
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
File: B28274A718A1FE9A74E76E477B0790607D2775C9.mft (raw, json)
Hash identifier: E3j2Jq+NE2WUsQZCzeG2+/3DEUaIjw2fTgChPn2n2S8=
Subject key identifier: BB:E8:39:A6:CD:11:58:AE:F8:C2:A5:92:21:54:BF:7A:B6:C3:09:6F
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 7D662AE5C921F7A25701E25B36FF0C721BC561A5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
Manifest number: 12
Signing time: Fri 29 May 2026 13:53:04 +0000
Manifest this update: Fri 29 May 2026 13:48:04 +0000
Manifest next update: Sat 30 May 2026 14:40:04 +0000
Files and hashes: 1: 3130332e3231332e34382e302f32322d3234203d3e2034383437.roa (hash: WhzZSLbsgt33HENC5Jdo8E3uINhsiQYYcA7VVDPcNZE=)
2: 34332e3232362e3233382e302f32332d3234203d3e2034383038.roa (hash: K37k5EHZwBy/yzs7vN0JMfU2m8j3vqFPzaT6ozJUin4=)
3: 3130332e3139322e3134302e302f32322d3234203d3e2030.roa (hash: bKlNqvWEEejHdNYm0UxaFOETVXfhlyPcgzo/naZw2Jo=)
4: 34332e3232362e3233362e302f32332d3234203d3e2034383038.roa (hash: ltG+CN3QLh2wEki9NxuSInye3hQqwHvvC+my2YhdooQ=)
5: 3130332e39302e3139302e302f32332d3234203d3e2034383038.roa (hash: 9NLQGjkIwsj/HBdrJZ1xwQ1GOUzl+07Ohv7LZcz2O/s=)
6: 3130332e3139322e3133322e302f32322d3234203d3e2034383038.roa (hash: +Uw2E0aDU4D7/DiopvNUPpVC941o31rnPHZMKmRNEnI=)
7: 3130332e38352e3137322e302f32322d3234203d3e2034383038.roa (hash: kjrHs7+8fa5IaaI0TIJahnl0x2T3pCnSpi3rA07TdJ0=)
8: 3130332e3231392e3138342e302f32322d3234203d3e2034383437.roa (hash: BVV5Sssx+QbkRXFqRB/xZ18scl9rEx5ZJGg8J5jcRxc=)
9: B28274A718A1FE9A74E76E477B0790607D2775C9.crl (hash: 3iN126ak+7BpLcXejvyewKT7CwLDnzGzJNvVjXCe9t4=)
10: 3130332e3231332e35322e302f32322d3234203d3e2034383437.roa (hash: Hwt8DAgZHe4MlBVlxCJmfShZAYGGr9+hUzaMvEhjSwA=)
11: 3130332e39302e3138382e302f32332d3234203d3e2034383038.roa (hash: OI8Ckg27bN1PjymYQBPVaZLwsJmuQSJgW6wkyeLQRI8=)
12: 3130332e38352e3137362e302f32322d3234203d3e2034383038.roa (hash: Az/2I5lBZ/8pCWOufPh5clQNJa6QTQGZMR6SSGFSYqw=)
13: 3131382e3130332e3136342e302f32322d3234203d3e2034383038.roa (hash: Kp5h44EPQR2t9rhuA+eqNyes8CzFz8G2831ENVJA3jo=)
14: 3130332e38352e3136382e302f32322d3234203d3e2034383437.roa (hash: nXY4O2/FPDHd6bN5nYvWFG8+HzXKqEmYys1oHraEVG8=)
15: 34352e3132342e32302e302f32322d3234203d3e2034383038.roa (hash: FE/ewkSorjMUfIZNmJ+5+2GZ98ni0SLvUKkjAx0egAE=)
16: 3130332e39312e3137362e302f32322d3234203d3e2034383038.roa (hash: NdvgRXAuRQpmUzI4TargVV9wNkMngBDCEP2EOx/hcks=)
17: 3130332e38352e3136342e302f32322d3234203d3e2034383437.roa (hash: WNjaUjzkbuJ6jbF86d9YCivLrccheRIkAykRBcveW1Q=)
18: 3130332e34362e3136382e302f32322d3234203d3e2034383038.roa (hash: P9BVhiNfHW7fhfowLChpnrWSW2b0Uns13/T7vCy0qSw=)
19: 3130332e3230352e3138382e302f32322d3234203d3e2034383038.roa (hash: lAlf+LjPTX0MJQfyr4UYcWLODf86hCJyml3fR4irxWw=)
20: 3130332e3135322e32382e302f32332d3234203d3e2034383437.roa (hash: m0yBKFLgQHJWGlzZbLcdAwWCXZdiOiqPQ/l/zQQrh18=)
21: 3130332e3231332e36302e302f32322d3234203d3e2034383437.roa (hash: 2aXs6t1cMjbMxFwNDed1bYkECuttvfHtTlucQK6RYPI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 14:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:66:2a:e5:c9:21:f7:a2:57:01:e2:5b:36:ff:0c:72:1b:c5:61:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: May 29 13:48:04 2026 GMT
Not After : May 30 14:40:04 2026 GMT
Subject: CN=BBE839A6CD1158AEF8C2A5922154BF7AB6C3096F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:1d:4f:77:99:87:cb:9f:c5:ad:59:db:13:
ac:27:5c:10:66:24:fc:39:c6:18:1a:6f:41:67:95:
76:f2:ec:fd:b4:18:f2:1c:1b:7f:db:08:d4:d4:23:
a0:19:c1:e8:53:e7:bd:68:b1:1d:93:46:4c:44:c3:
91:80:a6:9f:60:11:ac:a8:7e:e0:d9:96:8b:d3:6e:
a7:03:16:57:12:ad:98:e9:ce:c8:91:27:d6:d0:ae:
ff:a1:c9:09:c3:a8:de:9a:95:ec:41:48:68:c9:9f:
6e:9b:df:86:4f:00:b2:1e:77:dc:bf:b7:ee:f4:ca:
17:46:93:72:e7:8e:c4:e4:58:9b:40:37:56:35:4c:
9d:b7:e4:ab:34:02:1f:d0:da:ca:6b:9e:6a:00:7c:
5f:d1:d3:28:b1:1c:c3:57:34:e5:c0:b6:6c:07:d8:
d6:8f:c0:6f:1f:71:fa:b3:8e:53:5b:76:bc:0b:f7:
eb:1e:e4:cd:a4:bb:cf:1c:b6:90:57:51:d0:80:ba:
51:dd:9f:55:77:17:8b:ba:70:89:2f:d8:2a:2e:0a:
45:49:5f:d7:c2:ca:f3:f4:34:02:a2:ae:80:9e:b5:
66:4c:4d:77:d1:ae:72:f5:73:aa:f7:dc:05:42:d8:
66:3f:fa:1a:30:82:8f:5f:20:ad:b6:30:cd:f0:1c:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E8:39:A6:CD:11:58:AE:F8:C2:A5:92:21:54:BF:7A:B6:C3:09:6F
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bc:56:33:5f:66:16:52:5d:03:85:66:9d:40:7f:91:9b:5b:
06:9f:d4:57:3d:67:b3:c1:f5:9e:bf:62:38:7b:03:88:f6:1d:
b6:95:9c:f4:51:df:ab:3a:e2:fd:1a:fd:eb:37:c5:44:2e:7d:
71:08:a5:4d:22:f4:dc:d5:ce:06:b3:30:e4:e1:8c:27:70:70:
25:47:d7:84:05:d4:f8:0d:3f:85:70:5e:a5:e6:03:2b:55:ee:
30:65:30:c1:1e:26:b9:ec:9a:73:f1:cd:98:9e:9a:ce:24:1c:
67:16:1e:e0:41:3d:83:d5:76:ae:94:58:1a:19:73:35:f3:af:
63:52:c8:39:c9:ba:66:07:09:6d:7b:df:01:48:1b:fa:5f:08:
fd:dc:51:8a:6b:48:ae:c1:88:71:b6:76:78:10:af:c7:3c:1a:
c4:e6:b6:93:13:ab:bf:8d:51:0c:14:68:e6:73:e5:73:2d:c3:
92:dc:0c:ec:d4:69:6b:b7:d2:66:b1:60:b7:40:45:e4:b9:b7:
bc:1c:1b:ee:b8:63:23:73:96:38:1b:30:09:f1:78:c6:be:b3:
02:9f:d2:bd:f3:4c:16:67:3e:0e:c6:b0:c6:21:de:a6:6e:7d:
0b:d1:97:f4:6b:17:36:0c:45:6a:e1:30:34:c3:7c:69:c0:9c:
41:9c:f0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:03:39 2026 by rpki-client