
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
File: 1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft (raw, json)
Hash identifier: f8g1ZlZIWQ0vJt45KDYRSeY3BfFMC01gHjmYaiyAr2Y=
Subject key identifier: E0:85:D6:2A:78:B1:F4:78:18:6C:BF:98:35:81:A1:97:5A:A8:38:C6
Authority key identifier: 1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60
Certificate issuer: /CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260
Certificate serial: 4A395C391CE00D0C2572D69BE81FDDE13DDC3AB4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
Manifest number: 5A
Signing time: Thu 26 Mar 2026 23:13:28 +0000
Manifest this update: Thu 26 Mar 2026 23:08:28 +0000
Manifest next update: Sat 28 Mar 2026 01:22:28 +0000
Files and hashes: 1: 3130332e3135322e3138362e302f32342d3234203d3e20313339313339.roa (hash: tCqkCgPu3CbJwypKqoPdvpwfBaPceEp0JmkZYHoK9dA=)
2: 323430363a333334303a3a2f33362d3336203d3e2034353338.roa (hash: LDCeZckdOB3HNfyrblG/HUp2aEy4QfYHhIC/9aeRBsk=)
3: 323430363a333334303a313030303a3a2f33362d3336203d3e2034353338.roa (hash: KYM3ELbMCKp+6MUPgs/9MWB4zCPRVhg9ZZ/E+9boX90=)
4: 323430363a333334303a363030303a3a2f33362d3336203d3e20313339313339.roa (hash: jbqqfi/egeAOL6DVld2ACO8m9pxSY6LZ4MiH2qtF6ug=)
5: 323430363a333334303a3a2f33322d3332203d3e2034353338.roa (hash: RtH+EHEQat1TY8rFi6yt5vc0JFGVxnLwJqQpnImtx2g=)
6: 3130332e3135322e3138362e302f32332d3233203d3e2034353338.roa (hash: uXu75xzi7p2N4G52LvUInjsgT+4K+3ZfMKmO6D+zH9o=)
7: 3130332e3135322e3138362e302f32342d3234203d3e2034353338.roa (hash: hjMZAPj25rifMY/aXpuar4ljrWO+9vYryWGUkVjYTDg=)
8: 3130332e3135322e3138362e302f32332d3233203d3e20313339313339.roa (hash: qjCyivi0dxcfzMAmqMJUlGNdGpx1THcX6jE8xR7VxBI=)
9: 3130332e3135322e3138372e302f32342d3234203d3e2034353338.roa (hash: o6lFD+f5dTtKS85vpNkoJjfT093vDss7vKbce+n9he8=)
10: 3130332e3135322e3138372e302f32342d3234203d3e20313339313339.roa (hash: kCqfJNUXGhTl3zZ3d4DXFlUeQHWwnY2OvVpG1e96QlY=)
11: 323430363a333334303a373030303a3a2f33362d3336203d3e20313339313339.roa (hash: zvRH+HDqvliXXIdWjNbLwD9LGWMiAjyuoh0tmg3Erc8=)
12: 323430363a333334303a333030303a3a2f33362d3336203d3e20313339313339.roa (hash: jCyBYSMp8ykpKE+LeC/9B1hTZ/yh1mvHQn0Z7VAq+x4=)
13: 323430363a333334303a313030303a3a2f33362d3336203d3e20313339313339.roa (hash: h4mGUiNpYZm69q/o4Nt9VWgzDNZVcdRzU5IuWw9VVtU=)
14: 323430363a333334303a353030303a3a2f33362d3336203d3e20313339313339.roa (hash: 5rfMn5eyEOjI7bM2Czawl9qh/Q2r3dk7Vnfnov19ExY=)
15: 323430363a333334303a3a2f33322d3332203d3e20313339313339.roa (hash: Y8zftJ45Dvevo2D7PvvADIABaUrY/sJOP040cgE1KVE=)
16: 323430363a333334303a3a2f33362d3336203d3e20313339313339.roa (hash: Lst/83lDIO0N/N2Nq/2F8sv1uj1hMNrfV1g3Bwz6W5o=)
17: 323430363a333334303a323030303a3a2f33362d3336203d3e2034353338.roa (hash: CmBU2dVpvyOIsoMAXXmFLRqr0wKbUAQ+/Vctfk/YPDs=)
18: 1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl (hash: 8tPd3XcnLdaJU+OdJlA1zPK49K1HraiOaQGnUApNA9Q=)
19: 323430363a333334303a333030303a3a2f33362d3336203d3e2034353338.roa (hash: KxqFA71jX/1SUTQx/ZIiBO0VMLglxVE7YKNkj5UtMa0=)
20: 323430363a333334303a323030303a3a2f33362d3336203d3e20313339313339.roa (hash: ad+vPi3e/8acQcmHeQylpwQ95x3uDgPYwNvetYcyS8c=)
21: 323430363a333334303a343030303a3a2f33362d3336203d3e20313339313339.roa (hash: 8HnFFqnjIHJZkWlM0QDdPbdL83oIu9lm4vlp+eYmuzw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 01:22:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:39:5c:39:1c:e0:0d:0c:25:72:d6:9b:e8:1f:dd:e1:3d:dc:3a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF077990B3EF2F79478B657B4C3AF7BDEB8F260
Validity
Not Before: Mar 26 23:08:28 2026 GMT
Not After : Mar 28 01:22:28 2026 GMT
Subject: CN=E085D62A78B1F478186CBF983581A1975AA838C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:fd:d5:e4:c7:ca:9f:e2:c3:81:80:4e:af:
86:f2:15:fc:da:ac:9e:55:28:38:1d:f5:e4:64:76:
08:8b:d6:c1:17:d1:8d:8a:71:18:8c:29:cd:a6:47:
88:d9:05:f2:89:6c:7c:3c:a5:85:d2:e7:14:b5:f3:
63:b6:9a:86:3b:80:dc:9f:76:68:5b:ca:01:26:94:
4f:92:3f:6e:c2:91:b8:7d:2e:28:45:52:09:9f:7c:
c7:ad:dc:04:f0:92:77:cb:ab:66:32:54:fa:55:86:
59:f6:df:f2:cd:09:f7:12:27:48:42:30:1f:19:b4:
e3:38:1e:df:ad:1e:0d:26:d7:81:df:f7:1b:a4:3c:
3a:b3:d0:29:74:d7:c8:f8:fc:e3:2c:bd:36:f1:5c:
40:50:6c:3c:7b:55:49:1c:11:ad:5d:f4:d3:90:cb:
00:7a:df:7a:58:e4:97:ec:41:67:5b:aa:0c:7b:1a:
d7:64:6d:06:5c:01:d3:05:b1:79:0c:6f:f9:7c:97:
cb:12:cc:cf:ab:db:3b:23:e7:f1:9a:57:0a:1b:4b:
ab:22:a8:b1:3a:b8:57:71:60:14:c0:0b:f8:c6:67:
c6:2e:80:59:e8:05:fe:b3:1b:1a:ad:4f:5d:b5:95:
c9:85:bc:b9:6e:42:a3:d8:7c:a6:dd:f1:3d:a6:a5:
54:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:85:D6:2A:78:B1:F4:78:18:6C:BF:98:35:81:A1:97:5A:A8:38:C6
X509v3 Authority Key Identifier:
keyid:1B:F0:77:99:0B:3E:F2:F7:94:78:B6:57:B4:C3:AF:7B:DE:B8:F2:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972402179/0/1BF077990B3EF2F79478B657B4C3AF7BDEB8F260.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:d2:94:06:64:92:c1:7a:d4:44:d2:d5:c0:98:0b:e7:80:c8:
33:5c:0c:99:d9:a2:91:a9:c6:4a:b2:43:24:dc:51:38:ca:95:
22:28:f1:b9:dc:2f:b8:d5:dc:17:79:44:db:44:0e:1d:6a:61:
93:21:c6:3d:81:83:42:23:80:71:fe:7b:25:a4:43:e7:53:f1:
a8:28:89:7b:fd:b4:c5:5f:e8:c6:c7:3f:c6:d0:e8:08:a7:f5:
43:da:bf:00:7f:71:c1:89:57:83:a3:fe:b9:5b:dd:ad:fe:36:
b9:cc:15:5d:05:e2:e8:1e:d8:1f:af:81:26:59:96:6c:d5:3a:
f3:63:99:7a:d9:7e:6d:f6:49:3e:cd:77:ad:5c:d6:5c:dc:78:
7d:0e:88:ac:58:65:f4:6b:78:f5:58:9b:20:a2:ce:0f:e7:0f:
31:11:ac:43:87:1f:a2:eb:4e:ea:1d:fe:d0:9d:b5:29:f7:f1:
23:25:fb:bc:13:37:90:ec:eb:f3:c3:ba:35:e4:e3:e7:1d:58:
7e:ca:8e:22:7c:9e:d8:a5:ff:8f:fb:11:e1:46:ae:e3:65:c7:
5a:eb:3d:1f:f7:c5:d8:28:6d:c7:dc:a6:f2:3f:b5:b3:50:dc:
5d:f4:4f:5d:b0:12:f2:d1:3a:40:46:ba:c1:e6:ae:8a:f8:07:
56:7a:93:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:08:15 2026 by rpki-client