
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
File: 6A45D8322C3648F91E212472F604CAFDBA7019BB.mft (raw, json)
Hash identifier: j7h9KgyKjIOgqL1bR+OqVfk3o1OSfxL+wnwgz/UA4TQ=
Subject key identifier: 63:43:08:B0:EC:EB:8F:96:39:89:27:F8:F2:7C:83:32:92:E5:1E:C0
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Certificate issuer: /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial: 0DE4E384B7DD05DB2C64FD6E0E7E5A7B2D887C8C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
Manifest number: 013C
Signing time: Sun 11 Oct 2026 02:10:08 +0000
Manifest this update: Sun 11 Oct 2026 02:05:08 +0000
Manifest next update: Wed 14 Oct 2026 13:41:08 +0000
Files and hashes: 1: 3130332e34332e3133342e302f32332d3233203d3e203535393839.roa (hash: IefQkI8Hfyxc4tb4gs5aVgR/yG32bYmYgetSb9VLX28=)
2: 3130332e3139322e3230382e302f32322d3232203d3e2034383337.roa (hash: hHcJzGkaL63bz/B5cCM90j43PRCUTzKmH4NauShLPrg=)
3: 3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa (hash: sn5OSKvc07ovlAcz0b/lVzsgYr8++T6hfED7k7DkGRA=)
4: 34352e3132342e37362e302f32322d3232203d3e203535393839.roa (hash: zFIm0VLvsUuecFtlGbSjghi253R2ygdOCwx+j/GSCJA=)
5: 34352e3132342e37362e302f32342d3234203d3e203535393931.roa (hash: U4tmDQhb9Ol98/9L64VDYt4HNIjh93kgrKwzoQS/mhE=)
6: 3130332e34332e3133322e302f32342d3234203d3e203535393931.roa (hash: PQwpOdF5Ex7Q2R7j4oTKXqncuOc5DZABUSDAojSAQug=)
7: 3130332e3135372e3231332e302f32342d3234203d3e203535393839.roa (hash: JA+7kTjp2WRlf/AXz0FiSp2zY6KqTrgLwGsSbayo5U8=)
8: 3130332e3139322e3230382e302f32342d3234203d3e203535393931.roa (hash: d3ASlDfMVC/gtOrl6vQFyUojqbnZxFte8DXs9XPrPrg=)
9: 3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa (hash: mqgyVIKWcd9YPXCsBu33JjhSj4t3CTMMoRkvfZ77xG4=)
10: 34352e3132342e37362e302f32322d3232203d3e2034383337.roa (hash: 0RAvP2PlQGsViOKgQSlbU9Jnyva7IRYPaZUPOcsW7zk=)
11: 34352e3132342e37382e302f32342d3234203d3e203535393931.roa (hash: k8exgEof7UP4003lab+Jt39GCbZi/ZuMl5F2bByXX48=)
12: 3130332e3139322e3230392e302f32342d3234203d3e203535393931.roa (hash: N8Oi6V973rdM73u0MOJ6Mq0jNacYqIpITVueY3fgBto=)
13: 3130332e3139322e3230382e302f32322d3232203d3e203535393839.roa (hash: 1dLcAHtoXHq//FproHRRjOCSgYqI4kWyRf26+UhTGsg=)
14: 3130332e34332e3133332e302f32342d3234203d3e203535393931.roa (hash: XdGamdMSAy1lnVU2jYcYZZbhDxqwsaKSaAwC9H6/vA8=)
15: 3130332e3233352e3130312e302f32342d3234203d3e203535393931.roa (hash: y4iD+WZmyRqylC4ATqqLB8S0AwLFBnSmYnNr2Eb09NA=)
16: 34352e3132342e37392e302f32342d3234203d3e203535393931.roa (hash: 6ZZEnwDcgTL6tPVDr6GFQihUclNuFSkoAt1U4mSGRrc=)
17: 3130332e3139322e3230382e302f32322d3232203d3e203535393931.roa (hash: +7t135INfa+sPupaJUnFagdsPHo9tCMwSYAZ8bpqT4E=)
18: 3130332e3135372e3231322e302f32332d3233203d3e2030.roa (hash: 8m0e57u2wVKxRF/YZ3RBUb/FB78IzUONuz1gdm7u3Aw=)
19: 34352e3132342e37372e302f32342d3234203d3e203535393931.roa (hash: mtQtNdj9szZilLtTK//pM/h+ocuzur035q05fktIXuo=)
20: 3130332e3139322e3231302e302f32342d3234203d3e203535393931.roa (hash: 63AwH0JNDe88UgRiEZk11mXrDuOfakAl/Ic20VC4H+s=)
21: 3130332e3139322e3231312e302f32342d3234203d3e203535393931.roa (hash: k+LCBbRPVawp4Rtsb3NBIP+v4bxjVSnD9il2zTHON3M=)
22: 3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa (hash: d/U3NIj7qaoBeCrDzGEzR4wsfsmAGdyLg/VID04jiyw=)
23: 3130332e34332e3133342e302f32332d3233203d3e2034383337.roa (hash: FyzFdZgKo3BDxyrLpNZ7QCXKhLr45lg7mKPng6cg7mg=)
24: 3130332e34332e3133352e302f32342d3234203d3e203535393931.roa (hash: Iqvi8zah1N+/MUEIpeWL683Upeca1a29t8qNXjNsWBE=)
25: 6A45D8322C3648F91E212472F604CAFDBA7019BB.crl (hash: I+YwgmVo1Pb4EdR6YmhBGZXy+9rV9gcqdQkT3xJDEok=)
26: 3130332e34332e3133342e302f32342d3234203d3e203535393931.roa (hash: Arahau1/zdBFquh22OcOxXJ61Cw0C3+PJGtnB+0ekGo=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 13:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:e4:e3:84:b7:dd:05:db:2c:64:fd:6e:0e:7e:5a:7b:2d:88:7c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Validity
Not Before: Oct 11 02:05:08 2026 GMT
Not After : Oct 14 13:41:08 2026 GMT
Subject: CN=634308B0ECEB8F96398927F8F27C833292E51EC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:29:07:70:f6:e4:98:70:ee:7a:65:8c:d0:a0:
9e:cb:25:70:d1:7b:e7:99:68:26:2a:18:76:1b:c2:
9e:0e:2e:3f:1d:f9:47:e2:4d:16:9b:57:73:9c:c8:
cb:ac:f7:32:fb:91:80:76:5e:a3:47:db:46:68:d9:
7b:75:37:97:98:50:6b:64:70:4c:3c:20:8e:59:a7:
96:98:d6:4c:67:b6:60:48:84:9c:13:12:73:49:b5:
7e:27:c3:29:fc:01:05:15:79:23:65:bb:c5:57:ef:
82:12:a3:2a:d0:b2:cd:be:f4:aa:2f:0e:0f:91:78:
a7:5f:2c:69:1c:2f:bb:08:15:5e:84:73:c2:5c:73:
4b:58:31:c0:81:34:8b:48:91:af:f8:0e:ae:f2:7c:
62:2e:c1:8e:ab:d3:60:48:14:92:59:e1:09:65:a4:
e4:16:24:6e:ec:61:e7:84:a2:df:57:a4:93:8f:c6:
95:c2:fc:d5:56:3c:5f:03:18:fd:6d:10:7e:17:3c:
85:d7:c2:5a:5c:6e:be:34:19:e4:8d:b6:a3:30:0a:
a7:d9:b2:b8:8c:f8:86:52:9b:12:3c:b1:dd:96:93:
40:24:1e:a5:2f:45:94:b7:27:d7:70:21:9b:89:0f:
85:cd:c6:bd:d2:a3:52:bc:fb:e6:5e:51:7b:ab:96:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:43:08:B0:EC:EB:8F:96:39:89:27:F8:F2:7C:83:32:92:E5:1E:C0
X509v3 Authority Key Identifier:
keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b8:af:f3:7f:52:23:0d:ce:aa:63:ad:4e:74:f3:a4:30:a1:
08:ea:8e:48:33:76:a0:26:55:81:1e:43:45:28:bc:7e:56:5e:
6c:a2:f7:e1:48:e6:8a:75:5e:a0:5f:43:ff:10:37:ca:8e:ba:
d8:4a:38:b0:5c:45:32:e8:8c:c3:db:a8:3c:69:4f:66:d0:8f:
bd:65:8d:fd:ca:a1:88:a8:f3:f7:e9:63:ed:66:8d:18:d1:0b:
ef:32:c8:de:90:6f:ba:e3:fe:41:b1:f3:e8:bf:67:de:50:f8:
59:8b:95:23:05:5b:16:45:a8:10:2d:db:1e:7e:50:70:79:3d:
61:cc:71:38:cc:34:3b:a6:cc:66:3b:3f:72:21:b8:ad:d9:02:
cd:2e:62:a8:f9:f0:f6:b9:dc:f7:a5:e1:95:5d:06:93:ec:de:
30:c4:75:17:04:ca:5d:e2:d2:dc:fd:ea:92:23:35:f2:fe:87:
c5:ca:83:ce:69:5c:f3:bd:da:b3:9a:aa:af:84:74:b4:32:63:
e7:ee:b6:2a:d2:2f:7f:74:72:6e:18:33:61:5d:81:96:8d:6f:
46:c2:b1:e2:af:09:67:d6:10:c7:a1:fb:20:10:de:3e:e9:6f:
cf:48:62:c8:c9:bd:bf:bd:7a:cd:cd:1e:95:e5:8a:ae:96:04:
e8:7d:40:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 05:00:08 2026 by rpki-client