
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
File: B5148646F2C451864E20696E4F1C926A098BC8D2.mft (raw, json)
Hash identifier: aWJrlpHcA4CRdVkX265WAcS/belIFNTVEniwdBHLOxU=
Subject key identifier: 57:9D:AB:DA:2B:05:49:45:8F:20:FE:00:AA:A3:0F:3F:18:0F:D9:AD
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial: 11D67E571404CD2373BFE84C1D7F6B0ADD8F6CB6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
Manifest number: 64
Signing time: Thu 23 Jul 2026 16:34:07 +0000
Manifest this update: Thu 23 Jul 2026 16:29:07 +0000
Manifest next update: Fri 24 Jul 2026 19:32:07 +0000
Files and hashes: 1: 34352e3235342e382e302f32342d3234203d3e2034383437.roa (hash: +hAqXWTni4XLLYmJ7GcuPp0Na8xp4NPXQIH+R4INNCM=)
2: 34352e3235342e392e302f32342d3234203d3e2034383437.roa (hash: 9KMtusMUgjBGmA/TbBwckDV/WMFxBB9kkTkmv+BGjxQ=)
3: 34352e3235342e382e302f32332d3233203d3e2034383437.roa (hash: SP+QM9OtW5RmdBJJFM+OJXICimpfberqBDE5B1rJKNk=)
4: 3130332e3232302e36302e302f32322d3232203d3e2039383038.roa (hash: ig0VbLcqHiuOvyohwmjWpHEUrnPZeizj9UxnCfpup+M=)
5: 34352e3235312e39362e302f32322d3232203d3e2039383038.roa (hash: NH1gynqSs7G2vkZrLnXyhx0zx1/5I1+9TU/pNnIMyi0=)
6: 34352e3235342e382e302f32342d3234203d3e203633363333.roa (hash: 2wyVk8ZYds07gMgFgv5tN5PEVXabnwJjCcdDeX5PRh4=)
7: 34352e3235342e392e302f32342d3234203d3e2034383038.roa (hash: V9cDWRBADDfMj7Gr+jGNeCURz0MN/608S9KkOjIS7nA=)
8: 34352e3235342e382e302f32342d3234203d3e2034383038.roa (hash: VpZ8FbBlmNhUuL/1VLo0qosPgq8i+8uaHFmEuk5tiDg=)
9: B5148646F2C451864E20696E4F1C926A098BC8D2.crl (hash: g/iGFpNms+EbPJ0hhuMmz5n4xt97/jWsruRTxPeDTgQ=)
10: 34352e3235342e382e302f32332d3233203d3e2034383038.roa (hash: fyh+el9sgg8/Y93qBnXPHlHdezwIV67264v8qH2vob4=)
11: 34352e3235312e3130302e302f32322d3232203d3e203538353139.roa (hash: +1W1XexONgisqiQl8crOWAFeeckAYAY5KgqkjbIJosk=)
12: 3130332e37322e3232342e302f32342d3234203d3e203633363333.roa (hash: 8LecJ+E4ZI/jNoQTEs0sKUbACfH6Gj8ANm9cnIrMbr8=)
13: 3130332e3232302e35362e302f32322d3232203d3e203538353139.roa (hash: SbUX1LdpKn0uCIj+EVZcsAfOwjyeJW7igJZMkmidqas=)
14: 3130332e3232302e36342e302f32322d3232203d3e203538353139.roa (hash: skWq9DVjr/L+lEV4OnmJAyThXYF3upqH3K4mAGCnER0=)
15: 34352e3235342e382e302f32322d3232203d3e203633363333.roa (hash: QtpkCaAbIIcmF/w+6AQIgwsDzeZjED0NUe3lVS+FSxI=)
16: 3130332e3232302e36302e302f32322d3232203d3e203338303139.roa (hash: iShB9cHkCwz5TExfHEI9Gv8GmO4ZLK8Bb54bQbSoCVs=)
17: 3130332e37322e3232342e302f32312d3231203d3e203633363333.roa (hash: +xww1oAoOERvGNhmVfxKYnnGzSx8WBbI8K8RerAoeyI=)
18: 34352e3235312e39322e302f32322d3232203d3e203538353139.roa (hash: ePQdZvLEBEPecmiRi/mFtngHDwQwodel2INEy7X9N4E=)
19: 34352e3235342e392e302f32342d3234203d3e203633363333.roa (hash: wDkFnkOKolmiwC2jO5CsKf8kF/vNpoZGbBt0vTO4BHw=)
20: 34352e3235342e382e302f32332d3233203d3e203633363333.roa (hash: OupSETeNES+E6EQKnoTym1IonUo5VuuLCKmGEp4Jhg4=)
21: 34352e3235312e39362e302f32322d3232203d3e203338303139.roa (hash: 4T6XRtxPs6ZSsCkIbcBkih9Lcmxqq8lhG6rNbcuTYQQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d6:7e:57:14:04:cd:23:73:bf:e8:4c:1d:7f:6b:0a:dd:8f:6c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Validity
Not Before: Jul 23 16:29:07 2026 GMT
Not After : Jul 24 19:32:07 2026 GMT
Subject: CN=579DABDA2B0549458F20FE00AAA30F3F180FD9AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:ca:fe:22:f8:dd:34:78:7e:7e:c0:dd:ea:
ec:83:38:cb:0b:06:d3:4b:af:28:31:11:73:c5:e3:
69:81:0e:4b:a2:a1:a7:4c:25:af:c0:56:97:43:e6:
70:44:03:33:e9:88:4a:09:be:21:48:67:9c:4e:c7:
d2:95:1f:0f:14:30:2f:5d:f6:28:8d:87:82:9c:21:
b4:59:fd:7c:4a:96:b0:65:c9:2f:cf:03:44:1a:8b:
f7:50:92:da:a9:ab:4b:83:c3:7a:4a:ab:03:6a:ed:
36:fe:6a:4c:ff:d0:56:53:af:38:7e:14:4c:da:2f:
33:0f:3c:13:33:ed:d0:f3:f0:76:ee:24:59:7a:0c:
3d:07:89:ae:55:21:27:39:78:cf:6b:52:10:27:7b:
36:0f:cd:0f:c1:46:df:7d:4f:72:a7:49:c2:62:e2:
c2:e6:e9:07:70:d9:4b:3b:5f:47:b6:f5:bb:51:65:
74:1e:63:30:6f:3e:ca:f8:65:80:f8:fe:fe:53:f5:
54:98:e8:8e:89:39:27:de:4c:19:db:05:b5:6e:bc:
e2:ab:dc:88:4f:75:ff:46:f8:88:89:5b:dc:33:36:
9e:d3:99:1c:76:d9:c6:3c:16:84:2a:94:11:13:a2:
14:2d:0b:49:08:ac:b5:b3:a9:fc:74:a5:35:6f:38:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9D:AB:DA:2B:05:49:45:8F:20:FE:00:AA:A3:0F:3F:18:0F:D9:AD
X509v3 Authority Key Identifier:
keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c7:d4:30:7c:3b:be:d8:b9:d7:5d:b6:b9:77:47:6b:29:a1:
26:a2:00:ed:ad:48:b7:c8:40:f7:9f:45:76:29:e7:bd:fd:1d:
fc:46:a7:7a:4d:6c:b6:0a:06:9b:4f:a9:19:e1:10:e8:95:3b:
f8:82:9e:6c:31:eb:07:07:5c:ee:fb:75:07:7a:3f:db:df:f3:
ce:1f:60:d3:dd:aa:49:f4:7b:60:14:30:d7:71:5c:04:b4:3b:
0c:2b:9c:6f:a4:03:55:9b:0a:e0:ae:9d:a8:a8:ae:e6:3b:b5:
71:92:9e:68:82:fa:c7:20:d2:a1:e4:20:ef:56:53:79:0d:d6:
25:d9:0e:4e:10:6d:3f:bb:65:9d:d0:e9:7d:60:df:a0:de:80:
55:f9:c8:d0:5a:c0:ec:2f:fd:56:71:7d:8e:dc:ac:84:ba:ec:
92:c5:0f:10:18:1c:9e:da:1d:7f:ed:1e:c7:57:52:c3:ae:b5:
f5:25:7c:53:b5:a3:4b:71:96:ef:30:ab:d6:e3:43:05:b5:91:
b5:d1:5a:5b:3a:89:5d:56:a7:9c:f0:af:da:b5:ee:2c:a1:3e:
4f:77:99:6d:0a:2a:6f:ea:f2:4d:46:cd:53:fe:c9:56:5b:f1:
21:7d:13:f0:e5:ba:ca:4d:5f:a3:c4:a9:f4:42:ca:76:fa:73:
8b:03:1f:ba
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUEdZ+VxQEzSNzv+hMHX9rCt2PbLYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEw
OThCQzhEMjAeFw0yNjA3MjMxNjI5MDdaFw0yNjA3MjQxOTMyMDdaMDMxMTAvBgNV
BAMTKDU3OURBQkRBMkIwNTQ5NDU4RjIwRkUwMEFBQTMwRjNGMTgwRkQ5QUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAr8r+IvjdNHh+fsDd6uyDOMsL
BtNLrygxEXPF42mBDkuioadMJa/AVpdD5nBEAzPpiEoJviFIZ5xOx9KVHw8UMC9d
9iiNh4KcIbRZ/XxKlrBlyS/PA0Qai/dQktqpq0uDw3pKqwNq7Tb+akz/0FZTrzh+
FEzaLzMPPBMz7dDz8HbuJFl6DD0Hia5VISc5eM9rUhAnezYPzQ/BRt99T3KnScJi
4sLm6Qdw2Us7X0e29btRZXQeYzBvPsr4ZYD4/v5T9VSY6I6JOSfeTBnbBbVuvOKr
3IhPdf9G+IiJW9wzNp7TmRx22cY8FoQqlBETohQtC0kIrLWzqfx0pTVvOEeRAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUV52r2isFSUWPIP4AqqMPPxgP2a0wHwYDVR0j
BBgwFoAUtRSGRvLEUYZOIGluTxySagmLyNIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTM1NDAzNjg2OTQ2NDA4NS8wL0I1MTQ4NjQ2RjJDNDUxODY0RTIwNjk2RTRGMUM5
MjZBMDk4QkM4RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEwOThCQzhEMi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDkzNTQwMzY4Njk0NjQwODUvMC9CNTE0ODY0NkYyQzQ1
MTg2NEUyMDY5NkU0RjFDOTI2QTA5OEJDOEQyLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8fUMHw7vti5
1122uXdHaymhJqIA7a1It8hA959Fdinnvf0d/Eanek1stgoGm0+pGeEQ6JU7+IKe
bDHrBwdc7vt1B3o/29/zzh9g092qSfR7YBQw13FcBLQ7DCucb6QDVZsK4K6dqKiu
5ju1cZKeaIL6xyDSoeQg71ZTeQ3WJdkOThBtP7tlndDpfWDfoN6AVfnI0FrA7C/9
VnF9jtyshLrsksUPEBgcntodf+0ex1dSw6619SV8U7WjS3GW7zCr1uNDBbWRtdFa
WzqJXVannPCv2rXuLKE+T3eZbQoqb+ryTUbNU/7JVlvxIX0T8OW6yk1fo8Sp9ELK
dvpziwMfug==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:38:10 2026 by rpki-client