
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft
File: 6845D331C417296D3A93181DD9010591B1F70D50.mft (raw, json)
Hash identifier: 8vkfUrqO9Hzb98HSkCnomVb75n8xErXyb0xtO6rgXgA=
Subject key identifier: C2:FB:3F:FE:69:77:D6:3A:E9:87:90:D0:D5:27:9B:F5:26:21:B0:1A
Authority key identifier: 68:45:D3:31:C4:17:29:6D:3A:93:18:1D:D9:01:05:91:B1:F7:0D:50
Certificate issuer: /CN=A91209740000/serialNumber=6845D331C417296D3A93181DD9010591B1F70D50
Certificate serial: 0319DD68402533E1F91D320045E12B1432B815BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft
Manifest number: 02CD
Signing time: Wed 19 Aug 2026 03:21:39 +0000
Manifest this update: Wed 19 Aug 2026 03:16:39 +0000
Manifest next update: Thu 20 Aug 2026 06:26:39 +0000
Files and hashes: 1: AS132203.roa (hash: LCoS0er/7zh/bY2O8Xb/4U/28JPzEL9/b42FKGTNuk0=)
2: AS45090.roa (hash: HEeeGmrOuHbjsvEBYWjApEe9XYDpObqvfUUdLqGqjVU=)
3: 6845D331C417296D3A93181DD9010591B1F70D50.crl (hash: ATfwWy+2TfYYVgYmvEd9iq/64KTXdsH3EmEgmW0F9sM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.crl
rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 20 Aug 2026 06:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:19:dd:68:40:25:33:e1:f9:1d:32:00:45:e1:2b:14:32:b8:15:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91209740000, serialNumber=6845D331C417296D3A93181DD9010591B1F70D50
Validity
Not Before: Aug 19 03:16:39 2026 GMT
Not After : Aug 20 06:26:39 2026 GMT
Subject: CN=C2FB3FFE6977D63AE98790D0D5279BF52621B01A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:33:d9:fd:a8:e5:84:1f:27:99:d9:d1:40:
51:03:7a:34:76:6d:09:02:d6:74:00:af:ac:d0:23:
90:9a:4c:05:2d:38:df:27:19:92:39:94:ed:ca:31:
9a:de:6d:3e:1d:dd:64:29:b7:fc:fb:5b:f1:a4:bf:
76:82:74:d2:5c:22:d5:a7:b9:f4:51:76:a8:ec:b9:
3b:72:17:de:96:4d:2b:c5:31:b0:49:1a:a9:cb:e9:
d7:a6:16:b0:58:9c:5e:c1:5b:95:02:65:bb:e3:b6:
9d:fa:9d:17:e5:38:4f:ca:0c:d0:c0:87:35:c0:f8:
8d:3e:c5:52:9e:56:9f:9e:ed:a7:03:4e:90:2e:23:
16:57:cb:b4:9a:0f:30:c4:39:97:ae:5b:ab:da:73:
7a:09:9d:5a:f1:96:63:de:50:10:ed:4c:6f:ac:ee:
98:6b:d9:eb:a6:8b:10:b1:f0:67:3f:2c:b6:b0:f7:
8a:42:53:9d:fa:d2:21:06:9e:77:34:1c:3e:e1:2e:
86:b6:e7:35:d7:7b:bc:c9:5b:90:99:7e:a0:41:27:
36:ab:49:7d:60:79:97:9c:55:2d:7a:9d:23:7c:61:
2a:66:d4:45:8c:ea:a5:ed:18:87:89:d3:d1:1f:1e:
c3:72:07:b7:d1:6e:60:08:40:76:67:b8:93:b0:93:
c5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FB:3F:FE:69:77:D6:3A:E9:87:90:D0:D5:27:9B:F5:26:21:B0:1A
X509v3 Authority Key Identifier:
keyid:68:45:D3:31:C4:17:29:6D:3A:93:18:1D:D9:01:05:91:B1:F7:0D:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:36:91:9f:58:4e:5a:63:7e:24:3f:2c:5c:35:b1:2d:77:66:
21:7a:ea:5e:9c:8c:1d:71:b7:06:d7:39:89:f7:49:30:ce:9d:
ba:ee:17:97:d0:ae:79:5e:fd:6a:c8:64:10:17:dd:7b:02:d2:
72:cd:ac:bb:70:8a:1a:9f:0b:c9:9e:35:ee:72:44:33:1e:c1:
34:a8:ce:00:9d:6e:5b:cf:32:d0:2b:21:65:50:5a:d1:54:8a:
7b:b7:ab:fd:cf:a6:4e:18:f2:40:76:7c:e6:b1:88:85:57:49:
b5:13:76:57:29:a8:4f:b6:ae:06:2b:62:97:ed:a9:c1:c3:a2:
a6:fa:1a:11:97:5c:71:a4:46:2d:36:f9:e1:f4:98:9e:67:e6:
84:85:52:5b:d4:36:9c:5b:bf:72:81:ce:ec:e8:ea:28:2f:ae:
b0:97:65:6b:a5:27:fa:28:3f:c9:65:eb:1d:dc:2a:fa:3a:78:
ec:3f:b0:d7:36:5e:f2:5d:36:dc:45:9f:6d:5b:d6:ff:1e:da:
71:40:72:bf:6a:31:58:58:b0:d8:0a:74:c9:04:06:a3:71:a6:
eb:94:77:44:61:7e:44:43:e7:db:ba:3a:26:05:68:12:34:d2:
fc:29:38:eb:0d:c9:0e:f4:57:1b:f1:ba:f8:0c:3d:36:51:b1:
0a:d0:99:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:05 2026 by rpki-client