
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft
File: 6F998E710C20D2A9D256034668026243E86F9239.mft (raw, json)
Hash identifier: NEvBcpobmNgDhR/MSKPynYNzYH4T8lSaGuuH7uM5zVg=
Subject key identifier: 44:D3:18:EF:A8:FC:5B:2D:52:31:FC:04:54:06:5D:CC:37:29:A0:AF
Authority key identifier: 6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39
Certificate issuer: /CN=6F998E710C20D2A9D256034668026243E86F9239
Certificate serial: 5F2FFFA2A1A2210A8375109417E5AE4C82C671A6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft
Manifest number: 81
Signing time: Tue 14 Jul 2026 07:25:41 +0000
Manifest this update: Tue 14 Jul 2026 07:20:41 +0000
Manifest next update: Wed 15 Jul 2026 08:25:41 +0000
Files and hashes: 1: 6F998E710C20D2A9D256034668026243E86F9239.crl (hash: +y43q0ydtWaon9b0sfYLEbBO+O5nKUh8SiUOrQRHaKs=)
2: 323430313a36303a3a2f33322d3332203d3e2030.roa (hash: 71m86gm6yxnGiaqfSvrzEvHzssQUJiLPa3d4KKP4Eyw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl
rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 08:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:2f:ff:a2:a1:a2:21:0a:83:75:10:94:17:e5:ae:4c:82:c6:71:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F998E710C20D2A9D256034668026243E86F9239
Validity
Not Before: Jul 14 07:20:41 2026 GMT
Not After : Jul 15 08:25:41 2026 GMT
Subject: CN=44D318EFA8FC5B2D5231FC0454065DCC3729A0AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:ba:36:ea:93:13:2f:5d:5d:f5:c4:0c:71:
5f:de:89:3c:db:48:22:2a:cf:1e:9c:a0:60:ff:9d:
b0:d3:3c:44:b7:24:fb:27:bc:46:60:b8:d4:68:31:
1e:6d:b2:7d:0e:e4:62:87:c7:6d:6e:e3:05:8b:ce:
f5:30:b1:9c:6e:ab:dd:94:1f:b1:a5:25:59:02:10:
ad:d9:59:0a:b6:8e:a1:24:4a:66:3a:57:c6:b6:6f:
c7:de:20:b9:fc:0b:80:4d:69:c6:73:f3:d8:86:58:
5d:c3:77:54:34:8c:34:89:2d:b2:ca:2a:3a:a5:b8:
7e:cc:58:73:ed:e3:92:90:b5:14:13:12:bf:e6:af:
7f:d2:cb:13:eb:ae:44:3a:9e:34:c7:15:f0:c6:ae:
77:78:1c:01:21:3d:f8:4b:8c:6a:2c:18:4f:01:91:
32:be:d2:db:67:26:dd:34:5a:10:99:18:35:ef:2a:
33:79:36:82:e9:fd:a7:8e:93:0c:29:74:b7:97:71:
ef:ee:ee:02:5f:fd:5d:3b:d4:25:be:de:0f:35:f3:
76:63:59:39:6b:26:5d:91:a9:c0:aa:45:17:7f:1b:
eb:31:f8:6f:43:82:de:ec:4c:2f:b2:6a:e3:4d:7b:
19:76:41:0e:bb:2e:3e:1a:1a:d5:63:c6:f9:2c:3a:
14:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D3:18:EF:A8:FC:5B:2D:52:31:FC:04:54:06:5D:CC:37:29:A0:AF
X509v3 Authority Key Identifier:
keyid:6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:64:67:c9:42:ea:b9:69:d3:c3:3a:da:bf:6c:0b:01:e4:54:
1a:69:65:ae:2f:ea:ca:85:af:5c:3f:f2:3a:6c:5b:68:ce:d3:
15:0e:b7:75:44:8c:d7:33:48:f2:eb:0c:b2:3f:78:26:49:4d:
54:c4:f7:49:eb:75:32:a1:0c:68:80:b5:a9:ef:41:fc:4a:79:
81:18:c3:b7:0e:02:0f:c7:91:67:72:5d:e4:fa:a3:4e:0b:1b:
b1:4a:6e:5a:c5:d4:8c:8a:2d:22:c3:cd:b8:bb:c5:76:f6:fe:
f1:91:8f:24:9b:ea:16:27:96:ee:9a:5f:18:10:41:3b:4c:b0:
9f:d5:4f:0e:06:3f:bb:0e:ef:31:f8:06:1f:86:33:4c:62:86:
e8:7f:86:66:24:72:8c:3c:49:c1:32:f3:29:30:ed:fb:07:da:
48:a2:e4:25:3c:12:f0:22:5c:1a:b6:73:36:59:f9:4f:ea:94:
ff:5b:d4:11:f6:af:36:8f:df:2a:9b:a8:45:7e:43:c2:3a:00:
59:c9:27:47:44:fb:da:b0:9c:fa:0a:e6:27:86:a0:e6:55:69:
37:b3:e4:29:57:d8:79:16:07:bd:1d:eb:54:16:68:8d:22:cf:
98:d6:79:b9:77:33:6a:1e:0f:52:7b:21:12:1c:2c:c6:e8:88:
41:a8:26:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:05:39 2026 by rpki-client