
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft
File: 848188DBA8D369CB93B918182269D397DE354F44.mft (raw, json)
Hash identifier: KSwHFtUrgRQBwd0R7j4/KN5em4w8lDge9pVBXYnfWUc=
Subject key identifier: 1E:67:88:3D:F0:10:97:85:CF:21:39:59:9B:FC:28:92:B9:D2:BB:61
Authority key identifier: 84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44
Certificate issuer: /CN=848188DBA8D369CB93B918182269D397DE354F44
Certificate serial: 2A70F3D3776706F84D701B12A5F88DA4A2717EA7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft
Manifest number: C6
Signing time: Sun 14 Jun 2026 03:37:40 +0000
Manifest this update: Sun 14 Jun 2026 03:32:40 +0000
Manifest next update: Mon 15 Jun 2026 05:20:40 +0000
Files and hashes: 1: 848188DBA8D369CB93B918182269D397DE354F44.crl (hash: Pwb9O5GkmEUriARNTz9Th+KizLD4ROrOAcUXh1LcZrI=)
2: 3131312e3232332e382e302f32322d3234203d3e203234343039.roa (hash: S/Wh/JVPJO7YKvn1vwUqixNT3YF0XjGX3yFXKcclN04=)
3: 3130332e36302e33322e302f32322d3332203d3e20313039.roa (hash: MzSW+d1QZG9GRLvksmbq6oNyDTlfux+PnhU3TrTlXko=)
4: 3131312e3232332e382e302f32322d3332203d3e20313039.roa (hash: zQZ+GZ/PmnZiTYYUgL8WbnnthSRy3dbcLyqydGTq64o=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:70:f3:d3:77:67:06:f8:4d:70:1b:12:a5:f8:8d:a4:a2:71:7e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848188DBA8D369CB93B918182269D397DE354F44
Validity
Not Before: Jun 14 03:32:40 2026 GMT
Not After : Jun 15 05:20:40 2026 GMT
Subject: CN=1E67883DF0109785CF2139599BFC2892B9D2BB61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:e2:92:27:c8:49:f0:7e:19:35:0d:d3:72:
0a:5b:4a:e4:bd:e2:18:03:49:6c:0e:04:fb:6a:24:
ad:27:8b:39:4f:39:98:6d:76:ff:18:fb:d4:32:d3:
a8:10:93:43:1b:f1:c4:7b:56:3f:41:3a:da:a3:9a:
af:27:19:5e:50:90:43:cb:d6:be:e5:e3:59:f3:c4:
56:1d:ab:88:57:bf:45:0b:a2:ac:c8:9e:0d:d7:0d:
09:17:4a:02:6e:78:14:c1:b3:e5:2a:67:3b:9a:cc:
bc:ca:6d:ba:65:91:bc:a0:52:90:48:82:bc:08:45:
e6:9e:42:51:be:d1:e6:e0:b7:01:45:0c:50:82:09:
e0:d6:5a:95:32:5f:9d:b4:e2:eb:50:7a:cd:c4:7e:
a9:de:de:75:65:61:72:c9:95:8d:26:2e:56:f5:65:
f8:e6:53:3b:51:24:0c:36:af:df:8b:ab:f6:44:79:
c7:03:d9:f4:f4:3e:a5:71:2f:93:26:5a:18:e0:9f:
97:d4:33:3f:a1:6b:8f:12:df:a4:90:d5:11:c1:58:
54:c1:49:d6:a0:cd:9f:1e:9e:8c:db:7b:03:0f:07:
12:0c:d5:b2:40:a9:00:2a:b7:9d:57:95:12:a2:a0:
6f:8a:7a:e6:22:bd:eb:51:1f:70:af:c7:92:4f:fa:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:67:88:3D:F0:10:97:85:CF:21:39:59:9B:FC:28:92:B9:D2:BB:61
X509v3 Authority Key Identifier:
keyid:84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a9:3a:af:1c:96:9c:73:a1:40:39:87:d1:29:c6:dd:1e:b7:
80:ef:7c:0b:ef:a1:e1:48:ee:7b:a8:05:ff:e2:5c:7f:5b:38:
76:cb:27:40:da:3c:f4:8c:0c:e0:be:92:94:3c:09:07:a8:a8:
91:de:12:0a:0c:56:30:05:53:6c:66:72:c5:8b:1f:6f:15:aa:
5c:27:e1:81:2c:39:f0:63:ab:8b:76:0d:7f:81:dc:ae:a1:64:
0c:cf:c9:87:b0:9b:62:21:ee:fe:4f:48:0d:45:83:80:1a:0e:
7b:db:58:6f:6a:d8:7d:a2:da:d0:cc:95:da:eb:8f:e8:f8:2b:
d8:5b:49:25:ad:39:ae:72:41:c8:27:e0:86:6a:3f:bf:26:7c:
b0:df:0b:66:14:31:7a:c2:be:f4:b8:26:3b:78:01:6c:d5:71:
2b:95:06:f3:63:fc:b7:fb:00:39:c9:35:50:fd:e4:7e:b2:27:
ed:f1:d5:f8:cb:b1:7b:7e:b4:ec:d4:ea:50:a2:9b:bd:db:a4:
6c:c9:a9:ad:64:25:40:a5:69:9d:92:74:8e:f2:7c:c3:54:36:
e7:ed:2f:42:ca:13:82:2f:78:cb:8c:16:32:64:d4:c6:0c:c6:
2a:31:7e:97:c4:ae:42:6d:16:42:d4:8f:46:2c:d2:e0:1d:d2:
00:e5:eb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:44:59 2026 by rpki-client