
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
File: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft (raw, json)
Hash identifier: 9JNdNs5ZQnjEspjv0FFS/4xGtMujJH3dlu08n2OQXEc=
Subject key identifier: BD:10:BD:2C:38:F5:D1:63:5D:E3:8F:35:96:37:0A:E7:65:62:CE:46
Authority key identifier: 8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
Certificate issuer: /CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Certificate serial: 019B6277A8323DFDA0C9D4C8911ECD40902D430A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
Manifest number: 0134
Signing time: Sun 27 Sep 2026 05:59:41 +0000
Manifest this update: Sun 27 Sep 2026 05:54:41 +0000
Manifest next update: Wed 30 Sep 2026 08:07:41 +0000
Files and hashes: 1: 3130332e3131362e3134392e302f32342d3234203d3e20313430323234.roa (hash: pP2K3HiVYBHdGBjx/LhUqM1IgWlPl0rSVXLA0eShH2g=)
2: 3130332e3131362e3135312e302f32342d3332203d3e203431373137.roa (hash: VlVCVPXjjW4YexrI/H0GFGSpaR7DLmyFK6sA+2KWcH0=)
3: 3130332e3131362e3135302e302f32342d3234203d3e20313430323234.roa (hash: d4N+6+ZvyPWMnoQuXQvtFWn2iecqQr50dVgRsFkdfMk=)
4: 3130332e3131362e3134382e302f32342d3234203d3e203231383539.roa (hash: hb8LpnbbXDFD6nnVASx9otFeKHSuMrRCIYTSzaGK/QY=)
5: 3130332e3131362e3135302e302f32342d3234203d3e203138313836.roa (hash: Pq91xvCrN3/5zWnvVJSEMqoONxXt9OWTFN9DsvUS+cs=)
6: 3130332e3131362e3134392e302f32342d3234203d3e203138313836.roa (hash: zKTHFw5A/5A4GJfDVGwpemfdwlWQX4xJwt4nMBMvrMw=)
7: 3130332e3131362e3135302e302f32342d3234203d3e203431373137.roa (hash: IgDPyqOj/L0PxUnz7eU6yhqxHUKS38LqOYL7vjB0wuA=)
8: 3130332e3131362e3135312e302f32342d3332203d3e20313430323234.roa (hash: 1Ufsi2cApRq4VzMpVC5wUXBntzWTIoNYV52b6m40FTU=)
9: 3130332e3131362e3134392e302f32342d3234203d3e203431373137.roa (hash: GZ2WOW7JsZPc5s/Q2qJ2w1atwdfDkqEf0lhuZ8+9zHo=)
10: 8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl (hash: Tq+uJ8eJNvw7YRGXoIOa/cN4QewJB4GK6TFScYNtmFI=)
11: 3130332e3131362e3134382e302f32322d3234203d3e203231383539.roa (hash: 5JsD0wX1QDBSopdnoRNZCwKiwO2b9FDGs7UbU+U0hhI=)
12: 3130332e3131362e3135312e302f32342d3332203d3e203138313836.roa (hash: t4rYVjYfVv+8FXJ3wpB9gzjdLdiETsT5N2UFAEaCOnM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:62:77:a8:32:3d:fd:a0:c9:d4:c8:91:1e:cd:40:90:2d:43:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B7C2D1C01EECF3391F01777915C61E473BF5FBF
Validity
Not Before: Sep 27 05:54:41 2026 GMT
Not After : Sep 30 08:07:41 2026 GMT
Subject: CN=BD10BD2C38F5D1635DE38F3596370AE76562CE46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3a:7d:48:55:4d:f7:cc:4b:60:d9:46:08:5c:
46:b6:4c:16:08:44:15:a4:59:5e:35:8c:06:0e:be:
8d:eb:de:b3:4a:d9:46:c1:a3:55:6f:fd:0a:8b:2d:
d7:b6:35:f9:82:65:ca:0f:f4:9b:27:09:82:a0:26:
a3:f1:69:4b:b4:48:1e:df:9a:9a:ff:34:94:f2:a6:
ef:1e:a3:12:70:34:c4:36:b5:b6:97:eb:52:13:43:
af:ef:f6:8e:74:51:2a:fa:5a:de:16:4d:38:7b:a8:
fd:f8:69:0a:cb:ad:48:97:5b:1b:91:a2:73:ba:4b:
76:4f:fb:34:e3:36:24:02:ba:88:c8:6b:b1:88:d1:
44:a5:98:b0:98:97:4b:d0:0a:20:e2:30:a1:da:f2:
69:a1:c6:8b:67:91:e9:21:87:68:75:29:c0:03:f2:
87:24:04:33:64:91:42:ab:7a:ff:36:c4:02:0e:a6:
5f:fc:d7:d0:21:4d:95:63:81:be:ad:f9:ac:06:66:
1e:89:20:16:66:7b:86:ed:13:6c:20:8b:ff:66:34:
f3:34:68:d0:ec:39:e7:6d:98:fe:03:59:43:14:02:
e5:a1:2b:30:e9:77:2f:0f:83:15:2b:fc:5c:d9:f8:
b1:dd:3b:86:ab:97:8c:6a:35:f5:97:bb:23:f5:55:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:10:BD:2C:38:F5:D1:63:5D:E3:8F:35:96:37:0A:E7:65:62:CE:46
X509v3 Authority Key Identifier:
keyid:8B:7C:2D:1C:01:EE:CF:33:91:F0:17:77:91:5C:61:E4:73:BF:5F:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129984003/0/8B7C2D1C01EECF3391F01777915C61E473BF5FBF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8d:35:e6:b3:1f:eb:bf:49:02:38:8d:b4:af:ad:4a:f8:af:
24:99:2d:d5:a0:f1:b8:80:19:2d:d5:72:1a:46:31:02:5d:fa:
cf:f6:11:72:14:6c:d0:c9:1e:0b:f2:6a:64:7f:27:35:0e:74:
19:ae:ad:fd:b3:cb:9c:de:06:12:3e:2c:54:95:3b:a4:10:d0:
ce:b1:e6:87:9a:9f:60:38:52:af:38:56:d4:1e:b3:07:cc:74:
ee:a4:69:e1:3f:f7:e5:bf:55:6d:f5:37:82:59:fe:64:55:37:
e0:c9:84:b1:cb:c8:7a:4b:ab:10:c0:92:1a:9c:c0:60:77:f3:
21:62:7a:ad:62:9c:ce:a6:95:9c:ed:8a:b7:2e:fd:c7:34:f3:
75:5b:64:97:8d:7f:13:ac:d2:dc:26:25:c4:3e:46:72:08:f0:
2e:98:7e:f2:d4:4b:aa:9f:7d:3d:8d:f2:04:b9:9b:52:44:21:
d1:8a:52:81:a9:58:21:1e:94:a7:c2:6f:02:e6:70:95:65:df:
6d:aa:6c:b0:d8:00:20:f9:56:e4:f0:ed:0b:42:ca:0d:f4:4a:
1f:a4:90:42:dc:b2:90:c1:c3:ea:6f:6b:0b:7e:38:18:96:f8:
77:a8:d8:65:bc:54:63:6b:5a:2e:1d:25:96:29:f6:76:39:c5:
b8:f1:43:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:40:02 2026 by rpki-client