
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
File: B0B537B0747D6013B06152AEE77D15203B1916FA.mft (raw, json)
Hash identifier: mjglLuetlghWFsRB9MkZ3Ie6mv5vuTLVstZzVZL2/9U=
Subject key identifier: 90:13:20:83:5E:4D:82:BE:61:FB:99:6E:5F:E5:F3:75:1C:D7:47:C3
Authority key identifier: B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
Certificate issuer: /CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Certificate serial: 4501DA249000F51BAF5990E7B318FFF4CA02C95D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
Manifest number: 6A
Signing time: Fri 02 Oct 2026 15:55:33 +0000
Manifest this update: Fri 02 Oct 2026 15:50:33 +0000
Manifest next update: Mon 05 Oct 2026 20:34:33 +0000
Files and hashes: 1: 3231302e37362e3137362e302f32322d3232203d3e20313334373632.roa (hash: uCOWXNMePOZa/iksUWzRBEjUWdyxzN11zhwz3y1U4Ek=)
2: 3231302e37362e3137322e302f32322d3232203d3e20313334373632.roa (hash: EKUBeXes+M1jDCe7e1kc1oCmCgsBM6tO5sag3Ry34yY=)
3: 3231302e37362e3138302e302f32322d3232203d3e20313334373632.roa (hash: ncGJvfVZz1aXP6VWJdrIhLgknTdYP6bRFVSX0ogc/kg=)
4: 3231302e37362e3136382e302f32322d3232203d3e20313334373632.roa (hash: WkFPiKlYJz6jmeh4Y+K4Zer0JOq+QHQvGMcujzWOVz0=)
5: 3231302e37362e3136342e302f32322d3232203d3e20313334373632.roa (hash: S4Xiq+tsebEtfsCJHFrLqedmnsBo40vyHoPs4f0RABE=)
6: B0B537B0747D6013B06152AEE77D15203B1916FA.crl (hash: piJCYW+2fuiD8Ep8lOAKxfdtzLugothYRqqwjV0+Sj4=)
7: 3231302e37362e3138382e302f32322d3232203d3e20313334373632.roa (hash: zI6ePoI0y2Fm1sSqrrUkSajPorMwE/xAmExyk0kFlus=)
8: 3231302e37362e3136302e302f32322d3232203d3e20313334373632.roa (hash: SrpaphldTts5AcZEbZ+7FmR5HxvlWebU1eK0VABiMKY=)
9: 3231302e37362e3138342e302f32322d3232203d3e20313334373632.roa (hash: KBOVI2UBdbeXRbsHVeTV6sbjrU6doYtA6rDMtJTlq1U=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 09:56:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:01:da:24:90:00:f5:1b:af:59:90:e7:b3:18:ff:f4:ca:02:c9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0B537B0747D6013B06152AEE77D15203B1916FA
Validity
Not Before: Oct 2 15:50:33 2026 GMT
Not After : Oct 5 20:34:33 2026 GMT
Subject: CN=901320835E4D82BE61FB996E5FE5F3751CD747C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:df:d5:83:40:90:98:c9:01:0f:80:90:05:52:
32:93:7b:69:ec:d2:0e:9f:e1:96:86:ac:43:65:d2:
d1:39:02:7e:22:49:67:fe:81:ed:d0:91:25:eb:c0:
81:e0:98:d4:0a:9c:69:05:d7:a4:87:9b:55:95:a0:
dc:31:80:ff:20:cd:8b:c5:15:26:22:5f:24:ea:5e:
0c:76:0e:e5:4f:dd:ce:0f:43:ba:aa:79:a6:33:cd:
43:9f:26:d6:bf:86:f3:33:bf:e4:47:0a:fd:00:27:
c3:cc:90:e8:7e:4e:17:f7:2b:81:a9:ec:e9:66:c4:
07:4f:66:f7:2f:05:4b:6f:d1:93:24:6a:ed:47:5b:
73:4c:bc:a0:79:e6:79:ac:2b:73:68:08:25:4a:f6:
dd:24:98:c4:79:40:a8:13:53:f1:05:0f:00:7e:b3:
84:b9:e2:38:e1:54:8d:38:4c:a6:4d:30:7b:6b:48:
c9:0c:66:4c:7e:62:7f:bb:42:6b:3d:5f:6b:7b:dc:
2c:d8:31:97:e8:f3:fc:aa:e9:b4:a5:f3:3f:e8:44:
4a:df:77:a2:4c:c3:d3:92:6c:69:31:e9:d4:d3:a2:
b4:dc:fc:e4:03:43:2d:c8:bf:7d:ab:ad:ce:c7:06:
0f:91:f6:e1:a9:fe:fd:51:2f:34:76:a8:f5:df:a1:
38:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:13:20:83:5E:4D:82:BE:61:FB:99:6E:5F:E5:F3:75:1C:D7:47:C3
X509v3 Authority Key Identifier:
keyid:B0:B5:37:B0:74:7D:60:13:B0:61:52:AE:E7:7D:15:20:3B:19:16:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0B537B0747D6013B06152AEE77D15203B1916FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122065292994805797/0/B0B537B0747D6013B06152AEE77D15203B1916FA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2e:c2:7b:5e:2f:d0:e2:d2:9d:0b:fa:03:97:89:96:df:1c:
82:7d:03:d5:c6:6b:5f:d6:74:2a:f0:63:5b:5a:09:ce:7b:b6:
8e:e1:a7:6d:d0:9f:e4:4c:6a:3c:2f:32:8a:8d:05:e9:50:64:
a8:87:25:4e:e3:00:8e:92:4b:a5:c5:27:6f:c0:09:11:79:ee:
07:85:91:c9:80:9f:1b:f7:94:7b:82:df:59:96:90:5a:f8:2d:
32:ae:13:91:76:b7:c5:34:cd:b9:7d:15:5a:bd:06:5c:dd:12:
13:37:63:bb:f7:82:78:61:bb:a2:15:6f:39:71:94:3c:13:0b:
8b:e1:a6:2b:aa:e1:db:44:e4:c3:75:5b:b7:d9:c4:ca:a1:c7:
d0:e1:3b:02:29:f0:13:6b:f0:64:6d:08:53:d0:eb:5f:79:cd:
68:1e:de:94:e7:fe:c7:12:a5:c1:8b:f3:41:0f:25:01:bf:90:
dd:68:7b:36:b4:39:02:17:98:bc:b2:08:d6:7d:00:23:f8:34:
9c:7f:ec:a9:ea:31:a5:68:1e:a6:c6:23:74:67:0d:3b:1e:07:
1d:ce:78:28:88:56:f8:9d:58:b6:58:3d:91:5a:00:88:3d:05:
ab:fc:f0:5d:f9:80:bc:49:d8:1c:53:79:a1:b6:69:65:f9:33:
41:19:70:e2
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIURQHaJJAA9RuvWZDnsxj/9MoCyV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjBCNTM3QjA3NDdENjAxM0IwNjE1MkFFRTc3RDE1MjAz
QjE5MTZGQTAeFw0yNjEwMDIxNTUwMzNaFw0yNjEwMDUyMDM0MzNaMDMxMTAvBgNV
BAMTKDkwMTMyMDgzNUU0RDgyQkU2MUZCOTk2RTVGRTVGMzc1MUNENzQ3QzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa39WDQJCYyQEPgJAFUjKTe2ns
0g6f4ZaGrENl0tE5An4iSWf+ge3QkSXrwIHgmNQKnGkF16SHm1WVoNwxgP8gzYvF
FSYiXyTqXgx2DuVP3c4PQ7qqeaYzzUOfJta/hvMzv+RHCv0AJ8PMkOh+Thf3K4Gp
7OlmxAdPZvcvBUtv0ZMkau1HW3NMvKB55nmsK3NoCCVK9t0kmMR5QKgTU/EFDwB+
s4S54jjhVI04TKZNMHtrSMkMZkx+Yn+7Qms9X2t73CzYMZfo8/yq6bSl8z/oRErf
d6JMw9OSbGkx6dTTorTc/OQDQy3Iv32rrc7HBg+R9uGp/v1RLzR2qPXfoTjFAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUkBMgg15Ngr5h+5luX+XzdRzXR8MwHwYDVR0j
BBgwFoAUsLU3sHR9YBOwYVKu530VIDsZFvowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy
MjA2NTI5Mjk5NDgwNTc5Ny8wL0IwQjUzN0IwNzQ3RDYwMTNCMDYxNTJBRUU3N0Qx
NTIwM0IxOTE2RkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjBCNTM3QjA3NDdENjAxM0IwNjE1MkFFRTc3RDE1MjAzQjE5MTZGQS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMjIwNjUyOTI5OTQ4MDU3OTcvMC9CMEI1MzdCMDc0N0Q2
MDEzQjA2MTUyQUVFNzdEMTUyMDNCMTkxNkZBLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOC7Ce14v0OLS
nQv6A5eJlt8cgn0D1cZrX9Z0KvBjW1oJznu2juGnbdCf5ExqPC8yio0F6VBkqIcl
TuMAjpJLpcUnb8AJEXnuB4WRyYCfG/eUe4LfWZaQWvgtMq4TkXa3xTTNuX0VWr0G
XN0SEzdju/eCeGG7ohVvOXGUPBMLi+GmK6rh20Tkw3Vbt9nEyqHH0OE7AinwE2vw
ZG0IU9DrX3nNaB7elOf+xxKlwYvzQQ8lAb+Q3Wh7NrQ5AheYvLII1n0AI/g0nH/s
qeoxpWgepsYjdGcNOx4HHc54KIhW+J1Ytlg9kVoAiD0Fq/zwXfmAvEnYHFN5obZp
ZfkzQRlw4g==
-----END CERTIFICATE-----
Generated at Sun Oct 4 12:28:41 2026 by rpki-client