
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
File: 6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft (raw, json)
Hash identifier: pvdaEJF7CYELYQUccNqYFarBT0mqN8rz72qi9lg0v3E=
Subject key identifier: BF:C6:58:98:F3:47:6D:26:E1:24:39:AA:9C:FE:FA:47:98:E8:6A:99
Authority key identifier: 6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9
Certificate issuer: /CN=6CAF996274F565DC55326AACAFD54F19EBA53FF9
Certificate serial: 5772B1AC1D267036A960D74ADC2213E3AA4822B4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
Manifest number: CE
Signing time: Wed 29 Jul 2026 19:10:01 +0000
Manifest this update: Wed 29 Jul 2026 19:05:01 +0000
Manifest next update: Thu 30 Jul 2026 21:47:01 +0000
Files and hashes: 1: 6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl (hash: m60p3Myue55DrayjLQgmCYjHC5U2miXGtuvispx4AJ4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 21:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:72:b1:ac:1d:26:70:36:a9:60:d7:4a:dc:22:13:e3:aa:48:22:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6CAF996274F565DC55326AACAFD54F19EBA53FF9
Validity
Not Before: Jul 29 19:05:01 2026 GMT
Not After : Jul 30 21:47:01 2026 GMT
Subject: CN=BFC65898F3476D26E12439AA9CFEFA4798E86A99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:ba:ef:fe:93:82:cd:17:55:54:c2:1c:f1:
9f:e7:cc:e4:ae:b7:89:29:3e:eb:0d:af:22:d7:be:
fd:60:a3:30:62:dd:de:f6:d9:cc:fc:da:c0:ca:2e:
cb:3b:08:64:92:42:f2:9e:e9:72:43:5a:b7:31:ea:
e3:c5:47:88:e7:0b:0f:8f:7e:0c:db:9d:c6:5c:17:
5c:90:e2:e7:ea:21:0a:57:b1:29:03:d7:c4:48:8a:
64:52:63:f6:0d:b2:87:e9:50:28:61:c9:1c:30:1a:
5c:01:5f:68:0e:3c:de:a9:a8:3b:5d:41:3e:21:6e:
3f:62:4e:15:b6:49:d6:31:bb:f1:63:0b:d4:f9:01:
ed:c4:4f:33:de:11:8c:3c:db:d0:c4:30:b1:41:d0:
af:80:33:d6:e5:e0:44:44:ec:a9:dd:68:b4:9f:6a:
00:52:bc:a0:80:a0:73:30:c3:eb:03:e6:8f:61:e9:
fe:4e:15:74:7c:d9:35:d2:38:3b:d0:c1:4f:61:a2:
30:f0:16:58:67:eb:96:a4:5d:7d:e7:71:a7:e2:ad:
af:c1:f8:cc:64:3c:23:8e:40:70:7a:5b:7a:d2:91:
d6:2c:83:7d:c3:37:3f:bb:8e:19:82:42:4f:b8:58:
84:de:0f:48:36:64:d0:8b:d3:fa:71:c0:8f:29:73:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C6:58:98:F3:47:6D:26:E1:24:39:AA:9C:FE:FA:47:98:E8:6A:99
X509v3 Authority Key Identifier:
keyid:6C:AF:99:62:74:F5:65:DC:55:32:6A:AC:AF:D5:4F:19:EB:A5:3F:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6CAF996274F565DC55326AACAFD54F19EBA53FF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079237873846255617/0/6CAF996274F565DC55326AACAFD54F19EBA53FF9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:cb:4a:ba:90:f0:4b:57:e3:48:15:9b:81:a6:99:96:94:3d:
27:c4:a1:0e:c1:c5:3b:d0:67:99:e7:d3:71:70:32:fd:e8:2a:
5f:d1:65:d0:de:55:41:38:4b:51:0f:85:6b:1b:92:7e:56:36:
10:4c:72:83:9e:8c:b1:db:ce:d8:77:3c:53:5d:bf:0a:0b:d8:
5a:cf:3f:0e:da:f8:99:1f:70:8b:00:5e:f3:ff:f5:36:3f:5f:
69:92:78:22:65:71:4f:dd:40:22:df:76:c0:9c:ed:db:ef:d3:
22:23:13:61:81:7c:53:15:d7:bb:51:8e:ad:ed:48:cc:0a:5f:
2d:9c:4e:35:03:d5:5f:b5:ff:f9:a5:98:40:6a:32:a8:51:99:
44:5a:40:a9:5d:5a:d2:23:02:25:5c:76:89:5b:ab:97:f8:4e:
57:9f:0d:b0:1e:58:60:a8:31:35:e4:12:bf:54:fd:f6:c1:5d:
26:90:92:96:7a:85:a6:91:dc:f3:3b:23:2f:9d:41:51:38:b2:
b7:10:c0:a0:ac:0e:0e:67:28:4f:8e:1c:b6:38:5f:11:4c:1a:
76:eb:c8:eb:f6:24:d2:21:95:a4:a6:fc:1a:cf:c1:0b:8b:ad:
97:b3:d7:6e:f2:08:e9:c8:d6:ac:17:dc:dc:60:60:17:3d:69:
30:0e:3b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:03:09 2026 by rpki-client