
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
File: 6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft (raw, json)
Hash identifier: jeIw6wCv2YaHwLjtdZ7mZdIyTc7H5u5FWOPbeHKkoNc=
Subject key identifier: 0B:A4:6D:E2:33:6A:87:E3:03:04:69:D2:7E:58:F9:09:80:91:BD:0B
Authority key identifier: 6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40
Certificate issuer: /CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
Certificate serial: 0AF92409FC61C2EADBFDB205E8B3C2C71DB15E69
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
Manifest number: 1D
Signing time: Fri 29 May 2026 01:32:25 +0000
Manifest this update: Fri 29 May 2026 01:27:25 +0000
Manifest next update: Sat 30 May 2026 05:01:25 +0000
Files and hashes: 1: 323430303a613561303a3a2f33322d3332203d3e203633353330.roa (hash: uDfGInXKfeUSoNP2hY+TcDh0GI9nZQpiCTQ28Fl51mE=)
2: 34352e3132312e35322e302f32342d3234203d3e203633353330.roa (hash: MNGTiHV2NzvYS3MQd9CssunlWa/3AOgu8HFnKTzLd+I=)
3: 3130332e3230372e3138342e302f32322d3232203d3e203633353330.roa (hash: p4rGdOCdtSi/gskb6wDTowKIkMH8aqSZrt6W9t8cL0g=)
4: 6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl (hash: AzKFRtWQ85I3DKfMKMnseC608+msWgoLVFxC5wKcwXw=)
5: 34352e3132312e35352e302f32342d3234203d3e203633353330.roa (hash: uQaKS12tHszrpruD4chXY46WQvO1G4VYxpx2NC0zXpc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl
rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:f9:24:09:fc:61:c2:ea:db:fd:b2:05:e8:b3:c2:c7:1d:b1:5e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
Validity
Not Before: May 29 01:27:25 2026 GMT
Not After : May 30 05:01:25 2026 GMT
Subject: CN=0BA46DE2336A87E3030469D27E58F9098091BD0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:8d:eb:aa:96:31:ce:ab:ae:99:7c:47:bb:
3e:e8:56:a1:e2:37:4e:76:4a:34:52:03:bb:4f:b7:
5f:7a:c3:30:fb:ec:1a:10:28:de:34:79:80:6a:7f:
15:ba:88:24:a9:c5:c7:e6:21:81:05:d1:c9:ed:a7:
ff:73:b3:df:9c:0f:e4:9a:a1:b1:cc:a2:60:3b:17:
29:90:81:d1:51:9b:5b:d6:37:ed:59:8e:99:2d:02:
72:61:45:00:f0:2c:1f:02:bf:73:99:c4:f7:7c:15:
86:62:55:5e:2c:4b:dd:53:64:ad:8d:ce:6f:5e:f9:
7b:21:5b:d3:c1:ae:7c:64:51:50:0b:98:55:4a:66:
6f:f0:0b:c5:cc:d5:5b:4c:9a:cb:57:a7:93:ae:e1:
ce:b4:dc:e0:15:74:61:65:7b:80:2e:bd:33:71:ef:
f2:4e:38:21:9a:84:df:39:f2:da:55:92:06:0a:1a:
9a:7a:64:77:9b:a8:27:05:1a:c2:ed:23:27:cb:ed:
d9:73:47:fb:f0:06:90:72:44:c5:55:6f:6f:3c:2e:
79:0f:a0:a8:dd:7d:29:50:2f:8e:43:4a:6b:cd:2c:
66:64:50:63:82:02:a1:b3:30:5d:3d:84:0e:8a:c1:
d7:b9:51:22:4c:fa:d4:a0:f6:67:ce:77:6d:7e:ea:
e5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A4:6D:E2:33:6A:87:E3:03:04:69:D2:7E:58:F9:09:80:91:BD:0B
X509v3 Authority Key Identifier:
keyid:6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0e:ef:d1:6a:e3:e9:18:7c:f8:1b:8b:9b:5c:50:24:b1:de:
f6:6a:5a:a6:62:32:9f:e8:f4:01:0a:73:7f:fd:d9:3b:b0:da:
8e:a6:10:14:3a:64:7a:be:b5:bd:f9:0a:a3:13:fe:39:a0:37:
2d:03:1a:e8:0e:ef:75:0e:5a:a8:ce:1a:0f:b7:74:02:70:23:
07:cd:10:4c:6d:b8:c8:e2:f9:75:fa:92:d3:10:7a:a2:e3:2c:
11:c8:15:02:3c:79:7f:d4:11:68:2d:b5:97:72:0a:31:97:dd:
4f:f4:30:78:6e:63:4f:c3:19:f6:8c:10:fe:6e:07:02:f7:e5:
5f:c2:0d:b5:bd:9f:f0:10:e8:31:ba:ec:76:3e:ab:91:2b:1d:
ba:1e:09:ec:7a:12:4d:21:c9:cf:7f:bd:c8:b9:4c:78:6c:dc:
2c:28:ca:ce:f8:e8:fe:5c:bd:55:2f:08:a1:cf:41:70:a7:df:
64:bd:d0:7c:2e:5a:7d:e6:83:bd:21:b9:66:cb:6f:f1:35:80:
16:70:c6:9b:a6:16:60:55:e4:71:46:df:e5:79:9c:73:03:c8:
9d:31:6b:e4:61:58:ae:c3:c2:14:b6:23:30:ca:c3:73:95:6b:
ac:d1:80:1c:05:a5:4c:41:8a:25:cb:b3:26:81:c6:79:cb:81:
9a:2a:5a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:02:44 2026 by rpki-client