
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
File: 6A45D8322C3648F91E212472F604CAFDBA7019BB.mft (raw, json)
Hash identifier: LQB4WHOsQfRPqghIhzc3iKtPf4jhZbnw2d+FOPFklX8=
Subject key identifier: 78:D6:26:45:3E:E1:DA:1A:19:78:B9:17:C5:D7:47:76:54:E1:BA:B2
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Certificate issuer: /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial: 2B000ED5841C9B6B8C7A5BF5755F1ED01843AFD3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
Manifest number: FE
Signing time: Mon 27 Jul 2026 02:13:07 +0000
Manifest this update: Mon 27 Jul 2026 02:08:07 +0000
Manifest next update: Tue 28 Jul 2026 03:59:07 +0000
Files and hashes: 1: 3130332e34332e3133342e302f32342d3234203d3e203535393931.roa (hash: Arahau1/zdBFquh22OcOxXJ61Cw0C3+PJGtnB+0ekGo=)
2: 3130332e3233352e3130312e302f32342d3234203d3e203535393931.roa (hash: y4iD+WZmyRqylC4ATqqLB8S0AwLFBnSmYnNr2Eb09NA=)
3: 6A45D8322C3648F91E212472F604CAFDBA7019BB.crl (hash: ypwTREXRR0nw9AJDq4NTqZlEP+Sej2YsXNttnLmUpj4=)
4: 3130332e3139322e3231302e302f32342d3234203d3e203535393931.roa (hash: 63AwH0JNDe88UgRiEZk11mXrDuOfakAl/Ic20VC4H+s=)
5: 3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa (hash: d/U3NIj7qaoBeCrDzGEzR4wsfsmAGdyLg/VID04jiyw=)
6: 34352e3132342e37362e302f32322d3232203d3e2034383337.roa (hash: 0RAvP2PlQGsViOKgQSlbU9Jnyva7IRYPaZUPOcsW7zk=)
7: 3130332e3139322e3230382e302f32342d3234203d3e203535393931.roa (hash: d3ASlDfMVC/gtOrl6vQFyUojqbnZxFte8DXs9XPrPrg=)
8: 34352e3132342e37382e302f32342d3234203d3e203535393931.roa (hash: k8exgEof7UP4003lab+Jt39GCbZi/ZuMl5F2bByXX48=)
9: 3130332e34332e3133332e302f32342d3234203d3e203535393931.roa (hash: XdGamdMSAy1lnVU2jYcYZZbhDxqwsaKSaAwC9H6/vA8=)
10: 3130332e34332e3133322e302f32342d3234203d3e203535393931.roa (hash: PQwpOdF5Ex7Q2R7j4oTKXqncuOc5DZABUSDAojSAQug=)
11: 34352e3132342e37362e302f32322d3232203d3e203535393839.roa (hash: zFIm0VLvsUuecFtlGbSjghi253R2ygdOCwx+j/GSCJA=)
12: 34352e3132342e37362e302f32342d3234203d3e203535393931.roa (hash: U4tmDQhb9Ol98/9L64VDYt4HNIjh93kgrKwzoQS/mhE=)
13: 3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa (hash: mqgyVIKWcd9YPXCsBu33JjhSj4t3CTMMoRkvfZ77xG4=)
14: 3130332e34332e3133352e302f32342d3234203d3e203535393931.roa (hash: Iqvi8zah1N+/MUEIpeWL683Upeca1a29t8qNXjNsWBE=)
15: 3130332e3135372e3231332e302f32342d3234203d3e203535393839.roa (hash: JA+7kTjp2WRlf/AXz0FiSp2zY6KqTrgLwGsSbayo5U8=)
16: 34352e3132342e37372e302f32342d3234203d3e203535393931.roa (hash: mtQtNdj9szZilLtTK//pM/h+ocuzur035q05fktIXuo=)
17: 3130332e3135372e3231322e302f32332d3233203d3e2030.roa (hash: 8m0e57u2wVKxRF/YZ3RBUb/FB78IzUONuz1gdm7u3Aw=)
18: 3130332e3139322e3230392e302f32342d3234203d3e203535393931.roa (hash: N8Oi6V973rdM73u0MOJ6Mq0jNacYqIpITVueY3fgBto=)
19: 3130332e34332e3133342e302f32332d3233203d3e2034383337.roa (hash: FyzFdZgKo3BDxyrLpNZ7QCXKhLr45lg7mKPng6cg7mg=)
20: 34352e3132342e37392e302f32342d3234203d3e203535393931.roa (hash: 6ZZEnwDcgTL6tPVDr6GFQihUclNuFSkoAt1U4mSGRrc=)
21: 3130332e3139322e3231312e302f32342d3234203d3e203535393931.roa (hash: k+LCBbRPVawp4Rtsb3NBIP+v4bxjVSnD9il2zTHON3M=)
22: 3130332e3139322e3230382e302f32322d3232203d3e203535393931.roa (hash: +7t135INfa+sPupaJUnFagdsPHo9tCMwSYAZ8bpqT4E=)
23: 3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa (hash: sn5OSKvc07ovlAcz0b/lVzsgYr8++T6hfED7k7DkGRA=)
24: 3130332e3139322e3230382e302f32322d3232203d3e2034383337.roa (hash: hHcJzGkaL63bz/B5cCM90j43PRCUTzKmH4NauShLPrg=)
25: 3130332e34332e3133342e302f32332d3233203d3e203535393839.roa (hash: IefQkI8Hfyxc4tb4gs5aVgR/yG32bYmYgetSb9VLX28=)
26: 3130332e3139322e3230382e302f32322d3232203d3e203535393839.roa (hash: 1dLcAHtoXHq//FproHRRjOCSgYqI4kWyRf26+UhTGsg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:00:0e:d5:84:1c:9b:6b:8c:7a:5b:f5:75:5f:1e:d0:18:43:af:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Validity
Not Before: Jul 27 02:08:07 2026 GMT
Not After : Jul 28 03:59:07 2026 GMT
Subject: CN=78D626453EE1DA1A1978B917C5D7477654E1BAB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e9:8d:f0:57:64:15:86:6c:14:ab:20:86:38:
a4:de:15:17:da:35:2d:1b:59:97:6d:8b:ce:2b:30:
ab:a1:9a:14:7e:ce:bf:ea:17:8d:93:91:cc:02:19:
d8:af:a8:d2:fc:1a:a4:8e:1e:3d:83:82:4c:86:a1:
53:ab:71:dc:64:22:3c:a8:79:9c:24:13:7a:12:31:
3f:96:02:bf:aa:c9:0b:ce:6b:17:49:f7:25:32:b9:
7c:f1:b2:0b:cc:72:71:96:7e:b9:cb:d2:a6:7c:ee:
12:86:c2:cb:bd:0f:d8:32:7d:68:9f:ea:91:8d:a8:
28:3d:b7:3d:bd:9d:79:60:a8:db:dd:a8:3a:ae:3c:
c3:6c:e4:4f:07:dc:9b:b7:22:12:3d:6a:df:e2:8c:
e5:66:33:05:5e:1c:06:08:68:d6:8a:0e:1f:78:fb:
60:10:95:33:6e:cf:d1:61:5f:d1:a4:e1:1f:d5:26:
37:08:74:3a:92:fa:da:41:09:11:03:6c:09:1e:26:
c2:f5:81:b2:34:10:27:1a:3c:86:db:1d:f3:44:7e:
8e:87:df:01:f3:2c:aa:c9:61:05:1c:41:44:a2:a8:
bb:94:6b:e3:b8:a9:dc:7e:b5:21:2e:39:77:70:81:
e1:1a:ff:18:e1:41:24:43:3c:2d:a1:e3:f6:70:23:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D6:26:45:3E:E1:DA:1A:19:78:B9:17:C5:D7:47:76:54:E1:BA:B2
X509v3 Authority Key Identifier:
keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:8d:d1:97:cb:05:52:39:94:e9:fe:91:79:c4:57:93:a7:51:
ca:c4:ef:e3:3f:53:9b:fa:51:70:37:21:71:46:70:f2:08:81:
88:00:7c:fc:20:eb:9f:51:18:b5:e0:d7:33:fd:8d:4d:58:5f:
5b:ce:17:b6:20:74:fc:70:a7:df:86:c1:8c:70:fa:da:39:be:
ad:84:6c:9f:5f:37:8b:8c:78:4d:59:ec:2a:6e:36:6f:f6:87:
aa:82:d3:73:42:ec:0c:03:b2:07:05:4d:86:55:98:e8:68:80:
ef:94:f3:c3:95:0e:49:e4:a9:8b:fa:9c:7c:cb:68:eb:9f:9e:
71:eb:d3:f7:3c:44:0d:db:dc:26:70:68:88:84:7e:16:44:70:
83:cd:2e:e3:51:4b:8d:9b:b1:11:19:de:08:24:6c:fd:08:71:
63:dc:4b:53:e7:91:d2:c9:44:8f:c1:02:85:6d:66:af:aa:bb:
87:3d:08:8b:c2:dd:f3:66:9a:4f:3d:bc:42:cf:a5:30:86:1d:
31:53:7d:0d:91:88:6e:8a:fc:92:c0:e3:f3:35:d3:b3:6c:23:
57:81:eb:8b:b3:5e:1a:3c:31:b8:92:af:32:2c:91:0e:e7:16:
94:fc:fe:bb:3d:f5:99:a0:e4:e2:fb:bf:4e:19:99:dc:d3:de:
e6:f5:6b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:40:48 2026 by rpki-client