
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
File: 6A45D8322C3648F91E212472F604CAFDBA7019BB.mft (raw, json)
Hash identifier: 8C+l7TU2NNQ3cppe1BmzyDNvN614VXdfXZnWf4RK5E0=
Subject key identifier: C6:74:80:76:B6:92:82:D6:41:8A:6E:C2:33:7E:5B:ED:13:C9:48:A2
Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
Certificate issuer: /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Certificate serial: 6B789950A82360E42C00FAF294DCABC3E2B55E3A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
Manifest number: C4
Signing time: Sat 13 Jun 2026 10:06:44 +0000
Manifest this update: Sat 13 Jun 2026 10:01:44 +0000
Manifest next update: Sun 14 Jun 2026 14:00:44 +0000
Files and hashes: 1: 3130332e3139322e3230382e302f32322d3232203d3e2034383337.roa (hash: hHcJzGkaL63bz/B5cCM90j43PRCUTzKmH4NauShLPrg=)
2: 3130332e34332e3133332e302f32342d3234203d3e203535393931.roa (hash: XdGamdMSAy1lnVU2jYcYZZbhDxqwsaKSaAwC9H6/vA8=)
3: 3130332e3139322e3230382e302f32342d3234203d3e203535393931.roa (hash: d3ASlDfMVC/gtOrl6vQFyUojqbnZxFte8DXs9XPrPrg=)
4: 34352e3132342e37362e302f32322d3232203d3e2034383337.roa (hash: 0RAvP2PlQGsViOKgQSlbU9Jnyva7IRYPaZUPOcsW7zk=)
5: 3130332e34332e3133342e302f32332d3233203d3e2034383337.roa (hash: FyzFdZgKo3BDxyrLpNZ7QCXKhLr45lg7mKPng6cg7mg=)
6: 3130332e34332e3133342e302f32342d3234203d3e203535393931.roa (hash: Arahau1/zdBFquh22OcOxXJ61Cw0C3+PJGtnB+0ekGo=)
7: 3130332e34332e3133342e302f32332d3233203d3e203535393839.roa (hash: IefQkI8Hfyxc4tb4gs5aVgR/yG32bYmYgetSb9VLX28=)
8: 6A45D8322C3648F91E212472F604CAFDBA7019BB.crl (hash: ZRQOcECeWmAZJN11v2jaW7166MxRb63RfhuOsMKJiQw=)
9: 3130332e3139322e3231312e302f32342d3234203d3e203535393931.roa (hash: k+LCBbRPVawp4Rtsb3NBIP+v4bxjVSnD9il2zTHON3M=)
10: 3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa (hash: sn5OSKvc07ovlAcz0b/lVzsgYr8++T6hfED7k7DkGRA=)
11: 34352e3132342e37362e302f32322d3232203d3e203535393839.roa (hash: zFIm0VLvsUuecFtlGbSjghi253R2ygdOCwx+j/GSCJA=)
12: 3130332e3233352e3130312e302f32342d3234203d3e203535393931.roa (hash: y4iD+WZmyRqylC4ATqqLB8S0AwLFBnSmYnNr2Eb09NA=)
13: 34352e3132342e37382e302f32342d3234203d3e203535393931.roa (hash: k8exgEof7UP4003lab+Jt39GCbZi/ZuMl5F2bByXX48=)
14: 34352e3132342e37362e302f32342d3234203d3e203535393931.roa (hash: U4tmDQhb9Ol98/9L64VDYt4HNIjh93kgrKwzoQS/mhE=)
15: 3130332e3135372e3231322e302f32332d3233203d3e2030.roa (hash: 8m0e57u2wVKxRF/YZ3RBUb/FB78IzUONuz1gdm7u3Aw=)
16: 3130332e3139322e3230382e302f32322d3232203d3e203535393839.roa (hash: 1dLcAHtoXHq//FproHRRjOCSgYqI4kWyRf26+UhTGsg=)
17: 3130332e34332e3133322e302f32342d3234203d3e203535393931.roa (hash: PQwpOdF5Ex7Q2R7j4oTKXqncuOc5DZABUSDAojSAQug=)
18: 3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa (hash: d/U3NIj7qaoBeCrDzGEzR4wsfsmAGdyLg/VID04jiyw=)
19: 34352e3132342e37372e302f32342d3234203d3e203535393931.roa (hash: mtQtNdj9szZilLtTK//pM/h+ocuzur035q05fktIXuo=)
20: 3130332e3139322e3230382e302f32322d3232203d3e203535393931.roa (hash: +7t135INfa+sPupaJUnFagdsPHo9tCMwSYAZ8bpqT4E=)
21: 3130332e3139322e3231302e302f32342d3234203d3e203535393931.roa (hash: 63AwH0JNDe88UgRiEZk11mXrDuOfakAl/Ic20VC4H+s=)
22: 3130332e34332e3133352e302f32342d3234203d3e203535393931.roa (hash: Iqvi8zah1N+/MUEIpeWL683Upeca1a29t8qNXjNsWBE=)
23: 3130332e3139322e3230392e302f32342d3234203d3e203535393931.roa (hash: N8Oi6V973rdM73u0MOJ6Mq0jNacYqIpITVueY3fgBto=)
24: 3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa (hash: mqgyVIKWcd9YPXCsBu33JjhSj4t3CTMMoRkvfZ77xG4=)
25: 3130332e3135372e3231332e302f32342d3234203d3e203535393839.roa (hash: JA+7kTjp2WRlf/AXz0FiSp2zY6KqTrgLwGsSbayo5U8=)
26: 34352e3132342e37392e302f32342d3234203d3e203535393931.roa (hash: 6ZZEnwDcgTL6tPVDr6GFQihUclNuFSkoAt1U4mSGRrc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:78:99:50:a8:23:60:e4:2c:00:fa:f2:94:dc:ab:c3:e2:b5:5e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB
Validity
Not Before: Jun 13 10:01:44 2026 GMT
Not After : Jun 14 14:00:44 2026 GMT
Subject: CN=C6748076B69282D6418A6EC2337E5BED13C948A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:94:e1:49:25:2b:66:82:ae:5c:a2:60:1b:
2d:2a:e3:2b:8f:0f:72:91:53:c7:27:cc:76:c8:95:
79:50:a1:99:92:37:9e:1d:1f:23:fc:fc:31:fa:fb:
30:b6:4a:05:b0:56:06:11:88:97:0f:d4:6d:0a:4f:
9c:e6:95:de:b7:71:e2:69:be:fb:82:41:a0:49:05:
e5:64:fe:e6:5a:0a:8b:7c:20:a3:13:04:9a:2a:72:
fe:80:c4:3e:c4:db:7d:b5:30:6d:b8:8d:34:4f:bb:
7c:7b:f3:11:8b:00:46:a7:8d:88:d1:56:06:17:fe:
83:f4:68:09:fd:dd:48:21:0c:28:52:98:99:db:34:
96:0c:3c:18:79:38:bb:4c:80:64:4a:be:7d:8d:3a:
d4:6f:34:fb:2a:83:c7:4d:a8:46:88:a1:1c:19:af:
cd:26:ec:92:b6:87:60:b1:aa:2c:1b:ac:22:42:95:
5a:a9:84:19:fa:a1:39:5a:1e:73:4f:2d:9c:20:6b:
fa:e4:7d:9a:ea:89:47:ee:7d:76:6d:50:7b:db:3e:
d6:09:8c:74:e0:97:cd:bd:bf:9a:ef:6d:d1:28:f8:
4a:e2:a6:ed:58:35:bd:f7:98:88:d4:ed:73:f6:ba:
5c:3d:99:72:3b:68:95:54:0c:10:c2:d3:07:0b:c0:
1c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:74:80:76:B6:92:82:D6:41:8A:6E:C2:33:7E:5B:ED:13:C9:48:A2
X509v3 Authority Key Identifier:
keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:60:c4:eb:df:d8:86:71:d0:6b:b5:2a:b0:80:95:98:fb:59:
f5:91:57:bc:bb:c0:01:45:bc:9d:75:1a:c3:aa:35:e7:4e:dd:
80:d5:83:5d:eb:5c:fb:07:70:61:d3:cc:df:66:49:cb:69:3b:
4c:0a:22:62:db:23:f9:5b:22:23:90:4b:47:62:db:01:6a:17:
4d:a7:4f:2b:00:18:53:98:e0:dd:42:2a:79:aa:7c:99:c0:76:
1c:0c:6d:52:e9:29:e9:5f:0e:5f:d1:24:07:15:6b:c8:0a:d5:
46:cd:0d:8b:67:07:79:6b:5c:9f:40:60:9d:ad:33:ca:0a:d0:
87:e0:f4:02:6d:bb:18:6e:a8:5a:d6:8d:da:ae:ff:cf:7d:37:
3d:f0:d6:af:f2:8f:2a:70:64:92:2d:f6:fc:c6:1f:2d:9a:3f:
bd:59:bc:08:81:e5:8c:ee:53:e9:5c:5e:69:06:1a:9e:56:7a:
18:f9:93:65:f9:81:31:29:3e:a4:7f:26:bf:3c:80:f9:e7:d9:
fc:55:f9:5c:c4:22:40:42:98:ba:bb:e2:c4:b2:e7:45:36:5d:
5f:b9:34:7d:79:c9:31:3c:ac:d2:27:9e:92:b1:e1:fb:e3:22:
d9:f7:2a:35:bd:70:4f:a2:ab:13:1c:b5:cd:3c:01:f7:be:fa:
4d:6d:bb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:43:12 2026 by rpki-client