
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
File: 060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft (raw, json)
Hash identifier: 0KH6JO4XhPbTc0vCL92LqQCqgAkYJx+mf7/RIJ+n4Wg=
Subject key identifier: A0:BF:6E:58:F9:65:DC:C2:62:B3:BB:91:71:D4:4A:8A:F2:88:6F:41
Authority key identifier: 06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD
Certificate issuer: /CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
Certificate serial: 18F2DA17A63773410A0DE6EAE497DB4ABEFDD5B4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
Manifest number: B3
Signing time: Mon 21 Sep 2026 09:48:00 +0000
Manifest this update: Mon 21 Sep 2026 09:43:00 +0000
Manifest next update: Thu 24 Sep 2026 19:10:00 +0000
Files and hashes: 1: 323430343a653738303a3a2f33322d3332203d3e2030.roa (hash: jDt2YO5IfWb4E+JvZ4HL3Mb4PviL245jOkb90zp1nDg=)
2: 3135372e3131392e3137322e302f32322d3232203d3e2034383437.roa (hash: nfHPWryodoQGAWIQEwiQs1RdM4fk6gLb4mCgk+4BsD4=)
3: 3130312e34392e3132382e302f31382d3138203d3e2030.roa (hash: EQ/aHDyPfGrqHqi7zcwJ4BpwFk8LfHUqOf3EobqjPg4=)
4: 060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl (hash: JDdyLkVsRUFQ29AESgf3kvniuVVmpNpBGPzkfT5JcY0=)
5: 3130332e3231362e34302e302f32322d3232203d3e2030.roa (hash: CJGUWXnox0zuB6o/j+gb69TVgAVyeUqTs1YSv3rOyk4=)
6: 3130312e34392e3134382e302f32332d3233203d3e2034383437.roa (hash: hD8pipimoNbXJuFtKR22JqYH5vAkWdps2g2kY8PbheI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl
rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 09:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:f2:da:17:a6:37:73:41:0a:0d:e6:ea:e4:97:db:4a:be:fd:d5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
Validity
Not Before: Sep 21 09:43:00 2026 GMT
Not After : Sep 24 19:10:00 2026 GMT
Subject: CN=A0BF6E58F965DCC262B3BB9171D44A8AF2886F41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:14:9b:e6:d9:da:38:fb:34:f4:3c:b9:3d:06:
51:b5:e6:c0:cc:48:e9:51:bf:22:45:7a:a8:77:0d:
08:c4:59:1f:fa:2e:c4:04:5d:c2:bd:e1:de:6f:59:
26:f3:95:cd:97:fd:5e:b9:7a:01:45:bb:dc:e8:e1:
3e:8c:cd:43:7f:b1:0a:6b:16:2a:9d:a9:5e:b9:30:
e7:4b:55:b6:08:14:21:36:99:27:31:f1:31:16:d6:
fb:2d:30:f2:5b:e9:cd:16:6f:11:bc:a9:31:f2:89:
a4:7e:2d:1b:5c:a1:57:de:4b:c6:73:cc:22:c5:70:
ce:00:2f:c3:28:67:96:f9:6e:81:80:77:16:f8:22:
ff:5e:ac:19:53:66:31:85:37:33:18:61:0d:25:9c:
3a:d3:a6:65:f1:0b:fc:da:7b:3d:e3:3b:ea:d9:9e:
db:50:70:63:91:41:73:8d:09:17:1c:65:05:91:65:
64:4a:3c:78:38:72:16:20:9c:5f:77:84:a6:de:ba:
ba:c6:68:c9:bb:3d:9b:e6:87:0a:8e:4a:10:bd:f1:
81:cf:5d:65:28:39:5d:a0:94:7c:51:43:04:67:54:
4c:51:ff:9c:33:32:db:06:9b:56:98:20:80:f5:4a:
74:d6:6f:c7:f7:a7:88:e9:f2:b2:6b:fc:29:aa:11:
e9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BF:6E:58:F9:65:DC:C2:62:B3:BB:91:71:D4:4A:8A:F2:88:6F:41
X509v3 Authority Key Identifier:
keyid:06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9b:90:2f:ba:fe:48:e5:b4:0b:15:ad:6e:d6:40:2e:8f:bf:
1f:81:d5:69:63:00:8d:ac:ff:b2:e4:80:69:16:c1:7d:59:7d:
59:f9:5e:10:9e:7a:60:a7:d5:37:c8:b2:a5:71:7f:86:68:8e:
94:4a:95:23:18:a0:3a:5a:ab:cd:d3:f0:9e:32:a0:2f:d2:99:
57:3d:b9:b6:68:09:66:58:c0:48:48:dc:16:ad:00:db:12:d1:
54:c9:62:4a:8b:f8:db:4d:d8:e2:f5:53:0e:6b:77:17:2c:b0:
36:38:54:e5:d3:bb:18:f4:7f:5a:7d:d1:72:84:78:58:65:47:
14:fe:49:4a:83:74:35:78:da:91:b3:3f:85:e3:94:81:14:d4:
a7:ea:59:6d:97:61:c7:85:32:8c:b4:41:a1:e6:e7:5e:17:07:
a0:14:54:41:f9:78:2c:6d:2c:94:23:23:7f:dc:50:f3:84:f8:
36:d3:8b:1f:6e:e8:08:84:52:04:99:ec:3c:c2:d1:1c:07:2a:
f6:8c:73:26:2f:db:c1:4e:b4:9a:4f:3c:af:27:41:7c:d5:53:
81:c4:be:17:e4:9f:2c:05:d1:f3:70:f5:04:87:0f:9f:26:26:
75:2b:77:49:ad:df:51:b6:d5:81:12:36:e5:f0:36:99:52:50:
03:66:ac:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:12:13 2026 by rpki-client