
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft
File: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft (raw, json)
Hash identifier: pqTYhaTpLsm6O27Jy7kaMUW38x8oU7tXrsDdhyCbfAM=
Subject key identifier: 43:1E:0B:39:A7:DE:B6:C8:F8:40:36:AB:4F:AB:C9:01:81:49:FF:B7
Authority key identifier: 4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A
Certificate issuer: /CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A
Certificate serial: 19C8281325B639D6CE462151D1C11B17B5EF81FF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft
Manifest number: 98
Signing time: Wed 13 May 2026 04:15:56 +0000
Manifest this update: Wed 13 May 2026 04:10:56 +0000
Manifest next update: Thu 14 May 2026 05:56:56 +0000
Files and hashes: 1: 3130332e35392e3132332e302f32342d3234203d3e203539303635.roa (hash: E+onV9e+ZLK8Mv63eKsoyl7IMGRBP0YQ+/SS53GmquQ=)
2: 4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl (hash: zGfbALXFuW69noVVfNQFuHJI9dCx4TdoBhKba7nDsxI=)
3: 3130332e35392e3132322e302f32342d3234203d3e203539303635.roa (hash: tQ8G+jIvgfdwb9Qj+FPQW47Nee5oYw9nbogEHI3CaTE=)
4: 3130332e35392e3132322e302f32342d3234203d3e2031343439.roa (hash: FY1hx4rtT1hYAm4+YWJXYeuAuUoQSCrrEEoqnkFLrv0=)
5: 3130332e35392e3132332e302f32342d3234203d3e2031343439.roa (hash: fO18bwtTKlv8kOdY+pSbT87F1yR7NOSw0RqyU2Gz/J8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c8:28:13:25:b6:39:d6:ce:46:21:51:d1:c1:1b:17:b5:ef:81:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BD2BCAA35B0AE87654A70D7633583B2BC5C346A
Validity
Not Before: May 13 04:10:56 2026 GMT
Not After : May 14 05:56:56 2026 GMT
Subject: CN=431E0B39A7DEB6C8F84036AB4FABC9018149FFB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:78:d7:1b:5a:2e:a9:d1:56:ce:ba:92:5f:
89:45:e0:35:00:6c:8b:21:d2:e2:fa:cd:14:46:24:
40:d5:f8:62:9a:83:58:c9:42:dd:08:7b:55:76:55:
71:ec:19:4c:64:56:4c:c5:92:06:bd:b2:f6:ba:bb:
90:c7:c0:e1:b3:c5:cd:1a:28:d3:08:41:d9:6d:9c:
e8:bd:15:dc:f6:03:34:8f:89:47:12:ed:c1:42:47:
19:ea:de:42:cc:b8:a0:b1:de:9c:d8:32:21:b1:e4:
92:a5:18:ce:92:e5:f0:b7:fe:c2:1d:92:7b:5b:b1:
5b:55:ba:92:34:38:ad:4e:13:77:43:ca:8c:27:b3:
75:ce:0f:47:52:0e:ed:90:4d:75:03:7d:89:95:92:
fa:66:2b:2c:84:26:fb:ac:f0:ed:28:f0:eb:3b:34:
99:f9:d0:1f:01:b4:e9:9d:a3:3c:cc:2f:11:4d:bd:
b0:82:c9:d9:0d:d7:fc:22:e9:3c:de:27:1a:05:50:
a2:b4:2c:43:5d:0d:ee:dc:84:9e:cf:2d:b5:24:e8:
3b:d4:23:ce:3e:2e:13:af:da:12:f0:1a:45:43:86:
7a:1b:de:50:a4:1a:ca:dc:fd:e4:8c:2c:57:16:2f:
34:3e:f5:b3:1a:f4:f1:89:4b:6b:e4:8b:99:d4:e8:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1E:0B:39:A7:DE:B6:C8:F8:40:36:AB:4F:AB:C9:01:81:49:FF:B7
X509v3 Authority Key Identifier:
keyid:4B:D2:BC:AA:35:B0:AE:87:65:4A:70:D7:63:35:83:B2:BC:5C:34:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534395047939/0/4BD2BCAA35B0AE87654A70D7633583B2BC5C346A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c9:b1:fe:4c:75:4a:f4:8d:75:50:4e:c4:bb:51:50:23:68:
87:55:dc:31:b2:3a:f1:48:0f:bc:fa:22:53:c6:13:96:01:22:
d4:3a:f3:00:f6:04:2c:85:e9:e8:36:9f:31:86:47:ad:d3:44:
c3:10:25:b9:6a:b6:2d:42:a1:48:31:4e:3c:68:9a:9d:ad:cb:
38:ce:cd:d1:5b:61:27:6d:97:d3:02:a3:60:10:eb:41:2d:3e:
8b:97:b3:17:a5:8c:a7:5e:78:91:3f:fb:a1:56:ec:46:94:92:
f1:bc:e3:07:02:ee:ed:2c:c3:5f:b0:0c:5f:bc:8f:40:05:2b:
b6:ff:34:79:a9:1c:7f:65:92:29:e8:57:fc:3b:2e:da:7c:4a:
0e:c4:91:39:e6:2c:60:15:24:3b:ee:8e:df:da:0d:03:73:ce:
7c:6b:f4:82:e9:45:fe:7c:8a:8b:4d:04:7e:b4:5e:3f:1f:03:
73:fe:51:3d:c8:a5:93:0b:1e:6d:3c:f8:7f:c2:83:f2:05:a9:
39:3a:ad:df:cd:ec:7e:e8:de:ee:2e:26:50:76:ac:1a:32:0a:
11:34:72:bf:e5:97:1e:cb:29:74:93:7c:a4:4e:48:1e:64:0c:
8d:c4:8e:24:da:88:04:cc:9c:b3:6b:56:a3:58:fe:de:a1:00:
3b:20:42:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:21:56 2026 by rpki-client