
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
File: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft (raw, json)
Hash identifier: V1hH9XOGufgWc6WDo2HzS3036caxXo2uvonn0W3Z488=
Subject key identifier: CF:ED:CC:35:D1:90:1C:E6:85:9A:9E:78:D5:65:3A:21:D8:E5:5D:1A
Authority key identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85
Certificate issuer: /CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
Certificate serial: 28754E8FD2372F38F8AE54A7D13F1A89265805AB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
Manifest number: A6
Signing time: Sat 23 May 2026 01:22:37 +0000
Manifest this update: Sat 23 May 2026 01:17:37 +0000
Manifest next update: Sun 24 May 2026 02:00:37 +0000
Files and hashes: 1: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl (hash: ZOh3ZQE8+iR7grvdJ4kg5Ea8ytp7dYfhfytw3OVtoAA=)
2: 3130332e3132302e35322e302f32322d3232203d3e2030.roa (hash: z33o4OymdWUBIy78ttDROdjMR5QblNN+hfrm6DQnxik=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 24 May 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:75:4e:8f:d2:37:2f:38:f8:ae:54:a7:d1:3f:1a:89:26:58:05:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
Validity
Not Before: May 23 01:17:37 2026 GMT
Not After : May 24 02:00:37 2026 GMT
Subject: CN=CFEDCC35D1901CE6859A9E78D5653A21D8E55D1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:d1:aa:eb:99:56:87:2f:31:8e:11:20:1b:
4e:26:ab:10:26:03:17:8c:a3:1c:0c:10:06:ee:f0:
43:9d:0e:63:da:9b:1b:4b:0d:19:b6:40:91:13:3b:
70:2c:11:16:2b:ad:4e:6a:23:59:2e:de:19:0f:1c:
f8:a2:a9:2f:d1:50:32:04:b5:d6:dd:f7:59:9f:ac:
83:64:4d:bc:00:db:60:7b:b2:c0:8a:06:9a:8a:74:
b9:c0:77:a1:f6:97:aa:e9:0a:ba:38:c1:83:17:c8:
45:dc:a8:f7:8d:a3:e2:e0:33:be:31:a9:4f:9d:61:
35:53:34:e6:a8:40:45:d9:9c:70:1a:42:ee:05:8a:
3d:f3:69:8f:80:e8:85:36:47:df:9b:04:f8:85:aa:
40:fa:ef:87:93:30:81:57:db:c7:ac:e2:2d:49:bf:
b6:98:f1:43:bd:09:82:84:4c:94:92:1f:11:fe:99:
88:f0:d8:80:83:f7:d8:42:c5:3c:14:ce:78:5a:e1:
ca:f3:d9:ef:56:07:ce:68:e0:0b:1b:0f:df:ca:b2:
3f:76:2a:1d:37:6d:6c:84:6b:61:4a:b4:eb:41:5b:
ad:1d:e9:31:c1:b3:36:e3:a7:3b:b2:14:15:f1:e1:
6c:af:80:82:34:a3:a1:71:e3:05:ce:30:ce:43:84:
50:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:ED:CC:35:D1:90:1C:E6:85:9A:9E:78:D5:65:3A:21:D8:E5:5D:1A
X509v3 Authority Key Identifier:
keyid:2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:86:f4:7e:13:04:e6:03:b1:9a:ad:0d:f0:91:ad:63:10:10:
6e:be:ec:7f:16:b7:80:a0:53:9f:a1:00:88:9f:e1:ea:1a:14:
b5:4d:bc:9e:0b:5e:d3:a4:e3:1b:f8:1a:ec:51:ee:88:5f:31:
51:3e:37:dd:b2:52:7a:34:5b:ec:ae:aa:3d:60:4e:34:d0:26:
3f:8c:6a:cf:b1:cf:2c:6b:01:d0:95:49:2a:bb:14:a4:f4:47:
fc:c2:9c:62:f1:4e:8c:05:82:18:a1:1a:8e:d8:9a:32:54:69:
76:42:c0:da:21:e5:29:df:a3:5e:b8:33:2a:08:01:e5:dd:a0:
0c:4e:3f:75:7e:24:cc:ff:43:77:3a:5c:83:85:10:61:a6:ac:
bb:a7:e6:99:da:9c:2d:c3:f7:ef:6c:0f:69:33:5f:14:7b:62:
10:39:ce:fc:4b:bc:f0:a7:c5:eb:b9:e1:30:7a:4a:82:a1:73:
fa:5f:2c:a8:00:40:e0:7a:12:93:61:3c:e5:68:6c:00:0f:10:
cb:c0:49:c7:7f:dd:f6:34:62:98:55:e1:53:63:6e:6a:06:ab:
cf:d0:68:15:95:04:ea:f6:9a:ad:be:43:a1:1c:af:ca:86:fd:
f6:3e:85:e1:82:fb:33:96:37:98:f8:4c:b7:59:6d:34:e8:d5:
47:40:c7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:48:11 2026 by rpki-client