
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
File: 6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft (raw, json)
Hash identifier: sEKhnzr0W66hN0xlZ3/MfwOGc0rp9ALZ917cxGU26KE=
Subject key identifier: DC:4E:10:C3:0A:31:75:A5:78:A3:9E:9C:EC:05:64:73:4A:05:FC:31
Authority key identifier: 6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40
Certificate issuer: /CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
Certificate serial: 79D2E6A03D93EFFEBF11355D9291AD98ABB1E8DE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
Manifest number: 5B
Signing time: Tue 14 Jul 2026 02:55:15 +0000
Manifest this update: Tue 14 Jul 2026 02:50:15 +0000
Manifest next update: Wed 15 Jul 2026 04:05:15 +0000
Files and hashes: 1: 34352e3132312e35352e302f32342d3234203d3e203633353330.roa (hash: uQaKS12tHszrpruD4chXY46WQvO1G4VYxpx2NC0zXpc=)
2: 6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl (hash: cbvDd0TEQaMAE6irT94LkS5YFx6w7AmeWOdbqStDc2w=)
3: 3130332e3230372e3138342e302f32322d3232203d3e203633353330.roa (hash: p4rGdOCdtSi/gskb6wDTowKIkMH8aqSZrt6W9t8cL0g=)
4: 323430303a613561303a3a2f33322d3332203d3e203633353330.roa (hash: uDfGInXKfeUSoNP2hY+TcDh0GI9nZQpiCTQ28Fl51mE=)
5: 34352e3132312e35322e302f32342d3234203d3e203633353330.roa (hash: MNGTiHV2NzvYS3MQd9CssunlWa/3AOgu8HFnKTzLd+I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl
rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 04:05:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d2:e6:a0:3d:93:ef:fe:bf:11:35:5d:92:91:ad:98:ab:b1:e8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
Validity
Not Before: Jul 14 02:50:15 2026 GMT
Not After : Jul 15 04:05:15 2026 GMT
Subject: CN=DC4E10C30A3175A578A39E9CEC0564734A05FC31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:14:20:ee:e9:bc:81:fb:ca:46:e0:62:ae:6e:
2a:41:32:f4:f7:b3:e6:96:96:66:dc:1f:ff:99:84:
38:20:4c:9d:64:cb:dd:cf:6e:36:71:9d:16:a0:4a:
84:4e:77:a8:ec:0e:a6:1a:42:fd:37:58:04:eb:5b:
5b:17:a5:e0:14:ba:b1:08:d5:ab:40:35:06:b8:dc:
55:ff:9a:8c:ed:ad:97:2a:d3:36:51:69:4a:34:81:
88:f7:a9:50:62:12:7a:04:85:5f:56:79:a3:2b:1d:
d9:0d:bf:7e:86:27:f0:b5:0e:65:78:4d:92:9f:65:
60:50:d4:05:a4:c4:61:de:52:af:2e:08:6d:8f:e9:
2c:b1:38:17:a3:82:60:31:4e:f7:75:49:1f:e4:45:
72:63:ce:22:70:c5:9f:d8:9c:d3:2e:c8:ed:39:19:
1e:9d:13:81:b4:a2:68:5f:4d:25:ba:c1:8d:6c:3e:
85:07:08:8f:f9:fc:42:4a:d4:fa:25:ad:ab:d0:8b:
24:b1:36:30:a1:1d:7f:6b:a8:30:6b:f7:db:f9:1d:
e2:1c:d0:28:5c:31:d5:49:57:14:70:4f:cd:41:14:
85:8d:16:c5:bf:2f:a0:d8:c0:58:ee:96:56:47:c7:
bb:21:92:87:1a:ff:44:23:0f:a0:2b:b8:25:c5:28:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4E:10:C3:0A:31:75:A5:78:A3:9E:9C:EC:05:64:73:4A:05:FC:31
X509v3 Authority Key Identifier:
keyid:6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:37:2a:61:20:41:4b:ee:90:5a:61:15:5f:62:99:e8:a3:d7:
ac:e2:fe:b7:82:f5:ba:2a:b9:a3:de:9f:92:53:cc:2f:eb:6d:
2e:7f:41:14:e5:ab:4f:a6:52:12:44:0e:4e:d5:a6:ea:26:1f:
c3:40:40:c7:3c:95:8d:4a:f2:08:68:ba:27:16:f7:30:e1:7f:
e7:a7:2c:46:73:4e:27:d2:83:34:b1:c4:0a:2e:9e:00:eb:f2:
73:ec:b7:59:56:8d:71:f4:d2:ba:fd:ea:cd:14:80:69:0f:17:
9a:46:ab:52:04:1f:01:b4:80:e0:00:01:a7:83:47:12:9e:09:
42:b0:ab:8a:cc:f0:af:7c:f0:e1:e0:e9:f3:6e:a0:b4:c6:bf:
c7:9c:1e:c0:90:45:a3:fa:b6:03:38:0d:61:b8:89:47:85:89:
e3:ee:1a:97:cc:0e:3b:97:49:44:8d:03:30:cf:8d:7e:90:ee:
3c:42:91:79:3c:f4:7d:3f:18:b5:bc:58:05:19:2e:9e:9e:90:
64:ce:af:59:55:1a:11:8b:01:61:c4:d6:da:86:f3:27:a8:e2:
4d:c9:fb:dc:29:3a:b5:de:3c:cc:61:83:cb:9f:d2:3f:2b:4e:
7c:16:12:12:53:e4:ef:d6:e5:9a:cd:62:24:f4:b5:75:25:49:
af:fc:35:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:13:28 2026 by rpki-client