
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
File: 6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft (raw, json)
Hash identifier: JB/xwp/TDDWd4uUSRPLS9PTBNqvMyk2NYHKJdkV/wDE=
Subject key identifier: DF:59:9B:FC:2B:19:70:C3:FB:28:3E:15:1A:23:81:33:BE:BB:3A:5C
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial: 26592863B94CC71008FBBBDBD18A9B27741155DA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
Manifest number: 0F
Signing time: Mon 27 Apr 2026 01:18:38 +0000
Manifest this update: Mon 27 Apr 2026 01:13:38 +0000
Manifest next update: Tue 28 Apr 2026 04:14:38 +0000
Files and hashes: 1: 6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl (hash: 5UC5pWDCK4KhN6G9BDko31Qdlsvr0rulhB0DUP2bR/M=)
2: 3130332e3139322e3235322e302f32322d3232203d3e2034383132.roa (hash: zY7BeZ54qOlA5fmxZp3uwnE81EWFDJk9pWozMKFYWaI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 04:14:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:59:28:63:b9:4c:c7:10:08:fb:bb:db:d1:8a:9b:27:74:11:55:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Validity
Not Before: Apr 27 01:13:38 2026 GMT
Not After : Apr 28 04:14:38 2026 GMT
Subject: CN=DF599BFC2B1970C3FB283E151A238133BEBB3A5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:6a:13:6c:e8:cb:07:76:d0:30:0b:a7:09:
0c:09:97:82:6b:ab:67:26:3c:81:56:49:62:cb:46:
31:cb:40:7c:e6:f4:9e:5c:11:4f:20:5d:4e:cc:be:
d1:f0:a6:e0:d8:1d:94:bc:7d:34:a5:99:8c:05:90:
0c:95:64:3e:ef:fa:16:1f:87:8d:c8:b0:a7:9c:df:
86:69:cf:55:e4:36:a0:f3:40:e6:ef:1c:6a:70:a3:
66:40:53:aa:73:ad:b7:e0:64:31:f8:97:d2:63:0e:
6d:cc:94:25:d3:17:c5:bc:91:d0:65:70:13:db:a9:
12:7f:67:dc:a7:e5:8e:5e:d7:09:d8:21:e3:ef:39:
52:72:69:0a:9f:fe:3b:2d:59:60:89:bb:c0:57:5f:
69:79:78:e4:76:2d:68:b1:9a:8d:88:d1:1f:e0:c7:
60:89:87:a4:d0:9e:f9:16:3b:84:ee:96:a0:58:7f:
cc:a1:cc:8a:90:4f:b2:a6:0c:8c:fc:26:a2:5a:c7:
26:02:27:11:78:6d:6b:35:8e:d9:c8:bb:87:4f:2f:
c7:48:13:6e:e9:7c:14:ff:67:b3:b4:50:0f:f8:61:
41:f3:d8:73:6d:16:1f:7d:ba:8c:ed:f3:df:e1:36:
20:f9:bf:6e:08:ae:68:6b:0c:96:63:4a:f3:30:35:
a0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:59:9B:FC:2B:19:70:C3:FB:28:3E:15:1A:23:81:33:BE:BB:3A:5C
X509v3 Authority Key Identifier:
keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ae:62:18:54:cf:4b:cd:99:98:4b:ab:5d:d4:fa:bf:59:0d:
8a:26:00:fd:1d:3b:b3:5e:9e:e3:f8:05:72:73:49:f2:aa:1d:
30:b4:d0:09:e3:fc:b9:43:13:15:f1:ba:cb:1b:9c:25:21:46:
9b:2e:1c:fa:12:ee:dd:4b:37:27:6f:8a:aa:6d:41:78:6d:4d:
0a:eb:ef:77:71:a0:60:20:10:e8:23:99:83:dc:ff:e3:d2:bd:
7a:96:78:34:d0:35:b2:71:32:b0:bb:0d:ff:55:27:e1:a6:ed:
60:78:0b:16:18:c5:94:88:83:6e:d1:34:ed:cd:9d:96:a7:3c:
16:01:f6:74:e6:16:a7:d3:f7:97:f5:ba:ac:d6:47:16:46:3b:
25:1e:ca:8b:50:5b:40:70:bf:97:b4:ff:6c:ec:34:ec:5b:e9:
48:05:c2:5b:de:9d:39:e7:ba:6c:a7:0e:47:1d:0d:29:e1:2a:
cb:dd:ea:cb:94:35:80:3a:7e:3b:e9:e5:54:24:c1:29:52:68:
70:aa:a0:3a:bc:a9:f1:d2:5a:ec:a1:16:c2:50:f3:3d:c9:26:
4c:ea:ba:39:c0:19:da:c2:f6:42:58:f4:6b:1c:89:c9:5b:ad:
cd:b9:d3:fc:07:6a:49:de:7f:98:ac:51:bf:23:dd:9c:29:09:
fb:72:45:af
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUJlkoY7lMxxAI+7vb0YqbJ3QRVdowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1
MDVBREQ5NDAeFw0yNjA0MjcwMTEzMzhaFw0yNjA0MjgwNDE0MzhaMDMxMTAvBgNV
BAMTKERGNTk5QkZDMkIxOTcwQzNGQjI4M0UxNTFBMjM4MTMzQkVCQjNBNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HmoTbOjLB3bQMAunCQwJl4Jr
q2cmPIFWSWLLRjHLQHzm9J5cEU8gXU7MvtHwpuDYHZS8fTSlmYwFkAyVZD7v+hYf
h43IsKec34Zpz1XkNqDzQObvHGpwo2ZAU6pzrbfgZDH4l9JjDm3MlCXTF8W8kdBl
cBPbqRJ/Z9yn5Y5e1wnYIePvOVJyaQqf/jstWWCJu8BXX2l5eOR2LWixmo2I0R/g
x2CJh6TQnvkWO4TulqBYf8yhzIqQT7KmDIz8JqJaxyYCJxF4bWs1jtnIu4dPL8dI
E27pfBT/Z7O0UA/4YUHz2HNtFh99uozt89/hNiD5v24IrmhrDJZjSvMwNaCrAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU31mb/CsZcMP7KD4VGiOBM767OlwwHwYDVR0j
BBgwFoAUaomLPk67TFd/drvX8NdR+FBa3ZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzQwNTExNTI2ODA3MTQyNy8wLzZBODk4QjNFNEVCQjRDNTc3Rjc2QkJEN0YwRDc1
MUY4NTA1QUREOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1MDVBREQ5NC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTc0MDUxMTUyNjgwNzE0MjcvMC82QTg5OEIzRTRFQkI0
QzU3N0Y3NkJCRDdGMEQ3NTFGODUwNUFERDk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQK5iGFTPS82Z
mEurXdT6v1kNiiYA/R07s16e4/gFcnNJ8qodMLTQCeP8uUMTFfG6yxucJSFGmy4c
+hLu3Us3J2+Kqm1BeG1NCuvvd3GgYCAQ6COZg9z/49K9epZ4NNA1snEysLsN/1Un
4abtYHgLFhjFlIiDbtE07c2dlqc8FgH2dOYWp9P3l/W6rNZHFkY7JR7Ki1BbQHC/
l7T/bOw07FvpSAXCW96dOee6bKcORx0NKeEqy93qy5Q1gDp+O+nlVCTBKVJocKqg
Oryp8dJa7KEWwlDzPckmTOq6OcAZ2sL2Qlj0axyJyVutzbnT/AdqSd5/mKxRvyPd
nCkJ+3JFrw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:37:05 2026 by rpki-client