
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft
File: BE564B2EFF08B30078A1960732464840B104EF35.mft (raw, json)
Hash identifier: m7PVAYoiS4LpKdRfCtYZbGlzNUn9Y0TNzNjULdNFKSQ=
Subject key identifier: F0:C3:4A:0C:7F:D8:F4:D4:C1:2B:1F:AC:31:C0:54:AC:FD:5A:5D:8F
Authority key identifier: BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35
Certificate issuer: /CN=BE564B2EFF08B30078A1960732464840B104EF35
Certificate serial: 70ABAD5BB780E45764CD0D04C37EAF791A442FC2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft
Manifest number: 013D
Signing time: Thu 15 Oct 2026 00:25:56 +0000
Manifest this update: Thu 15 Oct 2026 00:20:56 +0000
Manifest next update: Sun 18 Oct 2026 05:10:56 +0000
Files and hashes: 1: 3136302e33302e3135302e302f32342d3234203d3e20313531323737.roa (hash: Hz4dS18EKG3nO7kHSRjqfjz5kQRRG+x2194Q5ytjmb4=)
2: 3136302e33302e3135302e302f32332d3233203d3e20313531323737.roa (hash: SqYoFh9M/RF4hCcPqm6MB7F49di/2cutG0x9fForwa0=)
3: 3136302e33302e3135312e302f32342d3234203d3e20313531323737.roa (hash: YwKh5dq5C2YtmvyvhSiDqYWYBqwzrzASsjUiBDUCUE0=)
4: BE564B2EFF08B30078A1960732464840B104EF35.crl (hash: 235MCW0nAklyTP22O+7ePAUfVy5x1dACzZuZeduAVP4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 14:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ab:ad:5b:b7:80:e4:57:64:cd:0d:04:c3:7e:af:79:1a:44:2f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE564B2EFF08B30078A1960732464840B104EF35
Validity
Not Before: Oct 15 00:20:56 2026 GMT
Not After : Oct 18 05:10:56 2026 GMT
Subject: CN=F0C34A0C7FD8F4D4C12B1FAC31C054ACFD5A5D8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:5a:44:9a:c1:62:66:6b:5d:fc:d7:1e:60:
a9:63:06:ea:ed:c2:2e:08:96:98:a8:3f:a2:fa:89:
fc:08:64:fd:f0:e2:f1:5a:95:99:76:87:5f:2e:46:
96:8b:44:f2:ec:59:42:4e:8e:3a:9a:5e:72:3a:fb:
96:16:35:45:6b:0a:56:c0:4b:f5:89:c2:6e:58:2e:
02:ae:60:7d:b6:a2:78:42:32:51:21:67:64:d0:92:
e0:58:7f:72:c2:3a:01:76:19:09:7b:49:ee:19:72:
52:d8:b3:7f:a3:96:ec:d5:c1:89:da:b0:6f:0c:bc:
17:e3:db:33:98:fb:58:88:f0:b1:4d:ef:6e:d9:aa:
79:ac:af:a0:3a:6f:55:f1:d9:4d:12:5c:b0:66:6a:
69:96:8a:8c:5d:13:47:5c:8f:4a:71:53:90:8c:e4:
c8:22:d5:2a:7e:9e:60:9f:ba:fc:cd:d0:62:da:86:
64:ae:f5:c1:9d:cf:ea:bc:ef:2a:f3:28:f2:81:11:
7d:7b:de:0b:24:7d:0f:08:8d:47:56:be:e4:ae:af:
f1:3c:49:bb:5b:a9:5e:fb:ec:6b:e2:e5:97:00:82:
2b:a4:94:6d:92:7f:84:51:ea:2d:03:32:fe:c0:7d:
2c:94:5e:aa:b0:3f:a2:17:54:d6:7a:7e:a8:e5:40:
0f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C3:4A:0C:7F:D8:F4:D4:C1:2B:1F:AC:31:C0:54:AC:FD:5A:5D:8F
X509v3 Authority Key Identifier:
keyid:BE:56:4B:2E:FF:08:B3:00:78:A1:96:07:32:46:48:40:B1:04:EF:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BE564B2EFF08B30078A1960732464840B104EF35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217389571/1/BE564B2EFF08B30078A1960732464840B104EF35.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9b:6a:35:b5:37:32:98:2c:0b:db:d9:d7:51:9c:41:01:a8:
75:08:05:c8:aa:ea:6f:cd:0c:e4:1f:5b:43:fc:f1:22:77:89:
5b:77:4e:b6:93:e1:9e:0d:c9:ab:8a:d5:14:1a:73:fc:2b:db:
3c:ce:99:42:b4:9c:0d:0c:d0:03:d4:36:27:d5:b8:59:f9:04:
b9:c5:1b:d2:ac:3c:29:c4:0f:1e:f1:7f:26:ea:76:96:8f:98:
7e:e9:d6:41:c7:f4:a1:11:c2:6b:00:da:10:b5:b8:44:5a:2f:
e5:fd:d7:dc:d6:32:f8:5a:a4:10:fd:11:66:0c:ae:0f:8d:42:
fa:91:f2:8e:af:c6:8c:a1:57:60:5d:90:12:d0:4f:d9:2d:0d:
09:a5:fe:44:51:87:c5:94:a4:05:10:3a:ba:9a:33:a0:8a:78:
e6:09:12:d5:c8:21:ec:3e:9d:c1:96:c6:95:7b:11:c9:c2:cf:
e7:e3:de:09:7e:17:10:c2:00:3d:1b:4a:de:3d:95:58:a3:ee:
76:d1:1c:7e:31:e6:f3:3b:3a:de:c9:db:96:9b:3c:c7:43:10:
5f:ba:e0:24:fa:ce:a0:9d:26:37:c8:6f:0f:4e:a3:af:0d:c8:
66:12:20:d3:7f:8f:e6:36:50:bd:cb:c8:a7:38:a6:7f:f0:83:
db:39:8e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:29:23 2026 by rpki-client