
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.mft
File: B4E055792301140D1D1A5A462561EA2D919B364F.mft (raw, json)
Hash identifier: PmObqOERwGhlnlQb98S5AsmUyhV6+cPmbtuWEU/2iJ8=
Subject key identifier: 2F:25:F6:E1:C3:93:0A:9B:5E:13:BA:6E:60:CD:31:7F:73:1B:E0:E5
Authority key identifier: B4:E0:55:79:23:01:14:0D:1D:1A:5A:46:25:61:EA:2D:91:9B:36:4F
Certificate issuer: /CN=B4E055792301140D1D1A5A462561EA2D919B364F
Certificate serial: 2088A3D087F5D7D829664D9C6A9655F72024E880
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B4E055792301140D1D1A5A462561EA2D919B364F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.mft
Manifest number: A6
Signing time: Tue 06 Oct 2026 17:40:18 +0000
Manifest this update: Tue 06 Oct 2026 17:35:18 +0000
Manifest next update: Sat 10 Oct 2026 00:37:18 +0000
Files and hashes: 1: 34332e3234302e3133322e302f32322d3234203d3e203234313530.roa (hash: jVEJd6Stwsj4FgqTnZi4F5XiOZe2zj2W9PoBFNwMHNY=)
2: 323430313a373730303a3a2f33322d3438203d3e203234313530.roa (hash: A1bFyoXn+Qi+2HYDffyfZXtT/g0fgcHyY9I/jWV+9Gc=)
3: 3130332e352e3235322e302f32322d3232203d3e2030.roa (hash: 808eMujT6dDDTD5hcNXc9a/h4qRsQr7ZWu+330oqHKM=)
4: 323430313a313230303a3a2f33322d3438203d3e203234313530.roa (hash: 2+lzdXkRiCcp6Xe0ez+nXFxyOhziIUqa2UxIndCZJxc=)
5: B4E055792301140D1D1A5A462561EA2D919B364F.crl (hash: CKHcB2NRtSvjgk2p1CDUayHjIWDv7dSI+ArbXYBHVhI=)
6: 3138302e3232322e3232342e302f31392d3139203d3e2030.roa (hash: vjmIOvhTHPqGB9SEcbONpbKJUnTcCeAfQoCta91pN8E=)
7: 3130332e34312e3136302e302f32322d3232203d3e2030.roa (hash: 79bzDErVxKW8cSzUSLhYySUZ1UCRsino04OgI92wp/s=)
8: 34332e3235302e32382e302f32322d3232203d3e2030.roa (hash: Dwg0AMc8vqTt2/APQLB8BZVnqH8sUz6MYb9gl8qRr6w=)
9: 36302e3235352e302e302f31362d3234203d3e203234313530.roa (hash: YqktsVTCEGNig6nSEXxQ2axz42D3/TI1pVKtJV6iakg=)
10: 36302e3235352e302e302f31362d3136203d3e2034383337.roa (hash: hVqEpWChokz50Ic9m0j0ZGweJb20l6nJdkckYTZtAu4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B4E055792301140D1D1A5A462561EA2D919B364F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 00:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:88:a3:d0:87:f5:d7:d8:29:66:4d:9c:6a:96:55:f7:20:24:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4E055792301140D1D1A5A462561EA2D919B364F
Validity
Not Before: Oct 6 17:35:18 2026 GMT
Not After : Oct 10 00:37:18 2026 GMT
Subject: CN=2F25F6E1C3930A9B5E13BA6E60CD317F731BE0E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:b0:fa:f5:f6:82:81:70:be:97:6c:5c:38:
1a:69:c0:b3:c2:a2:72:6c:5b:4f:2c:73:ad:9a:b4:
23:65:8b:bc:f9:d4:32:0f:3e:5c:5c:07:1d:23:ca:
de:6b:a3:bd:8c:19:e8:90:cd:15:d6:a5:48:e4:74:
18:a6:81:ac:93:c7:39:76:3f:90:76:0f:25:00:f2:
c0:fa:d3:be:4f:d9:ac:91:b2:7d:57:48:fc:cc:50:
f6:34:6f:20:39:dc:93:06:1f:a7:c4:f2:c8:36:1d:
d1:63:22:cc:05:fe:01:6d:a8:fe:6e:91:3a:75:45:
27:41:4d:bc:05:50:e0:48:40:80:fc:1b:21:1e:55:
73:9f:e2:56:00:f0:b5:4e:53:a8:13:29:d3:d2:eb:
4e:07:b9:c5:5e:86:84:17:b4:81:6d:93:06:6a:93:
8d:d2:22:73:00:cc:80:a9:47:24:73:78:fd:d6:75:
b2:2d:be:ae:25:a2:82:47:33:9f:75:02:6f:43:44:
51:c3:3a:6c:3e:6f:9c:93:01:47:a7:39:28:d1:4f:
fc:44:15:c8:50:91:5a:d6:17:85:ab:a3:ac:5c:a6:
35:70:fb:18:96:21:73:a7:55:d7:55:db:3e:41:ea:
ac:83:2b:db:b0:b0:21:fd:f3:a8:84:f1:3a:f3:8c:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:25:F6:E1:C3:93:0A:9B:5E:13:BA:6E:60:CD:31:7F:73:1B:E0:E5
X509v3 Authority Key Identifier:
keyid:B4:E0:55:79:23:01:14:0D:1D:1A:5A:46:25:61:EA:2D:91:9B:36:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B4E055792301140D1D1A5A462561EA2D919B364F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:c8:ac:60:5f:b6:09:1b:2a:a6:c5:00:61:3b:6e:5a:59:5e:
f2:56:70:05:77:65:34:15:e2:74:65:61:18:65:4e:2a:c9:9d:
01:25:8b:fd:94:c0:81:98:df:af:f5:4b:15:dd:c9:b9:a5:a2:
41:c5:dc:bf:dc:05:34:4e:d5:22:bc:92:80:a3:e5:5d:e7:c2:
86:9c:e2:f2:d2:1c:7a:88:f5:6e:76:97:0d:ee:bd:a7:4f:01:
57:41:80:b5:f7:b7:1d:45:31:4a:49:ad:fb:f5:50:25:b9:18:
56:0d:a8:e1:91:62:64:39:2b:7c:10:97:27:94:1a:03:4e:fc:
43:e1:c6:44:97:50:a6:39:64:a7:63:63:57:7c:43:ac:80:d4:
cd:84:d2:6c:a6:3a:5a:31:71:ec:7a:ab:3e:ec:f8:9b:56:98:
09:88:d3:29:24:14:dc:ec:9c:40:13:52:f5:20:b4:bb:e9:af:
d6:5b:f9:a8:bb:7d:ba:45:b3:72:08:9b:ae:30:d1:63:4f:e0:
8a:c2:14:dc:7f:f5:45:4c:cf:c0:af:fe:6a:3a:d4:7e:a0:8a:
fc:24:ff:4e:8a:91:ec:8d:7f:09:e6:7e:d4:46:aa:41:71:f1:
b7:ac:f9:e9:b4:3e:ef:72:10:b0:64:a8:7a:a7:5c:a7:f2:67:
a2:7b:ab:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:55:37 2026 by rpki-client