
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft
File: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft (raw, json)
Hash identifier: 4+zfViIQBwNcjvzkDW6WuAEGmdIbOY4jX7yPoF+AVyA=
Subject key identifier: 09:83:3F:FF:4D:25:D2:C9:F6:2B:DF:55:6F:BA:A1:4A:CB:93:32:69
Authority key identifier: C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9
Certificate issuer: /CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9
Certificate serial: 2AC2015818944A384B087CDB007F2D1C8999341A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft
Manifest number: 6C
Signing time: Wed 29 Jul 2026 15:54:44 +0000
Manifest this update: Wed 29 Jul 2026 15:49:44 +0000
Manifest next update: Thu 30 Jul 2026 19:29:44 +0000
Files and hashes: 1: 3130332e37392e3230302e302f32342d3234203d3e203435303937.roa (hash: ePWQoM3aeCm3uf1LHhEKaNoDgJe2ebrtzpmyIPLXd5M=)
2: 3130332e37392e3230302e302f32322d3232203d3e2034383038.roa (hash: APFl3/VEGU3uKY1lny4KZPICZS5dxJc22McQr93KBPM=)
3: C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl (hash: s0SRNbr4pp9wzKdID6n2mQGnkuxFQIg8tztD51mYK1U=)
4: 3131372e37342e36382e302f32322d3232203d3e203435303937.roa (hash: EnRpv3YOLwd2iarS7W5bMMrMvnUxbsEcDpCI1puQX/A=)
5: 3130332e37392e3230302e302f32322d3232203d3e2034383437.roa (hash: vSnWVuEwzTmKzadgWSSoYk+Hxc/agMPrJSi2cP91JNI=)
6: 3130332e37392e3230302e302f32322d3232203d3e203435303937.roa (hash: RethAsNKIp86cUt7gCLFOUFMJ4L4vZ/vrMsnox9e1kY=)
7: 3131372e37342e36342e302f32302d3230203d3e2034383337.roa (hash: iJ7pZk0Q9LvhxSCiQ+b1Lkwv3MycgFRpQFDTaopNPMA=)
8: 3130332e37392e3230312e302f32342d3234203d3e203435303937.roa (hash: aivRIdhMnKvMATv9jOY3wLPo8yVba4ITd7pNsvuJUQk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl
rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 19:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c2:01:58:18:94:4a:38:4b:08:7c:db:00:7f:2d:1c:89:99:34:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9
Validity
Not Before: Jul 29 15:49:44 2026 GMT
Not After : Jul 30 19:29:44 2026 GMT
Subject: CN=09833FFF4D25D2C9F62BDF556FBAA14ACB933269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:89:6e:27:6e:9d:a2:c3:95:d8:af:bd:d9:
02:5e:2b:2b:3e:b1:18:ac:a8:6f:a5:b3:30:78:02:
3a:7e:b8:e4:35:fc:08:5d:96:f8:ec:99:c9:4b:78:
cb:5f:40:e9:37:02:f4:7a:ba:ad:2e:6b:97:9d:a5:
7c:79:8f:0a:42:96:67:13:53:f1:46:0b:79:fe:11:
41:aa:99:8f:14:d4:45:52:80:b3:46:f5:6e:7d:68:
e2:0b:29:9b:52:f6:91:c2:c7:c4:81:97:c0:a6:1a:
4f:60:e0:55:5b:cb:e9:2b:85:c6:b5:45:4e:06:ae:
25:8c:6e:b1:3b:ad:c8:68:9d:0d:68:0f:09:29:48:
85:23:60:5b:cb:bc:72:4a:58:01:6c:b6:ce:bc:71:
ba:bc:82:ab:f9:bb:a9:05:93:4b:1d:db:a6:52:01:
94:0b:2e:c7:b1:65:64:46:9f:31:fa:d2:29:94:a9:
48:54:7c:87:5e:3f:b6:62:b9:87:8d:02:e2:ac:fc:
11:a0:0c:ca:b6:8f:2c:1a:76:f3:6f:a7:e4:6c:91:
13:68:3c:b9:94:ae:03:ad:d1:d3:5b:85:e2:86:b1:
99:35:5d:ab:17:c1:e6:e0:e2:12:fc:bd:32:af:3f:
67:81:8c:fe:15:b6:3e:f1:f5:c4:ce:8b:ff:49:c4:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:83:3F:FF:4D:25:D2:C9:F6:2B:DF:55:6F:BA:A1:4A:CB:93:32:69
X509v3 Authority Key Identifier:
keyid:C2:29:0F:2F:61:59:F1:C8:C1:46:AE:9C:64:69:BF:BC:48:1C:C7:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106516114969460755/0/C2290F2F6159F1C8C146AE9C6469BFBC481CC7D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:df:d7:96:a5:00:f2:99:e5:29:33:11:66:5b:0a:11:65:31:
f7:17:36:dd:89:25:da:23:c5:11:a1:bd:6c:fc:e6:35:90:01:
7d:be:f8:e2:0e:2a:9b:6a:1e:c0:0c:3b:12:de:5c:39:eb:b2:
85:8c:d9:29:16:ec:e5:48:b4:ec:55:0e:df:62:59:1a:95:89:
ed:db:89:36:bc:38:4a:2b:0d:64:c6:81:b7:58:d8:6c:22:23:
04:67:44:31:4d:ae:21:b5:b9:1e:4d:64:93:a0:14:01:17:89:
57:35:5d:aa:e8:f4:62:67:09:66:ec:8f:29:f7:08:61:32:73:
d7:db:50:9b:90:d1:dc:0e:ba:ca:05:fb:13:d8:e9:50:bf:74:
cd:e5:e1:41:71:9d:ea:bd:a5:15:62:07:0a:2b:a7:34:53:1f:
27:dd:60:5d:70:8d:b8:d6:eb:9c:fd:e2:2c:fc:47:2c:55:c7:
91:59:1f:22:cd:ec:fc:78:b8:90:ef:c0:d2:a4:16:90:c3:c3:
c0:87:0d:23:23:6b:f7:76:65:1b:02:54:f6:26:fb:11:bc:01:
3e:4f:13:17:1c:76:c1:52:06:ec:12:f1:4e:cb:2d:c2:94:76:
87:e2:f9:6d:f2:20:bb:59:e0:4e:b1:83:c0:d0:4f:0a:68:df:
a9:ac:da:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:04:25 2026 by rpki-client