
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
File: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft (raw, json)
Hash identifier: P+czjGIG4e7xaZFM/5sOroWQq06nSMlErIndbsb1REs=
Subject key identifier: E4:C7:82:04:7D:5D:6D:33:E4:A2:3E:56:67:4F:F1:9A:70:41:D5:B7
Authority key identifier: 6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C
Certificate issuer: /CN=A91EFAA20000/serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C
Certificate serial: 01205EED51649B7C82D4B503AAA0C916B2F874AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
Manifest number: 48
Signing time: Fri 12 Jun 2026 18:09:34 +0000
Manifest this update: Fri 12 Jun 2026 18:04:34 +0000
Manifest next update: Sat 13 Jun 2026 22:01:34 +0000
Files and hashes: 1: 323430373a343838303a3a2f33322d3332203d3e2030.roa (hash: ijCaVomoD4Gp49iRFc8q+IjUsH7ACZllQmvyC2Sz9cQ=)
2: 3230332e39342e302e302f31392d3139203d3e203137373339.roa (hash: +m3tQEFjHE7EvQqZt5ZFMX5uxgUV2P9Xu/hnIBd3mN4=)
3: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl (hash: ygGqsvs5Jg5CS5ZWzSAa9dDf7cYF/pKzoQ5EBq1CbiM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl
rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:20:5e:ed:51:64:9b:7c:82:d4:b5:03:aa:a0:c9:16:b2:f8:74:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFAA20000, serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C
Validity
Not Before: Jun 12 18:04:34 2026 GMT
Not After : Jun 13 22:01:34 2026 GMT
Subject: CN=E4C782047D5D6D33E4A23E56674FF19A7041D5B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:4a:75:1c:ed:c2:70:2f:5c:00:ce:ec:6c:
53:b5:63:b3:6e:2c:f1:0c:0b:d6:e0:26:cf:fa:ac:
85:1c:f7:0d:51:d2:28:6e:ea:98:e7:28:8e:4e:4e:
07:95:eb:b3:dc:21:52:be:64:c5:da:f0:39:f2:9d:
5b:5e:2d:52:51:bb:e4:13:1c:0d:e3:50:a0:ab:da:
7a:56:cb:39:63:e5:93:b4:d1:f4:3e:95:8b:e0:2d:
1a:b1:e0:ed:c7:f1:12:94:ba:d1:21:7b:dd:a4:64:
be:b9:cb:d1:45:14:0b:f6:51:4d:54:23:69:42:a1:
e9:5f:ae:e7:42:3a:de:b5:93:66:ab:98:77:58:7c:
d7:44:f7:98:9b:1b:59:c6:12:68:0b:31:3d:bf:22:
96:34:61:59:1b:7c:ff:3d:e4:cb:42:01:d0:d1:a3:
bc:fd:27:af:cf:c4:86:a6:e8:5f:6f:a3:ef:74:3b:
a6:88:74:b3:6d:b8:af:e6:37:00:bd:f1:8f:d7:66:
6d:7d:13:d4:da:a5:f3:cd:26:6f:29:0b:bf:d7:14:
89:40:e9:7d:44:4c:74:5b:67:ab:e5:a7:8b:37:c5:
f1:b5:b7:0c:7f:e9:80:93:54:f3:8e:10:18:63:40:
8a:2d:f9:f8:5f:ca:a8:77:54:9a:29:98:29:ab:b4:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C7:82:04:7D:5D:6D:33:E4:A2:3E:56:67:4F:F1:9A:70:41:D5:B7
X509v3 Authority Key Identifier:
keyid:6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:45:a2:2b:38:57:9a:dc:10:16:47:00:ee:82:51:9b:fd:c5:
4d:84:91:ca:a7:32:13:50:9d:2e:cb:0b:ba:df:50:cb:8b:a1:
fe:e8:8d:10:8f:90:50:36:7b:45:a0:6f:48:d4:4d:f9:d4:5b:
fe:94:84:99:10:a4:a2:81:c3:36:7d:14:52:e8:49:57:8f:24:
15:34:e6:5d:f0:6c:83:27:8a:c0:09:da:82:91:b6:41:ce:04:
24:ca:2a:ed:97:3d:b3:7e:e7:b5:b7:bc:99:e9:83:9b:87:59:
b7:b1:17:5e:de:a2:e1:4c:bb:70:83:a1:b9:1c:06:be:2d:9d:
72:72:61:b8:53:53:30:b7:56:d0:fa:f2:57:12:81:38:23:ee:
67:bf:f1:d0:dd:9f:54:d5:55:f7:5d:54:02:21:8e:a6:0a:e4:
16:7d:58:14:e6:f4:bb:5f:5b:6d:d3:9b:1f:fe:51:52:9c:df:
ae:5d:7e:bf:22:ac:61:63:67:36:3d:7c:24:36:9b:14:fd:e2:
e4:82:c5:01:87:fe:a1:11:5d:be:3c:12:0e:e4:16:fc:8c:4b:
dd:1f:be:b3:ad:6b:f2:16:da:88:ab:f2:e6:4b:b4:81:d1:e8:
15:a9:96:f7:ec:6a:b0:97:28:37:01:fd:bb:4b:01:b9:64:70:
fe:45:85:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:18:58 2026 by rpki-client