
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
File: B361C757B6D70C317FD018CE921CC13F568B00D8.mft (raw, json)
Hash identifier: D8xWp+7QuldP6rld3TdQdSDd3aK8q/HwTRz9mP0n1D0=
Subject key identifier: 64:16:6F:2B:AA:10:AD:97:48:26:04:EE:C1:64:7B:59:0F:A7:83:10
Authority key identifier: B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8
Certificate issuer: /CN=B361C757B6D70C317FD018CE921CC13F568B00D8
Certificate serial: 191F99DCFA8E27D78D1643EDC0E42A55B7F638D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
Manifest number: 0140
Signing time: Wed 14 Oct 2026 08:53:53 +0000
Manifest this update: Wed 14 Oct 2026 08:48:53 +0000
Manifest next update: Sat 17 Oct 2026 12:18:53 +0000
Files and hashes: 1: 3130332e3130342e3135322e302f32322d3234203d3e20313531323331.roa (hash: UU8+VwXx5kLXE1vREUzKeaHXeDerUJ/54dl+hLa2H6g=)
2: 323430323a326536303a3a2f33322d3438203d3e20313531323331.roa (hash: bgR/NVrBsnz+F/Uqm+DFCd1LSczUrvNifQljXjBX0Cw=)
3: B361C757B6D70C317FD018CE921CC13F568B00D8.crl (hash: FhbhtKmUR4RA/NU1rUEVCaOWWWLWPqhndMOkykAXqig=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 12:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:1f:99:dc:fa:8e:27:d7:8d:16:43:ed:c0:e4:2a:55:b7:f6:38:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B361C757B6D70C317FD018CE921CC13F568B00D8
Validity
Not Before: Oct 14 08:48:53 2026 GMT
Not After : Oct 17 12:18:53 2026 GMT
Subject: CN=64166F2BAA10AD97482604EEC1647B590FA78310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:ff:c7:98:04:8b:2f:e2:f2:f7:cf:cb:1f:
e3:ef:0e:6b:79:c4:74:bd:a7:75:b2:79:c2:af:ba:
0d:99:f6:48:41:c8:7e:e3:29:55:0d:8e:86:23:da:
83:9c:b0:09:ee:76:91:e5:ff:8a:f8:73:be:0c:a9:
9a:d9:79:7e:56:92:d2:5f:e0:9a:c9:02:05:54:f3:
33:06:89:8f:39:c1:b2:e0:62:29:a7:34:c3:20:df:
1c:59:3c:ec:76:d1:9f:27:e4:7c:48:9d:09:eb:1c:
0c:79:8d:df:f0:4b:77:9e:13:d1:55:69:cd:02:74:
6a:28:f6:8c:b2:9a:de:7b:85:79:45:b2:10:3f:6b:
8b:34:ae:ae:80:0d:2a:94:12:71:d3:1c:c9:f2:c1:
86:15:ee:16:87:33:a2:f9:0d:36:cc:d0:98:2f:f9:
11:87:01:31:9c:7c:ea:57:06:1d:cd:fd:cc:52:2e:
23:f5:ed:8f:d9:80:7f:ea:f1:19:f0:32:da:3f:48:
06:6f:7d:40:e0:05:c6:cf:b2:29:ad:f1:09:85:4e:
0b:b0:1d:5d:83:fd:7d:24:c8:34:bf:0f:69:90:2b:
b0:fa:85:49:c9:9b:d2:e8:fe:3d:22:98:69:fb:f0:
6a:58:94:33:57:e9:ae:fa:d3:31:a3:65:7c:9c:cc:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:16:6F:2B:AA:10:AD:97:48:26:04:EE:C1:64:7B:59:0F:A7:83:10
X509v3 Authority Key Identifier:
keyid:B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:9b:a7:40:99:4b:cb:07:1e:dd:f4:b6:2d:75:ed:e9:de:30:
5b:13:55:89:6b:4f:e8:48:ed:b0:05:8a:b8:6a:5f:c4:50:6f:
8e:58:ac:02:5c:b2:26:d4:e1:c8:4d:f6:eb:0e:de:69:a2:51:
df:cb:65:23:1d:92:39:e7:7f:47:dc:36:61:0f:b5:c2:46:db:
8d:93:ab:e0:f1:db:4b:59:db:e8:e1:31:e1:79:12:a9:15:6e:
cd:9d:4e:87:b3:c7:29:d1:63:a7:13:d7:73:3b:b1:59:4b:90:
5b:c3:9f:ca:f1:ad:fa:6e:2a:fd:ca:d4:61:51:c5:9d:52:1d:
9a:e2:88:04:21:5c:77:7b:bd:b0:31:40:87:53:9a:10:ab:bf:
e6:f2:e4:70:83:6f:eb:c8:b2:3c:90:3a:53:e2:79:03:d4:5b:
47:f1:aa:2c:f5:59:bb:6a:e8:b2:a2:d8:ab:cf:45:1c:57:ef:
b4:06:6d:ec:32:b8:4b:8c:2b:c4:e7:db:76:27:cc:80:35:f1:
24:63:b7:7b:6e:d1:c0:3d:03:6f:53:cf:e3:41:67:c4:53:5b:
1e:b0:e9:ea:cd:0e:66:9f:d2:2e:78:87:ca:c1:68:42:6b:c2:
99:de:78:3d:9f:c4:93:38:9a:b0:da:68:1d:00:3e:65:7f:31:
80:68:25:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:27:09 2026 by rpki-client