
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
File: 6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft (raw, json)
Hash identifier: TqYtAduhWq4IbAgL7D6AMpM5t5GQyodkxYT2XCyGEv8=
Subject key identifier: 06:33:8D:0E:BE:7B:4E:48:D8:82:4E:0F:BA:31:78:BF:C3:C5:96:92
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Certificate issuer: /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial: 4954FF6BA96FE1A1BD8204D9B981642578B260DE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
Manifest number: 012D
Signing time: Thu 10 Sep 2026 14:11:42 +0000
Manifest this update: Thu 10 Sep 2026 14:06:42 +0000
Manifest next update: Sun 13 Sep 2026 23:09:42 +0000
Files and hashes: 1: 3130332e39392e37362e302f32322d3234203d3e203231383539.roa (hash: 5zg34dumFUNcisZgSXdG450ByL+s68I7tPcsYSA0NWQ=)
2: 3130332e39392e37372e302f32342d3234203d3e20313430323234.roa (hash: bVb3KiMqsznd+G3SqnVOmFkclLvpl6SNYgdpTEfv5lI=)
3: 3130332e39392e37392e302f32342d3332203d3e20343031393232.roa (hash: HAeePLzRX+6qLvq1+IHZUIym7QAn8SM1pu3viW7OA+s=)
4: 3130332e39392e37362e302f32342d3234203d3e20343031393232.roa (hash: CGfD08+TmI17n0MyXF3V8T9GaHZ26XvTL68LzNKieJM=)
5: 3130332e39392e37362e302f32322d3234203d3e203431373137.roa (hash: G2sXYiJAI2aLi9eNohjqzjqFcTpdmhkGOYXS2jdYuxA=)
6: 3130332e39392e37362e302f32342d3234203d3e203138313836.roa (hash: g+Ab7n0f/mZdUvMILjA1TIaDuAHPK3a9RuID0hCykiY=)
7: 3130332e39392e37372e302f32342d3234203d3e203138313836.roa (hash: U1pk2JYrPJWQy2GlF6yYf8rAkEzfLuV6UU23voN4CTI=)
8: 3130332e39392e37382e302f32342d3234203d3e203138313836.roa (hash: GIBohAOkxLqo2MHKZRQCGgmHtKZNvH2jRL/WqCCQFx0=)
9: 3130332e39392e37362e302f32342d3234203d3e20313430323234.roa (hash: avpij/pS5mE9f/XwTicGimYUM1iHh67c23vbQ/abVIo=)
10: 3130332e39392e37382e302f32342d3234203d3e20313430323234.roa (hash: qjnV38DKUxCDOv1ngp1bgr3h6x3YSxbbfA2LfRTQ2t8=)
11: 6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl (hash: HAW//7hpjhJ0M0yMAOHqoO9Bhkavz6HUUkBbgNfvFSA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 13 Sep 2026 00:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:54:ff:6b:a9:6f:e1:a1:bd:82:04:d9:b9:81:64:25:78:b2:60:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Validity
Not Before: Sep 10 14:06:42 2026 GMT
Not After : Sep 13 23:09:42 2026 GMT
Subject: CN=06338D0EBE7B4E48D8824E0FBA3178BFC3C59692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:91:f4:41:8f:d7:67:8a:0a:c1:10:38:03:57:
45:10:c3:ea:c8:25:51:16:ec:d8:87:86:1c:16:e7:
02:4a:0a:2d:2f:5f:73:e1:74:c4:18:00:3c:44:87:
cd:e1:b4:e4:3a:0e:c3:48:86:98:da:4d:65:7d:39:
18:11:59:a7:40:d9:1a:cf:ff:51:8e:b8:7c:4e:aa:
b2:ad:06:a5:2e:97:e7:3b:53:cb:60:1b:de:e8:74:
e7:d8:7e:6e:2d:79:62:8d:8e:e3:a0:da:58:95:15:
1d:e3:c6:6e:30:83:ff:84:d8:10:2a:df:1c:7f:77:
cb:64:60:a2:24:48:72:bc:ed:9b:26:5d:f9:19:35:
3e:9a:f7:d0:86:fd:e0:75:6b:ef:a2:aa:f7:01:95:
73:a9:cf:9f:32:8c:db:bc:e1:46:3d:a0:ec:25:28:
c9:0f:c6:e5:ce:c6:b1:ad:8e:2a:ea:b7:e1:60:f4:
f3:b5:04:bf:ad:da:97:e1:08:6a:59:72:b4:b5:fc:
20:7b:f2:8f:c0:81:80:7c:b4:76:d2:a8:91:31:49:
a4:b3:6c:95:ba:81:f1:df:30:22:c5:98:15:12:de:
43:05:c7:6c:02:f2:72:cc:de:69:de:c6:72:78:4b:
39:57:b5:fa:d1:ad:1e:38:38:21:d6:ab:7a:7d:83:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:33:8D:0E:BE:7B:4E:48:D8:82:4E:0F:BA:31:78:BF:C3:C5:96:92
X509v3 Authority Key Identifier:
keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:0a:ce:8a:5f:a1:e4:e3:9e:b2:21:d8:bc:f4:04:53:03:9d:
0d:a6:e5:75:d4:b3:96:fd:4f:04:c5:bd:c2:7a:99:2f:61:d7:
7d:84:cf:18:32:05:4e:81:e8:9d:ec:d2:4a:4b:fa:ce:88:e7:
6a:84:63:a2:df:5d:77:dc:ae:45:26:60:96:77:2c:55:d8:98:
bb:09:fd:d2:4e:2e:8d:75:89:fa:5c:05:64:c6:a5:60:48:03:
1b:3e:19:91:5c:05:f5:33:ea:0a:ec:2f:59:f8:a4:ea:7e:0b:
5c:76:f3:b4:7c:12:db:69:5f:ea:62:4b:82:34:04:c2:24:bd:
a4:21:da:03:81:49:09:c5:b6:a7:8c:76:f1:d4:e2:d2:9b:c6:
67:d0:b0:f8:ba:e9:00:00:01:a8:7e:da:d2:2d:37:5f:9a:fd:
a9:34:21:8c:1d:b9:60:9c:e8:83:dc:0c:da:39:29:70:e7:cc:
18:49:8b:46:77:f8:ee:9e:e1:88:ce:09:c5:bf:0d:3d:f6:a0:
8c:6b:d9:2c:0d:6c:3a:5d:60:c3:0b:bc:d2:21:83:56:50:11:
34:07:ad:22:5d:ed:3f:15:9c:fe:bc:12:39:54:10:74:96:9d:
b2:02:26:00:dd:80:55:5a:bb:96:53:49:6a:0d:65:f0:7b:5e:
2e:ce:ba:99
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUSVT/a6lv4aG9ggTZuYFkJXiyYN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkU2NTUxRERGMTVGQ0I2NDg1MDBBNzA4MEZBMzdEOEVF
ODYwMkE4NjAeFw0yNjA5MTAxNDA2NDJaFw0yNjA5MTMyMzA5NDJaMDMxMTAvBgNV
BAMTKDA2MzM4RDBFQkU3QjRFNDhEODgyNEUwRkJBMzE3OEJGQzNDNTk2OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKkfRBj9dnigrBEDgDV0UQw+rI
JVEW7NiHhhwW5wJKCi0vX3PhdMQYADxEh83htOQ6DsNIhpjaTWV9ORgRWadA2RrP
/1GOuHxOqrKtBqUul+c7U8tgG97odOfYfm4teWKNjuOg2liVFR3jxm4wg/+E2BAq
3xx/d8tkYKIkSHK87ZsmXfkZNT6a99CG/eB1a++iqvcBlXOpz58yjNu84UY9oOwl
KMkPxuXOxrGtjirqt+Fg9PO1BL+t2pfhCGpZcrS1/CB78o/AgYB8tHbSqJExSaSz
bJW6gfHfMCLFmBUS3kMFx2wC8nLM3mnexnJ4SzlXtfrRrR44OCHWq3p9g9RjAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUBjONDr57TkjYgk4PujF4v8PFlpIwHwYDVR0j
BBgwFoAUbmVR3fFfy2SFAKcID6N9juhgKoYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODMzNTUyNTIzMjY0MS8wLzZFNjU1MURERjE1RkNCNjQ4NTAwQTcwODBGQTM3
RDhFRTg2MDJBODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkU2NTUxRERGMTVGQ0I2NDg1MDBBNzA4MEZBMzdEOEVFODYwMkE4Ni5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUyMzI2NDEvMC82RTY1NTFEREYxNUZD
QjY0ODUwMEE3MDgwRkEzN0Q4RUU4NjAyQTg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2grOil+h5OOe
siHYvPQEUwOdDablddSzlv1PBMW9wnqZL2HXfYTPGDIFToHonezSSkv6zojnaoRj
ot9dd9yuRSZglncsVdiYuwn90k4ujXWJ+lwFZMalYEgDGz4ZkVwF9TPqCuwvWfik
6n4LXHbztHwS22lf6mJLgjQEwiS9pCHaA4FJCcW2p4x28dTi0pvGZ9Cw+LrpAAAB
qH7a0i03X5r9qTQhjB25YJzog9wM2jkpcOfMGEmLRnf47p7hiM4Jxb8NPfagjGvZ
LA1sOl1gwwu80iGDVlARNAetIl3tPxWc/rwSOVQQdJadsgImAN2AVVq7llNJag1l
8HteLs66mQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:52:02 2026 by rpki-client