
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
File: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft (raw, json)
Hash identifier: CNLeXvNRLn9dkHDeiZTHvk+xu9LFpu2+/6+moDyYuFM=
Subject key identifier: 2B:30:60:85:C8:6D:3F:42:D6:09:7F:70:C6:36:D2:C9:87:93:49:38
Authority key identifier: 6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D
Certificate issuer: /CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D
Certificate serial: 707072C224DD4DEE4681DCFF9C65793340C3745D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
Manifest number: 7C
Signing time: Tue 14 Jul 2026 05:50:34 +0000
Manifest this update: Tue 14 Jul 2026 05:45:34 +0000
Manifest next update: Wed 15 Jul 2026 09:14:34 +0000
Files and hashes: 1: 34332e3232352e3231362e302f32322d3232203d3e2034383437.roa (hash: j/eV+lOtMaJE7zLazg78nWoyQGsOhGQyTahosxccrn8=)
2: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl (hash: Tqj8D53gvy6cEbLzABnJz1KBAPDTgHWQN/UwHyUpt/Q=)
3: 3130332e34342e3137382e302f32332d3233203d3e2034383437.roa (hash: lSEivQpgfyTwattyz5XGR7SBQ4DIJ5haeZxfSmZXjnc=)
4: 3130332e34342e3139382e302f32342d3234203d3e2034383030.roa (hash: 6dqpVUqXBgLgk1fCILtRSZoIidor7YhnbVbc5fHfQhk=)
5: 3130332e34342e3137362e302f32332d3233203d3e2034383437.roa (hash: ae7SUgq9OA/NLExuOxlNbHZGMMv09rTQmfolmacGeB4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:70:72:c2:24:dd:4d:ee:46:81:dc:ff:9c:65:79:33:40:c3:74:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D
Validity
Not Before: Jul 14 05:45:34 2026 GMT
Not After : Jul 15 09:14:34 2026 GMT
Subject: CN=2B306085C86D3F42D6097F70C636D2C987934938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:d2:bb:b1:c1:d5:61:67:56:72:63:1d:cc:
18:93:dc:5f:05:e5:9b:bd:9b:48:cb:af:c1:3a:f1:
96:8c:4f:2b:2a:cf:eb:11:36:54:cb:35:32:fb:2c:
98:49:de:fc:6d:98:df:11:5e:c2:fa:1e:c0:5e:d6:
cf:58:79:f1:76:e5:78:fe:5a:f5:4c:e0:6a:92:17:
03:d3:65:41:f4:e6:b9:99:06:ed:b4:9e:9e:7b:f7:
cb:f7:69:35:3f:32:3a:9e:4b:45:bd:2e:7e:d0:2a:
c1:f8:4b:eb:44:df:21:b2:5a:a3:4b:06:cd:88:1f:
58:ad:e6:78:1e:f3:59:04:72:6d:11:8f:0e:78:ef:
57:29:df:ca:9e:8d:8d:64:1d:c3:08:db:64:89:50:
ec:11:f8:81:4a:1a:d0:01:2e:39:83:c9:0e:52:5c:
db:9f:74:e2:39:8d:a9:9d:30:95:30:d9:7c:d7:ac:
a7:9b:07:7d:ac:f0:1c:03:ee:fc:37:81:60:37:bd:
77:60:53:44:37:54:28:ef:f6:0b:aa:66:cf:ee:62:
a6:f4:9e:46:ec:7d:bc:b2:f3:a7:15:53:f8:f5:3b:
b5:3a:6b:54:7c:69:fe:6d:40:2b:5b:c8:53:d1:e8:
58:b5:35:2a:3c:35:79:4d:27:36:29:50:d4:9d:50:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:30:60:85:C8:6D:3F:42:D6:09:7F:70:C6:36:D2:C9:87:93:49:38
X509v3 Authority Key Identifier:
keyid:6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:8f:88:cb:b3:60:e6:d4:5d:75:90:95:b1:f8:80:11:43:b2:
1d:6a:b5:30:2f:a0:55:75:1b:c4:40:fc:9c:d3:08:38:32:46:
2d:3a:69:ed:7b:f0:27:a6:a9:8d:2b:d4:9a:3c:4a:7c:2a:02:
86:87:31:43:6e:4b:67:af:21:f2:10:ee:5d:2c:c9:99:06:b1:
3a:51:b5:f0:01:3a:26:a6:cd:e6:2f:a3:f6:e5:3e:4f:55:4d:
d8:f8:8f:de:22:1d:cc:73:fc:4c:f2:34:72:13:e4:7c:b6:dc:
27:a2:0f:53:64:08:a0:20:6c:88:f4:bd:c8:05:9c:9c:c1:7b:
da:a8:77:a8:f4:c9:ab:d6:87:96:b0:3a:3e:27:9a:60:e6:b0:
6c:13:64:3b:eb:a8:eb:88:23:a5:8c:89:73:37:7e:6a:a5:5c:
38:b8:20:86:72:68:2a:a8:9f:02:18:b7:e0:ff:7a:ca:00:44:
ff:12:49:4a:f7:03:95:61:2b:9c:56:3f:7c:91:fe:b9:90:a4:
0a:45:c6:cb:fb:c0:65:05:c4:db:a0:53:fb:ce:ab:5b:a6:cb:
d5:3c:2c:0e:e2:d2:c1:f4:b7:90:44:9b:e8:b9:76:a4:ba:69:
0f:fb:77:72:c8:db:74:38:8c:29:8c:2f:71:71:5d:56:d1:94:
e9:c0:38:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:00:04 2026 by rpki-client