
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
File: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft (raw, json)
Hash identifier: MPlvrgzf+QIhMgsSLia4CbPF4EmelkZLnAM3N8aEjDs=
Subject key identifier: 32:0F:14:29:9A:BD:B2:DA:5E:FF:11:B5:CC:10:24:65:69:AF:56:89
Authority key identifier: 6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
Certificate issuer: /CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Certificate serial: 0E0EAE0124FCC8130C3F0041304A300282F264A1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
Manifest number: 013C
Signing time: Sat 10 Oct 2026 20:24:55 +0000
Manifest this update: Sat 10 Oct 2026 20:19:55 +0000
Manifest next update: Tue 13 Oct 2026 23:05:55 +0000
Files and hashes: 1: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl (hash: rKr/81ADeM7OYQTdy37K1tW8G7cVjzz3OU4Z230X+3Y=)
2: 3231302e38372e37332e302f32342d3234203d3e20323131333932.roa (hash: B103GkhAbfnBvb3weWZMCaWZpcf/6CwQGFLjnuopNmY=)
3: 3231302e38372e37322e302f32342d3234203d3e20323131333932.roa (hash: mVbRhcTcLyvsAMfZJUY6i4bpMObDpb0oEicxlAT8TpY=)
4: 3231302e38372e37322e302f32332d3233203d3e20323131333932.roa (hash: Za6CTmgreoWhCuNZjZaegQ9ZSyzYL/pUPt044AAI5Rg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 23:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:0e:ae:01:24:fc:c8:13:0c:3f:00:41:30:4a:30:02:82:f2:64:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Validity
Not Before: Oct 10 20:19:55 2026 GMT
Not After : Oct 13 23:05:55 2026 GMT
Subject: CN=320F14299ABDB2DA5EFF11B5CC10246569AF5689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:00:ec:fc:f3:b6:5c:d6:93:32:4c:03:39:49:
c4:00:31:f1:13:54:04:05:d5:41:15:8a:fa:1a:36:
7e:88:b3:69:58:f5:5f:75:b1:81:8d:e7:61:60:a4:
a7:a9:fb:ac:93:d0:a9:2c:54:46:a5:db:dd:c2:d9:
be:88:3e:6c:c3:47:e6:8a:75:ee:36:24:f8:e6:5a:
c6:ed:ac:8e:87:1b:0c:2e:a6:3f:43:3c:da:bd:63:
7d:e9:72:b9:2e:41:55:ef:46:7c:25:6f:c4:71:0c:
0c:b1:83:06:80:fa:10:5d:6f:05:47:60:db:55:8c:
d0:8b:c3:91:a6:95:c0:df:8f:f2:f7:3a:a5:d2:e7:
29:73:0e:3e:53:55:87:69:c4:88:95:5e:48:9e:fc:
62:70:d4:20:0e:2a:d5:51:ca:77:74:5a:e1:b6:ac:
32:78:20:6f:6e:d3:fc:73:48:5b:fd:3d:56:f4:b2:
23:8d:ae:4b:29:f8:ef:c5:1c:f7:68:fa:3f:ee:76:
db:de:c0:ed:94:55:98:20:2e:2e:82:b0:33:4f:a4:
35:d9:38:f3:45:70:51:61:75:87:4b:11:0b:ea:8d:
f2:a0:fc:4f:3e:ae:dd:b3:ac:65:f5:8b:d8:47:88:
23:6d:89:8e:fd:a7:8d:db:af:37:c6:33:00:c1:fc:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0F:14:29:9A:BD:B2:DA:5E:FF:11:B5:CC:10:24:65:69:AF:56:89
X509v3 Authority Key Identifier:
keyid:6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2a:a1:5c:d0:69:46:70:6b:f8:ad:c1:18:cf:5c:56:20:36:
d1:e7:c9:cf:c7:63:f7:6c:fa:59:87:89:48:9b:7e:e2:f0:98:
33:d8:63:6c:4d:76:50:79:5b:de:86:d0:8d:dc:19:57:cf:1a:
60:5e:e7:99:f0:c6:5d:76:d9:57:62:5e:3d:1a:98:25:81:2c:
05:e4:3d:4b:54:ff:b5:6b:1a:2d:4d:e3:99:a9:93:20:50:73:
cd:c6:37:56:3c:e1:38:fc:14:95:56:77:29:c9:49:ed:4f:a4:
26:b9:d4:73:de:1d:59:c9:f6:e5:b3:9a:05:4c:5c:02:fc:d2:
6f:03:8a:9f:d5:b1:60:f0:0c:3c:3e:12:ed:40:a3:ff:54:e4:
c2:0a:89:d1:88:c8:b8:6d:d1:80:1e:3d:56:37:33:d2:d3:09:
fb:c5:70:31:68:d9:e8:fe:00:2b:8e:db:40:62:d7:0a:78:d1:
40:50:2a:11:4f:65:b3:b6:0d:ff:6c:a6:15:79:e7:01:ed:57:
0c:8e:81:de:fb:e9:68:96:f6:f5:36:13:79:2d:66:13:8b:2c:
cd:75:26:cf:01:0c:0b:3b:45:45:93:bb:c0:1e:31:c8:f9:03:
00:c7:0e:e1:7a:22:38:78:69:96:17:aa:d4:d9:78:71:1c:45:
35:81:e4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:12:56 2026 by rpki-client