
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
File: 060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft (raw, json)
Hash identifier: WHh772V4qeepKXqqkXUt2k5/fQAphq16C3/4u7cmoY8=
Subject key identifier: 53:43:F4:17:32:1B:87:90:35:0B:CC:EB:8A:AA:53:8B:A2:D1:CE:C4
Authority key identifier: 06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD
Certificate issuer: /CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
Certificate serial: 65752315998AD99DE2B8D6E015CCDEAC114B92AF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
Manifest number: 7D
Signing time: Mon 27 Jul 2026 09:28:46 +0000
Manifest this update: Mon 27 Jul 2026 09:23:46 +0000
Manifest next update: Tue 28 Jul 2026 10:24:46 +0000
Files and hashes: 1: 3130312e34392e3134382e302f32332d3233203d3e2034383437.roa (hash: hD8pipimoNbXJuFtKR22JqYH5vAkWdps2g2kY8PbheI=)
2: 060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl (hash: P/IY9LkAx1ufCp/k12xFHM+dd6/40o+t1k8WS5DSkgU=)
3: 3130312e34392e3132382e302f31382d3138203d3e2030.roa (hash: EQ/aHDyPfGrqHqi7zcwJ4BpwFk8LfHUqOf3EobqjPg4=)
4: 3135372e3131392e3137322e302f32322d3232203d3e2034383437.roa (hash: nfHPWryodoQGAWIQEwiQs1RdM4fk6gLb4mCgk+4BsD4=)
5: 3130332e3231362e34302e302f32322d3232203d3e2030.roa (hash: CJGUWXnox0zuB6o/j+gb69TVgAVyeUqTs1YSv3rOyk4=)
6: 323430343a653738303a3a2f33322d3332203d3e2030.roa (hash: jDt2YO5IfWb4E+JvZ4HL3Mb4PviL245jOkb90zp1nDg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl
rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:07:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:75:23:15:99:8a:d9:9d:e2:b8:d6:e0:15:cc:de:ac:11:4b:92:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
Validity
Not Before: Jul 27 09:23:46 2026 GMT
Not After : Jul 28 10:24:46 2026 GMT
Subject: CN=5343F417321B8790350BCCEB8AAA538BA2D1CEC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c6:80:45:22:a9:fc:7f:eb:55:a0:ad:75:99:
86:d3:20:43:5e:6a:f5:e7:82:d9:2b:7c:3c:c1:00:
87:a8:98:24:ad:d1:fd:84:78:b8:55:6d:18:cc:92:
c7:42:88:6b:b9:e6:fb:6c:e5:6e:22:6d:21:0b:05:
34:d3:63:73:03:25:4b:69:2f:6e:85:ce:98:e2:76:
4e:52:df:95:61:f9:c2:45:f2:b6:53:34:a9:64:51:
a7:79:25:79:f3:28:5a:fb:6b:1d:1d:aa:25:31:45:
f9:dc:a6:58:ba:69:09:38:c5:27:97:7e:ce:07:e2:
38:59:58:43:fb:13:ea:dd:b5:3e:1a:3c:e4:3c:3c:
ce:2b:2a:bb:bc:eb:d8:33:55:b8:54:c7:9c:16:7b:
2a:86:24:3d:b8:ea:27:77:34:f6:0d:f4:0f:80:87:
aa:17:06:87:45:7f:1f:a6:6e:8b:c9:22:49:52:1b:
f2:f7:fd:c7:e0:2f:40:cb:2b:a0:44:29:fb:a0:6a:
57:f6:67:73:4c:f6:c3:d0:84:ce:27:3a:fc:d9:29:
3e:31:eb:f4:b5:63:c0:59:02:46:5a:9e:da:3c:0d:
d8:da:37:9e:26:a0:38:e5:71:70:0b:c4:f2:65:c0:
c1:d5:bf:1e:a9:a5:b6:ce:99:5c:e7:10:b4:35:4c:
e0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:43:F4:17:32:1B:87:90:35:0B:CC:EB:8A:AA:53:8B:A2:D1:CE:C4
X509v3 Authority Key Identifier:
keyid:06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3a:26:95:d0:fc:27:bc:ec:a9:10:93:4f:e3:7b:e6:99:2e:
50:97:89:e3:4e:b0:6d:7d:8e:85:75:4b:da:3d:65:c4:01:9d:
07:46:a4:c4:c3:86:b0:71:5c:7c:2b:3c:32:7b:a6:2d:e0:f5:
a0:0b:3e:9a:d2:85:1a:70:e9:4f:e1:b2:2e:f0:c5:4d:f3:16:
b7:25:cd:07:d9:c4:4e:4b:51:85:a2:03:c5:57:dd:be:76:33:
f7:84:69:9f:56:c9:6e:60:2a:bc:01:4c:18:75:e3:88:26:ef:
cc:45:e6:05:5d:47:74:b1:26:89:e2:f3:cd:c8:37:be:4c:ad:
eb:40:09:cb:76:58:12:4c:ab:87:fe:51:4d:fc:5f:bd:ee:e9:
ae:00:60:37:f2:0c:3c:de:c2:52:38:8e:ab:bf:b5:4b:84:e9:
10:a4:82:91:40:77:55:fc:f8:53:80:3f:aa:7d:dc:19:e0:e8:
ab:93:f1:2d:5b:8d:e0:0f:b5:63:76:6a:f3:e9:07:ea:29:cb:
6c:88:75:98:d6:e2:22:14:57:96:32:b0:1a:cd:ad:e6:f1:30:
75:15:b4:4b:83:ec:f8:a9:f2:d1:24:50:fd:0f:43:b4:aa:9f:
91:df:78:64:98:b7:a2:c6:8b:f2:aa:09:f5:ff:c8:33:8c:16:
3a:a5:0c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:34:30 2026 by rpki-client