
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
File: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft (raw, json)
Hash identifier: 8PaCNQ6saz1UVpQbJ38hGS3ZP+R434rZyEBzIbwG/eM=
Subject key identifier: 76:2D:25:7D:C3:7F:23:6C:F3:DA:16:CE:F2:5B:9E:1C:B9:4B:28:B9
Authority key identifier: 6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
Certificate issuer: /CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Certificate serial: 6D56BDA24262C249ABD03A0B73E56AC577844202
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
Manifest number: 39
Signing time: Mon 02 Mar 2026 15:23:17 +0000
Manifest this update: Mon 02 Mar 2026 15:18:17 +0000
Manifest next update: Tue 03 Mar 2026 17:49:17 +0000
Files and hashes: 1: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl (hash: +y4bOdZWu50s0QumRVvaM6vr0z6Nl0WO15M5iLoLi8E=)
2: 3231302e38372e37322e302f32342d3234203d3e20323131333932.roa (hash: mVbRhcTcLyvsAMfZJUY6i4bpMObDpb0oEicxlAT8TpY=)
3: 3231302e38372e37322e302f32332d3233203d3e20323131333932.roa (hash: Za6CTmgreoWhCuNZjZaegQ9ZSyzYL/pUPt044AAI5Rg=)
4: 3231302e38372e37332e302f32342d3234203d3e20323131333932.roa (hash: B103GkhAbfnBvb3weWZMCaWZpcf/6CwQGFLjnuopNmY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 04:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:56:bd:a2:42:62:c2:49:ab:d0:3a:0b:73:e5:6a:c5:77:84:42:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Validity
Not Before: Mar 2 15:18:17 2026 GMT
Not After : Mar 3 17:49:17 2026 GMT
Subject: CN=762D257DC37F236CF3DA16CEF25B9E1CB94B28B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a2:55:f7:b6:c6:8b:6e:11:3b:cb:10:10:51:
50:03:c6:7e:5e:e1:bc:e7:90:99:df:cc:e5:8e:28:
59:94:eb:a1:b1:83:6a:59:9c:0e:af:e9:58:ec:39:
45:f8:51:ef:8f:de:0a:a6:54:42:80:8b:5b:f4:6f:
04:16:49:d7:ac:d0:67:2e:8d:cc:78:17:74:ed:b5:
65:86:9f:45:4a:6e:7f:d3:75:9e:3e:de:82:db:c1:
56:6e:a5:03:20:ea:84:15:62:50:10:52:f6:6f:bb:
9b:f2:1a:f2:4b:cd:ef:2b:8c:ff:cc:87:2e:61:eb:
ec:71:f5:d4:f7:1d:d9:6b:9c:99:79:9f:2e:93:1b:
23:96:70:1a:38:62:0c:5c:27:5c:c3:a4:d1:3f:25:
0a:05:0b:9c:ef:59:4b:3b:30:78:ca:07:99:33:8e:
8a:ab:45:d8:9d:2b:31:bd:16:52:36:79:07:0e:ea:
07:e0:13:99:a2:f5:3b:99:7e:49:c3:e4:7e:cf:0e:
24:30:e4:8b:1b:7f:51:f4:e3:e8:c6:e1:78:40:2d:
b3:a4:90:e3:32:ab:1e:64:fb:d0:5f:86:57:08:6b:
b4:b5:de:a5:97:1c:7e:fa:df:13:84:8e:5e:36:d1:
bc:9c:fb:72:79:f4:f3:3c:c8:61:1e:57:01:6d:d0:
4d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2D:25:7D:C3:7F:23:6C:F3:DA:16:CE:F2:5B:9E:1C:B9:4B:28:B9
X509v3 Authority Key Identifier:
keyid:6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f2:5e:e7:de:86:80:62:95:73:df:a2:01:5f:f2:f6:09:33:
92:a4:a5:a5:f3:2b:6d:0f:eb:3e:fd:f5:f2:28:ee:22:c8:1e:
20:38:27:1f:63:38:9d:2c:7b:26:52:fb:25:46:18:c9:9b:1e:
be:01:67:f6:89:10:b3:03:eb:cc:95:7a:a0:cf:4f:09:d2:7e:
70:25:a7:28:e7:ae:ec:15:be:dc:48:51:db:ba:27:9b:96:39:
51:75:ca:12:77:8b:70:a7:d5:9b:52:c3:ab:19:f0:cf:cc:5c:
39:fc:41:d5:0e:55:70:d8:66:85:0d:60:b5:d1:d1:89:59:a1:
b0:f4:6e:00:20:94:f7:4e:f7:77:38:a1:82:2f:ea:de:ed:e9:
2c:0f:3f:b6:bb:2a:34:65:e4:39:94:c5:50:92:2c:54:d7:ff:
71:28:72:16:34:5d:2c:13:63:cc:16:26:9b:40:00:e8:89:8b:
50:55:c4:45:c2:c5:4c:28:a7:89:af:35:25:25:90:67:fc:98:
f5:1b:45:12:5a:74:18:33:f3:ce:5f:d5:61:cd:4f:e2:a9:0e:
e0:22:c2:e4:8d:c6:25:32:4e:b4:0c:fc:23:64:06:43:0d:e1:
2a:12:5f:48:35:08:f8:94:bd:fa:fb:4d:2d:a0:ef:2e:09:27:
ce:ab:18:ba
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUbVa9okJiwkmr0DoLc+VqxXeEQgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZB
QjNCOTA3RTAeFw0yNjAzMDIxNTE4MTdaFw0yNjAzMDMxNzQ5MTdaMDMxMTAvBgNV
BAMTKDc2MkQyNTdEQzM3RjIzNkNGM0RBMTZDRUYyNUI5RTFDQjk0QjI4QjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXolX3tsaLbhE7yxAQUVADxn5e
4bznkJnfzOWOKFmU66Gxg2pZnA6v6VjsOUX4Ue+P3gqmVEKAi1v0bwQWSdes0Gcu
jcx4F3TttWWGn0VKbn/TdZ4+3oLbwVZupQMg6oQVYlAQUvZvu5vyGvJLze8rjP/M
hy5h6+xx9dT3HdlrnJl5ny6TGyOWcBo4YgxcJ1zDpNE/JQoFC5zvWUs7MHjKB5kz
joqrRdidKzG9FlI2eQcO6gfgE5mi9TuZfknD5H7PDiQw5Isbf1H04+jG4XhALbOk
kOMyqx5k+9BfhlcIa7S13qWXHH763xOEjl420byc+3J59PM8yGEeVwFt0E3tAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUdi0lfcN/I2zz2hbO8lueHLlLKLkwHwYDVR0j
BBgwFoAUbsHjTq3qInCV1XjnhMhcj6s7kH4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTY4MzA2MTkwNzQ1OC8wLzZFQzFFMzRFQURFQTIyNzA5NUQ1NzhFNzg0Qzg1
QzhGQUIzQjkwN0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZBQjNCOTA3RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE5MDc0NTgvMC82RUMxRTM0RUFERUEy
MjcwOTVENTc4RTc4NEM4NUM4RkFCM0I5MDdFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfJe596GgGKV
c9+iAV/y9gkzkqSlpfMrbQ/rPv318ijuIsgeIDgnH2M4nSx7JlL7JUYYyZsevgFn
9okQswPrzJV6oM9PCdJ+cCWnKOeu7BW+3EhR27onm5Y5UXXKEneLcKfVm1LDqxnw
z8xcOfxB1Q5VcNhmhQ1gtdHRiVmhsPRuACCU9073dzihgi/q3u3pLA8/trsqNGXk
OZTFUJIsVNf/cShyFjRdLBNjzBYmm0AA6ImLUFXERcLFTCinia81JSWQZ/yY9RtF
Elp0GDPzzl/VYc1P4qkO4CLC5I3GJTJOtAz8I2QGQw3hKhJfSDUI+JS9+vtNLaDv
LgknzqsYug==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:23:15 2026 by rpki-client