
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
File: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft (raw, json)
Hash identifier: +TccN8NdIeRzz0I1ckMUTe7sz2EnqTlxLu2s6OGR6dw=
Subject key identifier: 13:B4:81:2C:69:59:17:6C:31:01:7F:C1:5B:0A:45:E4:DF:FF:33:EB
Authority key identifier: 6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
Certificate issuer: /CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Certificate serial: 46742F1019037875D8AB0ABB195443B1E6CF55E0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
Manifest number: C3
Signing time: Sat 13 Jun 2026 20:27:13 +0000
Manifest this update: Sat 13 Jun 2026 20:22:13 +0000
Manifest next update: Sun 14 Jun 2026 22:44:13 +0000
Files and hashes: 1: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl (hash: BEjeZexmHo4hRIh5g8QSHvUbneGhCPA5fgESJARKb7U=)
2: 3231302e38372e37322e302f32342d3234203d3e20323131333932.roa (hash: mVbRhcTcLyvsAMfZJUY6i4bpMObDpb0oEicxlAT8TpY=)
3: 3231302e38372e37332e302f32342d3234203d3e20323131333932.roa (hash: B103GkhAbfnBvb3weWZMCaWZpcf/6CwQGFLjnuopNmY=)
4: 3231302e38372e37322e302f32332d3233203d3e20323131333932.roa (hash: Za6CTmgreoWhCuNZjZaegQ9ZSyzYL/pUPt044AAI5Rg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:74:2f:10:19:03:78:75:d8:ab:0a:bb:19:54:43:b1:e6:cf:55:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Validity
Not Before: Jun 13 20:22:13 2026 GMT
Not After : Jun 14 22:44:13 2026 GMT
Subject: CN=13B4812C6959176C31017FC15B0A45E4DFFF33EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:f1:03:46:d9:6d:91:18:e0:fb:fd:82:24:
44:61:91:6a:9d:c2:3d:04:54:fe:56:a4:12:02:a8:
98:8e:46:b8:dc:71:05:89:5d:f0:1e:bb:63:cb:c0:
44:18:01:f2:6c:5a:07:37:d2:18:42:7d:23:ff:28:
0f:68:7c:50:ac:48:24:b1:66:cf:fb:76:71:b5:9c:
75:79:42:e3:e3:02:5e:7c:52:ea:1b:20:ca:a7:c9:
c1:91:44:5e:90:33:35:b9:74:d9:28:bb:09:ba:39:
f4:5c:76:63:b6:be:85:8d:58:fe:69:3f:b6:3c:f0:
7e:61:49:80:11:22:37:5b:fb:aa:4d:78:bc:4d:ac:
a5:ec:95:06:a0:ff:af:01:b7:0d:44:0b:2d:cd:03:
7c:dd:eb:b1:88:33:1a:37:41:87:90:b9:70:3d:22:
ed:50:46:05:c2:93:dd:2e:04:29:38:5b:af:2a:40:
0b:67:be:32:72:c3:38:11:c4:0d:8a:37:e9:7a:7a:
77:a8:37:ec:2b:75:bd:cd:56:c5:8f:1d:8b:ab:00:
f3:bb:89:cb:74:87:39:ae:35:af:08:ea:9d:79:cb:
a9:f2:33:a6:51:9e:59:74:c0:2e:cd:23:f0:fb:a0:
b6:e0:d1:7a:b3:3c:73:0e:d7:7c:2b:65:9e:25:a3:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B4:81:2C:69:59:17:6C:31:01:7F:C1:5B:0A:45:E4:DF:FF:33:EB
X509v3 Authority Key Identifier:
keyid:6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:69:b7:c4:d9:e9:c2:a8:8a:07:49:41:b9:e6:fe:4f:19:e6:
25:16:d2:40:2f:26:72:77:4f:9a:f5:cc:00:c1:99:44:e9:47:
0c:09:19:92:62:58:8c:1a:e2:2b:c9:0d:c2:7c:e9:fb:33:09:
e5:9c:23:57:da:de:6b:8a:72:f4:5a:61:c6:42:d0:77:23:44:
75:24:b0:72:ad:7c:7a:af:6a:6b:0b:ea:cb:6b:79:ff:6a:c5:
67:51:55:a7:ec:b2:b9:60:9c:39:aa:12:d3:1c:47:b0:9c:8c:
52:9b:44:8f:7a:b2:e5:49:77:a0:68:ae:56:a0:1d:41:c2:9c:
5e:e7:96:69:19:5b:9b:c7:4a:89:95:03:8a:29:d5:8e:52:32:
da:8c:60:94:ba:f6:6e:10:57:da:3f:e0:c6:e0:a2:c6:11:5c:
e3:cc:b4:a9:f3:58:52:3f:70:2a:8c:d3:ec:9a:cc:52:ed:49:
08:de:16:af:8e:39:da:37:ec:82:3b:ad:59:e1:19:dd:dc:ee:
bc:84:be:3d:74:31:b8:e2:a5:3b:c4:89:b5:88:d7:a1:84:62:
91:01:70:84:da:66:60:ca:9b:e9:b8:6b:ba:90:26:5c:06:01:
4d:73:36:c1:f5:f7:1b:71:a0:e9:3a:2f:12:19:a8:01:dc:c8:
da:0f:7c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:17:42 2026 by rpki-client