
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft
File: 6E171695D3EF09F7A49B6AF0022DA63420988631.mft (raw, json)
Hash identifier: 1bkPVQWfvzK2sYLJjmKCyRBC6Hham9LIx/8gQJqqitM=
Subject key identifier: 16:68:BE:FB:40:A3:CA:2E:D6:4E:83:24:8D:6B:CB:2C:76:67:37:9F
Authority key identifier: 6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31
Certificate issuer: /CN=6E171695D3EF09F7A49B6AF0022DA63420988631
Certificate serial: 42B4B247A402F13BF0FCF12E3CF1BABD09B7902A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft
Manifest number: FE
Signing time: Fri 24 Jul 2026 09:10:51 +0000
Manifest this update: Fri 24 Jul 2026 09:05:51 +0000
Manifest next update: Sat 25 Jul 2026 10:19:51 +0000
Files and hashes: 1: 3130332e3232372e3232382e302f32322d3232203d3e2034383337.roa (hash: saz9U4xFL4Z5tgA33NkdB6/96G6nAAkAtrOd0NZ6x/0=)
2: 6E171695D3EF09F7A49B6AF0022DA63420988631.crl (hash: fVzM8UQM3QKAsrsz53Zl0JHpKT6V0CYXLsVQijRUq/A=)
3: 323430323a356534303a3a2f33322d3332203d3e20313331353236.roa (hash: 1h4OrgL9zEqJdmEkth2dOBjhiLKByYppiMUDngFpF44=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b4:b2:47:a4:02:f1:3b:f0:fc:f1:2e:3c:f1:ba:bd:09:b7:90:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6E171695D3EF09F7A49B6AF0022DA63420988631
Validity
Not Before: Jul 24 09:05:51 2026 GMT
Not After : Jul 25 10:19:51 2026 GMT
Subject: CN=1668BEFB40A3CA2ED64E83248D6BCB2C7667379F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1e:d8:a3:4f:b4:4f:2d:af:a1:64:ec:b6:1f:
e5:9e:9b:e1:4d:32:4f:ca:23:25:21:7e:6c:a5:cc:
df:f4:ad:63:cc:16:d0:69:90:26:3b:fc:6b:8c:58:
72:a6:e2:fb:73:63:1c:2d:ad:e9:27:9e:4e:1a:3a:
b6:e0:61:1c:1d:ca:bb:c8:fc:a4:05:50:f6:ea:30:
8a:b6:a6:e5:dc:ec:41:2f:50:e9:52:28:d1:af:3f:
8c:e6:84:b8:0c:e2:53:50:0a:e9:37:28:d3:e2:7e:
0b:ac:7d:6f:d3:ff:4e:0d:5c:48:48:f8:6c:22:d4:
94:61:b2:e8:a4:76:9c:ad:10:a9:a1:7f:5a:b5:8c:
d5:42:0b:ff:7c:1e:35:98:a4:4d:01:9f:5a:d5:9a:
e0:0a:28:d7:4a:12:2f:24:9b:e3:88:29:9c:0e:9e:
a9:2f:4c:51:60:6d:0c:b3:1b:4c:a3:28:03:ba:d3:
16:6e:8d:d3:cf:20:28:68:00:59:df:92:3f:1b:f7:
27:8d:00:e1:d6:06:b8:3a:c9:24:fa:7b:a7:ce:c4:
87:f1:6a:02:4b:8e:3f:11:f3:15:b8:35:30:d1:1c:
57:ed:fb:6a:d0:3e:e7:51:de:6d:76:31:62:72:e7:
9b:16:5e:04:56:4b:c3:56:f4:39:dd:09:1b:51:f0:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:68:BE:FB:40:A3:CA:2E:D6:4E:83:24:8D:6B:CB:2C:76:67:37:9F
X509v3 Authority Key Identifier:
keyid:6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:28:a0:b9:5f:e9:69:87:11:4d:a6:61:c0:c2:3a:0c:73:a6:
e5:e6:bb:a4:c6:4b:28:0c:9f:2b:c3:08:b1:4b:92:e6:94:7c:
7b:89:92:53:bf:8b:b1:c3:28:af:93:75:a0:15:76:0b:8f:80:
1e:33:ae:3a:40:7e:f3:b7:e2:42:c4:b5:e3:d1:51:14:4f:35:
49:65:c1:f1:24:66:29:17:ac:62:c3:3d:31:71:d6:19:0c:5b:
c2:0f:1f:6d:4d:1f:40:d5:2a:7f:47:44:97:39:db:4d:58:61:
b3:d3:6b:c5:7e:da:15:32:95:50:13:25:53:6f:95:f7:73:e4:
ae:41:a3:c1:18:45:09:34:c8:94:67:54:ea:8a:a9:59:8f:0c:
91:8b:7d:5a:1c:c7:55:54:e7:59:01:dd:6d:f7:e9:65:7c:ad:
e7:af:3e:e0:2a:56:89:06:4d:b9:fa:7c:01:93:c6:cc:cf:6a:
f4:ec:3b:de:52:f5:ae:87:af:5a:a9:b1:22:80:29:8e:89:2c:
d4:4b:0f:05:94:31:9d:03:0a:e8:5a:bb:f2:73:21:50:a4:a3:
27:49:2b:01:5d:47:b4:c7:15:14:60:18:7b:69:42:96:72:6c:
71:de:8a:a5:05:85:45:ec:45:80:e7:18:00:40:ad:49:9f:bd:
af:86:48:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:12:04 2026 by rpki-client