
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
File: 6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft (raw, json)
Hash identifier: vRHkapu7mnpDRPRgb1DyItpo/FykfQfmA4vMzxA8z4k=
Subject key identifier: 78:28:A0:9A:61:34:8D:C2:38:51:2C:21:56:C3:0E:41:15:A7:AF:D4
Authority key identifier: 6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
Certificate issuer: /CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Certificate serial: 3E6F990A9B4C449169BBFEBEBD2C0DC031B6F2EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
Manifest number: CB
Signing time: Mon 12 Oct 2026 00:11:14 +0000
Manifest this update: Mon 12 Oct 2026 00:06:14 +0000
Manifest next update: Thu 15 Oct 2026 00:16:14 +0000
Files and hashes: 1: 6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl (hash: BCHIDPtGI059o15IG2UKBSx4m5eVROQmKXEbcbefH/k=)
2: 36302e3233322e3132382e302f31372d3232203d3e203234313433.roa (hash: ByH42KhU84BjARWvSf4oIylPRBp7bQn0rgPvnZhkzS8=)
3: 3230322e3133362e34382e302f32322d3234203d3e203234313433.roa (hash: PFrwBt4x6EG8Lnqd7KcG6HCXYGKj6tzV7yZvxGJNUyI=)
4: 3130332e32352e33322e302f32322d3234203d3e203234313433.roa (hash: wf1cTqP/fj3lGgy7YzJ5B8bA4GoRnpkTJeCwl6jOLB0=)
5: 3230322e3133362e34382e302f32302d3234203d3e203234313433.roa (hash: kXzf8yQaI3V74mWAiZJh4sv0ugmfibkN4QVTR1OfWyg=)
6: 36302e3233322e3234342e302f32332d3234203d3e203633353430.roa (hash: sl0jjJ5XC+G90VmpUgx0qGVWokTgyUHCf8PLNvfFe7I=)
7: 36302e3233322e3133322e302f32332d3234203d3e203633353430.roa (hash: apaKvvxupjsq5UR3eCvl0M6COeaUaIt4WSH46noRsyA=)
8: 323430303a626630303a3a2f33322d3634203d3e2030.roa (hash: b8zI6D91Guisd2Zwj5/eJF7bgYI/GaGgO4oEeGNNR5I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 00:16:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:6f:99:0a:9b:4c:44:91:69:bb:fe:be:bd:2c:0d:c0:31:b6:f2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Validity
Not Before: Oct 12 00:06:14 2026 GMT
Not After : Oct 15 00:16:14 2026 GMT
Subject: CN=7828A09A61348DC238512C2156C30E4115A7AFD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1c:b2:02:d5:08:35:ea:21:6e:7a:05:08:b4:
cd:af:98:5d:36:76:1b:cb:1e:a3:f1:64:96:9e:75:
a3:ff:85:a7:18:e2:ff:af:92:5b:57:81:f8:ac:54:
af:18:ef:da:76:3c:a3:c2:92:af:8c:cb:f5:cc:de:
71:51:16:6a:61:98:b1:02:fc:14:d1:2f:82:d4:4d:
04:c2:83:55:92:de:94:1f:8f:2a:46:5e:20:28:85:
12:58:e6:62:3e:cc:84:05:af:25:fa:ae:76:29:fc:
7a:1b:b1:6e:20:d0:4e:b6:5a:91:cd:f2:ad:fa:00:
a8:3f:e4:08:0b:79:55:a6:06:9e:7b:9b:34:5b:37:
48:06:fb:e0:66:03:86:6f:c2:6b:e4:ac:0a:2b:33:
a4:8b:c6:95:6d:1d:38:fe:19:23:6c:47:e5:7d:63:
c8:48:2d:f6:2a:47:a3:13:7e:6a:bf:28:6a:02:ed:
a1:c0:02:be:bc:bf:47:13:06:30:77:2c:6e:95:5a:
87:7f:f8:1d:43:0c:d4:04:f9:4e:f3:10:7e:9a:d2:
7a:63:66:3a:86:fe:06:f6:fe:4b:f7:92:7e:67:a4:
70:b9:91:49:de:9c:d6:4d:5c:4d:34:df:e0:ac:23:
6e:fe:71:1d:bb:20:f0:63:46:cb:03:c3:74:b8:85:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:28:A0:9A:61:34:8D:C2:38:51:2C:21:56:C3:0E:41:15:A7:AF:D4
X509v3 Authority Key Identifier:
keyid:6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:24:34:5f:0b:82:f5:d1:16:da:9c:2a:49:e2:46:a1:92:56:
b1:cb:a9:7e:75:17:17:f4:23:28:c1:67:2e:b9:44:a6:a0:f2:
cf:11:0c:42:53:c1:14:7a:8d:f5:a7:a5:ca:d4:c3:b7:1f:80:
84:0f:94:f5:e7:50:de:4e:7e:8f:3b:64:39:60:13:73:58:8f:
56:ac:22:32:ca:9e:8a:5f:89:86:d5:72:e3:e6:7c:d9:28:5c:
89:28:97:41:d2:6e:9a:40:b1:e3:fe:1e:93:9b:f1:bc:86:db:
a5:70:5c:0c:80:8d:1e:a6:fa:b5:46:cf:a9:9a:60:29:6f:33:
d2:04:de:ea:0b:8b:6d:db:61:5c:fb:43:8d:c7:36:c9:03:5d:
a4:2b:a9:cc:9f:da:a3:9b:9c:0d:d9:ff:1e:aa:9b:50:11:ac:
6e:d5:e0:dd:db:03:df:9f:64:92:9a:ad:a4:aa:23:65:aa:06:
34:e5:b4:8f:9a:eb:3f:e1:89:9f:16:f7:46:b2:82:90:88:c2:
a4:30:23:1e:64:d6:45:33:ce:17:55:fe:e7:30:5b:92:17:b4:
e1:43:cf:91:39:71:31:fd:72:16:51:2f:e5:2c:67:84:da:88:
16:38:37:0e:04:6a:37:a0:ef:89:57:f8:2a:62:07:ff:aa:df:
0f:07:07:58
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUPm+ZCptMRJFpu/6+vSwNwDG28u8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkYxMUNCREFBRDYzQTdCQkM5ODZFRkM3MERENUM5OUJF
MzIzMDFENTAeFw0yNjEwMTIwMDA2MTRaFw0yNjEwMTUwMDE2MTRaMDMxMTAvBgNV
BAMTKDc4MjhBMDlBNjEzNDhEQzIzODUxMkMyMTU2QzMwRTQxMTVBN0FGRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJHLIC1Qg16iFuegUItM2vmF02
dhvLHqPxZJaedaP/hacY4v+vkltXgfisVK8Y79p2PKPCkq+My/XM3nFRFmphmLEC
/BTRL4LUTQTCg1WS3pQfjypGXiAohRJY5mI+zIQFryX6rnYp/HobsW4g0E62WpHN
8q36AKg/5AgLeVWmBp57mzRbN0gG++BmA4ZvwmvkrAorM6SLxpVtHTj+GSNsR+V9
Y8hILfYqR6MTfmq/KGoC7aHAAr68v0cTBjB3LG6VWod/+B1DDNQE+U7zEH6a0npj
ZjqG/gb2/kv3kn5npHC5kUnenNZNXE003+CsI27+cR27IPBjRssDw3S4hQ6tAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUeCigmmE0jcI4USwhVsMOQRWnr9QwHwYDVR0j
BBgwFoAUbxHL2q1jp7vJhu/HDdXJm+MjAdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
Njk4NTA3NTgwNDc5ODk3OS8wLzZGMTFDQkRBQUQ2M0E3QkJDOTg2RUZDNzBERDVD
OTlCRTMyMzAxRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkYxMUNCREFBRDYzQTdCQkM5ODZFRkM3MERENUM5OUJFMzIzMDFENS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTY5ODUwNzU4MDQ3OTg5NzkvMC82RjExQ0JEQUFENjNB
N0JCQzk4NkVGQzcwREQ1Qzk5QkUzMjMwMUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdyQ0XwuC9dEW
2pwqSeJGoZJWscupfnUXF/QjKMFnLrlEpqDyzxEMQlPBFHqN9aelytTDtx+AhA+U
9edQ3k5+jztkOWATc1iPVqwiMsqeil+JhtVy4+Z82ShciSiXQdJumkCx4/4ek5vx
vIbbpXBcDICNHqb6tUbPqZpgKW8z0gTe6guLbdthXPtDjcc2yQNdpCupzJ/ao5uc
Ddn/HqqbUBGsbtXg3dsD359kkpqtpKojZaoGNOW0j5rrP+GJnxb3RrKCkIjCpDAj
HmTWRTPOF1X+5zBbkhe04UPPkTlxMf1yFlEv5SxnhNqIFjg3DgRqN6DviVf4KmIH
/6rfDwcHWA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 03:50:49 2026 by rpki-client