
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
File: 6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft (raw, json)
Hash identifier: yKsdzvALv9y80mQBil3eC2QMm/1rWdXvQLzKlXB4Ycw=
Subject key identifier: 1B:EB:EE:5A:CB:35:D3:3C:3F:16:5D:BC:71:20:D9:64:A4:F8:51:0A
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 5270DDF0449EB52E17BBDC019784C678EDB93AE8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
Manifest number: 97
Signing time: Tue 12 May 2026 20:55:45 +0000
Manifest this update: Tue 12 May 2026 20:50:45 +0000
Manifest next update: Wed 13 May 2026 21:16:45 +0000
Files and hashes: 1: 3132302e34352e302e302f31362d3136203d3e203138313138.roa (hash: C4rcAlSgZV7754y5uPyyWtQVibM3t4nZdIrXFXZoZ7Q=)
2: 3231392e37322e3136302e302f32342d3234203d3e20333938373034.roa (hash: d/cQSMYNBX/wZD+QYHNeyKRe0x+03uT3D/Oy6lO4iy8=)
3: 3132302e34372e302e302f31362d3136203d3e203138313138.roa (hash: Ft5CLZw9t2CRUNmavoaGZC/hKN+eHg2+xR6CvXnjcRI=)
4: 3231392e37322e3136302e302f32342d3234203d3e203138313138.roa (hash: 8dtxM9VRFS14jXgTL0jlExD+rRZPerBYVc3WFemUOQQ=)
5: 3231392e37322e302e302f31362d3136203d3e2034383437.roa (hash: E35Ak8kryIUI2zOXyOabRVR/vhDEn+uGa0zCN0KdzcM=)
6: 3132302e34352e302e302f31362d3136203d3e2034383437.roa (hash: e3k7Iz2AbcrOnzEC7lCU4UO8ip/XOhRamxgrg+OBUAg=)
7: 6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl (hash: IbI3ILnUgckHuSLyDC1fGzKufjUDvgZotbKQx4W7mNw=)
8: 3231392e37322e302e302f31362d3136203d3e203138313138.roa (hash: 3fGts9fS3mm4peYPa5y25NpoXBF5DOH88ZO6sDHG1lc=)
9: 3132302e34372e302e302f31362d3136203d3e2034383437.roa (hash: lv7hLgB4DhaCLKjg4xf3dfIw4sVemT9lRXa3jqlxqXA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:70:dd:f0:44:9e:b5:2e:17:bb:dc:01:97:84:c6:78:ed:b9:3a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: May 12 20:50:45 2026 GMT
Not After : May 13 21:16:45 2026 GMT
Subject: CN=1BEBEE5ACB35D33C3F165DBC7120D964A4F8510A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:4b:f7:6b:00:41:49:fe:4c:39:4c:51:8b:
22:36:74:7f:ad:84:d9:dc:9a:41:79:18:02:82:23:
ef:18:de:26:b0:63:85:9c:f4:38:b8:21:81:3e:44:
e0:dc:02:2a:e5:03:12:75:2a:86:48:7c:6b:e8:85:
75:96:29:2c:85:dc:a0:b4:18:f4:fa:1f:ce:a7:44:
47:fa:84:26:14:d4:d9:bb:71:ee:13:e1:24:de:02:
c3:50:dd:36:2e:d6:65:1f:41:f9:fe:a3:48:af:37:
1c:cc:12:dd:cd:57:12:3a:d0:fa:82:18:26:2e:30:
bf:7b:f9:bd:8c:99:46:5d:b7:d0:f0:f3:07:80:41:
b5:00:9d:51:3b:54:03:2a:a9:f1:20:c8:66:60:20:
cd:0a:77:31:03:72:3c:96:7e:95:48:3b:ff:ad:4a:
e9:cf:56:80:51:b0:e5:b9:6a:eb:88:07:39:51:7b:
2c:4e:25:ba:39:84:ca:ff:96:ff:f4:d5:9b:b2:27:
7d:e4:b2:0b:ef:b7:bf:13:a1:5d:b5:87:a4:4c:e3:
56:21:ff:07:28:b0:e9:2b:ac:59:9b:94:ca:4e:60:
d1:fb:18:09:cc:bf:9b:31:e9:e3:55:43:a0:9a:2c:
68:25:ee:5e:a8:f2:60:3b:67:e5:e1:24:c6:c0:14:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EB:EE:5A:CB:35:D3:3C:3F:16:5D:BC:71:20:D9:64:A4:F8:51:0A
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:24:7f:15:fb:ec:19:df:2a:17:02:ee:62:0a:7f:44:86:0b:
d7:be:8c:39:2f:4d:50:9c:2c:b5:d4:77:65:93:cb:5e:93:21:
56:7f:5f:2a:72:a1:3d:48:57:02:e3:a4:9a:03:80:fd:02:69:
58:c6:1c:cb:51:2b:3a:3f:9a:ea:2e:47:d6:27:8a:17:1e:37:
03:76:9e:b5:fb:d8:1b:7a:df:7b:9c:82:66:f1:1a:05:1f:62:
7e:5a:8b:d1:76:55:68:1e:57:48:82:f6:62:74:ab:4c:f1:09:
c2:f3:45:bf:48:72:6c:b0:c5:3f:fe:05:8f:9b:f2:84:d9:71:
35:62:ce:ea:ff:93:9f:d8:a5:2a:06:16:91:9b:65:44:cc:11:
c1:52:16:3e:b9:05:85:09:0d:69:f3:af:bf:22:46:2c:d2:18:
dc:4f:55:a5:4c:c6:43:df:0f:f3:0e:b3:a1:b2:82:e5:cb:87:
2f:f4:95:63:1e:4b:9d:2f:3d:f4:07:94:ed:e9:81:42:a1:8b:
9f:36:41:01:95:74:42:3b:e7:1e:77:a4:49:cb:2d:24:a9:4b:
dc:cf:28:e7:73:e8:af:be:28:f3:f3:61:88:b6:ca:76:2f:55:
1a:4e:e2:d7:88:07:b2:57:33:c0:42:b6:1e:76:7d:f6:f9:a2:
44:85:f5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:07 2026 by rpki-client