
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
File: D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft (raw, json)
Hash identifier: Wb9Mt5tawO+GnuCoQ8KiJddkxV628OOUejR9VuCKPYE=
Subject key identifier: 0B:1C:34:A4:1B:89:E0:E1:E2:BA:62:B5:CD:D1:5A:3C:C1:0A:2D:69
Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Certificate serial: 19E680B43832B90B599F431238C36E7A5B370370
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
Manifest number: 63
Signing time: Tue 07 Apr 2026 06:23:56 +0000
Manifest this update: Tue 07 Apr 2026 06:18:56 +0000
Manifest next update: Wed 08 Apr 2026 06:34:56 +0000
Files and hashes: 1: 312e3131382e33352e302f32342d3234203d3e20313337373533.roa (hash: LWODh2T7rMTjolcycC8ZrtyVAnMO6vkZKW2tUocEVpQ=)
2: 312e3131382e332e302f32342d3234203d3e203134363138.roa (hash: Z80TJPKgWBszaQisJj/8BpK4zah/4emmNvfcSctsSwU=)
3: 312e3131382e332e302f32342d3234203d3e203136353039.roa (hash: +sGAlSoNhJAnufejm1rjSFdGhkbm95UUnsMG7/4cIj8=)
4: 312e3131382e33342e302f32342d3234203d3e20313337373533.roa (hash: PGRW9r+17m4oi4wQDBiSGdPYFTdv3tskoqCdpKd8PlY=)
5: 312e3131382e33362e302f32342d3234203d3e20313337373533.roa (hash: wX3KXCFY3ZU/rDO+Um660eZhmmPPFKIuR9ybyalQ4a8=)
6: D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl (hash: PA5zTW84EepMiG66anak5lL9IPWBebkhTDOxpK9HrlU=)
7: 312e3131382e36342e302f31392d3234203d3e20313337373533.roa (hash: tObk82ypt899Ae71gDcnATLW2DJAnEZ18kmyPZI+N2c=)
8: 312e3131382e33322e302f32322d3234203d3e20313337373533.roa (hash: 3olER77Eb/qrnFQ6fryREN7c/oB5Od6mzJn5VRZWU3M=)
9: 312e3131382e33332e302f32342d3234203d3e20313337373533.roa (hash: x982Dsqn+vR2z/6TvhWHAme4hKFgQ8OY11jaLy3ZNKc=)
10: 312e3131382e33322e302f32342d3234203d3e20313337373533.roa (hash: 09pt/jIm8iOWomJnC3cDqvKVyXhKk3JMgwKM4Mhwyqs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Apr 2026 01:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:e6:80:b4:38:32:b9:0b:59:9f:43:12:38:c3:6e:7a:5b:37:03:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Validity
Not Before: Apr 7 06:18:56 2026 GMT
Not After : Apr 8 06:34:56 2026 GMT
Subject: CN=0B1C34A41B89E0E1E2BA62B5CDD15A3CC10A2D69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ac:1e:32:ae:b2:46:74:30:14:64:2d:82:4e:
b9:dc:26:58:2a:41:91:7a:38:8a:1f:9f:d8:58:91:
9e:aa:61:b0:10:d0:b8:ed:b1:d6:f9:70:e7:dc:46:
cf:a4:27:a8:c0:f6:e9:aa:c1:96:5b:57:9c:89:18:
47:c5:68:81:80:0f:a0:46:f9:4a:c1:48:23:6c:61:
2f:92:66:e5:a0:53:31:b4:b5:49:08:12:79:e2:eb:
8e:51:da:62:74:62:19:94:81:16:4c:ae:f4:58:03:
c2:b8:17:34:19:15:80:e6:a3:e5:b0:66:fa:9a:0b:
b2:b4:7f:97:84:3f:22:9f:d3:d5:b8:44:78:8f:6c:
77:46:9e:4c:42:f8:4c:c5:e6:26:2d:57:a0:5d:47:
29:c6:66:51:0c:e6:58:79:af:c1:db:dd:3e:16:cf:
15:de:1c:20:ca:86:ee:15:af:68:de:e4:63:c6:c1:
52:6d:cd:9e:5b:2a:37:8b:fd:bc:a8:58:a7:ef:2f:
d1:88:fa:a1:60:34:bf:d0:7e:e2:d3:b9:d7:90:b9:
3e:81:72:95:aa:c1:21:f9:db:36:87:4f:82:4d:79:
e1:60:ca:6c:23:ab:5f:e2:c0:b1:93:aa:ae:89:c9:
ac:90:77:3a:d0:67:91:71:e8:d9:86:2c:1a:e3:48:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1C:34:A4:1B:89:E0:E1:E2:BA:62:B5:CD:D1:5A:3C:C1:0A:2D:69
X509v3 Authority Key Identifier:
keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:11:ce:09:16:8f:d5:23:82:20:e9:1f:90:b1:2e:01:e8:3c:
51:5a:02:c1:0b:68:ad:7b:77:5c:bd:12:58:ca:d3:f7:fe:01:
f0:d0:ec:97:8b:3a:b4:b3:c8:c2:e6:ba:d7:2f:72:c9:72:23:
54:f3:43:b1:43:d7:f4:49:e5:32:8c:6e:50:c9:f8:12:98:29:
c0:4f:fb:b4:7e:1f:67:db:76:60:8a:af:3d:a5:a1:9b:4b:8e:
f0:0d:c1:f3:ed:ac:ff:44:9e:9e:6c:06:aa:4a:02:35:5e:d2:
a6:88:41:92:1b:71:62:13:8a:3e:39:2b:c9:9b:84:f9:2d:35:
b6:13:5c:90:06:81:e3:99:2d:d0:26:09:a8:a4:ae:a2:c1:c8:
9a:07:07:5c:bc:da:95:07:21:fd:8b:27:17:59:e2:b9:0a:32:
0b:6a:57:a2:65:a3:3d:48:07:fc:2f:21:1f:72:dc:0a:07:0a:
d4:02:12:7b:09:af:26:90:f1:02:57:eb:7b:fc:3e:f1:97:e9:
32:23:0a:9d:59:61:7a:12:f4:4b:9f:d0:6f:f5:ca:59:b0:9d:
c9:a9:47:7a:be:cf:e3:bb:7a:ee:9d:3a:11:85:a2:cf:5e:a5:
b5:21:e9:f5:62:2e:89:e8:4e:d7:14:26:b2:91:33:a6:8f:43:
8d:e3:40:db
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUGeaAtDgyuQtZn0MSOMNuels3A3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC
MEQzODlFNTAeFw0yNjA0MDcwNjE4NTZaFw0yNjA0MDgwNjM0NTZaMDMxMTAvBgNV
BAMTKDBCMUMzNEE0MUI4OUUwRTFFMkJBNjJCNUNERDE1QTNDQzEwQTJENjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCerB4yrrJGdDAUZC2CTrncJlgq
QZF6OIofn9hYkZ6qYbAQ0Ljtsdb5cOfcRs+kJ6jA9umqwZZbV5yJGEfFaIGAD6BG
+UrBSCNsYS+SZuWgUzG0tUkIEnni645R2mJ0YhmUgRZMrvRYA8K4FzQZFYDmo+Ww
ZvqaC7K0f5eEPyKf09W4RHiPbHdGnkxC+EzF5iYtV6BdRynGZlEM5lh5r8Hb3T4W
zxXeHCDKhu4Vr2je5GPGwVJtzZ5bKjeL/byoWKfvL9GI+qFgNL/QfuLTudeQuT6B
cpWqwSH52zaHT4JNeeFgymwjq1/iwLGTqq6JyayQdzrQZ5Fx6NmGLBrjSNL/AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUCxw0pBuJ4OHiumK1zdFaPMEKLWkwHwYDVR0j
BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC
QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMC9ENjgwNURCMzA5MDU3
NjEyQ0M5MjcyQ0IyQzg1QkE2Q0IwRDM4OUU1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRHOCRaP1SOC
IOkfkLEuAeg8UVoCwQtorXt3XL0SWMrT9/4B8NDsl4s6tLPIwua61y9yyXIjVPND
sUPX9EnlMoxuUMn4EpgpwE/7tH4fZ9t2YIqvPaWhm0uO8A3B8+2s/0SenmwGqkoC
NV7SpohBkhtxYhOKPjkryZuE+S01thNckAaB45kt0CYJqKSuosHImgcHXLzalQch
/YsnF1niuQoyC2pXomWjPUgH/C8hH3LcCgcK1AISewmvJpDxAlfre/w+8ZfpMiMK
nVlhehL0S5/Qb/XKWbCdyalHer7P47t67p06EYWiz16ltSHp9WIuiehO1xQmspEz
po9DjeNA2w==
-----END CERTIFICATE-----
Generated at Tue Apr 7 12:09:17 2026 by rpki-client