
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
File: 6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft (raw, json)
Hash identifier: fpsyZaBwiUJEi7t6UvhTBbSq+WyUlX7HE7lIC0qsIco=
Subject key identifier: D0:9A:A5:B0:4B:85:21:C2:7F:C0:2C:8E:A2:BE:21:66:DF:1C:33:49
Authority key identifier: 6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40
Certificate issuer: /CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
Certificate serial: 41874104C84E9FC8BA80F233BB4BE4A156FD00
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
Manifest number: 6F
Signing time: Wed 29 Jul 2026 14:09:32 +0000
Manifest this update: Wed 29 Jul 2026 14:04:32 +0000
Manifest next update: Thu 30 Jul 2026 15:31:32 +0000
Files and hashes: 1: 6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl (hash: ey8FqCEnpnNPxvyIGXztZLmoQN1JNuRDy7QL1ovp0I0=)
2: 3130332e3230372e3138342e302f32322d3232203d3e203633353330.roa (hash: p4rGdOCdtSi/gskb6wDTowKIkMH8aqSZrt6W9t8cL0g=)
3: 323430303a613561303a3a2f33322d3332203d3e203633353330.roa (hash: uDfGInXKfeUSoNP2hY+TcDh0GI9nZQpiCTQ28Fl51mE=)
4: 34352e3132312e35322e302f32342d3234203d3e203633353330.roa (hash: MNGTiHV2NzvYS3MQd9CssunlWa/3AOgu8HFnKTzLd+I=)
5: 34352e3132312e35352e302f32342d3234203d3e203633353330.roa (hash: uQaKS12tHszrpruD4chXY46WQvO1G4VYxpx2NC0zXpc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl
rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 15:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:87:41:04:c8:4e:9f:c8:ba:80:f2:33:bb:4b:e4:a1:56:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40
Validity
Not Before: Jul 29 14:04:32 2026 GMT
Not After : Jul 30 15:31:32 2026 GMT
Subject: CN=D09AA5B04B8521C27FC02C8EA2BE2166DF1C3349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:de:04:e2:d2:70:a6:4b:ff:06:f2:29:3b:
20:d1:43:fb:1b:9c:ba:80:f3:70:68:e7:4d:1a:0e:
1c:f0:08:2c:5d:40:c1:59:bc:02:6a:43:c2:74:82:
9b:00:ae:9b:7e:ad:e5:59:34:b2:a2:23:03:23:ad:
e7:4c:a6:ea:05:69:2b:a5:71:15:a3:fc:50:25:54:
c6:e6:5a:b0:af:1b:79:e5:54:3d:81:0d:b4:fd:72:
b2:74:87:76:77:71:ab:f1:d2:fd:15:5a:b0:c6:01:
ce:e7:8e:a3:9b:a2:95:fc:30:09:da:d6:31:5a:ae:
6c:7e:c7:44:2c:70:a3:a0:1f:ee:b2:a1:6e:dc:f5:
b0:33:e0:61:f2:c7:80:25:b6:8a:d5:03:7d:fc:58:
11:d5:01:ea:f9:cb:de:b2:48:1c:b7:a0:50:fc:86:
45:c9:93:6b:58:3e:53:76:d2:97:ef:a5:4c:a6:18:
c9:e5:b7:e2:33:19:b4:17:ef:71:fc:16:35:97:42:
35:0b:ac:0d:74:f5:47:32:8a:8d:8b:f5:5d:b2:f7:
bc:4d:ee:dc:5e:9a:63:fd:de:bd:07:4e:e6:02:79:
a6:54:a1:c6:b7:1f:ed:c1:ef:ae:31:af:dd:a5:49:
a3:1a:3c:20:55:1e:87:94:22:a7:fc:65:ed:2d:f0:
35:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9A:A5:B0:4B:85:21:C2:7F:C0:2C:8E:A2:BE:21:66:DF:1C:33:49
X509v3 Authority Key Identifier:
keyid:6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ef:ed:e5:f1:fc:d1:a1:0f:b4:37:da:10:48:ba:0d:d5:88:
59:46:5d:d3:bd:26:df:5b:ae:30:4a:bd:97:32:0c:81:5a:b0:
81:d1:b2:52:45:62:d5:1b:b2:c4:de:5e:42:f7:b9:04:e2:59:
8a:68:9b:29:bb:ed:d9:9e:88:72:58:2f:10:72:0b:d6:46:fa:
0a:33:93:6b:d8:5d:d9:13:dc:46:3f:8b:b6:3e:c0:98:a0:31:
4c:25:38:b8:ed:d5:cf:b8:26:5c:06:23:09:f3:ba:4e:b1:d8:
0f:a0:07:fd:a6:02:17:f3:df:4c:3e:e7:79:48:22:c0:c2:80:
ca:36:ab:89:73:c3:28:7a:09:e0:5b:53:b3:95:6a:32:90:bb:
90:52:d5:d8:74:aa:72:06:1d:c4:d5:1a:40:ed:70:64:22:c2:
9b:c4:8d:09:98:db:93:2a:ca:a6:25:a4:db:6d:55:18:22:94:
d0:a4:97:00:d9:3f:74:22:a2:06:ca:d0:0c:25:f9:db:ef:5f:
76:77:af:f0:e4:c1:84:32:e4:52:1b:68:7a:7a:58:65:8f:dd:
be:45:b4:f8:60:61:5f:cd:e6:93:ae:27:b8:e2:f6:9a:53:e3:
0b:63:b2:52:45:f4:3d:32:04:08:ac:dd:24:70:ac:5e:4a:73:
41:b1:47:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:03:45 2026 by rpki-client