
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
File: BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft (raw, json)
Hash identifier: AWRUY96M0wRm3UDajRhxGWJBLwiHbPHAfANxeVVioLs=
Subject key identifier: 7C:09:57:5E:A6:59:2F:A0:53:22:CE:96:F4:53:DF:D9:A3:3D:29:42
Authority key identifier: BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
Certificate issuer: /CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Certificate serial: 0241B3417A2132BBB9ECCAFF9A00D66A45C0C16B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
Manifest number: 87
Signing time: Fri 24 Jul 2026 21:47:13 +0000
Manifest this update: Fri 24 Jul 2026 21:42:13 +0000
Manifest next update: Sat 25 Jul 2026 22:54:13 +0000
Files and hashes: 1: 3130332e3130352e3138302e302f32322d3232203d3e203633353339.roa (hash: VflfPvnB4xs7QkcHeF9XZhM+eHcytgoNgRAfmO9MsXc=)
2: 3130332e3130352e3138342e302f32322d3232203d3e203633353339.roa (hash: vIZJyscaQGumtDa3wtU91Fi20DqtmjLyMeNAkiESD1w=)
3: 3130332e3130372e302e302f32322d3232203d3e203633353339.roa (hash: 6zTAgkmaPpXVKLTCOKQuSK7E1Hwzah+JQrIRvBH7yYY=)
4: 3130332e3130342e3235322e302f32342d3234203d3e203633353339.roa (hash: rhSJttFZU6Ofpv/g7R9Ct+5A+REhiRCtsmzIlI/SYOM=)
5: 3130332e3130352e3138342e302f32342d3234203d3e203633353339.roa (hash: ynaQvDQ/GJCP5xnkwYrmbxMiDh24pFyJW7QCadD5pKk=)
6: 3130332e3130362e3235322e302f32342d3234203d3e203633353339.roa (hash: OjebkkyM3oRhbRKEa/ClMRTM5FTqpqHf57SkGQbfZE8=)
7: 3130332e3130352e3138302e302f32342d3234203d3e203633353339.roa (hash: Zflv93y84coCHuGBf1YXZDdqvktyydrU1e4SpQusyvE=)
8: 3130332e3130362e3235352e302f32342d3234203d3e203633353339.roa (hash: GWNimImsWwSd4p1pU6UVEiTBxArj1+mRzoNaUAcCZv4=)
9: 3130332e3130362e3235322e302f32322d3232203d3e203633353339.roa (hash: +T58P5mxobh7jbfRCXoFhi8Jj31pQ63DY42YYoVTo/g=)
10: 3130332e3130352e302e302f32322d3232203d3e203633353339.roa (hash: 31zGxJhS2pTXJ1vb53+jYnyELBqiaVCB8H8eztCZm0A=)
11: 3130332e3130342e3235352e302f32342d3234203d3e203633353339.roa (hash: pULXnOTE7ZiNjqBceAXeh10s3iWkDJV1KfgXq9Slp+E=)
12: BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl (hash: ATiqDCBlumtJKyeidQCE74AiaABaVYtVCDnzcBe6/tU=)
13: 3130332e3130352e3138322e302f32342d3234203d3e203633353339.roa (hash: 5dtBWCJKUt0qXEUR78d/nAXooGGIAc/Oiel8IgG1O1I=)
14: 3130332e3130322e3231332e302f32342d3234203d3e203633353339.roa (hash: lEk/emwpLd2KNPHcEzjkD8dtGpcwgFTdqo+fRWykTXI=)
15: 3130332e3130352e3138332e302f32342d3234203d3e203633353339.roa (hash: YI8A4Du7yJglcT0lF0pk1o8eqRN7DwDPOjjYvDpez/w=)
16: 3130332e3130342e3235322e302f32322d3232203d3e203633353339.roa (hash: o+tGxD34udiiMnnHfOOlowCZ5/a8leLfBtmuXzRepFY=)
17: 3130332e3130322e3231342e302f32342d3234203d3e203633353339.roa (hash: e2tFgUDndDZmuq4ZEV4P73soZ5eVG1yDkdZ2OLVKDLM=)
18: 3130332e3130352e3138372e302f32342d3234203d3e203633353339.roa (hash: 4RGNaPoLZcADL1NoS4OERenxrli/g6WqyrNzlkvhQSQ=)
19: 3130332e3130362e33362e302f32322d3232203d3e203633353339.roa (hash: TfOhEbexXYJJvm89fhZ3yx6HmJ4i7wpiNwJhA/cKnVc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 22:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:41:b3:41:7a:21:32:bb:b9:ec:ca:ff:9a:00:d6:6a:45:c0:c1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC1F9CBB5FF6063230D45B596F2D0E6D94338815
Validity
Not Before: Jul 24 21:42:13 2026 GMT
Not After : Jul 25 22:54:13 2026 GMT
Subject: CN=7C09575EA6592FA05322CE96F453DFD9A33D2942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:20:86:32:6c:36:a8:91:9c:8e:3a:1c:72:f2:
61:7f:2b:fe:7e:a1:db:c9:74:e6:f2:f9:0f:7a:56:
84:56:8a:07:b3:92:23:51:d4:8c:09:f1:f7:21:e6:
55:e5:c1:7a:d4:53:df:dc:a9:45:f9:4a:ec:ef:07:
f8:5e:1d:64:82:ce:f8:1f:05:11:36:c6:7d:11:db:
3d:d0:c5:c0:24:89:79:6b:53:fb:38:00:dc:0d:1c:
1e:0f:d5:52:19:3a:f4:49:2a:e8:9f:82:a4:3d:85:
06:44:a3:da:a0:6c:9c:66:53:e1:a2:ff:f6:21:d5:
a4:47:cf:e4:2d:4f:3a:24:d2:05:ee:a8:bb:68:1c:
ff:ba:1d:3d:7c:26:cc:49:29:55:61:e1:c8:7e:25:
30:7a:bb:06:64:39:fc:6d:84:29:14:9a:e2:6c:f4:
de:a6:1b:ef:4d:21:a6:84:47:05:54:36:76:54:8a:
f3:03:e1:d7:b1:4a:4a:86:26:6e:25:5b:41:1f:2f:
a8:93:97:8a:1c:c7:c2:86:0d:92:f2:91:76:43:ea:
78:4a:79:ff:fd:d8:57:fa:0d:2b:12:bd:49:d8:bf:
70:64:cf:0b:7a:1c:80:f8:17:eb:0c:17:25:70:99:
7a:46:30:65:7e:1c:4d:c7:a5:ed:07:f3:df:4e:99:
8b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:09:57:5E:A6:59:2F:A0:53:22:CE:96:F4:53:DF:D9:A3:3D:29:42
X509v3 Authority Key Identifier:
keyid:BC:1F:9C:BB:5F:F6:06:32:30:D4:5B:59:6F:2D:0E:6D:94:33:88:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096984187254145026/0/BC1F9CBB5FF6063230D45B596F2D0E6D94338815.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:49:42:2a:a6:92:35:fc:61:37:d9:a9:da:bb:f3:a1:cb:51:
a0:a5:7d:e4:aa:2f:fe:c6:c4:03:c4:36:81:9f:a8:28:a1:30:
24:45:26:66:04:d3:28:fd:d1:ff:0d:98:63:ca:ca:73:69:a0:
c5:d1:16:9d:d2:3b:b6:69:40:62:e6:f5:4b:c6:c3:93:49:f6:
16:23:09:6e:f4:70:fa:95:fb:e6:c3:c6:81:e0:98:76:dc:82:
db:86:46:8c:29:38:cd:05:fa:18:39:71:aa:25:e3:95:ca:35:
62:2b:79:16:ed:2b:04:4f:ed:d2:b3:e2:08:4e:25:0c:57:27:
54:42:f5:d6:da:57:f9:11:ea:67:93:dc:78:b3:89:b1:c6:d0:
43:88:3f:0a:4a:3a:10:0d:3b:f9:5c:a3:92:4e:75:a7:35:1a:
bf:17:27:1b:7d:e4:b2:a2:74:18:50:d8:54:28:f4:81:ab:8d:
2e:a8:f1:19:36:fb:30:5f:39:d5:c8:06:22:1e:05:58:e7:e7:
94:35:20:76:22:3d:99:e1:72:bb:12:ba:06:a1:04:b0:50:58:
3f:80:eb:26:37:72:b8:ed:5a:77:ab:aa:a6:a1:38:8c:f9:dc:
7c:93:c3:e3:9c:d1:f6:0a:a2:ac:07:9a:6f:cd:61:cd:1e:66:
7e:e3:2c:e9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUAkGzQXohMru57Mr/mgDWakXAwWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkMxRjlDQkI1RkY2MDYzMjMwRDQ1QjU5NkYyRDBFNkQ5
NDMzODgxNTAeFw0yNjA3MjQyMTQyMTNaFw0yNjA3MjUyMjU0MTNaMDMxMTAvBgNV
BAMTKDdDMDk1NzVFQTY1OTJGQTA1MzIyQ0U5NkY0NTNERkQ5QTMzRDI5NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQIIYybDaokZyOOhxy8mF/K/5+
odvJdOby+Q96VoRWigezkiNR1IwJ8fch5lXlwXrUU9/cqUX5SuzvB/heHWSCzvgf
BRE2xn0R2z3QxcAkiXlrU/s4ANwNHB4P1VIZOvRJKuifgqQ9hQZEo9qgbJxmU+Gi
//Yh1aRHz+QtTzok0gXuqLtoHP+6HT18JsxJKVVh4ch+JTB6uwZkOfxthCkUmuJs
9N6mG+9NIaaERwVUNnZUivMD4dexSkqGJm4lW0EfL6iTl4ocx8KGDZLykXZD6nhK
ef/92Ff6DSsSvUnYv3Bkzwt6HID4F+sMFyVwmXpGMGV+HE3Hpe0H899OmYurAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUfAlXXqZZL6BTIs6W9FPf2aM9KUIwHwYDVR0j
BBgwFoAUvB+cu1/2BjIw1FtZby0ObZQziBUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
Njk4NDE4NzI1NDE0NTAyNi8wL0JDMUY5Q0JCNUZGNjA2MzIzMEQ0NUI1OTZGMkQw
RTZEOTQzMzg4MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQkMxRjlDQkI1RkY2MDYzMjMwRDQ1QjU5NkYyRDBFNkQ5NDMzODgxNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY5ODQxODcyNTQxNDUwMjYvMC9CQzFGOUNCQjVGRjYw
NjMyMzBENDVCNTk2RjJEMEU2RDk0MzM4ODE1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUlCKqaSNfxh
N9mp2rvzoctRoKV95Kov/sbEA8Q2gZ+oKKEwJEUmZgTTKP3R/w2YY8rKc2mgxdEW
ndI7tmlAYub1S8bDk0n2FiMJbvRw+pX75sPGgeCYdtyC24ZGjCk4zQX6GDlxqiXj
lco1Yit5Fu0rBE/t0rPiCE4lDFcnVEL11tpX+RHqZ5PceLOJscbQQ4g/Cko6EA07
+Vyjkk51pzUavxcnG33ksqJ0GFDYVCj0gauNLqjxGTb7MF851cgGIh4FWOfnlDUg
diI9meFyuxK6BqEEsFBYP4DrJjdyuO1ad6uqpqE4jPncfJPD45zR9gqirAeab81h
zR5mfuMs6Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:36:55 2026 by rpki-client