
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft
File: 6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft (raw, json)
Hash identifier: smmClvWQsfFAUd2SPlVZjjjPSNJfOliwersJlY6QSdk=
Subject key identifier: 99:BA:13:44:58:2B:E8:88:8A:4C:E8:1A:C1:6F:A3:E5:41:A3:50:C6
Authority key identifier: 6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3
Certificate issuer: /CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3
Certificate serial: 28133AEE48D8755213F16F02178434662AF9A3CE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft
Manifest number: 79
Signing time: Tue 14 Jul 2026 15:21:34 +0000
Manifest this update: Tue 14 Jul 2026 15:16:34 +0000
Manifest next update: Wed 15 Jul 2026 15:40:34 +0000
Files and hashes: 1: 3130332e3137302e3231332e302f32342d3234203d3e20313436383432.roa (hash: xHB51GTEu6E4O2uPU5Q+PFtFl9kWbp78dTmrzsJmvSE=)
2: 3130332e3137302e3231322e302f32342d3234203d3e20313436383432.roa (hash: oIVYiH99ns+ZO8k2snXu2q5AtM9u9S/dgbN/MlAUrrI=)
3: 6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl (hash: 1uiTeMC8FdMT1l6IR5f6JOwLCPOGCfraepTBxMVsD3Q=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:13:3a:ee:48:d8:75:52:13:f1:6f:02:17:84:34:66:2a:f9:a3:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3
Validity
Not Before: Jul 14 15:16:34 2026 GMT
Not After : Jul 15 15:40:34 2026 GMT
Subject: CN=99BA1344582BE8888A4CE81AC16FA3E541A350C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:61:18:74:c7:d5:49:e3:89:fd:7a:e3:a2:
d5:36:b2:88:f7:60:8c:b7:c6:03:db:2a:40:8a:81:
08:5e:66:1a:fc:e0:06:63:0e:d3:18:d9:23:23:72:
b8:84:75:c8:a6:bf:8f:52:ef:06:cc:14:39:e1:c1:
b5:10:09:b4:1e:89:1c:a9:96:5a:bf:ec:8f:1e:6f:
64:e3:55:20:a5:e8:57:16:64:e0:ba:20:60:e1:06:
32:c9:c6:42:91:c9:84:4a:6b:dc:37:0e:cd:75:b2:
2d:f3:2e:a2:6f:b2:9f:02:a2:0b:5d:64:a2:dc:66:
d5:ef:b1:1e:1a:63:2a:d9:a3:f5:30:32:3a:76:ff:
d6:60:5b:06:c8:be:d3:f0:34:ea:03:96:7a:b0:1f:
9c:32:21:84:28:5a:28:af:4d:d9:a0:cb:7f:74:ce:
df:20:8b:01:ba:0b:bc:6e:72:df:4b:17:52:5f:e7:
96:c3:f3:81:e5:e4:eb:7e:13:74:49:ea:23:71:24:
d5:a0:ec:ba:fd:63:b3:37:28:b1:33:83:db:a5:5c:
ee:cc:80:9e:b8:12:d0:2d:fc:a4:04:24:b4:76:c0:
04:ee:84:1b:2e:c0:ce:2c:4f:de:3e:0d:02:ca:50:
51:4a:a6:db:d5:30:22:39:74:25:86:7b:68:46:87:
d7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BA:13:44:58:2B:E8:88:8A:4C:E8:1A:C1:6F:A3:E5:41:A3:50:C6
X509v3 Authority Key Identifier:
keyid:6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0d:4e:ee:f2:dc:df:d2:58:7b:94:ee:9b:ee:53:90:1e:e7:
5e:71:00:de:0b:b0:d8:18:52:0d:4b:5a:0b:b7:d8:9c:c3:e8:
65:16:25:de:67:1a:21:8b:7d:89:aa:e4:f6:53:5f:6e:e1:8c:
ad:ff:3c:8a:f0:21:2f:fc:f5:e1:41:6e:31:f2:6e:38:68:43:
aa:c4:d9:7d:66:88:5a:43:0b:3e:0e:06:ce:c1:1c:f7:3a:e3:
df:4d:70:16:65:7b:92:b5:67:91:ce:24:93:6c:1b:29:01:81:
ce:db:ba:05:10:e3:40:8d:a9:64:78:72:bc:82:ad:f1:3d:3d:
fb:a2:a7:df:98:ce:39:3b:71:7a:0d:80:cb:d1:86:d4:64:10:
49:20:24:53:1c:d7:6e:59:c4:ba:bc:2a:96:03:34:8d:7e:dc:
f4:3d:73:d0:f9:dd:1d:75:fb:b6:2b:e6:ab:27:81:c5:21:97:
41:52:b1:18:2c:60:8d:df:75:ea:cd:d4:11:5f:35:c6:ab:02:
fe:32:fa:07:a6:8c:5c:bc:60:4d:a8:f4:9a:8e:85:da:b6:9d:
69:5c:c6:35:02:21:11:60:4d:9b:8a:f2:ec:0c:34:37:68:5a:
2a:8f:c4:ef:cb:ec:8d:53:c3:13:8a:9f:a5:95:c0:98:b1:91:
82:ab:fa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:10:17 2026 by rpki-client