
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft
File: B041B05EE47CEB3998205103A529257D485C9CDF.mft (raw, json)
Hash identifier: QytikiaA8bGCxevwioKgK/eVjOQuGCDPQDUyV68ScQw=
Subject key identifier: D8:BF:4B:C9:85:74:E1:9B:B1:6D:40:FB:22:95:E7:E2:C2:98:FB:4C
Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF
Certificate issuer: /CN=B041B05EE47CEB3998205103A529257D485C9CDF
Certificate serial: 306585CDBA83D385F2E7710F96AB9D1710DEC6B9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft
Manifest number: 013F
Signing time: Tue 29 Sep 2026 05:47:07 +0000
Manifest this update: Tue 29 Sep 2026 05:42:07 +0000
Manifest next update: Fri 02 Oct 2026 09:10:07 +0000
Files and hashes: 1: 34332e3139332e36352e302f32342d3234203d3e2039383038.roa (hash: V++q/vbqX7uElU3XCozJ+vQAMUss9g+29A6LHYlupQ8=)
2: B041B05EE47CEB3998205103A529257D485C9CDF.crl (hash: VSlM9CFd4T9Qp8XWtDpQxn84xyyfmdmZC9S20pjbbfc=)
3: 34332e3139342e302e302f31362d3234203d3e20313335363239.roa (hash: 95iB+8uqWou+9I1ynRhLJfQ5Pk5tuGptm5ILolxrRw8=)
4: 34332e3139332e36352e302f32342d3234203d3e20313335363239.roa (hash: MwVN3taj66Ka8e6zM6DN8RrX4mecL96iDgmUhMFQ9x0=)
5: 34332e3139322e302e302f31352d3234203d3e20313335363239.roa (hash: 7jCcZ0/9UxCXCvYbfS4mJTL942yKvXeNb8JEF/ATq2U=)
6: 34332e3139332e36352e302f32342d3234203d3e203130323036.roa (hash: 6m6sraX2wercPUwc5ViicNvbpVzyOKO2UCe0QtoYQwQ=)
7: 323430343a633263303a3a2f33322d3438203d3e20313335363239.roa (hash: 4MvS7aTKVleKzwBJW+N+4yc3H0XJT0qFQAOPJoDSwHM=)
8: 34332e3139332e36352e302f32342d3234203d3e20313334373631.roa (hash: vtB4q26rJZnPT0HeksyyQ09N0xJbQpfDhBpPOrG+qEE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:65:85:cd:ba:83:d3:85:f2:e7:71:0f:96:ab:9d:17:10:de:c6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF
Validity
Not Before: Sep 29 05:42:07 2026 GMT
Not After : Oct 2 09:10:07 2026 GMT
Subject: CN=D8BF4BC98574E19BB16D40FB2295E7E2C298FB4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:11:c3:3e:19:49:be:52:a9:b2:8d:c3:d8:e7:
83:f4:0d:84:59:ff:f8:a0:d5:30:08:06:c5:b2:18:
36:a8:12:cb:e7:db:34:00:34:0e:b5:16:16:39:6b:
3a:21:ae:8b:a8:46:49:47:26:60:5f:32:68:d3:e7:
e8:46:b2:02:a0:2e:d6:5a:7c:3a:b4:a8:50:f0:b2:
ec:ce:95:f4:26:b2:b2:c6:ab:40:29:d8:aa:40:bb:
8d:bf:49:a5:53:0a:11:b7:39:c9:7f:82:03:86:65:
bf:c1:e9:3c:d0:fa:e8:a1:df:0a:f1:5b:ce:ff:fe:
19:e6:a3:1d:43:0b:6a:85:04:e3:4f:d0:49:c9:57:
9e:b6:15:4e:de:1d:18:63:08:9b:f2:4e:c9:32:3a:
24:7a:72:ff:61:da:35:7a:60:86:ae:ad:25:00:94:
cb:6d:a0:64:c3:0b:27:8f:06:3a:f1:73:f6:d2:f2:
f9:db:35:78:37:3b:20:77:30:3d:37:b1:06:42:50:
cf:88:13:c6:65:4d:66:63:24:97:c2:4c:9d:63:d9:
83:0a:f1:77:82:7c:b9:aa:9b:44:f2:80:93:43:dc:
59:b1:47:c6:a3:d6:fb:35:40:76:52:0d:96:9f:d4:
98:fe:72:9f:94:ee:8f:a2:43:dd:9d:57:65:fd:95:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BF:4B:C9:85:74:E1:9B:B1:6D:40:FB:22:95:E7:E2:C2:98:FB:4C
X509v3 Authority Key Identifier:
keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8a:6e:a2:16:8f:ca:d9:f5:d6:52:05:8a:cd:e7:d9:a8:5d:
fd:55:fe:11:5e:22:80:14:ee:d8:e6:c6:9e:76:90:9a:7a:72:
a8:e2:06:2d:59:99:e7:ef:5e:29:ee:30:1a:95:66:91:8d:6c:
d6:8f:12:f2:64:58:98:de:7a:1b:d8:45:a3:e7:40:e5:95:53:
82:f5:7d:6d:c7:e4:69:3d:6d:fe:05:6a:45:ec:c1:fa:7d:8b:
c7:c3:e1:21:57:dc:71:e6:c2:2a:9f:c7:8f:a7:0c:3e:35:4a:
01:e5:a2:83:f6:6e:17:ab:68:80:45:c3:3e:af:8b:cd:8c:e0:
6a:94:3e:58:71:9c:f5:61:c4:72:6f:d0:9d:5d:b9:40:0c:c6:
05:de:91:c8:53:9b:0d:a2:c4:f9:40:c0:b8:05:0e:df:07:ee:
87:de:75:3f:04:ff:dc:f8:c1:33:b4:c2:67:2a:c8:9f:4a:15:
12:80:a3:03:b9:cc:60:17:94:b6:fb:2e:63:f2:74:31:7c:aa:
d3:39:1d:f3:11:c2:e5:7b:5c:f9:61:03:4b:93:8c:61:6a:57:
aa:75:80:68:aa:e3:18:70:a9:6c:b0:6b:0d:46:d4:8f:dc:d1:
fe:dd:d3:34:5b:bb:6b:64:e1:1e:06:24:1b:a2:b5:cb:5d:43:
67:03:b5:66
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUMGWFzbqD04Xy53EPlqudFxDexrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0
ODVDOUNERjAeFw0yNjA5MjkwNTQyMDdaFw0yNjEwMDIwOTEwMDdaMDMxMTAvBgNV
BAMTKEQ4QkY0QkM5ODU3NEUxOUJCMTZENDBGQjIyOTVFN0UyQzI5OEZCNEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcEcM+GUm+UqmyjcPY54P0DYRZ
//ig1TAIBsWyGDaoEsvn2zQANA61FhY5azohrouoRklHJmBfMmjT5+hGsgKgLtZa
fDq0qFDwsuzOlfQmsrLGq0Ap2KpAu42/SaVTChG3Ocl/ggOGZb/B6TzQ+uih3wrx
W87//hnmox1DC2qFBONP0EnJV562FU7eHRhjCJvyTskyOiR6cv9h2jV6YIaurSUA
lMttoGTDCyePBjrxc/bS8vnbNXg3OyB3MD03sQZCUM+IE8ZlTWZjJJfCTJ1j2YMK
8XeCfLmqm0TygJND3FmxR8aj1vs1QHZSDZaf1Jj+cp+U7o+iQ92dV2X9leg3AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU2L9LyYV04ZuxbUD7IpXn4sKY+0wwHwYDVR0j
BBgwFoAUsEGwXuR86zmYIFEDpSklfUhcnN8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDk4MjQwMy8wL0IwNDFCMDVFRTQ3Q0VCMzk5ODIwNTEwM0E1Mjky
NTdENDg1QzlDREYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjA0MUIwNUVFNDdDRUIzOTk4MjA1MTAzQTUyOTI1N0Q0ODVDOUNERi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ5ODI0MDMvMC9CMDQxQjA1RUU0N0NF
QjM5OTgyMDUxMDNBNTI5MjU3RDQ4NUM5Q0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYpuohaPytn1
1lIFis3n2ahd/VX+EV4igBTu2ObGnnaQmnpyqOIGLVmZ5+9eKe4wGpVmkY1s1o8S
8mRYmN56G9hFo+dA5ZVTgvV9bcfkaT1t/gVqRezB+n2Lx8PhIVfccebCKp/Hj6cM
PjVKAeWig/ZuF6togEXDPq+LzYzgapQ+WHGc9WHEcm/QnV25QAzGBd6RyFObDaLE
+UDAuAUO3wfuh951PwT/3PjBM7TCZyrIn0oVEoCjA7nMYBeUtvsuY/J0MXyq0zkd
8xHC5Xtc+WEDS5OMYWpXqnWAaKrjGHCpbLBrDUbUj9zR/t3TNFu7a2ThHgYkG6K1
y11DZwO1Zg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 17:43:17 2026 by rpki-client