
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft
File: 6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft (raw, json)
Hash identifier: 7Cgt/zcZSRgHxVo5b/LCs1DcfzwzmQx+VCPeaTGvp70=
Subject key identifier: 94:ED:D5:05:83:04:95:51:73:33:2E:EF:90:6C:A3:E2:3A:46:2B:DE
Authority key identifier: 6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1
Certificate issuer: /CN=6B3CB0044466142CEF0429B4E232A5AD2D38AAA1
Certificate serial: 7A282C131BBA3AD0BAE3EBE863024C94B663B8A9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft
Manifest number: C8
Signing time: Wed 14 Oct 2026 20:04:29 +0000
Manifest this update: Wed 14 Oct 2026 19:59:29 +0000
Manifest next update: Sat 17 Oct 2026 23:54:29 +0000
Files and hashes: 1: 323430303a383665303a3a2f33322d3332203d3e20313436383134.roa (hash: DLyf9Hka8LSknSJVSIf6Mgywzzt8gkawHdcew74fo+c=)
2: 3130332e3138392e3135342e302f32332d3233203d3e20313436383134.roa (hash: 4nDwr0x7auXaCdia53bmpvYSCG62VhpDsLJImLDcVGo=)
3: 6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl (hash: e7lu6OUGqptQQRuvPvD/57Lnj8LF83xDFXdhhBbEGDw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl
rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 12:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:28:2c:13:1b:ba:3a:d0:ba:e3:eb:e8:63:02:4c:94:b6:63:b8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B3CB0044466142CEF0429B4E232A5AD2D38AAA1
Validity
Not Before: Oct 14 19:59:29 2026 GMT
Not After : Oct 17 23:54:29 2026 GMT
Subject: CN=94EDD5058304955173332EEF906CA3E23A462BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ac:dc:cc:5c:25:6b:ee:93:60:fa:1d:b0:26:
c8:43:d3:c6:ac:63:f8:79:b4:23:23:84:32:2e:82:
1e:ea:8f:ce:86:61:66:d6:98:60:ce:d9:29:d8:a3:
7f:2e:8f:ad:8a:5f:0c:d6:98:d4:b9:55:7f:e9:d3:
63:c0:72:93:b8:c4:6b:2b:84:65:c9:54:2c:26:0c:
66:a5:b8:d7:0b:d4:dd:ac:8c:9d:ca:9e:6b:fb:82:
84:4b:e3:20:70:83:73:cf:f5:e0:a6:54:32:7e:6d:
29:39:82:2b:f6:97:20:fb:98:2b:0b:22:05:74:d0:
5b:ae:84:c5:28:f8:92:a8:95:83:f1:91:04:c1:b6:
2f:8a:4f:6b:db:fd:3e:d8:f6:4d:63:3e:b1:36:a0:
50:00:2c:2a:c9:b3:cc:dc:e9:62:5c:92:ab:29:37:
0a:12:d3:8e:3c:a6:de:f4:3c:7e:d1:5e:09:38:3b:
65:b7:fa:fb:4b:d6:f2:e7:54:93:c6:ac:d4:c4:17:
11:c9:c3:31:93:08:8a:7e:eb:60:2d:44:11:0d:76:
a7:65:0d:3c:44:ab:4e:00:9f:d4:93:39:95:ca:d4:
7d:cf:7c:28:6b:e0:7c:c3:99:a8:89:f5:bf:5d:29:
9e:de:76:ab:cb:6f:67:b2:f7:43:c6:5a:9f:8b:a2:
83:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:ED:D5:05:83:04:95:51:73:33:2E:EF:90:6C:A3:E2:3A:46:2B:DE
X509v3 Authority Key Identifier:
keyid:6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:28:a5:40:af:b9:85:a4:81:b3:87:bf:ec:e4:98:36:50:de:
d7:cf:aa:9c:db:e9:62:bc:55:34:b6:80:0e:de:8d:7b:6e:d4:
4c:ac:54:08:08:30:a8:c5:47:e3:1a:ae:9b:9a:8a:00:7a:2a:
8b:a1:d6:79:82:cc:7b:ae:f7:25:9a:50:ac:84:0f:cf:f4:bb:
05:f3:4c:49:f0:bb:b5:21:10:9b:50:24:06:fc:28:8e:c3:9f:
48:76:f0:b9:59:e7:8a:5a:da:31:d9:76:94:d0:6c:9f:11:a5:
63:ee:0d:3e:c4:fa:25:c0:21:a4:d8:92:d0:0c:ae:04:44:a0:
db:f9:5c:a6:10:ad:75:d0:09:a5:ed:35:6f:0b:65:9a:5d:64:
9f:ba:f1:f4:06:f5:66:f6:6a:61:d5:a3:59:8a:9f:63:2c:cb:
30:5a:3e:a7:0c:fd:e1:d2:74:57:d3:70:9b:3c:9a:f9:42:df:
2b:6a:e9:4a:ba:15:f2:9f:0b:e3:76:b3:21:4f:ad:f1:e6:ae:
73:1f:23:cc:02:df:46:64:62:9e:0e:fd:b9:f2:f4:73:32:e0:
68:6c:b6:c9:9f:df:2b:02:6e:1c:2c:06:57:65:37:ce:98:7d:
08:2f:21:99:35:f6:c7:62:c7:1f:56:3e:b3:29:49:ed:09:54:
03:dc:42:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 07:01:07 2026 by rpki-client