
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
File: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft (raw, json)
Hash identifier: DvjVQNlV2VCn6XOB1upzy6op+PNDnDiW40IvuXEcnKQ=
Subject key identifier: 93:6C:E2:1C:13:30:57:47:65:72:F0:FE:ED:17:4C:F4:84:FB:2D:31
Authority key identifier: A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9
Certificate issuer: /CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
Certificate serial: 615C3929EBA9542F9410A92C739C92BB4DF3F984
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
Manifest number: 2F
Signing time: Sun 22 Feb 2026 20:37:30 +0000
Manifest this update: Sun 22 Feb 2026 20:32:30 +0000
Manifest next update: Mon 23 Feb 2026 23:24:30 +0000
Files and hashes: 1: 3130332e3131302e3133362e302f32322d3232203d3e203539303132.roa (hash: Gq1/YwE5iEcyh5S8JhVPyrDBUdmcenxdUCC+8WtWWiQ=)
2: 323430323a386263303a3a2f33322d3332203d3e203539303132.roa (hash: wRL2RgpwckoaF7H0gvAknICFvQDLSvcARgYe623q+hU=)
3: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl (hash: 7g7OHzW6KczdIwFWmPkptkx9NJWQk6B6XQF9mXBjODw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:5c:39:29:eb:a9:54:2f:94:10:a9:2c:73:9c:92:bb:4d:f3:f9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
Validity
Not Before: Feb 22 20:32:30 2026 GMT
Not After : Feb 23 23:24:30 2026 GMT
Subject: CN=936CE21C133057476572F0FEED174CF484FB2D31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:37:03:92:4e:03:7f:a3:66:84:fe:94:7f:d4:
8b:06:76:8f:d0:37:0b:56:d1:40:41:63:be:b2:71:
a5:1a:24:62:d1:96:c8:40:c1:a4:41:27:7d:22:fe:
03:b0:d1:4c:05:29:bf:c9:92:fc:00:70:aa:68:c7:
09:3c:14:fa:5f:32:9c:a8:86:dd:e8:c1:fb:74:12:
6a:0d:b5:3f:e8:da:27:4f:0c:fc:56:dc:0f:1e:b7:
65:97:45:d0:12:9c:73:ac:e9:8c:95:84:ef:d1:71:
e0:a6:ca:32:17:b0:3f:3c:c3:6d:7c:da:40:c3:8d:
2d:54:cd:4b:e2:42:ed:08:b4:19:d2:cd:a4:8c:fe:
c8:01:db:fb:3c:95:05:99:9f:52:f5:7b:c5:70:2d:
b1:b4:8b:dd:86:de:32:a0:2f:d3:83:d4:35:b4:8c:
e9:ca:1f:59:4a:3d:ab:02:4e:0f:80:df:82:dd:c2:
cc:39:23:0a:c8:3c:e4:aa:2d:07:7b:5c:e9:be:8c:
26:94:ad:a1:b7:19:e9:a4:3f:32:b6:ae:3c:9c:e4:
e4:84:55:75:f8:68:42:c1:42:32:63:dd:54:e7:62:
3e:62:1a:eb:d4:55:a4:1f:69:cf:8f:09:ac:af:e2:
f7:11:1b:b8:79:c0:1a:f0:25:18:66:79:3a:e2:ca:
f2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6C:E2:1C:13:30:57:47:65:72:F0:FE:ED:17:4C:F4:84:FB:2D:31
X509v3 Authority Key Identifier:
keyid:A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:44:0e:c4:36:33:a8:2d:ba:f5:de:ba:fc:25:51:a2:7f:1f:
95:ea:dc:8c:54:14:57:11:29:0d:ad:52:6c:f3:82:35:d8:0c:
1b:e3:07:5f:02:5d:98:72:39:95:0c:d7:5b:28:9d:c2:27:bc:
b7:6f:ca:58:13:ae:83:8e:e2:e7:b3:c7:05:57:d8:de:81:6a:
14:0f:70:e8:4c:45:7b:ca:4a:35:92:5b:6a:57:94:9a:ac:8a:
f2:56:00:3f:d1:1b:f2:98:55:9b:b3:fb:73:23:f5:49:8c:37:
c4:40:31:cb:30:60:7f:51:30:b9:59:5c:36:85:c2:ed:75:80:
0f:47:89:a0:2f:cb:dc:dc:17:52:60:2e:4a:ee:09:0a:56:3c:
1e:44:5c:b8:9e:d1:3a:88:a0:7c:df:4a:1b:8a:d0:d1:26:12:
41:62:29:1d:5d:fa:81:a3:57:89:c7:a8:aa:59:66:9b:f0:33:
ae:3e:a0:72:f5:f4:ad:f7:80:10:9f:3e:43:36:57:2b:17:94:
c8:b0:9a:3d:81:68:ec:3d:9e:2b:5f:2e:24:bd:46:2e:14:f8:
a3:da:32:e2:54:ac:63:cf:5c:57:80:af:aa:4d:14:fd:64:2a:
b5:49:e8:69:18:82:ce:67:fd:c7:de:2d:85:73:4b:3f:cc:40:
f6:9b:8a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:27:10 2026 by rpki-client