
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
File: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft (raw, json)
Hash identifier: M86baEdV44HajO1X1D/bVHHgrWPihHnnp0lox8zhSsQ=
Subject key identifier: AC:BF:9E:32:B5:95:56:A4:6F:AE:1C:7E:B7:0A:9D:B9:A9:EA:2E:11
Authority key identifier: A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9
Certificate issuer: /CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
Certificate serial: 400C5A7153A8BB08969DEECCE1BEF3EE069BBAAF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
Manifest number: 0101
Signing time: Wed 29 Jul 2026 12:54:23 +0000
Manifest this update: Wed 29 Jul 2026 12:49:23 +0000
Manifest next update: Thu 30 Jul 2026 15:40:23 +0000
Files and hashes: 1: 3130332e3131302e3133382e302f32342d3234203d3e203539303132.roa (hash: 74p3eAG8K0Xrv2nNxKKWTueHZVFekMZMwv9gE8TOGl0=)
2: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl (hash: v7odwe910+LDAM7t1VTTJUH+JR00+NolvQ++yRbM2/w=)
3: 323430323a386263303a3a2f33322d3332203d3e203539303132.roa (hash: wRL2RgpwckoaF7H0gvAknICFvQDLSvcARgYe623q+hU=)
4: 3130332e3131302e3133392e302f32342d3234203d3e203539303132.roa (hash: V0EG+w4//opp0LXEw2L6fUoisMZUJ3b1c3mJzeOwhn4=)
5: 3130332e3131302e3133362e302f32322d3232203d3e203539303132.roa (hash: Gq1/YwE5iEcyh5S8JhVPyrDBUdmcenxdUCC+8WtWWiQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 15:40:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:0c:5a:71:53:a8:bb:08:96:9d:ee:cc:e1:be:f3:ee:06:9b:ba:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9
Validity
Not Before: Jul 29 12:49:23 2026 GMT
Not After : Jul 30 15:40:23 2026 GMT
Subject: CN=ACBF9E32B59556A46FAE1C7EB70A9DB9A9EA2E11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:08:3b:24:76:ed:4b:fc:a8:3f:b6:37:01:0f:
4a:c2:f6:7b:02:00:08:8f:82:17:0c:c1:58:25:5f:
48:b0:a7:96:bf:8a:6f:0d:1b:5a:3e:01:4f:41:cf:
4e:03:d0:96:c1:be:26:d9:de:cd:3e:1d:f3:60:b2:
2b:10:dc:14:4a:83:a0:49:8f:6e:72:a9:70:3f:58:
d5:91:cc:22:93:02:02:73:27:60:3c:4c:fb:3b:d8:
c5:c9:45:09:2c:26:6c:0c:ee:c8:ef:6f:e3:2d:21:
ed:6e:57:6a:1a:86:50:13:fe:53:3e:5c:d3:0b:be:
f4:0b:4e:58:c9:60:90:c8:55:28:ba:c4:ae:1d:74:
a6:ac:85:dd:c0:18:f2:6b:6e:75:41:c4:71:5d:bb:
aa:a8:86:f8:69:ac:b9:bb:d1:90:6f:12:e8:f9:c1:
45:07:9e:b0:61:2f:ce:b5:d8:cd:dd:7c:e5:ae:88:
55:0c:4c:12:9b:30:76:e2:8e:04:e5:3b:01:77:28:
ec:ec:00:e5:f2:e8:38:fd:0a:f2:a5:c4:3a:5d:5c:
72:c1:fd:45:da:6f:f6:e0:ef:11:ad:d3:97:12:df:
0e:85:90:8a:75:dd:d4:dd:d3:ab:33:d4:6b:82:f3:
b9:dd:f4:2f:d3:a9:73:f3:df:49:07:bf:28:1d:46:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BF:9E:32:B5:95:56:A4:6F:AE:1C:7E:B7:0A:9D:B9:A9:EA:2E:11
X509v3 Authority Key Identifier:
keyid:A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e5:c5:b5:41:49:2e:b0:d6:ad:6f:40:61:19:9d:2d:78:87:
e7:ac:aa:0a:d5:d7:89:42:f2:05:22:6a:44:eb:26:06:b2:e1:
44:0f:54:f3:26:39:66:bd:af:ed:35:aa:90:bf:31:12:51:f7:
cf:e9:17:cd:b6:ba:ff:4b:e4:42:e3:c4:f9:bb:d6:1c:86:15:
14:12:f9:a0:a0:85:c1:68:f9:44:3d:72:4f:b9:f5:f3:56:1e:
83:e8:ae:bc:05:7f:27:bb:b1:ea:38:76:2b:49:9c:f4:a5:c9:
78:44:4c:db:10:d9:36:39:77:04:1c:29:d3:da:15:61:a7:09:
6d:2b:9f:9b:e4:32:2e:e7:8b:46:d5:44:ef:0e:7e:fb:3e:ef:
a8:6d:9b:b9:bc:eb:b9:83:a4:5e:52:a2:f8:94:ae:e5:10:15:
69:09:23:56:39:9d:ac:93:52:3b:5b:8e:c0:4e:70:10:2b:c4:
31:a5:c4:98:7a:8b:9d:80:7c:df:56:78:88:63:1a:b1:d2:16:
f2:4b:28:d6:60:de:92:b9:f3:2f:63:ae:c4:02:cf:c7:31:07:
fb:6b:79:2b:b6:c1:b0:6d:2c:23:16:54:f0:00:34:d5:a6:3e:
37:8e:e5:5a:14:d5:85:7c:cb:f6:26:2d:4b:61:2c:7b:42:30:
4c:bc:aa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:02:01 2026 by rpki-client