
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
File: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft (raw, json)
Hash identifier: Mxlzm16uxrnci2UW+dGgm9w9orY3Vlcx+arN8BoOLIE=
Subject key identifier: 0D:30:FB:41:5F:56:15:C7:AA:A1:FA:0A:4C:41:23:85:4D:A4:49:E6
Authority key identifier: 6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
Certificate issuer: /CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Certificate serial: 43D8F44F287F0E9FDCC9D9D226D3D3BE24BA29E9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
Manifest number: 70
Signing time: Mon 13 Apr 2026 04:34:17 +0000
Manifest this update: Mon 13 Apr 2026 04:29:17 +0000
Manifest next update: Tue 14 Apr 2026 07:33:17 +0000
Files and hashes: 1: 3231302e38372e37322e302f32342d3234203d3e20323131333932.roa (hash: mVbRhcTcLyvsAMfZJUY6i4bpMObDpb0oEicxlAT8TpY=)
2: 3231302e38372e37332e302f32342d3234203d3e20323131333932.roa (hash: B103GkhAbfnBvb3weWZMCaWZpcf/6CwQGFLjnuopNmY=)
3: 3231302e38372e37322e302f32332d3233203d3e20323131333932.roa (hash: Za6CTmgreoWhCuNZjZaegQ9ZSyzYL/pUPt044AAI5Rg=)
4: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl (hash: n1zgyAbhaJhJ/B1tk9Xv/TQ6GzOkhWr8Bc80HK8ipQc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d8:f4:4f:28:7f:0e:9f:dc:c9:d9:d2:26:d3:d3:be:24:ba:29:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Validity
Not Before: Apr 13 04:29:17 2026 GMT
Not After : Apr 14 07:33:17 2026 GMT
Subject: CN=0D30FB415F5615C7AAA1FA0A4C4123854DA449E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:e1:e4:9d:a7:d4:52:e5:e2:38:4a:e8:65:
b0:10:ba:7d:f1:00:9a:c6:c9:52:d5:b8:43:b6:db:
ab:6c:07:31:73:1d:43:b8:d1:d6:40:09:7d:ac:57:
2f:53:f4:6c:a6:8b:f8:b0:82:23:e5:b0:31:19:59:
d6:91:c3:f6:d7:85:c0:3d:17:c8:55:9d:67:92:85:
45:46:a8:56:f7:80:ec:c1:d7:e2:8c:a9:2c:d5:be:
6f:a5:73:19:1b:89:7e:09:ec:b4:9d:85:15:aa:ba:
4c:e0:88:4d:df:0c:ce:65:f2:1b:d7:47:13:d7:2b:
08:e4:ea:d4:86:7b:cd:3d:26:70:18:06:7f:95:ee:
16:8c:70:88:5e:22:24:c8:9a:a0:2b:37:6a:70:b7:
41:7c:3c:54:23:36:5b:e9:42:d9:50:76:26:ce:54:
31:3e:0f:ef:5c:32:3d:d4:87:53:f4:df:46:b9:b6:
2a:3b:21:e4:6e:67:b3:15:5a:aa:a0:91:39:87:45:
14:2a:30:d1:76:4f:62:01:ac:33:bd:30:3c:e1:33:
95:7d:36:0c:e1:b2:ac:04:57:d2:c0:91:69:2e:21:
30:7b:6a:94:98:d2:7b:1b:15:df:b3:7f:c1:f0:07:
77:3e:62:51:94:16:59:1a:ef:67:61:1b:a4:13:60:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:30:FB:41:5F:56:15:C7:AA:A1:FA:0A:4C:41:23:85:4D:A4:49:E6
X509v3 Authority Key Identifier:
keyid:6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:16:ba:cb:ec:f1:cc:19:18:65:f1:80:b8:4d:6f:d7:9d:41:
41:ac:04:76:3e:2c:dd:e3:f5:9b:a3:12:70:8e:d2:c0:aa:d4:
d3:39:92:92:02:30:66:9f:40:e1:55:e7:fa:c8:b2:39:dc:c8:
92:01:63:a7:14:86:cf:b6:a3:1f:2e:67:30:50:1e:7f:0a:b8:
27:f4:64:85:44:9c:17:27:29:0a:1f:53:3b:ff:c8:86:f4:e3:
01:1d:07:f7:67:a6:ae:05:e5:02:e5:87:b7:1c:0b:cd:06:17:
90:ca:cf:44:1c:f8:6e:16:3c:33:ed:b4:2b:c1:46:09:a8:ce:
74:84:70:a4:56:37:08:2a:07:a2:30:ff:29:ef:a3:e9:cf:45:
29:a1:20:c1:c9:31:88:c6:01:27:bf:e8:ae:89:03:2e:f4:3b:
8e:d8:bd:3e:57:9b:88:e1:f4:85:1b:c5:d3:06:a9:b9:75:e5:
c2:aa:4b:08:fb:e7:9c:f3:18:81:8b:06:bd:1c:1c:60:a5:34:
08:2a:cf:8a:e6:f8:d9:26:cb:9d:97:69:86:ec:c2:fa:9b:3d:
ba:88:85:93:9f:d7:b2:43:66:62:d4:af:b0:1a:5c:4c:ff:e2:
59:f5:3d:ac:96:58:16:45:3c:c5:68:76:ce:c8:73:14:57:d2:
1c:28:43:f9
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUQ9j0Tyh/Dp/cydnSJtPTviS6KekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZB
QjNCOTA3RTAeFw0yNjA0MTMwNDI5MTdaFw0yNjA0MTQwNzMzMTdaMDMxMTAvBgNV
BAMTKDBEMzBGQjQxNUY1NjE1QzdBQUExRkEwQTRDNDEyMzg1NERBNDQ5RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD2+HknafUUuXiOEroZbAQun3x
AJrGyVLVuEO226tsBzFzHUO40dZACX2sVy9T9Gymi/iwgiPlsDEZWdaRw/bXhcA9
F8hVnWeShUVGqFb3gOzB1+KMqSzVvm+lcxkbiX4J7LSdhRWqukzgiE3fDM5l8hvX
RxPXKwjk6tSGe809JnAYBn+V7haMcIheIiTImqArN2pwt0F8PFQjNlvpQtlQdibO
VDE+D+9cMj3Uh1P030a5tio7IeRuZ7MVWqqgkTmHRRQqMNF2T2IBrDO9MDzhM5V9
NgzhsqwEV9LAkWkuITB7apSY0nsbFd+zf8HwB3c+YlGUFlka72dhG6QTYPZFAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUDTD7QV9WFceqofoKTEEjhU2kSeYwHwYDVR0j
BBgwFoAUbsHjTq3qInCV1XjnhMhcj6s7kH4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTY4MzA2MTkwNzQ1OC8wLzZFQzFFMzRFQURFQTIyNzA5NUQ1NzhFNzg0Qzg1
QzhGQUIzQjkwN0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZBQjNCOTA3RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE5MDc0NTgvMC82RUMxRTM0RUFERUEy
MjcwOTVENTc4RTc4NEM4NUM4RkFCM0I5MDdFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRa6y+zxzBkY
ZfGAuE1v151BQawEdj4s3eP1m6MScI7SwKrU0zmSkgIwZp9A4VXn+siyOdzIkgFj
pxSGz7ajHy5nMFAefwq4J/RkhUScFycpCh9TO//IhvTjAR0H92emrgXlAuWHtxwL
zQYXkMrPRBz4bhY8M+20K8FGCajOdIRwpFY3CCoHojD/Ke+j6c9FKaEgwckxiMYB
J7/orokDLvQ7jti9PlebiOH0hRvF0wapuXXlwqpLCPvnnPMYgYsGvRwcYKU0CCrP
iub42SbLnZdphuzC+ps9uoiFk5/XskNmYtSvsBpcTP/iWfU9rJZYFkU8xWh2zshz
FFfSHChD+Q==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:29:14 2026 by rpki-client