
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft
File: 6F998E710C20D2A9D256034668026243E86F9239.mft (raw, json)
Hash identifier: 6qKPtCLi3eDu3LsyFcWh590nH0nx7acYta8z4z9VS98=
Subject key identifier: B9:B8:F1:FC:B2:45:B7:98:B7:92:25:DA:BD:70:4A:E9:16:4B:C2:1C
Authority key identifier: 6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39
Certificate issuer: /CN=6F998E710C20D2A9D256034668026243E86F9239
Certificate serial: 0C2C5F8BF3000A6D65D2582EB9D5FDF380B9594B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft
Manifest number: 44
Signing time: Fri 29 May 2026 06:52:41 +0000
Manifest this update: Fri 29 May 2026 06:47:41 +0000
Manifest next update: Sat 30 May 2026 07:18:41 +0000
Files and hashes: 1: 6F998E710C20D2A9D256034668026243E86F9239.crl (hash: W7Es+cwAELMAngSjeMsAgxNKS3xykys00rCamP1MVRY=)
2: 323430313a36303a3a2f33322d3332203d3e2030.roa (hash: 71m86gm6yxnGiaqfSvrzEvHzssQUJiLPa3d4KKP4Eyw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl
rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 07:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:2c:5f:8b:f3:00:0a:6d:65:d2:58:2e:b9:d5:fd:f3:80:b9:59:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F998E710C20D2A9D256034668026243E86F9239
Validity
Not Before: May 29 06:47:41 2026 GMT
Not After : May 30 07:18:41 2026 GMT
Subject: CN=B9B8F1FCB245B798B79225DABD704AE9164BC21C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:12:aa:8f:c7:1a:7b:71:23:33:34:4d:5d:
bd:03:c4:9a:6c:74:1d:44:33:bd:71:78:38:03:c0:
4f:d3:2f:0f:e7:57:9e:d1:7e:ac:62:e0:e2:fd:9b:
98:fd:5a:d0:52:e1:c9:9b:c6:59:f1:9d:0b:0b:e6:
97:a5:ef:03:f8:29:5f:3f:11:0a:fd:77:c0:c0:2a:
41:0e:aa:6a:2d:a1:c4:d8:ee:1c:ca:89:ce:94:c0:
79:80:2c:f6:d1:dc:c5:af:58:15:37:21:d3:59:8c:
84:35:b7:e6:b3:c8:0b:a9:2a:53:8a:e4:e5:58:4b:
f7:b4:e8:ed:49:ef:a6:5b:65:a9:7d:39:b7:f8:79:
a2:86:78:7d:27:d7:19:13:2a:34:74:96:01:20:c9:
1f:cf:75:d1:ea:96:a5:f2:b3:9b:a5:c0:2b:fe:9a:
11:43:d2:f0:13:f5:09:3f:ab:74:c5:1e:ab:07:cb:
f5:63:a9:ec:18:c8:c8:2a:84:07:1d:c4:85:12:0f:
c6:b7:c4:dd:c2:c6:4e:c5:e3:ef:57:e8:96:45:14:
b1:d2:9b:29:50:cb:25:5c:5e:83:1e:4e:db:72:e6:
3a:11:3a:8a:db:06:42:16:15:d4:73:2e:d1:0a:04:
1d:07:ca:4d:ce:b0:78:20:47:b8:f7:0d:a7:7e:b0:
4d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B8:F1:FC:B2:45:B7:98:B7:92:25:DA:BD:70:4A:E9:16:4B:C2:1C
X509v3 Authority Key Identifier:
keyid:6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f0:ba:51:8d:d9:90:e8:55:64:59:95:49:81:2d:5e:1c:9b:
49:13:7b:e6:00:47:62:db:c6:71:06:67:a6:aa:e0:55:e5:b3:
bb:fd:9e:f2:9c:3d:81:79:90:ba:99:c6:23:a6:9e:a4:8d:37:
52:74:ca:fd:37:8f:02:42:05:b8:9d:76:98:ec:7c:ee:7d:2c:
89:de:ab:d8:74:e3:25:92:71:b0:2d:f1:b0:80:f3:14:9a:d5:
dd:64:81:65:47:81:98:cc:75:d5:8f:7a:42:46:00:18:37:3d:
29:be:da:a4:db:db:7e:6a:82:17:48:5e:3d:89:ea:69:14:a8:
ed:fc:9f:28:e7:e8:40:85:c0:08:b5:19:06:6b:12:59:74:8a:
5a:8d:7f:68:cb:25:8e:42:36:ba:f1:09:89:80:95:6d:5c:93:
d6:fe:9a:30:8a:64:de:8c:bd:93:3d:36:09:f8:2c:2e:a9:2f:
65:ff:38:fb:8a:2f:72:80:f3:00:50:2a:4f:65:4d:91:15:b5:
27:9b:72:53:26:50:25:7a:3b:44:ab:2e:36:64:32:c5:d5:2e:
be:85:5e:05:5e:19:ff:8e:d2:65:d8:c8:8f:dd:c9:cf:96:f2:
95:d2:34:7c:6c:51:ee:c0:38:15:7d:4e:2b:70:5d:a3:4b:10:
6f:27:74:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:27 2026 by rpki-client