
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
File: B361C757B6D70C317FD018CE921CC13F568B00D8.mft (raw, json)
Hash identifier: 3aqkWEPGO9tz6dq9Ukp4D9QDw2It0UXv00trdAbuDg4=
Subject key identifier: 50:74:FD:1E:F2:08:FC:13:30:28:5F:CA:2C:85:B2:CF:19:63:E2:50
Authority key identifier: B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8
Certificate issuer: /CN=B361C757B6D70C317FD018CE921CC13F568B00D8
Certificate serial: 24E6C434C43617C7A38218495CC080F4F5D9E518
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
Manifest number: FC
Signing time: Fri 24 Jul 2026 01:55:04 +0000
Manifest this update: Fri 24 Jul 2026 01:50:04 +0000
Manifest next update: Sat 25 Jul 2026 03:12:04 +0000
Files and hashes: 1: 323430323a326536303a3a2f33322d3438203d3e20313531323331.roa (hash: bgR/NVrBsnz+F/Uqm+DFCd1LSczUrvNifQljXjBX0Cw=)
2: 3130332e3130342e3135322e302f32322d3234203d3e20313531323331.roa (hash: UU8+VwXx5kLXE1vREUzKeaHXeDerUJ/54dl+hLa2H6g=)
3: B361C757B6D70C317FD018CE921CC13F568B00D8.crl (hash: dwW/fHPI20MqHrMUUAbjEwue7Pmdiy9u+4cuU+QXbJU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 03:12:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:e6:c4:34:c4:36:17:c7:a3:82:18:49:5c:c0:80:f4:f5:d9:e5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B361C757B6D70C317FD018CE921CC13F568B00D8
Validity
Not Before: Jul 24 01:50:04 2026 GMT
Not After : Jul 25 03:12:04 2026 GMT
Subject: CN=5074FD1EF208FC1330285FCA2C85B2CF1963E250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:68:b9:3e:bf:54:e7:21:ee:a8:fd:11:96:
e1:80:be:9f:b7:2a:f7:c0:62:2e:3f:97:00:8a:e4:
92:32:24:59:c6:ab:9f:b0:49:36:67:ef:9e:9c:22:
b8:c8:71:3d:9e:18:bf:43:12:cf:72:9f:15:19:31:
9f:8f:c2:c9:a4:05:16:e6:b8:bc:fb:72:0c:df:fa:
db:c4:2d:16:0a:c3:ec:50:14:e4:f3:30:b3:5e:1c:
97:1e:7e:60:7f:08:b3:37:8a:44:83:5d:90:a6:d9:
e0:55:8d:ad:ff:4a:0e:34:d0:07:4d:f4:cd:e1:c5:
d1:02:27:54:d3:9f:6c:bf:00:0a:3b:9f:a1:d1:41:
dd:ab:1a:2b:d9:f2:83:07:fa:06:fd:0f:f4:1e:cb:
e3:df:06:d4:64:d5:44:86:fa:a7:b9:dc:50:16:7d:
b0:6c:3b:7b:47:64:5c:a1:04:69:c4:5f:fd:47:de:
df:9c:98:e8:7b:e7:7b:48:2d:bb:60:c9:6f:5d:d0:
ec:6e:6b:ed:63:9f:46:3b:38:46:b2:e9:fe:e0:15:
7b:77:05:70:34:7c:e6:d4:0f:fb:06:db:12:34:58:
4b:65:2e:26:a5:54:e4:eb:92:22:4e:23:2c:b2:22:
f0:8b:36:e9:49:15:8f:4d:0a:f7:20:a3:c3:a2:4b:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:74:FD:1E:F2:08:FC:13:30:28:5F:CA:2C:85:B2:CF:19:63:E2:50
X509v3 Authority Key Identifier:
keyid:B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a9:ae:4d:45:db:67:08:68:51:eb:d0:2d:fa:08:02:a0:c9:
9c:e2:a6:5a:0d:50:9b:01:1d:62:02:05:58:79:3d:07:d9:0f:
fe:38:33:1d:54:09:0a:92:bf:2e:52:af:70:61:82:5f:31:b9:
ee:e9:96:ab:41:fc:e0:66:15:ed:f2:6b:75:cc:1d:f2:19:1e:
5e:1d:f6:01:6b:ed:d8:b7:b7:f8:e9:8f:ef:82:72:81:ea:1c:
b3:e5:23:94:40:f8:70:78:bb:ef:8b:ea:29:95:bd:4b:d9:9b:
2e:b1:44:c9:25:1f:53:8a:9e:f0:6c:20:7e:23:a9:f7:c0:b5:
17:a4:b5:66:8e:01:ff:1e:37:2a:96:d2:72:ac:b4:79:ef:95:
5f:b7:a6:15:96:f4:95:7c:c5:eb:32:22:76:78:63:a6:a4:75:
e1:af:31:c6:8d:f7:c6:0f:a2:64:ed:79:1b:6b:fa:32:56:17:
47:28:67:bc:b9:81:60:04:fc:54:4a:b2:7d:06:bb:c2:d7:e7:
6d:c9:a5:9c:f7:39:2f:9a:1a:2d:82:0f:e5:21:91:f4:a9:41:
b9:8e:02:92:d4:76:0b:5f:03:81:60:9f:0f:23:3d:c6:e6:81:
96:7a:9a:b5:21:e0:f5:59:ae:0e:b8:0e:64:9c:f7:bf:77:78:
68:89:71:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:04 2026 by rpki-client