
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
File: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft (raw, json)
Hash identifier: bCqglcfdcR41vt4h0rk3aTAx34G6PfcHGUVtaDC2hg8=
Subject key identifier: C8:2C:46:15:51:D8:10:32:B5:43:32:72:54:3B:15:7C:FB:06:98:57
Authority key identifier: A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9
Certificate issuer: /CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
Certificate serial: 0867EFE8FECCC16A5C35C5BB06CAE3B0ECFAD375
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
Manifest number: 0129
Signing time: Fri 28 Aug 2026 06:48:05 +0000
Manifest this update: Fri 28 Aug 2026 06:43:05 +0000
Manifest next update: Mon 31 Aug 2026 15:45:05 +0000
Files and hashes: 1: 3130332e3131302e3133362e302f32322d3232203d3e203539303132.roa (hash: Gq1/YwE5iEcyh5S8JhVPyrDBUdmcenxdUCC+8WtWWiQ=)
2: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl (hash: iC3qwrPUq4qziSWiEuNUf53mrnO9X6l9PVjUGztTnYM=)
3: 3130332e3131302e3133392e302f32342d3234203d3e203539303132.roa (hash: V0EG+w4//opp0LXEw2L6fUoisMZUJ3b1c3mJzeOwhn4=)
4: 3130332e3131302e3133382e302f32342d3234203d3e203539303132.roa (hash: 74p3eAG8K0Xrv2nNxKKWTueHZVFekMZMwv9gE8TOGl0=)
5: 323430323a386263303a3a2f33322d3332203d3e203539303132.roa (hash: wRL2RgpwckoaF7H0gvAknICFvQDLSvcARgYe623q+hU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 15:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:67:ef:e8:fe:cc:c1:6a:5c:35:c5:bb:06:ca:e3:b0:ec:fa:d3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
Validity
Not Before: Aug 28 06:43:05 2026 GMT
Not After : Aug 31 15:45:05 2026 GMT
Subject: CN=C82C461551D81032B5433272543B157CFB069857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:e3:40:d9:4c:fa:84:94:d2:e2:cf:e0:6f:
aa:26:d8:c8:d7:3e:c1:4f:38:10:15:16:e7:8e:51:
44:6f:b6:51:75:97:a5:4f:3d:eb:88:ff:3c:9b:d3:
cd:84:37:38:6f:62:28:b4:0b:41:18:1f:1a:bf:40:
25:7c:f6:da:b4:c5:5c:13:b3:9f:40:f9:f7:12:13:
99:4f:14:8b:85:15:a9:0a:62:11:79:e3:e3:83:a4:
a1:28:65:e6:72:31:51:62:c5:e8:9a:7c:af:52:66:
48:a1:da:25:98:0b:7a:d1:6e:5f:2e:60:c4:5e:1c:
91:2a:f3:e7:e9:ce:43:c9:84:e5:f3:86:3c:7e:1f:
54:b8:f5:7d:07:ef:9d:5d:38:31:da:57:9d:63:f3:
54:c2:42:c6:68:ec:9c:f0:5d:e9:f3:b3:06:0e:e3:
86:b1:86:59:c0:8a:24:3a:e6:2c:d1:27:c2:4f:88:
29:6f:b3:5c:84:50:51:bc:45:5b:67:6b:6a:4f:fb:
91:54:f6:57:57:39:f3:9a:dd:cf:51:e4:9a:cd:d6:
e2:99:0e:3a:fa:a1:2a:64:66:46:72:df:52:4e:00:
4d:2b:c5:85:b8:32:b2:44:19:f6:8e:0b:22:10:f8:
2e:ce:dd:e4:8f:2c:3e:85:f4:bd:55:2f:cc:99:c4:
ca:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2C:46:15:51:D8:10:32:B5:43:32:72:54:3B:15:7C:FB:06:98:57
X509v3 Authority Key Identifier:
keyid:A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a3:9f:72:0f:ef:d6:6d:8f:1e:ef:33:ab:80:a9:57:62:77:
c5:19:9d:64:e9:bf:97:ad:97:51:ec:ee:23:90:4d:d1:b2:be:
3c:1d:61:72:3f:0b:96:ed:6f:2e:f5:1d:4f:c0:e7:17:35:66:
02:83:e1:a5:b8:bc:af:c4:ca:f0:8e:5d:13:df:78:b3:36:dc:
3c:92:a0:a2:b1:57:c4:07:f3:a7:dd:6b:cc:13:65:33:56:7b:
16:8b:62:1e:48:7c:e6:7b:b5:0d:07:32:d9:e2:c3:f4:f3:7a:
1b:76:fb:d9:fb:d0:01:e7:a3:21:02:e8:b4:4e:9f:75:d4:e7:
54:f0:e0:7d:db:cb:8e:24:b8:d1:79:9a:cf:b9:e9:c9:bf:71:
96:44:fd:19:3b:6f:c4:1d:91:f1:15:06:99:96:e6:6b:4b:94:
41:70:67:83:13:15:e9:27:c7:df:61:b8:5e:83:74:99:5e:ff:
5c:0d:b6:a0:a5:a4:39:86:88:dd:51:0a:3e:3d:92:72:73:90:
4f:33:4f:22:8f:82:bd:e9:af:9c:4f:af:56:47:41:f4:ae:92:
c6:46:66:38:0f:07:64:18:52:73:55:4e:41:df:6e:42:2e:2c:
74:99:df:eb:2d:d2:ae:70:fc:4d:1c:84:eb:30:90:58:25:60:
a0:cd:d3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:02:33 2026 by rpki-client