
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
File: 6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft (raw, json)
Hash identifier: QOmBU5PUz8lbY4BIxAQtbNPMXFkJIb/Cfldxv3UICf4=
Subject key identifier: 31:52:1A:FB:2E:6A:7A:25:0A:D4:C8:C2:9B:F1:33:C6:36:73:FA:9D
Authority key identifier: 6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40
Certificate issuer: /CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
Certificate serial: 1529754DEC00B36D699EAC1D9BD005484DD45171
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
Manifest number: 32
Signing time: Sat 13 Jun 2026 11:26:46 +0000
Manifest this update: Sat 13 Jun 2026 11:21:46 +0000
Manifest next update: Sun 14 Jun 2026 13:09:46 +0000
Files and hashes: 1: 34352e3132312e35352e302f32342d3234203d3e203633353330.roa (hash: uQaKS12tHszrpruD4chXY46WQvO1G4VYxpx2NC0zXpc=)
2: 6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl (hash: GwnB5mnh9FYIa9mhL1UNe9TISwsBLMokmtKVrGTl3tA=)
3: 34352e3132312e35322e302f32342d3234203d3e203633353330.roa (hash: MNGTiHV2NzvYS3MQd9CssunlWa/3AOgu8HFnKTzLd+I=)
4: 323430303a613561303a3a2f33322d3332203d3e203633353330.roa (hash: uDfGInXKfeUSoNP2hY+TcDh0GI9nZQpiCTQ28Fl51mE=)
5: 3130332e3230372e3138342e302f32322d3232203d3e203633353330.roa (hash: p4rGdOCdtSi/gskb6wDTowKIkMH8aqSZrt6W9t8cL0g=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl
rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 13:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:29:75:4d:ec:00:b3:6d:69:9e:ac:1d:9b:d0:05:48:4d:d4:51:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
Validity
Not Before: Jun 13 11:21:46 2026 GMT
Not After : Jun 14 13:09:46 2026 GMT
Subject: CN=31521AFB2E6A7A250AD4C8C29BF133C63673FA9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:54:f1:65:c4:d6:a1:11:8b:e2:8f:31:8a:
42:5e:8b:16:d7:34:4c:29:bd:52:a4:07:c3:39:11:
7b:28:60:a7:7f:15:1d:9c:59:a0:34:63:89:b9:fa:
68:fb:f9:af:00:4e:ae:37:60:ef:32:1b:2a:b9:b1:
bf:09:15:16:cd:35:b6:cf:bb:9a:1e:bb:fe:94:f2:
28:93:81:cd:79:7f:b9:f7:6a:0c:67:c9:5e:c3:76:
d0:ae:3b:d9:e9:2c:87:33:22:e9:a1:38:fe:c0:01:
ec:ac:28:d9:6c:7d:54:1e:11:7a:7c:73:03:64:a2:
2d:60:49:9f:fb:ec:d2:5b:36:3b:32:ee:69:dc:60:
4a:b5:d7:67:08:12:45:20:ef:c5:36:c7:c8:08:c2:
16:cc:76:ef:dd:96:19:13:f7:7c:79:77:40:86:c4:
e0:8a:6e:6a:74:63:ce:b9:9d:45:26:42:80:07:af:
db:83:21:7f:dc:d8:c5:e8:cb:c4:10:09:72:12:bb:
b2:09:ce:b3:2f:68:47:cd:6f:8e:16:b7:d8:e9:46:
c0:a3:13:d0:34:d4:23:c5:29:67:0b:94:71:88:4e:
1c:9f:c5:34:9c:ca:dc:64:be:ac:49:68:33:e2:3c:
8f:cc:22:c8:c6:04:6f:0d:cc:c9:22:8a:3e:85:f5:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:52:1A:FB:2E:6A:7A:25:0A:D4:C8:C2:9B:F1:33:C6:36:73:FA:9D
X509v3 Authority Key Identifier:
keyid:6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:13:ad:11:0e:25:14:4c:12:bd:20:23:22:77:5a:23:12:ab:
b4:e3:b9:fa:65:8a:8a:20:20:04:86:f0:c1:fc:7d:14:e5:20:
16:0e:2d:da:7f:53:14:5c:10:71:ec:fb:9b:f6:85:70:b2:cc:
c2:c7:2b:60:7c:47:2f:2a:6c:be:47:a3:44:41:b9:72:5a:17:
bd:ea:1b:b1:ea:b0:4b:fe:74:58:b3:64:58:8b:03:23:3a:c9:
5e:6f:fd:ae:d7:ba:3f:a2:ca:8e:f4:60:43:09:7c:17:2d:a1:
a3:cf:3a:13:c5:7d:56:ed:1e:5d:fd:fd:e7:a9:16:39:48:b0:
e8:56:58:c4:22:cb:f7:5f:63:8a:06:2b:69:08:fa:5c:d4:c1:
7e:b5:3c:2e:32:ca:ec:94:db:64:85:97:8f:54:7a:7e:b9:eb:
37:8c:88:b1:df:d0:83:01:43:b4:77:30:7d:cc:8a:a6:56:3e:
a8:c0:da:04:98:c9:33:d8:e3:c1:d3:55:c8:b5:17:38:a5:60:
1f:ec:2b:f8:e1:28:bc:f2:64:ee:c3:7c:e6:86:d4:0b:1c:1b:
98:87:1b:30:30:75:e0:21:de:d4:ac:ba:4a:cb:22:60:1c:d2:
a2:20:7d:72:05:02:cb:c3:78:20:31:82:fb:52:01:86:16:40:
ec:53:58:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:06 2026 by rpki-client