
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft
File: 6F899B29F801AD1C8A8515E6EF9709910311F668.mft (raw, json)
Hash identifier: w/SS6ZD5H1xkdqa5i4gqSSx7Vm6jzNMKWJpE67AKCng=
Subject key identifier: D8:E2:24:6E:BD:41:BC:6B:74:22:09:EE:06:BE:C7:87:98:64:88:C9
Authority key identifier: 6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68
Certificate issuer: /CN=6F899B29F801AD1C8A8515E6EF9709910311F668
Certificate serial: 769BE584240423F4E4864A9F8E361F70EB8BC6A2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft
Manifest number: 013A
Signing time: Sat 10 Oct 2026 13:34:43 +0000
Manifest this update: Sat 10 Oct 2026 13:29:43 +0000
Manifest next update: Tue 13 Oct 2026 22:53:43 +0000
Files and hashes: 1: 3130332e3134322e38322e302f32332d3332203d3e20313439353133.roa (hash: gNbCXYLZTSZSDGKA8vf0miL9zRhPVc7YJOnU420lxlM=)
2: 3130332e3134322e38332e302f32342d3234203d3e20313439353133.roa (hash: YsRlvfghH9rCCKNTUVL7cagdvzH0kbY4Bz95ToSRwi8=)
3: 3130332e3134322e38322e302f32332d3332203d3e20313531393531.roa (hash: mVq0tp8huRh6SC0n7rhOLpZu0QlXgV/WIGpxjqgh/TE=)
4: 3130332e3134322e38322e302f32342d3234203d3e20313439353133.roa (hash: YBLpKWnBY74NDcGKe6t2+bdDnzFkBiAsPzbxJySwzDk=)
5: 3130332e3134322e38322e302f32342d3234203d3e20313531393531.roa (hash: NBrKkaX/GBDhP2RLztQmFEQ01TUbwHomfuOqxwCWC7w=)
6: 3130332e3134322e38332e302f32342d3234203d3e20313531393531.roa (hash: 79Z+OEgq58IFIFUr3XZSZV6jT+sIs4BTv39+/fzGp6A=)
7: 6F899B29F801AD1C8A8515E6EF9709910311F668.crl (hash: o9161VqfrvEpU2b6JtepgALXaVYHthvRKSnqZJ/iacE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 09:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:9b:e5:84:24:04:23:f4:e4:86:4a:9f:8e:36:1f:70:eb:8b:c6:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F899B29F801AD1C8A8515E6EF9709910311F668
Validity
Not Before: Oct 10 13:29:43 2026 GMT
Not After : Oct 13 22:53:43 2026 GMT
Subject: CN=D8E2246EBD41BC6B742209EE06BEC787986488C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:70:e6:63:52:c1:95:e6:ca:b2:14:cd:48:
b5:06:78:b1:af:ef:8e:1c:ad:d3:da:74:68:be:aa:
cd:f7:3f:7d:bd:f6:75:f8:19:3d:6e:80:68:18:4e:
f0:3a:16:a3:04:60:63:ca:f4:4c:27:94:c0:10:4b:
96:9f:54:18:10:4b:3c:17:43:14:d3:45:e8:9c:fc:
c3:63:ab:81:8a:f6:81:0b:75:2c:40:7f:e0:c5:e3:
19:ca:29:7d:b1:dd:29:ee:0d:61:e8:ab:1f:79:c9:
a9:22:65:b2:00:9f:d0:f9:94:2a:f5:6a:d7:f2:66:
72:98:a7:28:aa:f3:a4:53:8c:74:77:f8:fc:1c:9d:
c5:7e:f7:d0:9a:fc:e5:9c:24:e0:48:e5:c3:cc:37:
33:50:74:7f:b6:f8:37:2f:16:1b:e2:34:ae:df:53:
c3:72:4d:14:22:9b:1c:04:25:dd:42:8b:71:e4:d4:
30:b2:2a:31:6a:ba:77:d1:04:81:6a:50:a0:f4:72:
13:71:af:30:02:16:36:dc:e9:8d:17:03:a4:32:56:
39:75:cb:5e:3c:54:30:77:81:ec:fc:61:17:10:66:
3b:9e:e8:f0:d8:64:21:b8:6c:78:cb:03:0c:f8:5f:
04:b3:95:4b:4f:71:b1:a9:41:bc:a4:4b:6c:48:cb:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E2:24:6E:BD:41:BC:6B:74:22:09:EE:06:BE:C7:87:98:64:88:C9
X509v3 Authority Key Identifier:
keyid:6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:0f:cb:1d:01:a2:c8:22:8c:fa:e3:40:44:fa:74:bc:d5:18:
99:2c:a2:4e:d7:f6:ff:d4:01:e6:61:7f:18:cb:6d:ad:93:32:
d3:37:ec:be:2e:30:9b:40:e0:d1:3f:8f:d7:24:b6:92:19:d7:
a8:cc:e2:0d:0c:b6:d3:6b:7c:ed:a8:a2:3e:14:be:57:75:34:
01:c5:2f:25:2d:b0:0e:0b:20:95:7f:c7:1a:ea:a7:71:c9:47:
c2:c5:ad:39:b3:39:b5:00:3a:86:17:f9:18:f8:ef:dc:9d:ab:
1b:6a:b0:dd:f0:14:ee:91:6a:a5:a4:be:18:7a:4d:e9:99:b2:
73:24:f1:85:20:cd:75:b0:a6:f2:1d:1d:59:7c:bf:e8:90:fc:
f4:d2:5e:9f:ba:0f:de:8c:24:2b:5a:cc:cb:59:49:81:18:0a:
86:77:04:dd:16:c8:f6:57:0d:ff:52:c2:21:ba:2e:95:37:c4:
ac:ac:09:21:47:24:b9:8a:7e:c6:26:77:29:ec:c2:48:cd:54:
e5:72:dc:f6:72:82:47:15:ba:1e:f2:cb:bc:27:27:2b:ad:fd:
2f:2a:5e:ee:85:a8:74:e5:43:83:78:14:d2:a2:e8:59:4a:98:
84:fd:c4:68:9e:f4:8c:c3:2b:ce:7d:b8:3c:9d:8a:2d:b8:d3:
05:f9:8d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 21:24:31 2026 by rpki-client