
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
File: 6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft (raw, json)
Hash identifier: mFHb3LtVYDAA9ee+dwTlC+WbobbpuJww3PjDL1TT4CY=
Subject key identifier: 4A:CF:68:C7:99:51:52:60:E4:E0:5B:88:42:13:FB:3C:F6:82:97:F5
Authority key identifier: 6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40
Certificate issuer: /CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
Certificate serial: 463A3A2BCE39FD42BC8086AD1DCF1DA9441473B7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
Manifest number: 97
Signing time: Fri 28 Aug 2026 06:48:10 +0000
Manifest this update: Fri 28 Aug 2026 06:43:10 +0000
Manifest next update: Mon 31 Aug 2026 18:38:10 +0000
Files and hashes: 1: 34352e3132312e35322e302f32342d3234203d3e203633353330.roa (hash: MNGTiHV2NzvYS3MQd9CssunlWa/3AOgu8HFnKTzLd+I=)
2: 6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl (hash: Ieue9GSeeU/7HBO4/s7gkNogxMT6Iv3Yn9ez9hx1Fho=)
3: 34352e3132312e35352e302f32342d3234203d3e203633353330.roa (hash: uQaKS12tHszrpruD4chXY46WQvO1G4VYxpx2NC0zXpc=)
4: 323430303a613561303a3a2f33322d3332203d3e203633353330.roa (hash: uDfGInXKfeUSoNP2hY+TcDh0GI9nZQpiCTQ28Fl51mE=)
5: 3130332e3230372e3138342e302f32322d3232203d3e203633353330.roa (hash: p4rGdOCdtSi/gskb6wDTowKIkMH8aqSZrt6W9t8cL0g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl
rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 15:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3a:3a:2b:ce:39:fd:42:bc:80:86:ad:1d:cf:1d:a9:44:14:73:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
Validity
Not Before: Aug 28 06:43:10 2026 GMT
Not After : Aug 31 18:38:10 2026 GMT
Subject: CN=4ACF68C799515260E4E05B884213FB3CF68297F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:50:90:8b:12:55:4b:56:64:1c:16:8d:3e:
33:b8:04:9d:57:a3:9f:a5:6d:08:28:73:2b:d0:34:
18:5f:fe:2c:16:d7:65:cb:44:5e:c3:c4:6c:c7:a0:
18:f7:8d:3d:e2:77:99:66:1e:83:fb:ef:5b:aa:4b:
f2:7b:da:b7:19:07:de:18:e7:04:a1:5e:fe:4d:67:
b9:58:c9:51:34:fd:11:fb:51:6a:28:dc:27:92:97:
6c:ad:ff:11:17:31:bb:e7:38:e0:ee:af:ba:39:98:
b8:82:b7:65:c1:4a:1f:50:c3:b0:c3:d2:96:fa:f0:
e9:f0:8f:48:89:1f:4f:05:1c:1a:69:ab:9a:35:bb:
77:ad:fc:33:f4:58:a8:81:8b:e2:29:af:38:95:87:
11:53:7b:98:2b:36:c4:d1:1b:a1:f8:bc:0f:f5:27:
a6:14:af:7b:34:ea:d2:5e:8c:98:f6:55:3e:11:ba:
b3:72:2a:75:00:1d:b8:91:00:c0:ba:5a:ca:ae:58:
e4:b6:95:44:c4:cc:f4:b7:05:a4:ac:b1:6e:bd:be:
ee:bc:28:da:26:ad:34:b9:b9:d3:a4:15:8d:a8:20:
43:b8:54:3c:2a:e9:86:fe:ea:4a:c9:46:1b:c0:4a:
b8:7c:e7:33:82:7c:b8:4e:39:23:71:0f:3c:98:aa:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CF:68:C7:99:51:52:60:E4:E0:5B:88:42:13:FB:3C:F6:82:97:F5
X509v3 Authority Key Identifier:
keyid:6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:5f:9c:ce:15:15:9b:c6:b1:ea:75:33:bf:c9:7c:5c:07:68:
b2:df:67:67:65:2d:f3:67:a4:55:66:0b:16:79:3b:ea:9a:eb:
84:05:9a:1a:4b:6b:19:5f:68:77:ad:71:eb:d7:20:a2:c7:84:
3c:b4:65:0d:66:51:d2:d2:b8:9a:80:f7:23:ba:70:b2:c1:94:
e3:30:27:37:3a:fd:31:59:61:f9:51:91:3b:0a:ca:ce:08:23:
59:78:0f:d9:88:b3:2b:29:f2:43:7e:6b:7c:63:53:11:a3:dd:
c7:c5:67:3e:d7:98:47:91:3d:29:70:13:54:aa:0c:6f:dc:99:
f6:8c:7a:0e:63:1d:81:fd:0a:44:24:95:50:d4:c6:a5:1e:e6:
62:63:da:3f:3c:e7:00:ae:77:a4:a4:91:ed:a6:31:bf:58:da:
3d:4c:9b:ba:d5:44:43:d3:d9:2b:f6:46:b6:d8:ea:30:c5:d0:
5d:b4:41:a8:73:a8:ad:6f:21:09:a8:27:41:74:24:49:9e:af:
cc:3b:de:5f:c1:79:31:fc:e7:77:97:44:3a:26:47:c1:a8:65:
40:1c:b0:4a:d9:9c:a5:fd:b3:2c:60:f2:3f:51:f1:3c:fa:7e:
db:07:b8:f8:f7:4b:c9:a8:df:c9:31:d1:89:71:99:cb:f9:ff:
e3:64:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:44:58 2026 by rpki-client