
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.mft
File: 6741F95ED93FC3D5B5930C845F43187AE27BCF32.mft (raw, json)
Hash identifier: YMLhvyl+fCwXup1y7CP7d2ZqDdMpOfSr9jWV4NIAkvw=
Subject key identifier: A2:F1:4C:29:FD:C8:DD:7E:79:5A:D2:48:0A:E1:9C:45:B7:0A:DD:EE
Authority key identifier: 67:41:F9:5E:D9:3F:C3:D5:B5:93:0C:84:5F:43:18:7A:E2:7B:CF:32
Certificate issuer: /CN=6741F95ED93FC3D5B5930C845F43187AE27BCF32
Certificate serial: 6875D59BC95A3CAFD3177062FE9B4BCF14A4D4A3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6741F95ED93FC3D5B5930C845F43187AE27BCF32.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.mft
Manifest number: 97
Signing time: Wed 29 Jul 2026 20:10:08 +0000
Manifest this update: Wed 29 Jul 2026 20:05:08 +0000
Manifest next update: Thu 30 Jul 2026 20:18:08 +0000
Files and hashes: 1: 323430333a633938303a3a2f33322d3332203d3e203633353631.roa (hash: LnEW+MqErgFvFR2MVyYR/WeWy4hulmeFDFQj7VfGAzM=)
2: 3230322e36312e38382e302f32322d3232203d3e203633353631.roa (hash: 8kvjgfrcYJstXTBLPLOOxWgIOcKY0Jy8j6+rKlr++00=)
3: 6741F95ED93FC3D5B5930C845F43187AE27BCF32.crl (hash: BBJ9AFSAre3EkFlKBLUsm1GuUKvgRx/H48x8KwneIdA=)
4: 323430333a633938303a3a2f33322d3332203d3e203338323833.roa (hash: 9/c2HzbjtacCy3np4XyohJgt2y8iOEqczikxy/gpCKY=)
5: 3130332e3230332e3231362e302f32322d3232203d3e203633353631.roa (hash: 09DSZA+1bEtxsfBALT2vanyOFeWgc0ng9NXKOzy5OqU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.crl
rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6741F95ED93FC3D5B5930C845F43187AE27BCF32.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 20:18:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:75:d5:9b:c9:5a:3c:af:d3:17:70:62:fe:9b:4b:cf:14:a4:d4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6741F95ED93FC3D5B5930C845F43187AE27BCF32
Validity
Not Before: Jul 29 20:05:08 2026 GMT
Not After : Jul 30 20:18:08 2026 GMT
Subject: CN=A2F14C29FDC8DD7E795AD2480AE19C45B70ADDEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:cb:be:0f:51:20:be:dd:aa:9b:0f:5d:20:
89:c7:bf:68:c3:df:cf:30:64:b1:fc:a9:b1:7c:7c:
df:14:85:e9:6f:e8:ee:b0:2a:69:5d:37:24:bf:a2:
10:d0:a5:ba:0b:ff:92:08:c0:47:88:ff:16:d4:64:
75:82:8b:85:49:10:ad:32:cf:91:52:54:e9:a8:1c:
8f:d9:52:b2:67:42:52:d8:09:4b:bb:d9:68:a0:00:
ff:93:0b:07:33:09:2e:7e:47:80:ad:ed:ac:66:63:
30:b4:a2:fa:f4:a2:9f:8f:15:f9:e7:26:c8:d7:a1:
5a:64:d6:ee:4a:ee:90:17:46:e5:15:f0:c5:fe:9f:
47:fa:69:7e:b7:aa:8f:eb:ce:01:4d:2a:ca:b7:33:
ad:1f:91:e6:00:8c:2e:67:a6:6e:d2:f7:49:da:ab:
d5:ba:cb:ef:25:06:14:5e:2d:46:90:a0:1d:5e:86:
46:77:42:af:39:51:02:af:15:cd:2d:10:89:27:4f:
ac:99:c7:f1:a9:66:6f:20:ce:f5:a7:84:48:15:d5:
d8:14:8f:5e:9d:be:e3:e9:0a:5b:54:84:85:3e:e7:
87:b7:e0:f5:77:8d:98:ac:af:e2:0e:59:a2:6c:37:
a4:aa:73:f9:c8:40:00:6d:01:dd:b2:ef:0f:46:d1:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F1:4C:29:FD:C8:DD:7E:79:5A:D2:48:0A:E1:9C:45:B7:0A:DD:EE
X509v3 Authority Key Identifier:
keyid:67:41:F9:5E:D9:3F:C3:D5:B5:93:0C:84:5F:43:18:7A:E2:7B:CF:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6741F95ED93FC3D5B5930C845F43187AE27BCF32.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c3:0c:d3:f5:48:c0:11:31:c2:1d:8b:7b:6e:40:66:e2:38:
06:c1:8d:18:5f:c4:10:35:f6:c1:0a:4a:ca:66:30:d6:9f:5f:
db:c9:8c:00:fd:3e:24:5e:59:e5:18:00:54:93:ee:12:0f:73:
c9:59:f7:f5:43:56:20:09:71:45:5b:52:67:f8:8c:84:22:1e:
cb:d3:f3:93:db:43:62:90:b3:f2:34:5d:31:d6:63:c8:8a:22:
89:58:ad:46:a7:1e:3c:51:fb:2b:88:ca:51:07:85:2e:66:19:
fa:c9:88:88:73:ab:d9:d3:56:87:f4:c0:9d:0d:fd:f4:29:d5:
20:1f:c2:48:3a:1b:26:f2:84:61:13:f8:95:c7:c6:47:ff:a1:
49:89:18:76:c4:4c:97:09:67:c5:4d:e8:75:3e:1e:93:89:92:
7f:7c:12:5b:54:d9:c0:e9:5b:58:d8:38:18:a2:2b:61:75:34:
b7:26:e2:28:f1:c8:a1:63:b2:96:60:37:66:17:0e:e4:1f:57:
e2:01:f3:c6:45:cf:a1:89:a4:fb:f0:e0:52:96:3f:c2:6e:0f:
4d:ee:a1:ec:6f:1c:b0:b8:9e:17:24:a8:10:d8:f7:be:91:3d:
76:f8:2b:d3:f4:fc:49:d6:04:91:87:18:9e:94:a5:c6:6f:4a:
cc:86:79:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:03:46 2026 by rpki-client