
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
File: 6A45D8322C3648F91E212472F604CAFDBA7019BB.mft (raw, json)
Hash identifier: UDE6ggTQ8Dz4S5dD9kcVq0DHjkMyb9Y31FKHe8XTUQY=
Subject key identifier: 13:FE:07:D9:7C:9E:D3:EC:D4:C1:23:ED:17:30:8F:E5:FA:AC:5E:8A
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Certificate issuer: /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial: 23D1523BF8D93CA1EC6E9AC23B5A16E35BDC156C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
Manifest number: C2
Signing time: Thu 11 Jun 2026 22:44:31 +0000
Manifest this update: Thu 11 Jun 2026 22:39:31 +0000
Manifest next update: Fri 12 Jun 2026 23:11:31 +0000
Files and hashes: 1: 3130332e34332e3133342e302f32332d3233203d3e2034383337.roa (hash: FyzFdZgKo3BDxyrLpNZ7QCXKhLr45lg7mKPng6cg7mg=)
2: 3130332e3139322e3230382e302f32322d3232203d3e203535393931.roa (hash: +7t135INfa+sPupaJUnFagdsPHo9tCMwSYAZ8bpqT4E=)
3: 3130332e3233352e3130312e302f32342d3234203d3e203535393931.roa (hash: y4iD+WZmyRqylC4ATqqLB8S0AwLFBnSmYnNr2Eb09NA=)
4: 3130332e3139322e3230382e302f32322d3232203d3e2034383337.roa (hash: hHcJzGkaL63bz/B5cCM90j43PRCUTzKmH4NauShLPrg=)
5: 3130332e3139322e3230392e302f32342d3234203d3e203535393931.roa (hash: N8Oi6V973rdM73u0MOJ6Mq0jNacYqIpITVueY3fgBto=)
6: 34352e3132342e37362e302f32322d3232203d3e2034383337.roa (hash: 0RAvP2PlQGsViOKgQSlbU9Jnyva7IRYPaZUPOcsW7zk=)
7: 3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa (hash: sn5OSKvc07ovlAcz0b/lVzsgYr8++T6hfED7k7DkGRA=)
8: 3130332e3135372e3231322e302f32332d3233203d3e2030.roa (hash: 8m0e57u2wVKxRF/YZ3RBUb/FB78IzUONuz1gdm7u3Aw=)
9: 3130332e34332e3133322e302f32342d3234203d3e203535393931.roa (hash: PQwpOdF5Ex7Q2R7j4oTKXqncuOc5DZABUSDAojSAQug=)
10: 34352e3132342e37382e302f32342d3234203d3e203535393931.roa (hash: k8exgEof7UP4003lab+Jt39GCbZi/ZuMl5F2bByXX48=)
11: 3130332e34332e3133342e302f32342d3234203d3e203535393931.roa (hash: Arahau1/zdBFquh22OcOxXJ61Cw0C3+PJGtnB+0ekGo=)
12: 6A45D8322C3648F91E212472F604CAFDBA7019BB.crl (hash: KLVZK/dUK/6pjRywH7FVE/qA62+yQlwDU6dfU3UHt/Y=)
13: 3130332e34332e3133332e302f32342d3234203d3e203535393931.roa (hash: XdGamdMSAy1lnVU2jYcYZZbhDxqwsaKSaAwC9H6/vA8=)
14: 34352e3132342e37362e302f32322d3232203d3e203535393839.roa (hash: zFIm0VLvsUuecFtlGbSjghi253R2ygdOCwx+j/GSCJA=)
15: 3130332e3139322e3230382e302f32322d3232203d3e203535393839.roa (hash: 1dLcAHtoXHq//FproHRRjOCSgYqI4kWyRf26+UhTGsg=)
16: 3130332e34332e3133342e302f32332d3233203d3e203535393839.roa (hash: IefQkI8Hfyxc4tb4gs5aVgR/yG32bYmYgetSb9VLX28=)
17: 3130332e3139322e3231312e302f32342d3234203d3e203535393931.roa (hash: k+LCBbRPVawp4Rtsb3NBIP+v4bxjVSnD9il2zTHON3M=)
18: 34352e3132342e37392e302f32342d3234203d3e203535393931.roa (hash: 6ZZEnwDcgTL6tPVDr6GFQihUclNuFSkoAt1U4mSGRrc=)
19: 3130332e3135372e3231332e302f32342d3234203d3e203535393839.roa (hash: JA+7kTjp2WRlf/AXz0FiSp2zY6KqTrgLwGsSbayo5U8=)
20: 3130332e3139322e3231302e302f32342d3234203d3e203535393931.roa (hash: 63AwH0JNDe88UgRiEZk11mXrDuOfakAl/Ic20VC4H+s=)
21: 3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa (hash: d/U3NIj7qaoBeCrDzGEzR4wsfsmAGdyLg/VID04jiyw=)
22: 3130332e34332e3133352e302f32342d3234203d3e203535393931.roa (hash: Iqvi8zah1N+/MUEIpeWL683Upeca1a29t8qNXjNsWBE=)
23: 3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa (hash: mqgyVIKWcd9YPXCsBu33JjhSj4t3CTMMoRkvfZ77xG4=)
24: 3130332e3139322e3230382e302f32342d3234203d3e203535393931.roa (hash: d3ASlDfMVC/gtOrl6vQFyUojqbnZxFte8DXs9XPrPrg=)
25: 34352e3132342e37372e302f32342d3234203d3e203535393931.roa (hash: mtQtNdj9szZilLtTK//pM/h+ocuzur035q05fktIXuo=)
26: 34352e3132342e37362e302f32342d3234203d3e203535393931.roa (hash: U4tmDQhb9Ol98/9L64VDYt4HNIjh93kgrKwzoQS/mhE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 23:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:d1:52:3b:f8:d9:3c:a1:ec:6e:9a:c2:3b:5a:16:e3:5b:dc:15:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Validity
Not Before: Jun 11 22:39:31 2026 GMT
Not After : Jun 12 23:11:31 2026 GMT
Subject: CN=13FE07D97C9ED3ECD4C123ED17308FE5FAAC5E8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5a:7a:0d:55:43:ed:5d:6b:90:af:d4:a7:f6:
0b:10:6b:a0:3d:ba:f7:58:f6:17:88:c5:25:e6:95:
af:b2:49:c1:e2:2c:5e:32:00:e7:1f:75:8a:06:cb:
8f:b0:95:79:9f:18:b9:21:91:80:f8:7e:82:17:52:
ed:af:c8:5a:db:0e:3d:92:5c:b0:23:1c:41:53:8f:
5b:ec:df:c3:fa:5d:56:46:1e:1d:6b:3f:c6:b9:5a:
dc:d3:c0:0b:ab:97:7f:81:43:d9:9b:7e:78:5f:31:
4a:db:f1:2a:65:c9:56:1a:0f:af:e5:81:54:0c:6d:
c6:01:64:78:2c:99:ab:6b:8c:28:0f:a1:fe:35:23:
10:85:62:03:08:14:17:c0:9e:bc:b1:eb:e8:3f:2e:
a1:db:12:76:e0:c1:14:21:80:de:33:b1:be:bc:61:
91:b5:4e:25:d5:5a:88:20:47:06:bf:ec:76:54:03:
6d:d4:33:64:9b:b2:09:53:67:cc:3f:03:8f:9b:d7:
8d:a7:99:b9:f0:a6:08:79:19:97:10:8a:cc:33:1b:
d1:13:77:7b:d7:b2:6f:63:59:23:63:90:42:22:22:
5e:8c:46:56:f3:0f:d7:b7:95:32:2c:96:e5:b8:23:
b5:c9:a3:d2:7e:50:e9:d6:a8:3c:25:97:2f:42:1f:
ee:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FE:07:D9:7C:9E:D3:EC:D4:C1:23:ED:17:30:8F:E5:FA:AC:5E:8A
X509v3 Authority Key Identifier:
keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0b:e6:57:5c:6c:ab:d4:e0:4d:6f:4e:60:6f:49:83:49:be:
b7:2f:c2:77:10:19:eb:10:2e:c8:d7:6a:72:da:e7:e5:d6:65:
42:b6:97:8f:d5:8f:c9:a7:96:ed:25:f9:64:8c:b6:3f:66:c5:
33:79:57:42:c1:3b:b2:2f:00:89:20:80:aa:18:1e:b2:81:ce:
f0:2e:b2:a5:93:66:09:76:2b:8c:d8:c1:0f:82:f1:c0:15:1b:
30:ad:22:6f:13:01:90:a7:03:51:e0:49:78:86:14:ac:62:5c:
07:cd:c3:66:0d:fe:5e:90:8d:81:71:dd:4f:5d:79:84:39:18:
87:f2:5d:c6:b3:b3:69:b1:a4:17:08:2f:dc:62:1f:17:29:5a:
6a:94:cd:5f:7c:3c:ed:15:53:d9:cc:b9:0f:51:41:3b:49:42:
9e:bd:1e:5d:28:40:bf:13:99:51:15:23:88:23:78:ef:bb:8e:
34:af:18:17:e7:f9:b2:9c:f4:3d:b4:f1:3c:a1:50:11:7b:d5:
07:f9:f5:c7:85:28:d6:a3:b7:d8:fb:44:57:89:af:bb:2a:2d:
9e:0e:94:fe:fe:4a:50:b6:f7:51:3e:94:ca:8c:c5:06:c5:da:
11:42:d6:d7:0d:f1:7b:28:47:af:b8:28:d5:0d:ae:d3:35:6f:
3c:8d:8f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:55:00 2026 by rpki-client