
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
File: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft (raw, json)
Hash identifier: AwmJr1jw2wTHazF3VwqXWGQTiFQ+tk+hi1suDvCovOQ=
Subject key identifier: CA:1B:59:4F:22:03:B8:D2:89:0A:88:6C:39:AA:B4:9D:DE:DE:9C:E7
Authority key identifier: 6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C
Certificate issuer: /CN=A91EFAA20000/serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C
Certificate serial: 4DC986585817D1EE0EAC4F08EE3EC2B9D9CC62A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
Manifest number: C2
Signing time: Mon 05 Oct 2026 04:38:10 +0000
Manifest this update: Mon 05 Oct 2026 04:33:10 +0000
Manifest next update: Thu 08 Oct 2026 06:46:10 +0000
Files and hashes: 1: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl (hash: 0VaJu+axH/IznR5ejFlU4NUqce5thZ4Lrd6M5ckldMs=)
2: 3230332e39342e302e302f31392d3139203d3e203137373339.roa (hash: +m3tQEFjHE7EvQqZt5ZFMX5uxgUV2P9Xu/hnIBd3mN4=)
3: 323430373a343838303a3a2f33322d3332203d3e2030.roa (hash: ijCaVomoD4Gp49iRFc8q+IjUsH7ACZllQmvyC2Sz9cQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl
rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 06:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c9:86:58:58:17:d1:ee:0e:ac:4f:08:ee:3e:c2:b9:d9:cc:62:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFAA20000, serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C
Validity
Not Before: Oct 5 04:33:10 2026 GMT
Not After : Oct 8 06:46:10 2026 GMT
Subject: CN=CA1B594F2203B8D2890A886C39AAB49DDEDE9CE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:ed:4e:56:23:1a:36:3f:94:50:2e:85:85:
f1:6c:c6:39:10:5c:45:3a:f3:52:92:5e:77:3e:54:
1c:0b:f7:cd:07:1f:f4:3a:de:f8:08:8f:fe:b5:ab:
bf:56:ac:d2:2e:ca:bd:57:5a:1a:ae:51:1b:d8:0e:
2e:62:00:bd:8c:50:78:56:71:43:d0:ac:94:0f:6b:
02:d1:c9:40:dc:df:7f:36:50:f1:7a:ea:26:7d:99:
38:30:58:05:60:1b:46:b7:c3:4b:60:a4:71:b8:28:
e1:44:ef:a9:65:4b:e1:ec:be:7a:85:40:c9:b3:d7:
ff:23:8f:15:a1:b7:4d:be:7e:bb:e2:51:71:30:96:
29:71:11:03:04:17:ab:f4:0f:60:e4:e2:c9:a9:72:
95:87:6d:ce:f0:7d:e6:f4:65:44:ca:6b:c7:8d:29:
c4:76:c5:4f:7a:3b:b7:7e:b3:80:80:c7:55:d1:16:
97:b3:bc:6a:35:96:fb:24:38:6d:cf:c2:80:e9:7e:
26:5d:d1:27:13:a5:2e:95:ff:b3:f6:6d:e2:1e:f5:
ab:a6:29:0e:6a:1c:a1:e2:1b:47:65:46:81:cb:f2:
8f:4d:64:34:03:ef:2b:31:2c:d4:17:8a:04:6d:62:
26:43:b0:f5:b8:55:36:c8:9c:9a:f0:f4:aa:8a:55:
7c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1B:59:4F:22:03:B8:D2:89:0A:88:6C:39:AA:B4:9D:DE:DE:9C:E7
X509v3 Authority Key Identifier:
keyid:6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f4:74:6c:1c:a0:28:99:04:24:c6:83:d3:6e:18:2b:cd:b9:
ab:e5:45:b1:96:9f:1a:db:ca:c3:84:25:f6:77:a9:f3:92:fd:
85:71:5a:2a:e4:9a:51:a2:0c:f9:28:53:8f:27:cb:d9:fa:74:
f3:98:ce:eb:77:7a:b8:84:af:97:70:3a:61:4b:bf:88:64:56:
be:53:3e:29:50:b7:bf:55:b7:eb:23:21:c9:ac:7a:4f:48:8b:
0a:0c:1a:e6:f2:1b:19:ef:43:c9:7d:d2:e3:7d:98:24:de:29:
97:b4:cf:97:f0:70:87:eb:1f:d3:f7:42:85:8c:0f:0c:8a:0e:
41:e5:34:22:5e:1d:9f:72:f0:96:7d:22:a9:7d:eb:06:2a:2c:
64:63:47:50:f9:66:f9:92:13:9d:ef:e9:a5:06:25:5b:b8:b2:
5f:b4:4d:0d:b6:d0:ec:72:82:c3:1c:51:1e:0a:63:fd:e9:90:
27:e7:5b:4d:5a:c8:02:d3:ac:17:aa:fc:73:d9:71:24:d0:44:
ac:63:7e:23:c6:7b:60:74:e8:36:d3:f4:dd:29:2d:96:ae:e4:
fd:ab:0a:4f:e9:c9:37:b9:b8:7d:50:a0:1e:b1:7e:b6:73:78:
e9:77:42:96:51:49:54:97:6c:c0:04:b8:2f:22:6e:cf:37:a1:
97:ed:f0:43
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTcmGWFgX0e4OrE8I7j7CudnMYqQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRUZBQTIwMDAwMTEwLwYDVQQFEyg2QTM4Nzk5RTdG
RDIxOTg1RUQ4ODJFODhGRkMwREFGRUZGODdGNTRDMB4XDTI2MTAwNTA0MzMxMFoX
DTI2MTAwODA2NDYxMFowMzExMC8GA1UEAxMoQ0ExQjU5NEYyMjAzQjhEMjg5MEE4
ODZDMzlBQUI0OURERURFOUNFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALDI7U5WIxo2P5RQLoWF8WzGORBcRTrzUpJedz5UHAv3zQcf9Dre+AiP/rWr
v1as0i7KvVdaGq5RG9gOLmIAvYxQeFZxQ9CslA9rAtHJQNzffzZQ8XrqJn2ZODBY
BWAbRrfDS2Ckcbgo4UTvqWVL4ey+eoVAybPX/yOPFaG3Tb5+u+JRcTCWKXERAwQX
q/QPYOTiyalylYdtzvB95vRlRMprx40pxHbFT3o7t36zgIDHVdEWl7O8ajWW+yQ4
bc/CgOl+Jl3RJxOlLpX/s/Zt4h71q6YpDmocoeIbR2VGgcvyj01kNAPvKzEs1BeK
BG1iJkOw9bhVNsicmvD0qopVfIMCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBTKG1lP
IgO40okKiGw5qrSd3t6c5zAfBgNVHSMEGDAWgBRqOHmef9IZhe2ILoj/wNr+/4f1
TDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk5OTYzODExNTAwMTMwMzA3LzAvNkEzODc5
OUU3RkQyMTk4NUVEODgyRTg4RkZDMERBRkVGRjg3RjU0Qy5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvYWpoNW5uX1NH
WVh0aUM2SV84RGFfdi1IOVV3LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH
MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5OTk2MzgxMTUw
MDEzMDMwNy8wLzZBMzg3OTlFN0ZEMjE5ODVFRDg4MkU4OEZGQzBEQUZFRkY4N0Y1
NEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQCa9HRsHKAomQQkxoPTbhgrzbmr5UWxlp8a28rDhCX2d6nz
kv2FcVoq5JpRogz5KFOPJ8vZ+nTzmM7rd3q4hK+XcDphS7+IZFa+Uz4pULe/Vbfr
IyHJrHpPSIsKDBrm8hsZ70PJfdLjfZgk3imXtM+X8HCH6x/T90KFjA8Mig5B5TQi
Xh2fcvCWfSKpfesGKixkY0dQ+Wb5khOd7+mlBiVbuLJftE0NttDscoLDHFEeCmP9
6ZAn51tNWsgC06wXqvxz2XEk0ESsY34jxntgdOg20/TdKS2WruT9qwpP6ck3ubh9
UKAesX62c3jpd0KWUUlUl2zABLgvIm7PN6GX7fBD
-----END CERTIFICATE-----
Generated at Tue Oct 6 18:48:19 2026 by rpki-client