
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
File: 6A45D8322C3648F91E212472F604CAFDBA7019BB.mft (raw, json)
Hash identifier: v0oLxEtbINHDjBNQUgkXVr2CKQUkbrlHFOFLUxcbuao=
Subject key identifier: 3E:B2:3E:23:3B:43:D5:58:2E:A1:B7:2B:A7:46:06:F7:E1:FE:FD:21
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Certificate issuer: /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial: 30E4F817531192223C68558C229B0E4758A62F71
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
Manifest number: 0101
Signing time: Wed 29 Jul 2026 10:34:09 +0000
Manifest this update: Wed 29 Jul 2026 10:29:09 +0000
Manifest next update: Thu 30 Jul 2026 10:48:09 +0000
Files and hashes: 1: 3130332e3139322e3230382e302f32322d3232203d3e2034383337.roa (hash: hHcJzGkaL63bz/B5cCM90j43PRCUTzKmH4NauShLPrg=)
2: 3130332e34332e3133342e302f32332d3233203d3e2034383337.roa (hash: FyzFdZgKo3BDxyrLpNZ7QCXKhLr45lg7mKPng6cg7mg=)
3: 3130332e3139322e3230382e302f32322d3232203d3e203535393839.roa (hash: 1dLcAHtoXHq//FproHRRjOCSgYqI4kWyRf26+UhTGsg=)
4: 3130332e34332e3133352e302f32342d3234203d3e203535393931.roa (hash: Iqvi8zah1N+/MUEIpeWL683Upeca1a29t8qNXjNsWBE=)
5: 3130332e3139322e3230382e302f32342d3234203d3e203535393931.roa (hash: d3ASlDfMVC/gtOrl6vQFyUojqbnZxFte8DXs9XPrPrg=)
6: 3130332e34332e3133342e302f32342d3234203d3e203535393931.roa (hash: Arahau1/zdBFquh22OcOxXJ61Cw0C3+PJGtnB+0ekGo=)
7: 3130332e3139322e3230392e302f32342d3234203d3e203535393931.roa (hash: N8Oi6V973rdM73u0MOJ6Mq0jNacYqIpITVueY3fgBto=)
8: 3130332e3233352e3130312e302f32342d3234203d3e203535393931.roa (hash: y4iD+WZmyRqylC4ATqqLB8S0AwLFBnSmYnNr2Eb09NA=)
9: 3130332e34332e3133332e302f32342d3234203d3e203535393931.roa (hash: XdGamdMSAy1lnVU2jYcYZZbhDxqwsaKSaAwC9H6/vA8=)
10: 3130332e3139322e3231302e302f32342d3234203d3e203535393931.roa (hash: 63AwH0JNDe88UgRiEZk11mXrDuOfakAl/Ic20VC4H+s=)
11: 34352e3132342e37392e302f32342d3234203d3e203535393931.roa (hash: 6ZZEnwDcgTL6tPVDr6GFQihUclNuFSkoAt1U4mSGRrc=)
12: 3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa (hash: d/U3NIj7qaoBeCrDzGEzR4wsfsmAGdyLg/VID04jiyw=)
13: 3130332e3139322e3231312e302f32342d3234203d3e203535393931.roa (hash: k+LCBbRPVawp4Rtsb3NBIP+v4bxjVSnD9il2zTHON3M=)
14: 3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa (hash: sn5OSKvc07ovlAcz0b/lVzsgYr8++T6hfED7k7DkGRA=)
15: 34352e3132342e37382e302f32342d3234203d3e203535393931.roa (hash: k8exgEof7UP4003lab+Jt39GCbZi/ZuMl5F2bByXX48=)
16: 3130332e3135372e3231322e302f32332d3233203d3e2030.roa (hash: 8m0e57u2wVKxRF/YZ3RBUb/FB78IzUONuz1gdm7u3Aw=)
17: 34352e3132342e37362e302f32322d3232203d3e203535393839.roa (hash: zFIm0VLvsUuecFtlGbSjghi253R2ygdOCwx+j/GSCJA=)
18: 3130332e34332e3133322e302f32342d3234203d3e203535393931.roa (hash: PQwpOdF5Ex7Q2R7j4oTKXqncuOc5DZABUSDAojSAQug=)
19: 34352e3132342e37372e302f32342d3234203d3e203535393931.roa (hash: mtQtNdj9szZilLtTK//pM/h+ocuzur035q05fktIXuo=)
20: 3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa (hash: mqgyVIKWcd9YPXCsBu33JjhSj4t3CTMMoRkvfZ77xG4=)
21: 6A45D8322C3648F91E212472F604CAFDBA7019BB.crl (hash: dxiuo9JPduFqeneW30MuBHsP+DfHysZH3HM7ZkT9mVI=)
22: 3130332e3135372e3231332e302f32342d3234203d3e203535393839.roa (hash: JA+7kTjp2WRlf/AXz0FiSp2zY6KqTrgLwGsSbayo5U8=)
23: 3130332e3139322e3230382e302f32322d3232203d3e203535393931.roa (hash: +7t135INfa+sPupaJUnFagdsPHo9tCMwSYAZ8bpqT4E=)
24: 3130332e34332e3133342e302f32332d3233203d3e203535393839.roa (hash: IefQkI8Hfyxc4tb4gs5aVgR/yG32bYmYgetSb9VLX28=)
25: 34352e3132342e37362e302f32342d3234203d3e203535393931.roa (hash: U4tmDQhb9Ol98/9L64VDYt4HNIjh93kgrKwzoQS/mhE=)
26: 34352e3132342e37362e302f32322d3232203d3e2034383337.roa (hash: 0RAvP2PlQGsViOKgQSlbU9Jnyva7IRYPaZUPOcsW7zk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e4:f8:17:53:11:92:22:3c:68:55:8c:22:9b:0e:47:58:a6:2f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Validity
Not Before: Jul 29 10:29:09 2026 GMT
Not After : Jul 30 10:48:09 2026 GMT
Subject: CN=3EB23E233B43D5582EA1B72BA74606F7E1FEFD21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:47:71:02:fc:54:71:bf:ea:4a:8c:cb:62:
5f:4d:f7:24:14:e1:6f:01:ad:f9:ad:0f:46:44:37:
ee:d1:8a:ba:62:1a:38:bd:73:01:85:3c:0a:e6:93:
23:82:07:e7:3b:dd:08:b1:13:e9:b3:48:76:a3:7f:
26:a2:ea:60:15:3a:91:57:7a:7b:0e:fd:f6:7d:c0:
1b:49:9d:6c:47:77:ba:68:18:99:64:96:c0:1f:ba:
a7:ec:b0:60:c4:2a:62:69:4c:9c:ca:56:39:93:ea:
84:d9:b7:63:45:cd:0f:eb:1c:f2:9c:4a:74:98:9e:
96:5c:3d:33:a9:f5:1c:04:a4:eb:4f:54:41:09:3f:
78:33:55:62:80:5d:04:f2:a0:3e:98:59:62:2a:5d:
65:b0:26:7a:f8:d3:51:2c:15:4e:28:20:cd:1c:90:
c0:9a:2d:8b:7e:d5:1f:ed:7d:c7:d5:f1:5f:f7:31:
98:bc:a0:4c:00:bb:42:64:6c:c0:85:74:6f:73:c7:
6d:be:1b:82:b3:28:2f:50:b6:7d:e2:3e:83:e6:b9:
81:c9:70:5f:43:2e:be:d6:a7:92:ac:13:fe:91:f9:
6f:22:52:f7:c9:08:6d:a1:84:49:01:00:b9:74:37:
7f:46:fa:ea:05:fe:12:61:de:77:4b:71:17:b2:7c:
f8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B2:3E:23:3B:43:D5:58:2E:A1:B7:2B:A7:46:06:F7:E1:FE:FD:21
X509v3 Authority Key Identifier:
keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:99:0f:57:46:2a:d8:89:c4:85:3a:1a:44:26:83:22:9e:22:
d8:96:17:d3:d6:75:ee:89:61:08:06:f3:15:c2:4d:5f:bf:d5:
72:93:af:9d:ce:1d:46:25:3e:ed:97:e3:3b:e3:48:c0:e8:5c:
8f:66:39:33:e6:c2:3c:46:bb:26:f2:62:d8:81:8e:6e:75:36:
3f:89:ce:3b:ff:2b:2b:8e:f6:2a:5e:29:58:91:fb:56:7b:c5:
ff:92:94:82:8b:87:c4:9b:a5:2d:de:aa:f3:b0:bc:b4:bc:f3:
68:31:f8:41:e5:81:28:31:7f:74:9e:61:1e:62:ab:c5:aa:54:
e9:be:1b:ca:4a:25:01:0e:6f:49:d9:71:db:76:b7:0d:49:9a:
67:5c:0b:8d:b3:9d:af:b7:7c:ff:81:9a:cd:95:a9:44:37:ae:
20:8a:f1:02:de:5d:45:fd:40:8e:ad:17:9c:9a:d6:5d:5a:5e:
bb:ae:25:21:af:82:52:29:36:29:50:8f:e1:ac:bc:93:57:46:
71:d2:1a:8d:9c:c3:05:b1:aa:73:04:b9:be:f0:bb:e7:9b:a3:
b3:eb:26:c8:af:cb:03:42:09:e6:60:13:29:f3:a6:5a:79:68:
4d:f4:2d:dd:a2:df:d6:e9:0d:cc:29:98:f1:63:a0:a1:22:3c:
d7:b2:63:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:08:19 2026 by rpki-client