
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
File: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft (raw, json)
Hash identifier: dZhQN50X6/AVGNr/Yr7TVZmWP2uHoCqc/AMM8kntIvA=
Subject key identifier: 7C:A6:E8:F1:8A:42:F4:38:3A:E0:19:E0:D1:2F:0C:0C:26:65:FC:33
Authority key identifier: 1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09
Certificate issuer: /CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09
Certificate serial: 7036F42E9E9ED00307C38E9595FFFD95E4896CFD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
Manifest number: 6D
Signing time: Fri 24 Jul 2026 01:20:00 +0000
Manifest this update: Fri 24 Jul 2026 01:15:00 +0000
Manifest next update: Sat 25 Jul 2026 04:46:00 +0000
Files and hashes: 1: 1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl (hash: mVTPT3UGW+ynx78/guIBVTaxfCa9azt5rpolqblDLEo=)
2: 3130332e37332e3131362e302f32322d3232203d3e203233363530.roa (hash: N6BZpHQs84IIbiebI1UWzRjDUYpAVV5g6fmxbbjciew=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl
rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:36:f4:2e:9e:9e:d0:03:07:c3:8e:95:95:ff:fd:95:e4:89:6c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B2C77130D7AADA1846FFEFE416F50599F7EED09
Validity
Not Before: Jul 24 01:15:00 2026 GMT
Not After : Jul 25 04:46:00 2026 GMT
Subject: CN=7CA6E8F18A42F4383AE019E0D12F0C0C2665FC33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:45:5c:7f:f7:6a:df:c1:9f:30:56:6f:c8:
dc:09:35:e4:fe:4e:02:bf:ff:48:92:65:cb:19:41:
b3:df:06:cd:70:c1:e5:54:22:a8:ab:c3:20:ae:af:
af:40:86:12:49:96:21:89:32:df:f9:ca:94:a5:57:
d0:cf:44:bd:d5:83:54:50:7e:e6:a2:85:a9:80:33:
51:56:db:08:b9:b1:95:fb:58:b3:76:37:c0:8e:ef:
31:cc:f6:5b:71:9c:4b:0a:3a:26:22:90:88:f5:80:
e5:fb:ab:02:73:90:a2:eb:2d:55:3e:f4:1b:a8:a0:
e0:2d:6a:64:ab:2a:49:a9:bf:73:7a:20:a5:89:47:
28:ae:81:b7:26:60:3e:79:23:85:05:7a:10:15:01:
73:31:22:50:b4:04:ff:f2:ab:1e:9b:23:e7:a0:0a:
6d:ec:38:7e:ac:fc:0a:d2:e3:3e:1a:40:2e:4f:ec:
24:fb:bd:cc:43:8c:48:c0:4c:c1:93:a7:45:5d:9e:
7d:1a:1d:cd:59:1d:d1:a5:10:fc:c3:82:bd:f7:d0:
24:85:bc:2a:7a:99:b3:59:56:b0:32:69:10:fc:0d:
4d:6b:f5:c0:ac:5b:80:47:16:09:9c:5c:48:ac:f3:
00:21:a0:7e:4a:6f:da:38:f8:c9:97:3e:9f:85:a0:
55:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A6:E8:F1:8A:42:F4:38:3A:E0:19:E0:D1:2F:0C:0C:26:65:FC:33
X509v3 Authority Key Identifier:
keyid:1B:2C:77:13:0D:7A:AD:A1:84:6F:FE:FE:41:6F:50:59:9F:7E:ED:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B2C77130D7AADA1846FFEFE416F50599F7EED09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105008623362244615/0/1B2C77130D7AADA1846FFEFE416F50599F7EED09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4f:ab:09:74:e2:c3:51:53:9c:76:3d:69:99:4b:78:b1:b9:
d4:b7:f9:d7:38:cd:cd:a6:9e:5b:7a:67:bb:ac:52:48:63:79:
5d:38:fb:05:e3:aa:9f:eb:f8:40:6a:e9:d5:ff:b3:fc:ae:2c:
50:88:ad:79:48:e7:a0:fe:35:86:55:b2:22:d6:5f:36:17:32:
88:88:fd:fa:62:3f:44:13:4b:95:62:01:0a:db:89:6d:cc:a3:
b7:71:ac:73:67:a0:5d:44:47:22:d7:1c:e4:7e:ed:e7:11:75:
9f:97:27:c7:8d:c0:b5:2c:55:f3:77:1e:a8:92:51:91:55:fb:
4d:75:ed:3a:6d:f4:ad:ae:93:4d:30:38:44:1b:5b:83:26:6a:
8f:42:61:ef:f0:33:f8:e8:1a:7e:ac:0a:ec:90:36:47:66:ab:
a3:af:ad:60:26:d9:42:3e:1d:21:3d:6a:45:be:3b:39:6e:3a:
25:d2:95:c3:9a:16:2d:51:52:36:83:0a:49:11:33:fd:5f:e9:
9b:af:83:a4:79:01:ce:5c:a9:11:27:52:00:2e:17:74:8e:3b:
da:4d:c5:58:03:5e:bc:ad:e7:9e:cc:f5:54:a3:30:a6:8f:f7:
9e:9c:09:a6:8a:f3:d5:c8:ea:43:3b:b6:0b:03:2c:c8:0e:5b:
3b:7e:8d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:19 2026 by rpki-client