
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
File: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft (raw, json)
Hash identifier: VzuZTqzbL4Yz2QhlZG6GSR4Rvl0I67wMFa6Xs4uIPLc=
Subject key identifier: F8:7E:6D:4F:AD:43:A6:89:17:1A:37:FE:29:1D:47:EF:7E:B0:C7:B3
Authority key identifier: 6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
Certificate issuer: /CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Certificate serial: 66D54DC637978B4EFFEFE08EC2AA6DBFDA3FA547
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
Manifest number: FF
Signing time: Tue 28 Jul 2026 15:07:05 +0000
Manifest this update: Tue 28 Jul 2026 15:02:05 +0000
Manifest next update: Wed 29 Jul 2026 17:17:05 +0000
Files and hashes: 1: 3231302e38372e37322e302f32332d3233203d3e20323131333932.roa (hash: Za6CTmgreoWhCuNZjZaegQ9ZSyzYL/pUPt044AAI5Rg=)
2: 3231302e38372e37322e302f32342d3234203d3e20323131333932.roa (hash: mVbRhcTcLyvsAMfZJUY6i4bpMObDpb0oEicxlAT8TpY=)
3: 3231302e38372e37332e302f32342d3234203d3e20323131333932.roa (hash: B103GkhAbfnBvb3weWZMCaWZpcf/6CwQGFLjnuopNmY=)
4: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl (hash: HK8KGjd+ue8XwT2IFA4Ji4IW2DzsjHF25pzlWL1XSkM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:17:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d5:4d:c6:37:97:8b:4e:ff:ef:e0:8e:c2:aa:6d:bf:da:3f:a5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Validity
Not Before: Jul 28 15:02:05 2026 GMT
Not After : Jul 29 17:17:05 2026 GMT
Subject: CN=F87E6D4FAD43A689171A37FE291D47EF7EB0C7B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:dd:0d:69:e5:5d:9c:10:b5:60:be:a1:74:
05:8d:84:9b:16:97:4b:7b:ba:f0:4e:8a:a0:42:5d:
57:29:11:11:2b:ec:6d:b3:35:e6:33:04:65:c8:52:
ac:9d:c6:cb:53:95:f1:b4:13:c2:23:5f:82:91:4f:
b9:49:63:26:09:6c:8b:9d:18:c6:fa:0a:46:5b:c0:
43:d2:b5:6a:dd:69:01:2d:d5:9c:2f:7a:4f:b7:91:
d9:10:c6:b8:b7:9c:a5:bd:e2:2b:c2:9c:ae:95:9e:
ec:c4:fc:34:7e:9b:2b:51:13:26:1e:63:27:20:cc:
33:98:e8:84:a6:11:ad:5c:bd:de:90:da:e4:90:5e:
39:3a:cf:da:69:7e:69:5d:e3:4c:a2:ab:61:c9:55:
26:75:74:39:e0:55:28:c1:60:91:23:37:11:fd:84:
4c:85:99:d4:bb:a4:54:01:a0:2a:b4:45:e0:f2:0f:
43:ae:b4:bf:b7:a0:3c:51:6e:e4:dc:b1:20:ce:bf:
54:ba:fc:73:37:06:c4:b9:61:10:9b:8b:83:a9:69:
5b:f5:a9:95:9c:23:46:4d:62:71:02:bf:f4:9f:4e:
13:26:22:98:6c:ce:dc:be:e7:7a:98:a9:68:87:71:
22:3a:d9:37:9d:d0:28:e3:50:62:0c:eb:42:1e:63:
87:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7E:6D:4F:AD:43:A6:89:17:1A:37:FE:29:1D:47:EF:7E:B0:C7:B3
X509v3 Authority Key Identifier:
keyid:6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cf:47:12:29:4f:bc:16:aa:9a:24:55:ab:41:56:26:a8:27:
2e:8f:38:72:7e:3d:b7:01:60:f1:37:24:25:69:d5:32:c4:d9:
28:fb:1c:a5:84:14:de:ba:b1:72:1c:0e:44:b0:e9:71:48:14:
4c:cc:42:8c:df:50:f9:d8:3a:83:63:8b:44:75:3c:e2:c4:df:
71:42:9a:c6:a3:5d:a2:a3:49:89:84:2c:c1:e9:31:f7:58:6c:
bf:9a:fe:c0:8e:10:10:5f:c8:20:8a:d7:1d:01:fa:b2:b6:da:
8e:fa:7f:66:3d:6d:1d:5b:56:90:c7:7d:5d:53:1b:e6:72:40:
7f:44:88:34:b5:39:c7:32:e4:0a:ce:51:20:ef:80:15:f7:d1:
11:da:d3:cb:25:bd:71:13:c2:24:8c:f1:90:31:f2:50:ea:4d:
df:9d:62:f5:2c:fa:d0:f0:b3:94:29:1e:c7:80:fe:0b:9c:18:
0a:be:15:d3:2a:aa:89:c1:03:65:17:3a:62:d8:42:c1:aa:17:
d3:35:84:a3:00:83:d5:75:0d:10:b3:26:06:ab:e0:9d:29:ce:
2d:6a:6a:47:6e:59:da:68:df:3a:6e:a5:43:ba:4b:b7:87:ae:
16:7e:ed:53:fa:ba:33:59:88:f1:c8:0c:68:62:42:24:ff:9a:
be:00:af:44
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZtVNxjeXi07/7+COwqptv9o/pUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZB
QjNCOTA3RTAeFw0yNjA3MjgxNTAyMDVaFw0yNjA3MjkxNzE3MDVaMDMxMTAvBgNV
BAMTKEY4N0U2RDRGQUQ0M0E2ODkxNzFBMzdGRTI5MUQ0N0VGN0VCMEM3QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnAt0NaeVdnBC1YL6hdAWNhJsW
l0t7uvBOiqBCXVcpEREr7G2zNeYzBGXIUqydxstTlfG0E8IjX4KRT7lJYyYJbIud
GMb6CkZbwEPStWrdaQEt1Zwvek+3kdkQxri3nKW94ivCnK6VnuzE/DR+mytREyYe
YycgzDOY6ISmEa1cvd6Q2uSQXjk6z9ppfmld40yiq2HJVSZ1dDngVSjBYJEjNxH9
hEyFmdS7pFQBoCq0ReDyD0OutL+3oDxRbuTcsSDOv1S6/HM3BsS5YRCbi4OpaVv1
qZWcI0ZNYnECv/SfThMmIphszty+53qYqWiHcSI62Ted0CjjUGIM60IeY4flAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU+H5tT61DpokXGjf+KR1H736wx7MwHwYDVR0j
BBgwFoAUbsHjTq3qInCV1XjnhMhcj6s7kH4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTY4MzA2MTkwNzQ1OC8wLzZFQzFFMzRFQURFQTIyNzA5NUQ1NzhFNzg0Qzg1
QzhGQUIzQjkwN0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZBQjNCOTA3RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE5MDc0NTgvMC82RUMxRTM0RUFERUEy
MjcwOTVENTc4RTc4NEM4NUM4RkFCM0I5MDdFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOM9HEilPvBaq
miRVq0FWJqgnLo84cn49twFg8TckJWnVMsTZKPscpYQU3rqxchwORLDpcUgUTMxC
jN9Q+dg6g2OLRHU84sTfcUKaxqNdoqNJiYQswekx91hsv5r+wI4QEF/IIIrXHQH6
srbajvp/Zj1tHVtWkMd9XVMb5nJAf0SINLU5xzLkCs5RIO+AFffREdrTyyW9cRPC
JIzxkDHyUOpN351i9Sz60PCzlCkex4D+C5wYCr4V0yqqicEDZRc6YthCwaoX0zWE
owCD1XUNELMmBqvgnSnOLWpqR25Z2mjfOm6lQ7pLt4euFn7tU/q6M1mI8cgMaGJC
JP+avgCvRA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:01:08 2026 by rpki-client