
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
File: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft (raw, json)
Hash identifier: qqHZE+F/zxb7eMFlrJrWz+mC3SLrebIyJbnfA4qjFWA=
Subject key identifier: 4C:B3:81:D5:32:B9:B4:13:91:65:69:FD:AF:EF:DE:5D:6B:CC:AB:2A
Authority key identifier: 6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D
Certificate issuer: /CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D
Certificate serial: 54AD886895DA818E614705DAF6901B5639A2F9B6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
Manifest number: 53
Signing time: Sat 13 Jun 2026 19:17:08 +0000
Manifest this update: Sat 13 Jun 2026 19:12:08 +0000
Manifest next update: Sun 14 Jun 2026 20:03:08 +0000
Files and hashes: 1: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl (hash: 2en90CWQRvANbSyQD5rt2/jnOEAiz1jaNeP8EnJ2x3w=)
2: 3130332e34342e3137362e302f32332d3233203d3e2034383437.roa (hash: ae7SUgq9OA/NLExuOxlNbHZGMMv09rTQmfolmacGeB4=)
3: 3130332e34342e3137382e302f32332d3233203d3e2034383437.roa (hash: lSEivQpgfyTwattyz5XGR7SBQ4DIJ5haeZxfSmZXjnc=)
4: 34332e3232352e3231362e302f32322d3232203d3e2034383437.roa (hash: j/eV+lOtMaJE7zLazg78nWoyQGsOhGQyTahosxccrn8=)
5: 3130332e34342e3139382e302f32342d3234203d3e2034383030.roa (hash: 6dqpVUqXBgLgk1fCILtRSZoIidor7YhnbVbc5fHfQhk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ad:88:68:95:da:81:8e:61:47:05:da:f6:90:1b:56:39:a2:f9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D
Validity
Not Before: Jun 13 19:12:08 2026 GMT
Not After : Jun 14 20:03:08 2026 GMT
Subject: CN=4CB381D532B9B413916569FDAFEFDE5D6BCCAB2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:f3:b2:04:7c:19:2d:e3:42:71:98:a2:77:
70:f9:5d:85:bd:fc:3d:39:b6:2a:e4:0d:21:45:da:
ca:e8:5f:12:26:eb:ed:38:82:03:2f:8d:25:68:fe:
1a:68:70:b7:52:4b:8c:7d:b5:0b:14:a5:40:d1:54:
32:4f:23:e2:d8:80:3a:ef:f1:c4:4a:c9:db:48:9d:
97:af:28:da:25:bc:82:d5:3c:fd:43:f6:1a:6d:ae:
4d:3a:f7:94:7a:30:d7:cd:97:81:37:c8:53:9f:6d:
59:9f:57:67:61:76:82:e9:81:ca:9f:48:d1:5d:50:
78:99:95:84:82:27:a5:89:f6:3d:9b:9c:40:04:e0:
40:67:f8:00:85:e4:21:e7:13:08:46:d2:af:cd:bc:
7d:3a:b8:95:62:97:b6:65:88:3b:e9:4a:70:90:70:
b4:48:a0:7d:60:85:3f:9d:74:55:42:10:6b:d2:b0:
6b:08:a4:12:10:ea:f3:64:3f:f6:d0:bd:57:ed:d0:
f3:e8:ed:3a:9c:48:0b:f3:77:ad:99:ca:76:53:61:
7d:9d:a6:66:a1:d3:c6:b5:a0:90:54:29:6b:35:c0:
db:c7:35:88:fa:b3:f7:90:f0:5b:73:ea:a4:d2:fd:
3b:c9:65:28:b6:74:4f:37:59:fe:bd:c8:46:c1:d8:
f1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B3:81:D5:32:B9:B4:13:91:65:69:FD:AF:EF:DE:5D:6B:CC:AB:2A
X509v3 Authority Key Identifier:
keyid:6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bb:b7:8c:ac:a9:10:c1:4e:59:9d:a8:40:0f:96:8d:e2:17:
14:9d:e1:45:88:46:37:e8:cc:bc:a0:9a:f3:ef:46:d6:41:e8:
b9:2b:97:35:3b:c7:8a:41:fe:89:69:e5:5a:3d:85:08:bf:60:
77:ea:8b:73:ad:ce:66:8d:9f:63:39:32:79:e5:c2:8a:6f:9d:
cd:c7:52:c8:e9:cb:b3:6b:14:01:57:87:fd:c1:9a:68:7a:4a:
1a:97:1c:cc:f7:c6:cf:94:dd:9b:fa:e6:6a:7d:ec:c4:a5:69:
49:5e:18:92:9f:7b:5c:cc:b9:34:77:6c:90:59:2f:06:cc:68:
d4:2d:2f:9d:94:7f:f3:db:92:f1:1a:89:3a:73:63:d3:c5:c3:
54:c4:5d:8b:27:47:8b:35:49:59:d1:ae:22:d5:b6:65:5f:1c:
92:4e:00:84:1b:08:6f:e9:bb:d2:7a:db:a6:1b:ce:20:ba:9c:
24:84:4d:f8:a9:49:3b:1b:47:33:b5:85:b9:54:77:c9:09:e9:
91:8d:5b:63:cc:1f:e1:03:66:15:e5:cf:63:08:83:0f:b2:cf:
08:ef:14:15:3e:81:c9:4b:5b:4a:9b:e3:a8:6d:69:4f:3e:7b:
8a:09:c1:c2:37:47:04:8f:6e:a7:5f:7b:bb:b5:09:bc:d5:9e:
71:80:70:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:10:12 2026 by rpki-client