
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft
File: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft (raw, json)
Hash identifier: DAJrpTDfMLgohyWyimGun82KVDB7v0e6WHp7LCcH59g=
Subject key identifier: 6A:74:B2:EA:24:AE:51:F2:C4:A1:E1:AA:B9:84:A8:54:78:BF:D7:90
Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7
Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7
Certificate serial: 4AB9231286695EDA7A5CC870A954791FF48BFE6F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft
Manifest number: C1
Signing time: Thu 11 Jun 2026 12:48:47 +0000
Manifest this update: Thu 11 Jun 2026 12:43:47 +0000
Manifest next update: Fri 12 Jun 2026 16:17:47 +0000
Files and hashes: 1: 323430373a386634303a323a3a2f34382d3634203d3e2039383038.roa (hash: TR06nDz1gTNdLIM8dcIeX2BYLDVoZsmF+tqoM6cwPDs=)
2: 3230322e34362e3232342e302f32302d3234203d3e2034383136.roa (hash: AP3LEhr9NJskIRyHLt3gZgOoccAkuzlPpcd0mfSxGok=)
3: 3230322e34362e3232342e302f32302d3234203d3e203337393638.roa (hash: gD6s0WeuhRIf02DzPtxzwxRWJZcIvRWmlQJwip4leBc=)
4: 323430373a386634303a323a3a2f34382d3634203d3e20313335303631.roa (hash: TV5l/9iH0hJhAxcbYqBzwx9+XPgyfR2/A5t7iLIIav8=)
5: 3230322e34362e3232342e302f32302d3234203d3e2039383038.roa (hash: iyoDlHY31/A4gM9wUfi+CACam/Ogoja7GPLP33uj3yk=)
6: 3230322e34362e3232342e302f32302d3234203d3e20313335303631.roa (hash: SbsA4PTcJ3wiRQHn6khyisvG8rEWD+Byylxc8KTQeAE=)
7: 323430373a386634303a323a3a2f34382d3634203d3e203337393638.roa (hash: LDNK9PweFjK1wKyDe573Xy72qh4NYoOlHHEQeHBvEAY=)
8: 3230322e34362e3232342e302f32302d3234203d3e2034313334.roa (hash: RAvA3o2t61W8acXnwo8+PDMa0aTuyb7vHr0QuWLv5ks=)
9: 3130332e322e3136342e302f32322d3234203d3e203337393638.roa (hash: i9AMULZIaXWZ++7WSVdr7F6StnWG0S7RqV3FJqfppGQ=)
10: 323430373a386634303a323a3a2f34382d3634203d3e2034383136.roa (hash: ytZdKkF45ks8sSi6yaCVxbx3H04n3ys0csOJRdnnNXk=)
11: CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl (hash: 52hO2MFfIuMHAPc/jUJgGPxFyZPkIDC35d1Z8O6F66w=)
12: 3230322e34362e3232342e302f32302d3234203d3e203536303430.roa (hash: Z2a1B5gCNns+2BmhvjTcFOulUeYUIxpwK5Cp54mMFuc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 16:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:b9:23:12:86:69:5e:da:7a:5c:c8:70:a9:54:79:1f:f4:8b:fe:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7
Validity
Not Before: Jun 11 12:43:47 2026 GMT
Not After : Jun 12 16:17:47 2026 GMT
Subject: CN=6A74B2EA24AE51F2C4A1E1AAB984A85478BFD790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:76:11:fe:d1:a5:6a:a4:90:b2:15:26:c9:
68:a4:09:b1:6a:0c:d4:1f:95:6d:b7:7d:54:e8:e4:
3f:a4:2e:60:14:8b:3e:58:68:d0:8f:7a:67:4c:12:
e8:83:0d:65:64:ba:1b:58:c8:9f:b4:22:d1:5d:e0:
de:74:19:b7:e3:e6:7b:7c:38:a0:b0:07:75:99:f6:
2b:4a:5a:35:0d:eb:9e:b7:34:42:1c:10:cf:3f:7b:
19:d8:1b:c2:26:03:4b:97:de:9f:6f:64:e2:ed:82:
c5:1d:6c:b4:10:6a:97:66:2f:7a:10:9f:c6:a8:a5:
53:00:e3:88:fd:64:9c:d4:ad:ae:7b:84:35:cd:ab:
22:18:da:5b:cb:e9:1a:ea:c3:f5:6a:b4:59:fa:bf:
e0:1f:d9:a3:75:53:09:4f:79:40:95:62:da:62:3c:
0c:b3:da:51:61:cf:19:a9:23:2e:1b:3f:e4:08:f3:
9e:d3:19:f3:5b:15:cf:d3:3e:a1:d0:11:a8:d1:3a:
e8:10:bf:78:09:61:38:55:1c:aa:58:e9:5f:ab:5d:
bd:2f:dc:9f:20:2d:7a:bf:18:22:e9:33:96:c5:aa:
6c:95:86:a0:17:47:88:a0:a9:6b:c3:9e:21:ea:93:
1b:29:97:d5:c1:d8:d9:f0:26:42:7d:ce:34:09:58:
db:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:74:B2:EA:24:AE:51:F2:C4:A1:E1:AA:B9:84:A8:54:78:BF:D7:90
X509v3 Authority Key Identifier:
keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:47:12:41:7a:0c:06:e9:06:96:a0:b5:fa:a4:52:53:39:a5:
9c:04:6f:e6:46:9d:b4:2f:a3:a1:c6:02:79:10:82:fb:8c:e1:
f7:a8:91:51:c0:33:a6:95:9f:77:b0:72:2f:1c:d2:d7:27:71:
00:81:5f:60:4d:18:a3:fb:59:1d:96:35:4e:51:89:e2:7f:73:
90:09:bc:9c:99:f1:e8:c2:4d:94:d9:a9:65:2b:bb:d7:c8:55:
41:fb:e8:b6:4d:24:6c:40:08:0b:eb:93:02:ad:6e:c0:58:b2:
e5:54:c9:13:00:4c:33:27:54:76:c1:f7:d9:3b:65:8f:1c:6e:
fd:15:d7:94:e9:ce:62:a1:97:da:5e:c0:0c:c4:33:c1:ec:ad:
1b:45:9b:01:e5:b1:21:32:b1:fa:95:64:4c:e3:62:4c:d9:db:
f9:19:d4:a9:69:1c:92:04:9f:bb:89:b0:7a:36:1c:04:44:c8:
cd:f4:07:b4:a2:2b:53:55:5b:3b:7b:43:99:31:20:7e:32:a7:
5d:bb:60:3d:d3:07:fe:b5:5b:c9:0e:ae:1b:6a:8a:a0:84:38:
e1:a5:b7:b7:a9:21:0c:d3:66:58:28:7d:df:f0:1b:68:5b:79:
2a:5f:15:6e:8a:af:2a:f0:fa:2f:3c:8d:2b:b0:c3:18:7c:18:
79:42:d4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:52:21 2026 by rpki-client