
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
File: 060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft (raw, json)
Hash identifier: M/WARHU2BNnCoe3VcN5C7h2qkyE2L3hHUoZwM2jPoNk=
Subject key identifier: BF:9C:0C:0D:FC:0C:5B:18:C7:2E:23:D3:B1:8E:DE:5F:9D:FC:E7:E1
Authority key identifier: 06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD
Certificate issuer: /CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
Certificate serial: 18A9B8FA86A9B81357A7CDBD657FB89B0D5743A4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
Manifest number: 80
Signing time: Wed 29 Jul 2026 15:29:41 +0000
Manifest this update: Wed 29 Jul 2026 15:24:41 +0000
Manifest next update: Thu 30 Jul 2026 15:38:41 +0000
Files and hashes: 1: 060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl (hash: v4Cw7NLxBtTkhnyeXvfI+0q95EobxbN5n/zET2qG+RA=)
2: 3135372e3131392e3137322e302f32322d3232203d3e2034383437.roa (hash: nfHPWryodoQGAWIQEwiQs1RdM4fk6gLb4mCgk+4BsD4=)
3: 3130312e34392e3134382e302f32332d3233203d3e2034383437.roa (hash: hD8pipimoNbXJuFtKR22JqYH5vAkWdps2g2kY8PbheI=)
4: 323430343a653738303a3a2f33322d3332203d3e2030.roa (hash: jDt2YO5IfWb4E+JvZ4HL3Mb4PviL245jOkb90zp1nDg=)
5: 3130332e3231362e34302e302f32322d3232203d3e2030.roa (hash: CJGUWXnox0zuB6o/j+gb69TVgAVyeUqTs1YSv3rOyk4=)
6: 3130312e34392e3132382e302f31382d3138203d3e2030.roa (hash: EQ/aHDyPfGrqHqi7zcwJ4BpwFk8LfHUqOf3EobqjPg4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl
rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 15:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:a9:b8:fa:86:a9:b8:13:57:a7:cd:bd:65:7f:b8:9b:0d:57:43:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
Validity
Not Before: Jul 29 15:24:41 2026 GMT
Not After : Jul 30 15:38:41 2026 GMT
Subject: CN=BF9C0C0DFC0C5B18C72E23D3B18EDE5F9DFCE7E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:ee:3b:3e:03:da:e3:5c:e3:95:ec:1b:41:
71:04:c5:55:d8:f9:7b:c1:ea:40:f1:69:61:fd:cd:
84:25:f4:bf:f1:d7:34:8c:24:ae:0c:84:ac:a7:bc:
8e:65:d9:50:6a:6f:d3:69:2b:a0:ab:d4:c8:c8:2a:
a0:c4:2d:12:90:9c:87:e7:17:d2:23:42:d9:70:6a:
93:7c:c3:06:7b:72:20:ac:4b:78:fe:d9:f3:86:db:
74:e3:42:13:fe:8a:9e:5e:e8:d7:8e:44:df:cd:a0:
a1:23:8a:50:6b:cf:1f:de:d4:dc:65:3b:31:5c:d5:
37:64:a3:92:0b:62:67:31:37:87:94:80:87:e4:ae:
eb:6f:a7:75:f0:ba:02:42:65:1f:90:5a:99:e5:32:
b6:a9:b1:11:97:4d:8a:e5:61:2c:5c:68:01:a8:f0:
ce:38:1f:d8:7f:57:5f:76:af:25:c3:52:bb:f6:30:
5d:8d:d8:9e:2c:30:49:1d:17:0c:41:6c:84:b4:50:
d6:da:19:81:cb:f3:48:7c:0d:af:b6:9e:14:c9:0f:
b5:46:6e:a1:99:1c:03:50:cd:2a:18:64:b2:8c:0c:
5c:b4:07:83:fb:dd:95:1f:ef:82:89:22:bb:49:f3:
4b:67:08:30:b6:0a:0c:84:70:d1:e0:5c:51:f4:40:
17:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9C:0C:0D:FC:0C:5B:18:C7:2E:23:D3:B1:8E:DE:5F:9D:FC:E7:E1
X509v3 Authority Key Identifier:
keyid:06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d7:9e:4a:82:4d:10:71:b1:7c:2b:f5:00:c9:64:b9:99:63:
b2:cd:b4:bf:b5:46:18:9f:79:cb:d3:84:60:00:82:b2:17:0c:
e4:12:ae:56:3f:fc:c5:96:c5:e2:65:af:5b:22:99:bc:00:a9:
ce:e9:28:bd:88:1a:30:d0:1a:47:46:3e:54:c4:31:23:e3:ba:
5d:27:ee:f0:e0:2f:4d:c3:6d:3b:2d:6b:0a:2e:56:0f:e9:4c:
32:a5:28:66:b8:f0:e6:29:21:2d:75:a8:44:11:f1:9b:66:97:
43:01:4e:18:29:78:22:42:25:2e:cd:39:ea:6f:66:7b:ca:4c:
6e:4c:c3:ee:f4:af:78:f8:8b:e4:14:c0:84:2f:63:fe:e4:9e:
20:e0:5d:31:67:1b:ad:06:fb:a9:69:d1:af:8e:d4:12:d6:75:
95:4a:d5:1c:13:25:c0:c7:ac:41:8c:10:fe:5a:7e:ba:f5:a2:
00:f3:8d:bd:8a:89:38:48:ee:7e:73:1d:83:08:8e:e7:59:ba:
db:15:54:9b:5d:09:67:2e:c1:c4:e5:1b:f3:67:74:33:a4:08:
6a:64:94:2c:c8:df:85:72:9b:5d:e6:7e:de:92:cd:9a:d2:13:
b4:8b:eb:c6:4f:78:dd:59:92:5e:37:fa:eb:18:a3:94:32:ef:
19:80:08:96
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUGKm4+oapuBNXp829ZX+4mw1XQ6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYwNjc3RkZEQjhGQTNDNkM2REMyRjE4RURGN0JFREEw
NjVGQjhBRDAeFw0yNjA3MjkxNTI0NDFaFw0yNjA3MzAxNTM4NDFaMDMxMTAvBgNV
BAMTKEJGOUMwQzBERkMwQzVCMThDNzJFMjNEM0IxOEVERTVGOURGQ0U3RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2u47PgPa41zjlewbQXEExVXY
+XvB6kDxaWH9zYQl9L/x1zSMJK4MhKynvI5l2VBqb9NpK6Cr1MjIKqDELRKQnIfn
F9IjQtlwapN8wwZ7ciCsS3j+2fOG23TjQhP+ip5e6NeORN/NoKEjilBrzx/e1Nxl
OzFc1Tdko5ILYmcxN4eUgIfkrutvp3XwugJCZR+QWpnlMrapsRGXTYrlYSxcaAGo
8M44H9h/V192ryXDUrv2MF2N2J4sMEkdFwxBbIS0UNbaGYHL80h8Da+2nhTJD7VG
bqGZHANQzSoYZLKMDFy0B4P73ZUf74KJIrtJ80tnCDC2CgyEcNHgXFH0QBf1AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUv5wMDfwMWxjHLiPTsY7eX5385+EwHwYDVR0j
BBgwFoAUBgZ3/9uPo8bG3C8Y7fe+2gZfuK0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MDk5MTg4MDU0OTYyOTk1NS8wLzA2MDY3N0ZGREI4RkEzQzZDNkRDMkYxOEVERjdC
RURBMDY1RkI4QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDYwNjc3RkZEQjhGQTNDNkM2REMyRjE4RURGN0JFREEwNjVGQjhBRC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDA5OTE4ODA1NDk2Mjk5NTUvMC8wNjA2NzdGRkRCOEZB
M0M2QzZEQzJGMThFREY3QkVEQTA2NUZCOEFELm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu9eeSoJNEHGx
fCv1AMlkuZljss20v7VGGJ95y9OEYACCshcM5BKuVj/8xZbF4mWvWyKZvACpzuko
vYgaMNAaR0Y+VMQxI+O6XSfu8OAvTcNtOy1rCi5WD+lMMqUoZrjw5ikhLXWoRBHx
m2aXQwFOGCl4IkIlLs056m9me8pMbkzD7vSvePiL5BTAhC9j/uSeIOBdMWcbrQb7
qWnRr47UEtZ1lUrVHBMlwMesQYwQ/lp+uvWiAPONvYqJOEjufnMdgwiO51m62xVU
m10JZy7BxOUb82d0M6QIamSULMjfhXKbXeZ+3pLNmtITtIvrxk943VmSXjf66xij
lDLvGYAIlg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 22:59:34 2026 by rpki-client