
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
File: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft (raw, json)
Hash identifier: b46P0LWuHMa+9eyE8hgDU89Ob6jnMvxI3I2pR1myTF0=
Subject key identifier: B8:7A:18:BB:CB:0F:8F:62:74:89:AB:BF:C9:8E:C3:9F:F5:67:3A:AC
Authority key identifier: 1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09
Certificate issuer: /CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09
Certificate serial: 37559520A7FC2B25F22FDD6937FA563D27EBAE12
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
Manifest number: 60
Signing time: Tue 14 Jul 2026 06:15:36 +0000
Manifest this update: Tue 14 Jul 2026 06:10:36 +0000
Manifest next update: Wed 15 Jul 2026 07:38:36 +0000
Files and hashes: 1: 3130332e37332e3131362e302f32322d3232203d3e203233363530.roa (hash: N6BZpHQs84IIbiebI1UWzRjDUYpAVV5g6fmxbbjciew=)
2: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl (hash: 5KtEN4vzKbQFTrrJ/p5iWuinasD5IcM4aUmIna36Q3U=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl
rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 07:38:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:55:95:20:a7:fc:2b:25:f2:2f:dd:69:37:fa:56:3d:27:eb:ae:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09
Validity
Not Before: Jul 14 06:10:36 2026 GMT
Not After : Jul 15 07:38:36 2026 GMT
Subject: CN=B87A18BBCB0F8F627489ABBFC98EC39FF5673AAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:35:5f:59:93:ff:87:cc:6a:75:d1:7b:dd:27:
44:01:6d:ca:bf:17:8c:0e:7d:cd:1b:22:84:c1:2a:
75:01:aa:dc:72:88:16:ee:8e:ed:35:46:3b:75:9d:
a8:17:0a:91:14:3d:17:08:46:bd:ce:a2:08:a1:65:
3e:2f:f4:58:ea:d0:07:53:47:1f:a1:4e:9b:67:29:
ec:1a:88:b0:87:52:e5:b1:8e:1a:12:2c:23:ab:ff:
49:a5:d1:1f:bd:53:e8:d7:a3:da:91:e6:13:b1:02:
be:80:13:51:df:85:26:27:4e:ca:a2:a6:0a:75:52:
0d:9f:ee:99:74:a5:e8:d0:da:00:7a:7e:b8:15:44:
e1:ef:96:72:b0:e1:a5:ac:9a:7c:e0:c8:0c:85:12:
a0:1e:fa:92:f3:7d:e4:90:b0:d0:b3:bd:0f:e9:f4:
8e:5c:e8:b9:ad:66:f4:22:29:db:97:d8:ef:b5:4e:
4f:e8:fd:91:21:9b:90:8f:81:d9:67:ad:17:7b:cb:
fb:ad:a0:79:fc:7a:d7:66:19:69:0e:42:10:1d:08:
07:d2:f2:9a:89:b3:c7:57:c2:51:68:44:22:d2:a4:
b1:75:57:da:eb:68:34:24:d9:34:33:47:89:4d:89:
b8:6c:02:a9:2e:a0:5c:81:00:77:df:fa:f2:c0:38:
6f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7A:18:BB:CB:0F:8F:62:74:89:AB:BF:C9:8E:C3:9F:F5:67:3A:AC
X509v3 Authority Key Identifier:
keyid:1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:24:17:d9:9d:28:00:a7:92:4c:9f:58:ce:4f:6e:ba:bc:eb:
85:aa:49:29:cc:54:d1:83:8f:e6:60:d1:a1:76:2a:01:50:e0:
34:89:14:21:c1:02:ac:79:e9:c4:b6:66:1a:6f:6c:57:ce:0f:
9f:be:0e:4e:95:23:72:e6:86:36:58:5a:19:de:89:67:db:0d:
60:39:3d:bf:ad:2e:7a:31:9c:cf:66:d7:61:e4:30:7d:c7:c1:
aa:97:2e:c4:1e:f2:50:5f:25:1b:35:aa:20:c4:ca:68:70:39:
29:05:a8:78:da:a3:13:11:3b:68:b9:92:f4:46:a7:bc:6c:c8:
9e:57:d7:40:ac:41:04:7a:07:50:92:02:b1:4f:37:00:6d:1d:
c9:9f:3c:d8:6c:82:d2:ea:75:f0:31:9c:cf:84:21:9f:8b:24:
84:6b:ea:de:65:8c:4e:d8:91:f6:4f:02:9c:71:ac:71:cb:63:
2c:80:35:00:1f:90:5f:1a:0a:81:e0:3d:23:1d:07:01:d4:46:
d6:db:be:f8:ac:60:91:f8:37:c5:6a:30:67:36:9a:c9:7e:6f:
14:62:33:6c:ef:c7:1e:df:17:f5:5b:92:c3:69:1f:53:bf:90:
24:9c:48:d0:27:44:c0:23:42:df:ff:68:3e:eb:09:a7:ec:e3:
ab:c4:6d:7b
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUN1WVIKf8KyXyL91pN/pWPSfrrhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIyQzc3MTMwRDdBQURBMTg0NkZGRUZFNDE2RjUwNTk5
RjdFRUQwOTAeFw0yNjA3MTQwNjEwMzZaFw0yNjA3MTUwNzM4MzZaMDMxMTAvBgNV
BAMTKEI4N0ExOEJCQ0IwRjhGNjI3NDg5QUJCRkM5OEVDMzlGRjU2NzNBQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyNV9Zk/+HzGp10XvdJ0QBbcq/
F4wOfc0bIoTBKnUBqtxyiBbuju01Rjt1nagXCpEUPRcIRr3OogihZT4v9Fjq0AdT
Rx+hTptnKewaiLCHUuWxjhoSLCOr/0ml0R+9U+jXo9qR5hOxAr6AE1HfhSYnTsqi
pgp1Ug2f7pl0pejQ2gB6frgVROHvlnKw4aWsmnzgyAyFEqAe+pLzfeSQsNCzvQ/p
9I5c6LmtZvQiKduX2O+1Tk/o/ZEhm5CPgdlnrRd7y/utoHn8etdmGWkOQhAdCAfS
8pqJs8dXwlFoRCLSpLF1V9rraDQk2TQzR4lNibhsAqkuoFyBAHff+vLAOG/XAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUuHoYu8sPj2J0iau/yY7Dn/VnOqwwHwYDVR0j
BBgwFoAUGyx3Ew16raGEb/7+QW9QWZ9+7QkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NTAwODYyMzM2MjI0NDYxNS8wLzFCMkM3NzEzMEQ3QUFEQTE4NDZGRkVGRTQxNkY1
MDU5OUY3RUVEMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMUIyQzc3MTMwRDdBQURBMTg0NkZGRUZFNDE2RjUwNTk5RjdFRUQwOS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDUwMDg2MjMzNjIyNDQ2MTUvMC8xQjJDNzcxMzBEN0FB
REExODQ2RkZFRkU0MTZGNTA1OTlGN0VFRDA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKiQX2Z0oAKeS
TJ9Yzk9uurzrhapJKcxU0YOP5mDRoXYqAVDgNIkUIcECrHnpxLZmGm9sV84Pn74O
TpUjcuaGNlhaGd6JZ9sNYDk9v60uejGcz2bXYeQwfcfBqpcuxB7yUF8lGzWqIMTK
aHA5KQWoeNqjExE7aLmS9EanvGzInlfXQKxBBHoHUJICsU83AG0dyZ882GyC0up1
8DGcz4Qhn4skhGvq3mWMTtiR9k8CnHGscctjLIA1AB+QXxoKgeA9Ix0HAdRG1tu+
+Kxgkfg3xWowZzaayX5vFGIzbO/HHt8X9VuSw2kfU7+QJJxI0CdEwCNC3/9oPusJ
p+zjq8Rtew==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:12:56 2026 by rpki-client