
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
File: 6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft (raw, json)
Hash identifier: r4k9wAqfXoLTB2zFNW+QY7LUx6vQTknLYmj9iU03iqo=
Subject key identifier: 01:E2:31:F1:16:DC:74:0E:D8:9B:25:F2:1F:D2:1D:4A:BC:56:0B:24
Authority key identifier: 6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40
Certificate issuer: /CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
Certificate serial: 1CA8E7A26FB386C1DE1AF882813B475A1C7DC7B7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
Manifest number: AB
Signing time: Mon 12 Oct 2026 18:52:18 +0000
Manifest this update: Mon 12 Oct 2026 18:47:18 +0000
Manifest next update: Fri 16 Oct 2026 02:06:18 +0000
Files and hashes: 1: 6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl (hash: Z/Ux4w+aX3utOCasvFMZIvcjM+FRmHg/jOKe+tx0y7c=)
2: 3130332e3230372e3138342e302f32322d3232203d3e203633353330.roa (hash: p4rGdOCdtSi/gskb6wDTowKIkMH8aqSZrt6W9t8cL0g=)
3: 323430303a613561303a3a2f33322d3332203d3e203633353330.roa (hash: uDfGInXKfeUSoNP2hY+TcDh0GI9nZQpiCTQ28Fl51mE=)
4: 34352e3132312e35352e302f32342d3234203d3e203633353330.roa (hash: uQaKS12tHszrpruD4chXY46WQvO1G4VYxpx2NC0zXpc=)
5: 34352e3132312e35322e302f32342d3234203d3e203633353330.roa (hash: MNGTiHV2NzvYS3MQd9CssunlWa/3AOgu8HFnKTzLd+I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl
rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 02:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:a8:e7:a2:6f:b3:86:c1:de:1a:f8:82:81:3b:47:5a:1c:7d:c7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
Validity
Not Before: Oct 12 18:47:18 2026 GMT
Not After : Oct 16 02:06:18 2026 GMT
Subject: CN=01E231F116DC740ED89B25F21FD21D4ABC560B24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:a9:56:23:cb:b0:98:84:32:a4:b7:5c:07:
01:a5:16:e4:ad:d0:b0:a2:33:eb:52:b4:7f:48:6d:
cc:39:d5:65:c4:7d:34:5a:cd:0d:a3:ec:28:c4:dc:
ed:15:1d:e4:45:0d:3a:96:83:a0:77:bb:cd:a6:b8:
66:a1:df:30:72:fe:4e:44:3b:50:7a:e1:5d:b0:b0:
7c:61:9f:7e:72:15:0b:ea:56:c8:73:36:0f:a7:c8:
87:0f:f1:d2:b8:2c:4b:16:0b:43:83:ba:b0:ec:bc:
1f:a8:4d:d4:f9:50:2a:ff:81:13:ec:d1:2b:22:17:
9c:5b:ac:1f:49:11:0a:55:c1:e2:71:13:5d:e1:da:
14:86:70:dd:82:b3:d0:34:fb:71:52:8c:a0:4b:e7:
f1:55:e6:80:0a:28:2a:52:8c:24:6e:20:6a:57:d9:
88:47:2d:a7:fb:c3:85:6e:30:b3:84:e9:38:1e:c1:
3a:a9:93:16:3d:93:1a:ff:7e:e6:d7:ac:d0:ea:e3:
6d:ed:44:26:dd:27:90:b4:0e:76:cc:05:19:a2:62:
ee:73:b6:6f:37:50:55:90:65:14:f6:b0:41:2b:24:
79:1c:26:02:51:e3:af:86:71:6a:9a:a9:df:b2:19:
7d:da:2b:b8:ee:85:7e:93:a1:ef:e1:89:de:56:40:
7a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E2:31:F1:16:DC:74:0E:D8:9B:25:F2:1F:D2:1D:4A:BC:56:0B:24
X509v3 Authority Key Identifier:
keyid:6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4f:29:27:7a:bf:96:51:03:01:f3:21:5e:d8:8b:54:5e:ae:
f2:ed:b0:b8:7d:41:92:ae:66:d4:13:7a:68:b3:a7:f9:84:fd:
d0:57:eb:c4:a5:68:bc:09:ca:63:4d:1f:33:98:f2:3d:52:0e:
2b:db:ae:54:5d:fb:3e:d4:2a:47:d6:79:fa:17:1f:70:d1:17:
b7:8d:7f:26:d0:4d:32:d0:7b:ae:24:db:78:e1:34:46:c1:0f:
b5:73:6a:1d:fd:df:0a:a9:7c:4e:0d:f6:b2:e2:d9:48:1f:b2:
40:69:50:0d:59:ce:fa:fe:b9:29:58:8f:71:65:dd:ce:dc:36:
51:f4:e0:19:a9:73:de:d7:f6:2b:ff:c5:4a:ed:05:94:97:2f:
7e:ec:f3:bf:60:b5:99:02:32:92:1e:eb:17:eb:9d:e5:93:ee:
5a:22:a8:c1:d8:3d:27:9e:eb:99:3d:c5:eb:4c:9c:01:ca:3d:
db:c3:7b:ee:0c:d5:8d:e4:97:cb:5d:2d:8a:bb:52:08:59:2d:
bc:86:c8:fa:7d:a2:9d:64:e7:16:42:db:af:b4:80:9f:0a:d5:
ea:bc:17:12:c9:7b:54:ee:77:8f:33:90:4d:d8:bd:91:b7:a2:
b5:2c:b1:06:5b:67:a5:45:e9:f8:99:1a:1f:9a:be:78:ef:4f:
7e:ea:57:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:00:16 2026 by rpki-client