
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft
File: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft (raw, json)
Hash identifier: RCTHdJZ5bkuawzN/S5xgGdYPMEhOTfkYsasi0rMlUgg=
Subject key identifier: FE:B0:2C:55:E3:1E:76:09:46:51:3F:2D:4B:B0:DB:05:61:16:52:A6
Authority key identifier: 2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B
Certificate issuer: /CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B
Certificate serial: 6DCB0AC349601F56121B65F464620235A405C8B7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft
Manifest number: 52
Signing time: Sat 13 Jun 2026 12:01:48 +0000
Manifest this update: Sat 13 Jun 2026 11:56:48 +0000
Manifest next update: Sun 14 Jun 2026 15:28:48 +0000
Files and hashes: 1: 323430313a643932303a3a2f32382d313238203d3e203633373138.roa (hash: wqKyq4CT7ZBhjVas93N8o2f4ItHVxa4rAXSDsabJnzU=)
2: 3130332e3130352e3232302e302f32322d3332203d3e203633373138.roa (hash: UoMxgKtAhyszzVVZnBqAdDpPta7+jHjGEznfu4FR8Iw=)
3: 3138302e3137382e3235322e302f32322d3332203d3e2034383337.roa (hash: YA2y5WDqbbqXlH3plbuoacVKmNM5TSdO8J/ShSoYXBU=)
4: 2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl (hash: xv0YbcH/DXg1w4A9S2dhKrSiY6lF5tBIgD+uayu+1T8=)
5: 3138302e3137382e3139322e302f31382d3332203d3e203633373138.roa (hash: p/FOxsVY6yCDcHHnlzBhiEH5nnmslBPLMVOfQrX5mgI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 15:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:cb:0a:c3:49:60:1f:56:12:1b:65:f4:64:62:02:35:a4:05:c8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B
Validity
Not Before: Jun 13 11:56:48 2026 GMT
Not After : Jun 14 15:28:48 2026 GMT
Subject: CN=FEB02C55E31E760946513F2D4BB0DB05611652A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:1f:bc:66:a8:8e:11:bb:ec:7c:09:97:e2:
67:41:f5:6c:ad:54:50:d6:c0:76:2e:3e:c0:dd:bb:
8c:64:a4:7d:5a:08:5f:f6:be:40:1a:b0:36:49:d4:
77:02:e1:a7:fd:1e:b6:61:ad:94:c5:1c:06:96:c9:
69:5f:f7:56:50:ed:ae:8d:35:f5:c2:88:37:a8:20:
97:07:44:53:0d:2a:1e:28:f8:a0:90:87:a7:69:38:
81:d4:6e:2a:c1:f3:da:9e:3b:01:0d:47:73:f5:ff:
50:0d:2b:07:bf:5d:77:0f:75:6c:82:2e:dc:2b:ac:
15:e9:c5:12:10:59:19:fe:f6:7f:ad:4d:72:60:8a:
e8:d0:1d:67:c9:86:00:8f:c5:81:04:ab:15:02:e2:
0e:57:03:31:3c:f3:27:11:78:3b:56:95:da:2d:55:
68:1b:f6:dd:fa:86:85:9b:1d:58:8a:a1:10:51:6f:
82:72:ad:14:bc:0b:3c:64:8c:9b:61:2d:0f:03:3a:
ae:3f:74:4b:3c:58:61:3e:58:08:2d:c3:af:17:58:
95:63:23:25:b9:57:3d:4f:1c:c8:90:d9:6e:a7:77:
6f:67:b1:62:e7:3c:cf:3f:b1:4c:81:a6:90:ef:46:
4b:35:5d:72:10:71:76:d7:32:73:53:e2:b8:c1:39:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B0:2C:55:E3:1E:76:09:46:51:3F:2D:4B:B0:DB:05:61:16:52:A6
X509v3 Authority Key Identifier:
keyid:2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:29:01:eb:d8:d4:e5:22:f2:be:c8:b7:4b:4c:e4:0d:48:5a:
9e:e9:3e:db:cf:8a:a1:12:a0:26:02:31:1e:e0:f5:2f:4f:45:
af:83:4b:0f:7a:55:8f:5f:ca:3c:c8:6a:3c:bd:7b:48:89:c8:
fc:51:5f:4a:79:13:3f:79:f8:c8:a4:27:38:ae:71:ce:0b:6c:
2e:08:94:41:6c:75:34:e1:77:b7:d8:b4:ff:74:d4:3c:9a:70:
20:35:05:16:8c:42:21:0c:6c:ef:65:ef:10:a0:f6:21:65:bd:
67:a7:f1:cf:88:b2:4e:92:41:c4:ad:ad:d6:a1:b5:42:29:74:
fc:90:df:d5:49:ce:9a:3a:04:03:b5:ac:7f:24:30:b3:3b:0e:
e3:78:0c:45:ec:65:b5:0c:9b:62:3d:97:3c:da:89:a5:24:59:
84:f8:1b:69:8d:65:26:26:c4:ea:68:7d:83:dc:60:4a:39:26:
bf:52:b9:e8:eb:a4:a7:0b:1d:0e:34:1b:44:86:6a:de:f3:eb:
19:95:13:72:1f:aa:8e:98:f0:fc:95:26:1a:20:c9:f0:04:27:
28:ed:85:c1:90:d9:67:01:96:87:53:5f:3d:97:de:92:27:5a:
ca:56:88:ca:6a:e1:ff:3d:f4:83:68:5c:48:0e:2f:c2:f2:76:
a0:f5:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:12:40 2026 by rpki-client