cb:7e:35:8e:c7:86:24:78:96:3c:13:75:
b3:55:80:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:15 2026 by rpki-client