
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
File: 6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft (raw, json)
Hash identifier: e1LGcJ7daZyHw1XJP+balS9ZDCua1BE16ZWA56sFCC4=
Subject key identifier: 1D:D6:D7:AA:7E:A2:CE:3B:D4:99:E0:2C:54:8B:00:71:5E:2E:93:82
Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
Certificate issuer: /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Certificate serial: 78FF665184DC48715C85138A617553E52AB2CA94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
Manifest number: 0141
Signing time: Sun 25 Oct 2026 21:53:00 +0000
Manifest this update: Sun 25 Oct 2026 21:47:59 +0000
Manifest next update: Thu 29 Oct 2026 08:08:59 +0000
Files and hashes: 1: 3130332e39392e37362e302f32342d3234203d3e20343031393232.roa (hash: CGfD08+TmI17n0MyXF3V8T9GaHZ26XvTL68LzNKieJM=)
2: 3130332e39392e37382e302f32342d3234203d3e20313430323234.roa (hash: qjnV38DKUxCDOv1ngp1bgr3h6x3YSxbbfA2LfRTQ2t8=)
3: 3130332e39392e37392e302f32342d3332203d3e20343031393232.roa (hash: HAeePLzRX+6qLvq1+IHZUIym7QAn8SM1pu3viW7OA+s=)
4: 3130332e39392e37362e302f32342d3234203d3e20313430323234.roa (hash: avpij/pS5mE9f/XwTicGimYUM1iHh67c23vbQ/abVIo=)
5: 3130332e39392e37362e302f32322d3234203d3e203431373137.roa (hash: G2sXYiJAI2aLi9eNohjqzjqFcTpdmhkGOYXS2jdYuxA=)
6: 3130332e39392e37362e302f32342d3234203d3e203138313836.roa (hash: g+Ab7n0f/mZdUvMILjA1TIaDuAHPK3a9RuID0hCykiY=)
7: 3130332e39392e37362e302f32322d3234203d3e203231383539.roa (hash: 5zg34dumFUNcisZgSXdG450ByL+s68I7tPcsYSA0NWQ=)
8: 3130332e39392e37372e302f32342d3234203d3e20313430323234.roa (hash: bVb3KiMqsznd+G3SqnVOmFkclLvpl6SNYgdpTEfv5lI=)
9: 3130332e39392e37382e302f32342d3234203d3e203138313836.roa (hash: GIBohAOkxLqo2MHKZRQCGgmHtKZNvH2jRL/WqCCQFx0=)
10: 6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl (hash: QRjnAMXMjXhMKYy+rV8M1WGzF2X8BHzZBx1Woxj6pZk=)
11: 3130332e39392e37372e302f32342d3234203d3e203138313836.roa (hash: U1pk2JYrPJWQy2GlF6yYf8rAkEzfLuV6UU23voN4CTI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Oct 2026 08:08:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ff:66:51:84:dc:48:71:5c:85:13:8a:61:75:53:e5:2a:b2:ca:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86
Validity
Not Before: Oct 25 21:47:59 2026 GMT
Not After : Oct 29 08:08:59 2026 GMT
Subject: CN=1DD6D7AA7EA2CE3BD499E02C548B00715E2E9382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:d9:24:b6:45:bb:e0:95:ca:c0:b2:07:a4:
9c:b9:ba:89:45:e3:1c:c5:3f:6a:08:67:66:32:06:
6e:16:93:d9:a0:99:e5:08:ea:2e:f0:75:00:08:fb:
92:0d:0e:1b:f1:26:1d:e1:ed:e8:93:14:8b:26:1b:
2a:d3:f4:7d:c9:01:a4:b6:1a:4c:95:09:34:3b:93:
54:44:27:5f:9e:c8:2f:7b:7e:29:2f:bf:a4:7f:e7:
ff:9e:83:42:91:4c:6b:df:4c:1d:66:d5:99:a8:d3:
44:3d:3d:47:33:e9:7c:b3:e6:8c:3b:78:81:c7:27:
e0:d3:7d:cd:90:14:64:1b:19:60:b2:df:96:f8:14:
8c:2b:a0:c6:b6:d1:86:47:f7:66:6a:62:22:b1:d1:
4a:8b:db:44:34:7c:69:ec:b4:65:9b:ff:8f:2b:0e:
31:d3:e0:6f:8c:b1:e4:65:63:ad:74:8a:19:b5:6a:
11:bb:bc:93:d8:3f:74:cc:30:47:4c:19:5e:3b:b5:
a2:df:c2:b7:55:fe:42:fa:cc:18:bf:eb:f9:93:e4:
42:fe:da:b0:c4:e2:64:db:f3:ac:26:fc:2f:b0:f4:
57:35:4f:c1:c7:34:64:b7:f9:3d:66:0f:3a:0a:12:
51:7d:e5:75:e1:f8:b1:76:ac:a3:79:5f:92:ec:dd:
6d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D6:D7:AA:7E:A2:CE:3B:D4:99:E0:2C:54:8B:00:71:5E:2E:93:82
X509v3 Authority Key Identifier:
keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:53:a4:a0:e2:35:80:f1:80:1e:1f:d5:c3:01:12:bf:22:64:
96:3d:2c:af:5e:14:39:0d:87:a2:ad:18:85:10:07:99:ce:4c:
9c:e0:09:f7:75:b5:fe:56:9b:ca:fb:1c:f1:7c:e4:c8:16:07:
d5:a3:7f:a4:4d:b5:8d:3e:cd:0d:79:b1:8f:dd:26:8b:04:21:
a2:b7:4c:a9:c8:4b:07:34:58:c7:6a:08:e2:53:45:36:d7:cb:
e9:b6:24:53:be:05:16:d7:73:f4:eb:01:85:2c:4c:e6:c3:3b:
eb:a9:e4:c2:71:94:d5:2c:94:ff:c5:ef:e9:54:50:97:eb:31:
83:44:09:38:fd:76:ef:fd:40:d0:d5:86:12:b3:e2:30:5d:e9:
56:df:8d:a8:ba:e0:5b:d9:34:74:0d:2f:09:9f:e5:bc:6d:f1:
c3:7b:26:52:3e:b6:f6:4e:01:3a:75:27:9c:7f:96:65:6b:8a:
ea:4b:e6:43:d0:ac:74:c8:38:8a:cc:b6:35:e9:64:c4:15:72:
5b:e7:17:3f:84:ba:d2:20:41:36:df:13:3b:3d:b0:e3:58:47:
15:47:92:7e:09:dd:c7:9f:ce:f2:b8:f1:44:f4:da:58:d2:e0:
17:50:bf:1f:a8:f8:bc:1f:71:b6:be:28:72:dc:b8:f6:fa:e0:
ac:83:5d:c5
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUeP9mUYTcSHFchROKYXVT5SqyypQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkU2NTUxRERGMTVGQ0I2NDg1MDBBNzA4MEZBMzdEOEVF
ODYwMkE4NjAeFw0yNjEwMjUyMTQ3NTlaFw0yNjEwMjkwODA4NTlaMDMxMTAvBgNV
BAMTKDFERDZEN0FBN0VBMkNFM0JENDk5RTAyQzU0OEIwMDcxNUUyRTkzODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5qtkktkW74JXKwLIHpJy5uolF
4xzFP2oIZ2YyBm4Wk9mgmeUI6i7wdQAI+5INDhvxJh3h7eiTFIsmGyrT9H3JAaS2
GkyVCTQ7k1REJ1+eyC97fikvv6R/5/+eg0KRTGvfTB1m1Zmo00Q9PUcz6Xyz5ow7
eIHHJ+DTfc2QFGQbGWCy35b4FIwroMa20YZH92ZqYiKx0UqL20Q0fGnstGWb/48r
DjHT4G+MseRlY610ihm1ahG7vJPYP3TMMEdMGV47taLfwrdV/kL6zBi/6/mT5EL+
2rDE4mTb86wm/C+w9Fc1T8HHNGS3+T1mDzoKElF95XXh+LF2rKN5X5Ls3W1TAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUHdbXqn6izjvUmeAsVIsAcV4uk4IwHwYDVR0j
BBgwFoAUbmVR3fFfy2SFAKcID6N9juhgKoYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODMzNTUyNTIzMjY0MS8wLzZFNjU1MURERjE1RkNCNjQ4NTAwQTcwODBGQTM3
RDhFRTg2MDJBODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkU2NTUxRERGMTVGQ0I2NDg1MDBBNzA4MEZBMzdEOEVFODYwMkE4Ni5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUyMzI2NDEvMC82RTY1NTFEREYxNUZD
QjY0ODUwMEE3MDgwRkEzN0Q4RUU4NjAyQTg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVOkoOI1gPGA
Hh/VwwESvyJklj0sr14UOQ2Hoq0YhRAHmc5MnOAJ93W1/labyvsc8XzkyBYH1aN/
pE21jT7NDXmxj90miwQhordMqchLBzRYx2oI4lNFNtfL6bYkU74FFtdz9OsBhSxM
5sM766nkwnGU1SyU/8Xv6VRQl+sxg0QJOP127/1A0NWGErPiMF3pVt+NqLrgW9k0
dA0vCZ/lvG3xw3smUj629k4BOnUnnH+WZWuK6kvmQ9CsdMg4isy2NelkxBVyW+cX
P4S60iBBNt8TOz2w41hHFUeSfgndx5/O8rjxRPTaWNLgF1C/H6j4vB9xtr4octy4
9vrgrINdxQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 02:11:27 2026 by rpki-client