
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
File: D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft (raw, json)
Hash identifier: T9cWoSNY8mK0nflyPk4Cbk+2vgaWLt4pGAeA8pFVELM=
Subject key identifier: 9F:AD:CF:2C:7A:2E:52:24:FE:AB:81:E6:23:40:2B:31:DD:5E:1F:A3
Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Certificate serial: 4126EF225F45F0B30C5D3D9A82371AC756BB3F96
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
Manifest number: 014A
Signing time: Tue 28 Jul 2026 09:36:32 +0000
Manifest this update: Tue 28 Jul 2026 09:31:32 +0000
Manifest next update: Wed 29 Jul 2026 12:10:32 +0000
Files and hashes: 1: AS14618.roa (hash: +Wv/2HA8AVUSNnadO5hz5VeeFjAexzBSpavN7fMFXGc=)
2: AS4837.roa (hash: fhYEL03qpRt46XUMS7A41XahZN88wXQKA1YPtuoTlhw=)
3: AS4808.roa (hash: //nKQNAjooI9erX4CO+1oGcixsTIJNw6HHMIvfL9IMQ=)
4: AS138421.roa (hash: 2wlstcl5tFV+5E8jvfptqjBcmgeaje3X7oXtiJyA3WY=)
5: AS137699.roa (hash: D0pnZlgzIum966fqLaKQBVafP4tAhNdkkWQtNVZ7QXg=)
6: AS618.roa (hash: R+C8Vc8lMDFPCjUBt8RrWNDpfiQzOxRJZjPH8n6RrH8=)
7: AS23724.roa (hash: 8krRNne+KRTBey0q0TJzCVIFcEgDHE+LzZ9++xzsw7Q=)
8: AS58466.roa (hash: kSF22yBAy8SUSPPV8/o7H9vyPUoVyme9wGOZprZ2rcM=)
9: AS136958.roa (hash: XwAwuw4m2OENSikj/rtTtQsqWwas7qpS239Aq1SA7eE=)
10: D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl (hash: F2vDhR5Ld2eiYA7nqDWrC5kZxCkZVC0Agezfi2akETQ=)
11: AS141679.roa (hash: QsBxvlTVUwKrMZj2U6EcyVvBhZjwk3O6PdTggf+BNR0=)
12: AS137753.roa (hash: 4+RHeerb+nMVnV6wUIKmstQv6v3WIzsDcvJF0B7glsg=)
13: AS131486.roa (hash: hv3NrWI7qndb9pwRQZGa9lhEKMv487gLxwAMSFSJIMw=)
14: AS16509.roa (hash: ZMwXvE4dHyIcjXmR+aleISP8m7PnxVmHxH9TxqYuPjw=)
15: AS9808.roa (hash: nIrH1Plwi2PhCTPH5t4ZrR1yXUO+K6EewsCL9PEsI3s=)
16: AS4811.roa (hash: 7/9rXmm3PTJE28aFP6e8Mej2tpluIiRvbq9OgQ78+fE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 12:10:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:26:ef:22:5f:45:f0:b3:0c:5d:3d:9a:82:37:1a:c7:56:bb:3f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Validity
Not Before: Jul 28 09:31:32 2026 GMT
Not After : Jul 29 12:10:32 2026 GMT
Subject: CN=9FADCF2C7A2E5224FEAB81E623402B31DD5E1FA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:73:6d:c5:bd:8a:f7:65:2c:4d:3b:06:25:ae:
a7:4e:d6:77:1e:4a:df:a2:55:31:83:04:df:82:d6:
e0:8f:c0:4a:98:6c:90:d3:18:f3:67:5c:e6:2c:dd:
1c:79:2b:51:b8:3e:72:89:2b:4c:32:e3:ac:d4:b4:
fe:8a:d3:94:f9:d3:5d:cc:ae:cb:ad:21:a3:1c:02:
ef:16:06:eb:77:b6:8b:79:1e:37:36:6c:93:fb:26:
ba:1d:75:02:f6:00:04:b7:1c:4e:1a:1a:72:80:3a:
b7:6a:ff:4a:c0:dc:01:53:52:d6:87:43:0b:69:ec:
05:d6:ac:98:c7:b4:d1:08:a2:51:7c:76:43:fa:e7:
1d:38:2e:32:99:64:64:2a:0f:85:7a:84:bb:c0:de:
a4:66:3d:8a:99:6b:bb:23:25:22:01:d1:b2:7a:29:
39:e4:b5:1e:cd:3a:44:c0:5e:5b:a0:4c:5a:8d:b8:
a4:b1:34:7b:59:af:7f:07:88:a3:98:99:66:31:b3:
7c:fb:da:e0:6e:3e:f8:aa:77:31:4e:0e:16:f1:c0:
4d:ef:ae:90:e5:85:a6:5a:9a:bc:cf:f3:93:ad:c3:
b3:85:6d:6e:25:01:e3:62:d7:4d:5d:e0:2d:c1:3e:
bf:0a:d4:b0:7e:d3:fd:0b:b8:64:a5:1f:5b:86:f4:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AD:CF:2C:7A:2E:52:24:FE:AB:81:E6:23:40:2B:31:DD:5E:1F:A3
X509v3 Authority Key Identifier:
keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:24:35:f8:9e:6d:56:29:4f:6d:e8:80:26:30:18:3e:8e:4a:
f8:da:4b:db:18:b7:78:cd:f1:6e:fd:65:89:18:32:67:09:d2:
37:df:c1:e5:d5:72:e7:d2:fd:3a:00:99:28:d0:fe:b1:47:6f:
98:61:93:5f:5f:1f:31:ee:7f:1d:d8:7a:7a:31:55:3e:94:70:
c8:4b:3a:47:82:72:d5:39:88:db:85:80:d0:88:52:74:6c:38:
5d:5b:8a:f4:59:92:ad:4d:bc:bf:c8:2b:48:37:b5:0b:65:b1:
91:2a:cf:e6:3b:7e:d4:46:93:95:5c:85:95:5e:06:3f:78:65:
c2:ed:b7:a8:9c:67:0d:e2:a0:65:fc:81:d8:70:e6:c1:1c:f2:
c2:8e:ef:50:8c:0d:44:9c:14:ae:b2:dc:d1:49:56:6c:70:78:
07:7f:f8:3b:61:e6:c4:b5:7d:d6:ec:6a:ea:06:31:e0:7d:4b:
9d:4d:86:95:78:06:dd:ce:32:63:78:f7:1a:37:78:ae:58:ad:
13:cd:a7:06:03:87:50:f7:92:51:08:1a:cf:ca:5f:29:f5:83:
af:69:01:33:df:cd:c3:2f:07:5b:89:8a:8c:79:df:47:29:b7:
b8:fd:2e:a0:fd:cc:ab:b1:be:24:e2:e2:af:01:b0:35:95:4e:
49:70:11:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:17:07 2026 by rpki-client