
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
File: D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft (raw, json)
Hash identifier: OVgiW5YasioTb3vNh1xHszVBbljYr1+d2A7OLDaCyxo=
Subject key identifier: FB:DC:C1:BC:60:B3:3E:C9:1A:5A:8D:6C:D3:C0:1F:10:02:0E:1C:55
Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Certificate serial: 233BBF88766080BB896B34F59607C6FA92BEA171
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
Manifest number: 010F
Signing time: Sat 13 Jun 2026 09:26:39 +0000
Manifest this update: Sat 13 Jun 2026 09:21:39 +0000
Manifest next update: Sun 14 Jun 2026 12:01:39 +0000
Files and hashes: 1: AS16509.roa (hash: ZMwXvE4dHyIcjXmR+aleISP8m7PnxVmHxH9TxqYuPjw=)
2: AS4811.roa (hash: 7/9rXmm3PTJE28aFP6e8Mej2tpluIiRvbq9OgQ78+fE=)
3: AS141679.roa (hash: QsBxvlTVUwKrMZj2U6EcyVvBhZjwk3O6PdTggf+BNR0=)
4: AS137753.roa (hash: 4+RHeerb+nMVnV6wUIKmstQv6v3WIzsDcvJF0B7glsg=)
5: AS4808.roa (hash: //nKQNAjooI9erX4CO+1oGcixsTIJNw6HHMIvfL9IMQ=)
6: AS58466.roa (hash: kSF22yBAy8SUSPPV8/o7H9vyPUoVyme9wGOZprZ2rcM=)
7: AS136958.roa (hash: XwAwuw4m2OENSikj/rtTtQsqWwas7qpS239Aq1SA7eE=)
8: AS131486.roa (hash: hv3NrWI7qndb9pwRQZGa9lhEKMv487gLxwAMSFSJIMw=)
9: AS9808.roa (hash: nIrH1Plwi2PhCTPH5t4ZrR1yXUO+K6EewsCL9PEsI3s=)
10: AS23724.roa (hash: 8krRNne+KRTBey0q0TJzCVIFcEgDHE+LzZ9++xzsw7Q=)
11: AS4837.roa (hash: fhYEL03qpRt46XUMS7A41XahZN88wXQKA1YPtuoTlhw=)
12: AS138421.roa (hash: 2wlstcl5tFV+5E8jvfptqjBcmgeaje3X7oXtiJyA3WY=)
13: D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl (hash: W2AKBVGqBa8TU4LdTadSJNuvh5KrnPvn6OhnTn9Gh+Q=)
14: AS618.roa (hash: R+C8Vc8lMDFPCjUBt8RrWNDpfiQzOxRJZjPH8n6RrH8=)
15: AS14618.roa (hash: +Wv/2HA8AVUSNnadO5hz5VeeFjAexzBSpavN7fMFXGc=)
16: AS137699.roa (hash: D0pnZlgzIum966fqLaKQBVafP4tAhNdkkWQtNVZ7QXg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:3b:bf:88:76:60:80:bb:89:6b:34:f5:96:07:c6:fa:92:be:a1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Validity
Not Before: Jun 13 09:21:39 2026 GMT
Not After : Jun 14 12:01:39 2026 GMT
Subject: CN=FBDCC1BC60B33EC91A5A8D6CD3C01F10020E1C55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:cb:81:c7:33:7c:95:c9:86:45:b6:5e:e3:
53:f8:ab:42:8f:9e:55:2c:a2:c4:e9:cc:67:ef:76:
49:f0:08:85:70:db:19:36:b2:62:41:ac:e7:2e:ba:
ba:f2:28:9a:3c:84:ca:90:43:df:34:59:de:33:75:
1a:36:4c:25:bd:a3:5e:1b:50:1f:d3:b5:3b:05:b6:
70:80:4b:9c:15:22:e8:b8:6d:62:75:92:9d:32:61:
b7:b7:80:46:c4:5c:e3:b4:1c:5f:05:38:64:d5:35:
fc:62:22:5d:80:d1:57:a6:59:c4:2c:34:8c:59:ac:
81:aa:8d:1e:46:46:8e:fd:fe:e8:c4:59:7c:6b:c3:
39:ee:6b:05:c5:a6:87:12:88:43:4c:8f:76:c7:20:
a8:8f:3c:89:b5:de:87:ed:c6:df:63:b4:8b:35:a6:
27:a8:2e:60:df:ff:f0:6f:67:c8:69:a8:bb:20:4c:
95:db:ff:14:05:e7:68:66:3d:7e:17:a3:35:6e:7c:
03:c9:ad:24:22:f4:5f:8b:bc:ae:2a:01:8b:b9:c5:
9a:86:c8:00:95:07:c4:14:83:71:3d:9a:95:48:4d:
cb:9e:24:47:86:b2:cf:9c:95:4c:80:d1:15:4a:a9:
9d:68:e1:23:2f:a5:61:6f:2c:6a:30:4a:84:05:43:
1a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DC:C1:BC:60:B3:3E:C9:1A:5A:8D:6C:D3:C0:1F:10:02:0E:1C:55
X509v3 Authority Key Identifier:
keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c4:55:a2:14:80:3b:d4:ca:b3:9f:06:60:9e:42:86:dc:c1:
20:8d:b1:2e:eb:85:cb:a7:88:a7:df:e9:b0:70:90:d7:11:62:
bd:98:c9:3e:9a:c2:2b:14:d1:00:1e:50:de:c7:dc:b7:03:75:
e9:e5:39:a2:04:2f:06:60:ea:e3:b0:08:88:dc:bf:9a:ce:c5:
be:93:0a:7b:42:17:aa:fc:6e:6f:ea:e8:a3:88:58:d6:e7:2b:
15:a2:e2:c6:09:1d:9e:86:f5:e7:b9:e8:18:0c:f3:cf:d3:6b:
14:7e:e7:da:5d:81:7a:b9:78:38:da:d5:60:4d:c1:4d:a9:cd:
fb:51:49:0b:9c:c8:62:8d:fd:28:a5:ba:bd:dc:44:7d:97:7a:
6f:00:65:9b:ce:ef:b4:04:6d:fc:b1:68:9b:70:a8:8a:bd:4f:
ca:2f:e6:29:56:66:d0:11:ce:11:5a:37:64:0c:51:e4:75:e9:
40:fc:24:45:46:a2:b6:d5:d0:01:06:8d:e8:4f:44:35:7e:ad:
48:33:b3:ce:43:20:17:1d:bc:a7:0a:02:6c:39:8f:62:e1:bb:
c2:e4:6f:92:42:66:67:05:79:f6:6e:c0:9a:58:27:54:9a:81:
9f:ca:a4:d3:e0:05:42:a8:71:9f:ee:de:d9:1d:52:cc:4a:a2:
e3:79:c0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:10:49 2026 by rpki-client