
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
File: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft (raw, json)
Hash identifier: FJWmMEJoz/lAUfmlRI0Ff4EjpenyUzKYNJUg7xbi9/0=
Subject key identifier: CF:FD:45:F4:FA:A1:95:CC:84:98:C1:A3:43:64:4B:3C:2B:41:EA:5A
Authority key identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85
Certificate issuer: /CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
Certificate serial: 7A1AD2BC39BB97FA409C99DE28A9A61EF4869AC8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
Manifest number: C2
Signing time: Fri 12 Jun 2026 21:40:49 +0000
Manifest this update: Fri 12 Jun 2026 21:35:49 +0000
Manifest next update: Sun 14 Jun 2026 00:45:49 +0000
Files and hashes: 1: 3130332e3132302e35322e302f32322d3232203d3e2030.roa (hash: z33o4OymdWUBIy78ttDROdjMR5QblNN+hfrm6DQnxik=)
2: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl (hash: F1Olw9SIlEd88pFv4RBKs0w0dLX9s3iEXbPJNffpLd0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 23:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:1a:d2:bc:39:bb:97:fa:40:9c:99:de:28:a9:a6:1e:f4:86:9a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85
Validity
Not Before: Jun 12 21:35:49 2026 GMT
Not After : Jun 14 00:45:49 2026 GMT
Subject: CN=CFFD45F4FAA195CC8498C1A343644B3C2B41EA5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:38:84:63:4b:1f:26:43:69:e8:08:c0:43:
c0:01:bb:08:b7:3a:31:38:38:84:7d:2c:f0:8f:42:
bb:7f:6f:af:c2:43:26:85:77:97:cf:28:89:3e:2c:
f8:91:c7:7b:0c:47:dd:d1:a8:8e:78:51:91:8c:50:
9b:27:7c:35:74:4a:a8:d3:8a:c8:df:a4:0b:b7:57:
0e:45:32:83:55:40:46:a3:ab:00:40:22:6d:58:28:
6f:c9:f7:1a:af:d5:4c:d9:4b:fa:2e:be:1e:7c:1d:
f4:2b:e9:20:1b:53:14:4e:c2:dc:ee:46:8c:8a:b2:
5a:dc:85:87:e9:08:9c:3e:bb:3e:8c:90:04:4c:e9:
0e:3a:5c:dd:0d:f8:5c:42:02:55:ef:25:6f:aa:03:
1c:2f:28:03:d6:cb:4a:6f:b3:b2:99:71:d7:d7:fd:
db:20:03:00:f6:29:2c:5d:0b:21:06:a2:e2:b7:5c:
d6:84:3d:80:cc:65:fb:c1:bb:b9:42:8b:53:7b:33:
ec:09:13:33:ff:5b:f9:08:19:6b:1b:53:15:ca:e2:
a2:3c:19:85:0e:ff:69:e4:41:7f:5c:ea:b3:08:29:
a4:e1:40:c6:a8:f9:cc:9b:8b:31:29:74:cd:e8:28:
41:a3:9c:10:10:50:97:e4:20:d5:6a:6c:04:da:fe:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FD:45:F4:FA:A1:95:CC:84:98:C1:A3:43:64:4B:3C:2B:41:EA:5A
X509v3 Authority Key Identifier:
keyid:2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:29:11:08:84:36:e2:91:4c:8d:e2:08:43:17:f5:1d:03:d3:
99:09:34:91:87:37:57:d1:e5:f8:0a:08:42:53:a6:82:a0:d0:
36:5f:65:f3:11:20:74:35:2f:14:54:a9:18:8c:a4:dd:2f:cd:
33:57:ba:b8:6d:e6:22:8d:c6:45:4a:93:38:f4:76:25:64:9d:
e7:95:b4:f8:71:da:06:b8:a8:2c:63:df:44:35:92:7e:28:0b:
e5:c9:f2:92:63:74:d7:92:ee:5b:92:3f:37:0f:39:35:66:af:
64:e7:ca:7c:23:0d:2a:df:d7:76:67:cc:cb:9a:05:ff:1f:16:
f5:6a:68:a2:ca:f3:94:8b:51:71:88:59:75:c9:8f:63:f7:80:
44:c5:5d:cc:e2:08:a8:47:3e:51:fa:7b:d8:e0:37:fb:ba:a4:
62:9f:04:4c:ce:d6:4d:c5:f4:87:1e:17:e2:46:ec:9f:25:db:
17:5f:64:29:8c:12:96:d8:d2:4c:d4:00:be:71:79:c3:d5:9b:
48:34:ec:cb:7b:2b:89:d3:7d:68:7e:94:c4:74:c2:e7:4b:75:
43:55:2f:3b:e5:2f:a7:05:64:8a:f7:e4:29:dd:b9:fd:2d:99:
bb:70:40:a7:ec:c4:67:0f:85:25:4e:de:d9:38:d8:64:4c:86:
5d:c4:51:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:14:40 2026 by rpki-client