
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft
File: 6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft (raw, json)
Hash identifier: 3WNavkYlirj23PlzyICYhsFZaqPRvoLl3rfxS7vgAbM=
Subject key identifier: B3:13:E5:35:EC:0C:78:C6:13:37:A9:CD:D1:EA:E0:85:65:7B:66:E7
Authority key identifier: 6F:1B:DE:E7:52:DB:E3:5C:77:30:8D:3A:9B:77:5A:C4:97:B5:0C:04
Certificate issuer: /CN=6F1BDEE752DBE35C77308D3A9B775AC497B50C04
Certificate serial: 57C415F7B886D8EE09067D02A277F51B9DEC083F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft
Manifest number: 012B
Signing time: Fri 04 Sep 2026 01:09:30 +0000
Manifest this update: Fri 04 Sep 2026 01:04:30 +0000
Manifest next update: Mon 07 Sep 2026 09:27:30 +0000
Files and hashes: 1: 3136372e3232302e3234342e302f32322d3233203d3e203538383632.roa (hash: S6YeUv7/1SNKdqeM0QDgAM+ogiwASSDMjBMWQQAcs0I=)
2: 6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl (hash: hH+x3MuLyVKLTwHVCZTmn36lKAWxB8wzbsU8BbqiQIE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 10:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:c4:15:f7:b8:86:d8:ee:09:06:7d:02:a2:77:f5:1b:9d:ec:08:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F1BDEE752DBE35C77308D3A9B775AC497B50C04
Validity
Not Before: Sep 4 01:04:30 2026 GMT
Not After : Sep 7 09:27:30 2026 GMT
Subject: CN=B313E535EC0C78C61337A9CDD1EAE085657B66E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2a:92:b0:3d:3e:41:14:b1:e4:78:a5:e0:a9:
d7:92:4f:80:1d:01:bf:d0:17:dd:fb:6d:85:60:b5:
5c:d6:b8:b4:95:01:b1:9d:c9:e9:0e:c8:21:3a:c7:
a4:24:59:54:88:d9:8e:5d:ab:58:89:90:67:95:84:
c6:41:0a:ee:b4:d8:5a:13:81:91:eb:d4:28:0d:25:
70:6a:fd:e3:3c:f2:b1:1b:c8:d1:d8:d0:12:41:a3:
3f:bb:90:95:42:ed:50:ca:fc:72:1e:a5:d0:fd:81:
e0:db:68:31:50:3f:7a:78:0d:1a:e8:c0:45:ad:35:
e0:60:51:0b:fd:25:00:2f:94:bb:69:39:e1:ba:bb:
42:85:d3:b4:3e:bf:7d:17:49:ea:ef:c9:a5:ef:3a:
83:7d:0f:f4:c2:9b:84:04:dc:54:57:1b:35:07:fd:
a7:81:5e:28:62:26:53:6b:c9:93:7c:83:b9:e3:57:
29:2f:03:6f:26:55:4d:c0:14:1d:26:ca:a8:c9:1c:
32:91:d0:4c:ea:a5:dd:25:64:7c:ec:8c:7d:5e:ea:
84:f0:c7:09:2d:b3:8b:f8:0a:13:f5:e9:21:f9:ec:
57:55:73:c2:25:e6:0e:ca:fa:3e:9f:ad:5e:c8:20:
6f:d5:cc:0f:c6:b4:12:5d:a8:e2:ed:0e:a4:79:46:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:13:E5:35:EC:0C:78:C6:13:37:A9:CD:D1:EA:E0:85:65:7B:66:E7
X509v3 Authority Key Identifier:
keyid:6F:1B:DE:E7:52:DB:E3:5C:77:30:8D:3A:9B:77:5A:C4:97:B5:0C:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f1:45:4e:75:df:01:81:f9:c8:86:b1:dc:5f:c7:f8:ec:75:
16:ed:22:f1:f2:c4:9b:2e:52:2f:01:ce:70:86:08:4d:81:b7:
f7:ed:dc:79:0a:88:ce:10:be:ab:12:89:2f:23:f7:03:95:f3:
d6:8e:b8:77:f2:29:9a:75:f5:fb:10:e0:89:f9:12:a8:54:62:
75:6a:4f:c2:1e:ef:ac:3e:82:ee:e8:41:be:aa:fd:47:e5:51:
42:bc:9a:16:42:e1:83:e6:93:92:3c:01:cc:b8:81:44:7b:5e:
62:a4:eb:86:36:fe:f6:7b:31:d9:bb:f2:2e:52:cc:33:78:ae:
23:3a:29:f0:db:4d:65:25:fc:b6:0e:27:f9:52:44:c7:eb:cd:
43:ef:23:ad:9d:cc:58:e1:b7:25:60:8a:1e:4d:3c:0c:d9:a1:
d8:d9:bf:28:d8:c9:f8:c4:a9:ca:a4:a4:2e:34:4c:00:7b:1b:
60:6b:0f:0e:31:b8:0d:05:3f:36:de:02:bd:95:99:ec:0f:12:
8d:c9:f2:0c:0c:1e:46:2c:d2:c6:25:b1:3e:cf:af:ff:f2:a0:
b9:e8:1c:f4:a6:0b:8b:e6:67:31:1f:0a:4c:78:41:6a:ce:35:
57:70:69:52:7f:15:9f:6b:9d:ab:93:a5:bf:3f:43:ad:e2:6c:
1f:a9:02:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:29:18 2026 by rpki-client