
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
File: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft (raw, json)
Hash identifier: +uJ/7Rd5b6DAnJEB+j+6w4g09h6Uiq+wyr70g8+RhZU=
Subject key identifier: 0D:09:DD:4D:BC:06:32:8D:90:7C:10:47:62:38:BD:09:73:87:8F:48
Authority key identifier: 1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09
Certificate issuer: /CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09
Certificate serial: 5AA61B03C30F8D5EF903D872CE8AFCAE4E9F908C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
Manifest number: AE
Signing time: Wed 07 Oct 2026 18:51:40 +0000
Manifest this update: Wed 07 Oct 2026 18:46:40 +0000
Manifest next update: Sat 10 Oct 2026 21:03:40 +0000
Files and hashes: 1: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl (hash: 47/L7Je6IolKacLoFBu+sZh6KY+NLdzkWJbTfitXzYI=)
2: 3130332e37332e3131362e302f32322d3232203d3e203233363530.roa (hash: N6BZpHQs84IIbiebI1UWzRjDUYpAVV5g6fmxbbjciew=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl
rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 21:03:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a6:1b:03:c3:0f:8d:5e:f9:03:d8:72:ce:8a:fc:ae:4e:9f:90:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09
Validity
Not Before: Oct 7 18:46:40 2026 GMT
Not After : Oct 10 21:03:40 2026 GMT
Subject: CN=0D09DD4DBC06328D907C10476238BD0973878F48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:34:a8:49:d1:07:90:da:d1:66:31:57:6a:
98:e6:27:af:1f:97:10:e9:50:e1:89:9b:19:7f:3d:
89:35:c3:de:4a:f3:de:36:0c:84:fb:dd:df:4a:c4:
e8:29:cb:9d:59:2e:92:4a:f1:61:fa:6e:42:07:01:
d5:31:d0:30:49:69:89:44:28:b4:33:35:66:94:3b:
fe:7e:14:4c:4b:a5:ec:96:48:3d:ce:e4:5a:fb:1f:
73:73:ba:bb:e2:06:97:c0:43:68:18:81:40:41:19:
16:e0:0a:87:aa:81:06:42:a2:d0:fb:00:0b:1e:13:
19:1f:1e:30:53:4c:47:75:37:eb:dd:9d:70:c3:8b:
8b:0a:c6:ac:f3:61:bf:3d:e2:43:7d:e9:e7:3e:29:
ac:42:02:da:05:d0:74:17:1f:57:e2:87:bd:ea:a1:
c6:d8:d6:9d:c7:8c:33:21:92:55:a1:d3:a2:ce:2e:
3c:06:55:97:45:81:38:ff:0c:f0:0e:cf:3e:42:81:
03:96:52:84:3d:bd:9c:0d:5e:15:81:e7:98:e4:27:
7a:b3:a7:cd:68:e7:45:22:09:4d:4a:2f:d7:ce:87:
c6:9e:5f:08:a8:c3:54:9d:48:d3:1b:e0:61:f8:28:
ad:7a:93:7e:83:96:db:41:37:56:16:5e:59:a1:3a:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:09:DD:4D:BC:06:32:8D:90:7C:10:47:62:38:BD:09:73:87:8F:48
X509v3 Authority Key Identifier:
keyid:1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:79:a9:e5:67:1f:23:9b:ee:a4:58:87:c0:3d:55:1f:fb:f9:
e0:61:42:52:06:94:64:5b:5c:ab:11:d3:5c:8b:58:04:e3:00:
83:71:14:7a:73:68:40:bb:66:07:ae:62:bc:11:d8:4a:f6:e3:
09:e2:15:23:ac:6b:47:2a:fe:15:b9:cc:3d:36:c9:a5:41:ca:
24:24:53:97:49:44:f5:eb:e7:93:d5:15:cb:74:f4:c0:3c:90:
12:a6:f5:27:ce:6e:84:5e:af:ab:6b:f1:17:7a:1e:46:f0:bc:
5f:00:28:fd:9c:8d:4a:77:f5:99:ab:6b:40:30:e6:de:5c:cf:
26:aa:04:18:7b:f5:7e:ff:a4:10:3f:05:59:e2:c5:6f:2e:47:
6c:46:0d:98:e2:13:6e:37:cc:3b:d1:d0:44:fa:72:03:79:e8:
66:f7:64:75:5f:c9:a1:29:7d:30:c6:fc:eb:73:46:3d:50:11:
a5:d1:6e:93:7b:64:7a:2b:23:36:4c:89:2e:84:70:f1:dd:ca:
6d:a5:4d:13:d9:de:4d:81:83:61:a6:d6:a3:29:b7:d9:4d:f6:
f0:f2:e0:cd:98:7d:d2:46:94:4f:cc:27:28:01:18:dd:33:9b:
1c:42:cb:43:d0:d0:fd:70:25:1f:e5:7d:a8:ad:cf:73:46:bf:
5d:3f:e7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:11:38 2026 by rpki-client