
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
File: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft (raw, json)
Hash identifier: Z4lboeM3Yi3ZrP6os8cghBX89B41i3kOcYHHitMR1D4=
Subject key identifier: 08:4F:4C:A7:B2:F4:EC:79:91:7E:E9:C6:24:E9:3F:31:ED:C3:E9:51
Authority key identifier: 1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09
Certificate issuer: /CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09
Certificate serial: 48C24F1DE3AFEFB2C762487ED2FF100E17B81535
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
Manifest number: 23
Signing time: Fri 29 May 2026 07:52:43 +0000
Manifest this update: Fri 29 May 2026 07:47:43 +0000
Manifest next update: Sat 30 May 2026 10:29:43 +0000
Files and hashes: 1: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl (hash: EAPniZq36/YyrmCmDm8CW+P9G63Kmw0Hf0wpejew88Y=)
2: 3130332e37332e3131362e302f32322d3232203d3e203233363530.roa (hash: N6BZpHQs84IIbiebI1UWzRjDUYpAVV5g6fmxbbjciew=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl
rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 10:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c2:4f:1d:e3:af:ef:b2:c7:62:48:7e:d2:ff:10:0e:17:b8:15:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09
Validity
Not Before: May 29 07:47:43 2026 GMT
Not After : May 30 10:29:43 2026 GMT
Subject: CN=084F4CA7B2F4EC79917EE9C624E93F31EDC3E951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a8:2a:c5:2b:ab:b8:cc:60:5e:3c:91:04:b8:
28:af:14:61:db:6c:03:dd:fd:e9:5b:e8:d8:6c:9c:
c8:0f:0a:3e:fc:4d:04:39:98:c4:dd:b9:e4:7e:5a:
96:67:13:28:2f:05:e4:9c:4c:81:af:7f:7c:3b:b1:
5f:41:c5:a6:de:65:27:1f:aa:d9:f3:a1:b6:0e:54:
44:3b:53:8d:4d:4c:06:6f:8a:31:3b:56:a0:e8:7e:
07:3d:62:77:f9:dc:b5:2e:4d:3d:b5:33:8b:8a:04:
ba:73:87:da:c2:66:b3:9b:19:1a:c0:97:d9:0d:b7:
13:75:83:9b:f5:16:f6:12:e5:77:55:b9:2c:fa:52:
af:06:5d:07:6d:88:16:82:41:3e:e8:d5:19:44:f2:
91:27:43:cb:f5:db:3a:e9:5a:e9:c6:1c:9c:49:c2:
5c:9d:c5:fb:af:f6:74:d7:6a:89:85:bb:3d:8a:5c:
c1:d5:9f:5d:45:00:16:f3:22:56:7b:d1:ce:ed:d6:
03:cc:0b:3c:78:97:96:0e:bf:93:7e:4f:2b:61:0d:
b6:e0:05:d2:2b:34:be:32:9c:e1:9f:aa:d6:f3:64:
00:9b:d8:52:85:85:3c:e3:41:bf:04:0c:bc:95:89:
be:58:2a:b0:a0:80:85:84:3a:9c:a3:52:6b:e4:22:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4F:4C:A7:B2:F4:EC:79:91:7E:E9:C6:24:E9:3F:31:ED:C3:E9:51
X509v3 Authority Key Identifier:
keyid:1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:88:2b:55:49:8f:91:18:2b:b2:f1:28:5b:13:ab:cb:e5:b5:
dc:62:3e:2c:dd:66:0f:f7:af:41:2c:8a:86:68:fa:26:07:13:
97:cf:ca:b2:49:0d:55:43:89:dc:a2:08:f3:c0:54:01:d8:b9:
7a:58:71:96:f6:f9:3b:6a:28:54:b9:45:d2:ae:3e:82:54:f1:
8e:b5:2f:33:cc:66:37:e8:5b:f0:d4:c5:92:55:11:2a:54:61:
c2:44:8b:fa:bd:77:4a:46:c5:74:45:2c:f3:fe:22:31:a5:ea:
31:e4:cb:6a:e7:08:b8:f9:76:7e:50:db:33:6a:26:7b:02:ff:
62:bd:c5:b2:94:bd:9b:52:6e:f2:0b:4a:6f:10:1b:47:0d:7b:
0f:99:47:14:d1:90:c9:92:59:e6:92:df:f2:b6:0e:e4:59:63:
d7:18:ae:f0:73:f5:32:21:c5:9b:1b:b7:ec:f3:7e:8f:41:b1:
2a:c7:f0:4d:a7:53:a2:32:40:07:5f:67:53:97:17:a8:4d:c4:
1f:c3:16:5b:a6:97:ed:0e:27:4b:a0:1e:ac:34:ec:54:4e:6f:
a7:8c:ce:dc:20:42:00:e8:b0:b9:a2:85:8f:78:ea:1a:41:66:
08:c1:6c:76:db:e4:7f:ad:84:5e:27:71:2e:c7:72:7d:02:58:
4b:6f:77:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:46 2026 by rpki-client