
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft
File: 6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft (raw, json)
Hash identifier: Hw7C8fU16do4UayrPx1DaDrWF17Z+eEDLCqYPaFUrrQ=
Subject key identifier: E3:13:E0:71:48:65:A5:25:21:7B:80:EA:8B:F1:C4:20:B8:D1:D3:02
Authority key identifier: 6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3
Certificate issuer: /CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3
Certificate serial: 39874585BDF2FB932C092BC763E57178A8CAB7C5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft
Manifest number: CB
Signing time: Tue 13 Oct 2026 17:13:11 +0000
Manifest this update: Tue 13 Oct 2026 17:08:11 +0000
Manifest next update: Sat 17 Oct 2026 05:04:11 +0000
Files and hashes: 1: 6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl (hash: pSf6fGQ6BvBdLHEaqnhNMpclSXxNaVXXain5xtLDETk=)
2: 3130332e3137302e3231332e302f32342d3234203d3e20313436383432.roa (hash: xHB51GTEu6E4O2uPU5Q+PFtFl9kWbp78dTmrzsJmvSE=)
3: 3130332e3137302e3231322e302f32342d3234203d3e20313436383432.roa (hash: oIVYiH99ns+ZO8k2snXu2q5AtM9u9S/dgbN/MlAUrrI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl
rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:87:45:85:bd:f2:fb:93:2c:09:2b:c7:63:e5:71:78:a8:ca:b7:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3
Validity
Not Before: Oct 13 17:08:11 2026 GMT
Not After : Oct 17 05:04:11 2026 GMT
Subject: CN=E313E0714865A525217B80EA8BF1C420B8D1D302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:21:83:07:9c:7a:e1:8c:1b:e3:9a:68:b0:
08:e2:a6:93:c6:1b:be:a2:7b:0f:e1:9f:80:dd:10:
4c:fd:a9:38:85:1c:3a:3a:b5:f7:06:3e:0e:da:4a:
4e:68:64:58:55:8f:b0:5a:d1:8f:8b:90:af:e3:aa:
75:99:31:ee:04:24:41:16:2a:44:9e:8c:d6:8b:29:
54:c1:98:23:04:db:5c:ea:50:27:4c:bc:79:24:24:
6f:d8:e1:41:3a:a8:d8:bb:ac:bc:37:ab:a6:9b:10:
5a:7e:73:85:9f:4f:15:a7:d9:b5:03:27:8f:e8:c8:
c7:3b:e9:6c:96:76:4b:1a:02:0c:f8:d0:8c:e7:2b:
74:13:9d:79:77:32:91:a4:37:46:cc:34:5d:5d:77:
69:c6:a1:62:74:10:f8:3e:d9:5f:ef:af:8f:07:fd:
c8:b9:a6:75:11:f7:c6:b3:e5:f3:22:93:b4:25:4a:
0f:6a:e2:8b:10:c1:12:bb:78:9e:60:f7:c8:9d:c8:
7f:c1:d9:a7:18:37:3a:4f:40:c1:2b:0d:23:5f:26:
4c:cf:47:42:b3:5e:0b:54:12:a0:98:db:45:51:88:
8c:c6:78:39:e2:f4:cf:46:8c:50:60:ce:16:69:d9:
79:cf:50:84:a5:78:72:c7:b2:63:ec:f9:3c:f1:d8:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:13:E0:71:48:65:A5:25:21:7B:80:EA:8B:F1:C4:20:B8:D1:D3:02
X509v3 Authority Key Identifier:
keyid:6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a6:b5:db:f5:4e:ac:09:15:22:53:04:75:8c:47:64:70:11:
d2:d6:2e:a5:20:42:45:01:3d:77:50:15:65:b9:f6:87:a4:a8:
28:61:44:92:0e:f1:c4:3e:c2:a7:d9:3c:77:64:89:26:59:33:
27:09:37:bd:1c:97:c5:27:92:07:0a:29:47:f6:3a:88:36:2e:
de:e7:f4:0d:9c:cf:25:20:a7:bc:c9:bb:55:9d:c3:93:19:a2:
61:ec:b1:ba:1b:75:96:1b:d5:72:02:36:bf:b3:fe:0b:91:de:
d7:fb:c6:07:ae:98:e5:9e:51:53:85:58:86:44:e1:17:ef:9d:
86:f4:55:01:7a:19:fb:82:17:d3:b3:98:57:38:78:93:da:d4:
11:01:d1:65:47:ad:f9:56:9d:b9:a2:7d:09:a2:33:14:76:65:
a7:7c:c1:82:15:84:8b:58:d8:91:67:9f:69:f8:b5:3f:e1:65:
93:4f:be:93:64:b4:1a:fe:3e:ca:9b:3e:ff:71:da:a9:9d:5f:
10:73:42:be:01:11:c9:ed:a5:66:ec:81:3e:33:25:c0:87:39:
62:79:de:5b:0b:a4:3b:27:60:c3:3b:c5:6c:c9:02:91:2e:5c:
eb:00:cf:63:2a:cf:43:5a:94:57:0c:3c:18:d3:a0:de:09:bb:
e7:39:62:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:42:49 2026 by rpki-client