
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
File: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft (raw, json)
Hash identifier: nQu1rXMxhGf2eQodIkhw0xXQkgHGlFkYcYhYrrnyXaM=
Subject key identifier: 42:B3:D7:DB:57:4A:82:17:4B:D3:A2:E4:A7:C3:50:D4:64:C5:94:FF
Authority key identifier: A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9
Certificate issuer: /CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
Certificate serial: 7802C237AEEC48D77E83B9E7B055091E2211179C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
Manifest number: ED
Signing time: Tue 14 Jul 2026 11:11:08 +0000
Manifest this update: Tue 14 Jul 2026 11:06:08 +0000
Manifest next update: Wed 15 Jul 2026 13:28:08 +0000
Files and hashes: 1: 3130332e3131302e3133392e302f32342d3234203d3e203539303132.roa (hash: V0EG+w4//opp0LXEw2L6fUoisMZUJ3b1c3mJzeOwhn4=)
2: 3130332e3131302e3133382e302f32342d3234203d3e203539303132.roa (hash: 74p3eAG8K0Xrv2nNxKKWTueHZVFekMZMwv9gE8TOGl0=)
3: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl (hash: EUUEqKs2E0wcpoVJDdtDekkORsMtWxWtDM7SWW+u4NE=)
4: 3130332e3131302e3133362e302f32322d3232203d3e203539303132.roa (hash: Gq1/YwE5iEcyh5S8JhVPyrDBUdmcenxdUCC+8WtWWiQ=)
5: 323430323a386263303a3a2f33322d3332203d3e203539303132.roa (hash: wRL2RgpwckoaF7H0gvAknICFvQDLSvcARgYe623q+hU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 13:28:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:02:c2:37:ae:ec:48:d7:7e:83:b9:e7:b0:55:09:1e:22:11:17:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
Validity
Not Before: Jul 14 11:06:08 2026 GMT
Not After : Jul 15 13:28:08 2026 GMT
Subject: CN=42B3D7DB574A82174BD3A2E4A7C350D464C594FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4c:b3:73:6b:9f:95:b1:04:95:5e:4e:9f:a0:
90:16:3c:b0:15:99:9a:da:41:1c:6c:99:e4:22:4c:
64:89:43:ca:3d:3e:7e:1b:ae:9f:27:eb:ba:2c:4f:
33:31:96:1f:74:1a:20:e4:05:f5:d0:01:e0:ed:f4:
d8:78:20:72:24:9b:5d:67:d9:61:e1:c1:f9:bf:fa:
bb:56:1d:34:f0:07:4f:91:02:66:c6:ea:d5:80:0d:
13:05:f9:eb:c8:70:98:39:65:a6:69:1e:41:bd:a9:
d6:25:f5:ee:04:90:bc:92:6e:b4:ea:b8:eb:63:df:
63:25:13:de:57:75:f5:a7:5b:e6:ee:7a:cd:68:4c:
ac:41:ab:85:39:4b:12:87:3b:1f:92:2b:81:77:86:
f6:6f:1b:51:b0:62:6e:00:2e:2b:42:4d:37:b0:2a:
84:0f:ca:d0:a1:d7:50:28:3e:64:41:8e:71:c5:b0:
96:09:13:aa:08:d6:1c:49:5b:0d:cd:15:07:69:c0:
57:e3:85:36:3e:ea:11:9b:a0:7c:e2:ab:dd:4d:5d:
b2:87:6c:fd:73:57:c8:07:73:34:65:a4:cf:3c:7b:
ea:4b:85:84:a5:e4:ab:6b:fc:01:62:f2:4d:8f:cd:
6b:43:17:ad:26:8c:88:f9:53:3a:02:37:bc:76:d9:
e5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B3:D7:DB:57:4A:82:17:4B:D3:A2:E4:A7:C3:50:D4:64:C5:94:FF
X509v3 Authority Key Identifier:
keyid:A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1c:53:e1:eb:8f:87:a5:93:18:03:b4:27:13:c5:3d:69:21:
32:01:f1:cf:75:39:8a:fb:88:24:aa:8a:6f:69:94:e3:ab:ad:
20:53:9d:51:01:40:f1:2c:c5:f9:a6:18:40:c7:8d:f0:af:fa:
7b:39:e5:75:ad:e1:ae:53:0a:1e:ca:43:2b:ea:9e:51:28:8e:
6c:71:14:0d:88:df:c0:6f:b9:c0:84:5c:1f:59:a1:48:fd:da:
77:cb:43:49:ec:55:bc:f7:fe:3a:8b:9a:be:28:5a:47:d3:83:
5a:f6:1e:09:be:c9:59:66:e2:f7:13:ae:d0:b5:72:bd:0c:c4:
ad:d9:b3:31:a4:8a:3d:f2:d3:c2:3f:ca:7d:80:dd:54:4c:d8:
3f:15:59:f4:60:78:f7:d1:ff:d9:81:ed:fd:9b:d0:79:a2:12:
38:dd:85:e0:79:c3:ab:a4:2f:77:5c:3c:71:4e:ce:c5:c6:aa:
9b:bf:b8:58:8f:19:d8:4e:45:14:b8:5c:11:92:ee:fb:8e:ea:
06:ca:a8:83:60:ce:79:40:ad:22:95:18:9c:d2:18:a5:a2:77:
c3:f2:a7:fb:4a:59:1a:30:36:ac:87:53:e2:c0:02:b3:9d:9d:
f4:ad:41:d1:9e:ae:63:38:1a:d8:18:96:09:83:a5:65:ac:4b:
09:48:eb:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:12:56 2026 by rpki-client