
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft
File: A0C998BFCCAE8946353EA73912CB7156A19A818C.mft (raw, json)
Hash identifier: LKqLRwFafAjSJYvy+ZGRhon+MXN6cAjCYWcrmOh909U=
Subject key identifier: DA:C2:63:46:E3:17:E1:7A:82:A4:20:4F:98:82:1C:55:05:16:D3:A1
Authority key identifier: A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C
Certificate issuer: /CN=A0C998BFCCAE8946353EA73912CB7156A19A818C
Certificate serial: 3C2D6575EDB80C26CC7C15D045E5B787EC7F13E5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft
Manifest number: 6A
Signing time: Fri 21 Aug 2026 14:14:52 +0000
Manifest this update: Fri 21 Aug 2026 14:09:52 +0000
Manifest next update: Sat 22 Aug 2026 16:44:52 +0000
Files and hashes: 1: 3130332e34332e3130302e302f32322d3232203d3e2030.roa (hash: Zb/Yg48+x4Z5AdQJry8Ao1d91TJrxggZPUisKeQCA1w=)
2: 34332e3232342e37322e302f32322d3232203d3e2030.roa (hash: Z7n2GETvz6qdxJjD+2JtNEFlMdPoKyod/n6PeMXops8=)
3: A0C998BFCCAE8946353EA73912CB7156A19A818C.crl (hash: 1vAhyIy/640dX6OWnPoz9DSzo7sF+4zJhJtRouIhunY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl
rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 15:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:2d:65:75:ed:b8:0c:26:cc:7c:15:d0:45:e5:b7:87:ec:7f:13:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0C998BFCCAE8946353EA73912CB7156A19A818C
Validity
Not Before: Aug 21 14:09:52 2026 GMT
Not After : Aug 22 16:44:52 2026 GMT
Subject: CN=DAC26346E317E17A82A4204F98821C550516D3A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:33:ca:68:5d:02:8f:b3:67:7f:84:51:7a:a3:
1d:e3:e9:d8:6f:57:e1:4c:41:c9:46:b6:31:35:f9:
74:e2:11:7a:6a:02:f4:9e:ed:42:da:3c:9d:d9:bd:
20:19:d3:a3:ee:00:d7:ad:54:8d:2d:53:b7:e2:14:
d9:70:c1:ba:0f:49:67:63:85:fe:90:25:b7:9c:cd:
57:bb:6e:b3:25:b7:04:04:c9:6b:53:ff:5b:23:81:
c1:d5:6c:41:25:d9:be:30:60:c6:6d:6a:e8:b6:99:
bc:0a:00:04:b0:b5:c2:1b:b8:fa:3d:1a:09:5c:df:
1e:fd:d0:cf:bd:2d:38:86:32:c5:30:ac:d3:b9:ab:
60:45:aa:e7:98:70:13:92:a0:47:fe:3c:4e:fa:62:
67:f0:11:96:08:f7:cd:d9:5c:6d:bc:49:5f:72:28:
a5:ae:8c:23:c8:39:1c:a0:26:59:4d:06:52:77:7f:
48:bf:ba:7c:15:54:e3:ea:4c:c0:d8:46:c8:d8:cd:
e6:fd:06:11:35:1b:9d:7b:b2:4c:1f:97:e4:86:d4:
ab:d9:d6:a3:aa:8c:5a:65:1a:3d:61:04:fe:12:29:
22:8e:bc:cb:ed:69:83:89:da:3c:88:b7:93:b2:eb:
bc:c1:3a:43:5b:5c:8d:93:29:cb:b6:f9:f5:06:30:
1d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C2:63:46:E3:17:E1:7A:82:A4:20:4F:98:82:1C:55:05:16:D3:A1
X509v3 Authority Key Identifier:
keyid:A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:42:2e:2e:44:6e:09:79:dd:41:89:ab:f5:aa:4e:6a:0b:fa:
fc:8a:df:fe:7b:67:17:89:f3:02:2c:7d:b7:73:eb:2d:75:db:
ff:96:11:93:e8:85:a1:71:b4:bf:82:f4:11:c4:53:6b:18:26:
9e:b5:36:01:d0:73:d3:32:5e:59:94:85:d4:86:f4:71:60:b5:
7c:d5:e0:46:86:d7:d8:b0:72:55:06:18:33:53:da:ad:75:8a:
bc:6a:3a:fe:d5:5c:78:c0:e1:21:19:a9:ad:2a:c4:5b:57:6c:
c2:bd:cd:f0:b8:92:b1:c3:16:16:43:82:8b:8a:99:b1:4c:9e:
d5:55:d1:1a:8b:38:64:7a:71:06:d7:49:54:76:f9:2d:57:db:
81:b7:e4:27:39:12:7f:f3:b8:d2:77:58:48:ea:09:08:f4:2a:
b2:1d:13:5d:b7:31:59:d6:90:fd:95:23:cc:9b:fa:73:b7:a1:
a8:e1:03:2b:68:ce:d7:16:9c:19:8f:11:95:fb:20:83:6d:18:
4d:31:24:be:d8:01:5d:dd:2c:82:cc:d8:d3:a7:f9:f6:bb:5d:
c5:41:fc:dc:db:6f:41:58:15:24:cf:4d:40:65:81:bf:e3:40:
ae:ea:88:74:a3:4a:ea:b8:75:2f:07:a0:1f:96:f8:e9:c1:fc:
ca:80:93:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:35:29 2026 by rpki-client