
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
File: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft (raw, json)
Hash identifier: cWFmIpu/4NFiWNV7gSeoqEqHhAWOTRT49QwHgPvKGNM=
Subject key identifier: F2:FF:3A:4E:01:49:A3:C1:4E:DE:72:09:41:89:6C:E7:45:F5:88:E9
Authority key identifier: 6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
Certificate issuer: /CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Certificate serial: 468C46AA2A3EE3BEB8168D6523A051ED1135C84F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
Manifest number: 76
Signing time: Fri 17 Apr 2026 18:24:47 +0000
Manifest this update: Fri 17 Apr 2026 18:19:47 +0000
Manifest next update: Sat 18 Apr 2026 19:02:47 +0000
Files and hashes: 1: 3231302e38372e37322e302f32332d3233203d3e20323131333932.roa (hash: Za6CTmgreoWhCuNZjZaegQ9ZSyzYL/pUPt044AAI5Rg=)
2: 3231302e38372e37322e302f32342d3234203d3e20323131333932.roa (hash: mVbRhcTcLyvsAMfZJUY6i4bpMObDpb0oEicxlAT8TpY=)
3: 3231302e38372e37332e302f32342d3234203d3e20323131333932.roa (hash: B103GkhAbfnBvb3weWZMCaWZpcf/6CwQGFLjnuopNmY=)
4: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl (hash: 5M4U16oW6mFUEaEawt6AnFOw+6r5uLPtaH2+SZ/SVIw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:8c:46:aa:2a:3e:e3:be:b8:16:8d:65:23:a0:51:ed:11:35:c8:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Validity
Not Before: Apr 17 18:19:47 2026 GMT
Not After : Apr 18 19:02:47 2026 GMT
Subject: CN=F2FF3A4E0149A3C14EDE720941896CE745F588E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:14:2b:6a:07:59:18:5b:9c:6b:36:23:7f:
82:b9:fc:b5:ad:8c:43:37:2e:88:93:7a:b3:73:13:
e0:70:b8:16:2a:2a:fc:ae:dd:f1:b3:a1:b8:de:aa:
be:de:d3:6e:0b:fa:b2:ab:20:31:45:c9:61:6f:45:
92:0e:e0:ff:48:a9:81:49:02:83:04:e7:51:bb:c6:
53:3b:56:48:e9:69:90:ca:c2:61:b5:d8:93:56:7a:
71:2b:c1:8d:70:6f:48:98:75:ae:bf:f2:0a:47:30:
08:e9:d9:82:24:ff:88:96:00:70:32:76:fa:91:55:
b8:03:67:61:97:f1:b4:f5:58:50:51:7f:f5:b7:ec:
96:ab:f7:55:45:72:46:b7:fd:02:a2:ab:67:59:e9:
c4:88:3b:1b:11:a2:56:fc:4d:5d:be:ee:2c:38:21:
f3:50:2e:df:0e:36:c6:f0:1f:c8:4f:0d:0c:64:6f:
e8:b9:be:e5:44:6c:38:9c:0e:0a:43:82:19:c5:f0:
64:5e:a8:c9:be:8b:9f:3d:94:e7:af:03:1e:97:97:
f2:dd:bd:d1:4a:19:c6:54:ad:9a:db:8b:9f:7e:1f:
f0:90:16:13:6c:14:fd:1f:00:85:8b:60:f2:92:e5:
66:b6:44:7b:fd:27:01:5d:63:c0:07:e2:43:19:64:
1a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FF:3A:4E:01:49:A3:C1:4E:DE:72:09:41:89:6C:E7:45:F5:88:E9
X509v3 Authority Key Identifier:
keyid:6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f9:66:58:a2:0c:b7:c8:03:af:4c:9d:ed:f1:f9:9b:dc:54:
9f:bd:d7:42:8f:57:1d:eb:14:19:8b:45:8c:2a:e3:53:f7:45:
05:4f:13:62:43:92:b8:1e:67:38:87:30:22:06:91:db:77:3b:
bf:f8:da:bb:05:17:9e:ac:62:1a:a7:5f:1c:d9:99:bf:bc:fd:
e2:a4:ca:9a:05:b1:6c:01:2b:0c:ad:4b:ae:65:b2:47:60:f3:
64:95:7b:89:81:bb:4e:fc:95:f2:5c:cf:87:02:e0:b7:b3:68:
ae:31:b8:3f:a3:af:a3:2c:7a:c3:1f:20:80:aa:13:98:cc:1e:
8f:48:23:5c:31:88:ce:66:0e:b7:de:42:43:79:07:08:be:0d:
fb:2b:e4:ca:40:c7:86:9f:ff:5f:47:a8:b3:0b:36:2f:2b:d7:
80:0a:9d:1e:f9:60:42:35:b6:37:f0:44:6e:84:f0:73:db:c6:
96:e0:b9:83:ce:29:ae:47:01:61:2f:0a:30:cc:5a:6c:1c:36:
fd:81:1c:ac:22:f8:7d:35:93:48:cb:8e:ea:0d:b9:37:f7:31:
2e:3c:c5:8a:f0:97:4c:9d:5b:3a:49:90:c4:27:3d:ba:85:10:
80:7f:4f:8f:6b:95:b3:bb:96:a8:f1:06:75:e1:e6:93:6a:76:
90:a3:eb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:49:41 2026 by rpki-client