
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.mft
File: B4E055792301140D1D1A5A462561EA2D919B364F.mft (raw, json)
Hash identifier: r94Ain2FkdzkqojHbEHnSrNlnwyOeD3bQDpobVJw54E=
Subject key identifier: 8E:A1:25:D2:8A:0F:CD:9A:5B:8C:F4:91:C4:BF:7E:79:0B:88:F8:F7
Authority key identifier: B4:E0:55:79:23:01:14:0D:1D:1A:5A:46:25:61:EA:2D:91:9B:36:4F
Certificate issuer: /CN=B4E055792301140D1D1A5A462561EA2D919B364F
Certificate serial: 61AC85078B432C531285358D07A165A77B649D24
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B4E055792301140D1D1A5A462561EA2D919B364F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.mft
Manifest number: 4E
Signing time: Tue 07 Jul 2026 05:23:29 +0000
Manifest this update: Tue 07 Jul 2026 05:18:29 +0000
Manifest next update: Wed 08 Jul 2026 09:07:29 +0000
Files and hashes: 1: 36302e3235352e302e302f31362d3234203d3e203234313530.roa (hash: YqktsVTCEGNig6nSEXxQ2axz42D3/TI1pVKtJV6iakg=)
2: 323430313a373730303a3a2f33322d3438203d3e203234313530.roa (hash: A1bFyoXn+Qi+2HYDffyfZXtT/g0fgcHyY9I/jWV+9Gc=)
3: 3130332e352e3235322e302f32322d3232203d3e2030.roa (hash: 808eMujT6dDDTD5hcNXc9a/h4qRsQr7ZWu+330oqHKM=)
4: 3130332e34312e3136302e302f32322d3232203d3e2030.roa (hash: 79bzDErVxKW8cSzUSLhYySUZ1UCRsino04OgI92wp/s=)
5: 34332e3235302e32382e302f32322d3232203d3e2030.roa (hash: Dwg0AMc8vqTt2/APQLB8BZVnqH8sUz6MYb9gl8qRr6w=)
6: 36302e3235352e302e302f31362d3136203d3e2034383337.roa (hash: hVqEpWChokz50Ic9m0j0ZGweJb20l6nJdkckYTZtAu4=)
7: B4E055792301140D1D1A5A462561EA2D919B364F.crl (hash: 4eRissdZ6rNNWOp0IUO38WqmQs5/6yu4i4tnl/MIfQI=)
8: 3138302e3232322e3232342e302f31392d3139203d3e2030.roa (hash: vjmIOvhTHPqGB9SEcbONpbKJUnTcCeAfQoCta91pN8E=)
9: 34332e3234302e3133322e302f32322d3234203d3e203234313530.roa (hash: jVEJd6Stwsj4FgqTnZi4F5XiOZe2zj2W9PoBFNwMHNY=)
10: 323430313a313230303a3a2f33322d3438203d3e203234313530.roa (hash: 2+lzdXkRiCcp6Xe0ez+nXFxyOhziIUqa2UxIndCZJxc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B4E055792301140D1D1A5A462561EA2D919B364F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 07:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:ac:85:07:8b:43:2c:53:12:85:35:8d:07:a1:65:a7:7b:64:9d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4E055792301140D1D1A5A462561EA2D919B364F
Validity
Not Before: Jul 7 05:18:29 2026 GMT
Not After : Jul 8 09:07:29 2026 GMT
Subject: CN=8EA125D28A0FCD9A5B8CF491C4BF7E790B88F8F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:a8:a7:0c:c4:d6:ef:c0:79:09:0b:d0:14:
c9:45:e7:dc:46:f2:ca:0f:23:ff:8f:30:c1:89:c2:
68:c7:84:06:7a:10:48:82:d8:55:4d:64:4c:68:5f:
87:e1:70:0b:e2:83:1b:89:61:ea:2e:7f:34:c2:c4:
75:26:59:5e:3d:27:89:b8:0f:ca:f2:aa:0f:a8:24:
05:38:88:7a:79:db:35:49:65:53:c8:27:8f:fe:df:
9e:45:48:85:1c:64:df:4d:44:c4:28:45:de:a0:43:
b6:33:c1:25:a0:4b:94:f5:4f:67:f2:53:15:77:89:
01:e3:82:fd:6f:28:ea:dc:47:1e:be:7e:fd:47:09:
c4:00:eb:10:f4:2e:86:56:69:54:86:03:93:22:30:
1b:b5:19:22:58:f4:1e:f5:c8:6e:f2:04:c5:e5:36:
8f:c9:75:9c:89:8e:eb:f8:25:71:6e:cf:9a:b1:91:
7c:4b:1d:7d:7c:6c:50:25:55:f3:4a:5e:6c:95:eb:
35:a0:3a:05:ab:e0:49:6e:20:8c:20:3d:9c:d2:aa:
91:76:f9:41:75:e4:7d:31:bb:23:e3:db:92:27:d4:
25:1e:71:b3:40:79:10:72:2e:2b:6e:43:3f:6f:c5:
f2:a0:5b:6e:d2:08:6f:8c:e4:23:8d:42:83:bd:49:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A1:25:D2:8A:0F:CD:9A:5B:8C:F4:91:C4:BF:7E:79:0B:88:F8:F7
X509v3 Authority Key Identifier:
keyid:B4:E0:55:79:23:01:14:0D:1D:1A:5A:46:25:61:EA:2D:91:9B:36:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B4E055792301140D1D1A5A462561EA2D919B364F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f5:13:f5:8e:34:f5:a9:c5:1e:68:ed:9d:e8:a2:c9:3f:65:
d6:e2:4c:f7:cc:47:c1:31:79:15:7b:ac:2f:30:5c:1d:47:8f:
6e:bb:fe:43:b3:a1:b4:44:94:37:17:a0:7b:98:e0:bb:69:ef:
13:ac:00:45:fb:30:fc:63:68:82:b0:8a:4e:eb:16:68:33:ec:
8d:05:7b:a9:d3:01:96:aa:05:de:b0:12:24:f8:c2:7d:99:2b:
15:f7:e2:9d:80:12:f1:fe:aa:b6:e1:1c:55:aa:71:a3:17:08:
2e:48:7e:10:59:56:3c:8f:dc:80:ba:21:17:0a:8f:48:aa:70:
cd:f3:eb:29:b9:94:a7:52:6f:fb:a8:9f:95:13:ee:89:9b:e7:
b0:05:b8:82:f4:1a:2e:7c:de:b4:a0:0e:33:79:99:ca:40:99:
f5:a4:c3:e5:fd:75:f9:f5:b5:92:61:49:9f:31:b6:27:75:0b:
f5:d1:71:97:d5:62:ab:d7:f5:39:2a:ed:c9:54:da:b7:9e:f7:
98:0c:56:b8:1c:a9:7b:dc:34:fc:96:7a:ae:0c:f1:fe:2b:2b:
89:d8:db:74:c4:f5:44:84:48:e2:85:3e:63:24:d9:ad:4f:66:
8e:37:e3:e2:de:2a:44:8c:a8:20:f8:4c:27:f4:17:5b:47:a1:
61:e0:9d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:48:35 2026 by rpki-client