
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
File: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft (raw, json)
Hash identifier: dSz6j6lhXNohHGHQLZ/DZMzjoyQrZqIu9JHf5xSiFq0=
Subject key identifier: D8:A3:9C:FE:42:B3:75:D2:BF:DA:4A:75:29:C0:60:A8:67:88:97:46
Authority key identifier: 6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
Certificate issuer: /CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Certificate serial: 164D9C8A0BAD94497321600F2F223674D5CC026B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
Manifest number: 99
Signing time: Wed 13 May 2026 03:05:54 +0000
Manifest this update: Wed 13 May 2026 03:00:54 +0000
Manifest next update: Thu 14 May 2026 06:01:54 +0000
Files and hashes: 1: 3231302e38372e37322e302f32342d3234203d3e20323131333932.roa (hash: mVbRhcTcLyvsAMfZJUY6i4bpMObDpb0oEicxlAT8TpY=)
2: 3231302e38372e37332e302f32342d3234203d3e20323131333932.roa (hash: B103GkhAbfnBvb3weWZMCaWZpcf/6CwQGFLjnuopNmY=)
3: 3231302e38372e37322e302f32332d3233203d3e20323131333932.roa (hash: Za6CTmgreoWhCuNZjZaegQ9ZSyzYL/pUPt044AAI5Rg=)
4: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl (hash: 4WSnjzVB9SkkytTYYphvAkirZyaKXlvMnhxR00Rn1Kw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:4d:9c:8a:0b:ad:94:49:73:21:60:0f:2f:22:36:74:d5:cc:02:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Validity
Not Before: May 13 03:00:54 2026 GMT
Not After : May 14 06:01:54 2026 GMT
Subject: CN=D8A39CFE42B375D2BFDA4A7529C060A867889746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:82:0c:48:20:18:14:df:bc:10:9b:df:4b:
6f:e9:b5:79:21:00:58:58:b3:c2:48:46:2e:40:2d:
e3:b3:e2:bc:67:dc:c6:0f:85:79:42:52:c6:ac:8d:
a8:33:78:25:1a:a7:9f:1c:ae:b8:ac:85:c8:eb:f8:
f8:f3:f6:98:4c:c4:d0:00:fb:ca:3d:f8:8a:da:bb:
4c:5e:79:5c:99:e1:eb:09:a9:d1:c5:f5:b0:68:92:
83:38:30:ec:1a:1e:2a:94:e5:61:f4:d5:81:26:40:
83:fb:ce:16:be:90:b8:1a:c6:7a:26:ba:83:ca:95:
39:c5:63:7c:b0:85:43:89:0f:0f:80:fd:be:6a:51:
37:de:12:82:df:e0:59:5c:6d:51:3c:fd:a7:1f:84:
67:68:38:87:20:65:f9:c4:58:4b:e3:49:ab:0c:b4:
f8:f5:08:3d:cc:5d:ef:c2:9e:ab:80:32:78:45:b0:
b0:3d:90:61:3b:dc:e9:89:83:21:9d:c1:de:db:09:
71:66:9f:7a:c6:f9:c4:51:75:58:8e:5e:0d:bb:92:
e5:7b:ca:43:21:8f:36:ac:1e:61:ab:30:4c:50:ba:
50:c8:70:30:f6:26:db:ff:a1:14:8f:82:bd:53:ee:
ea:41:c4:3d:67:44:6c:3f:0d:e8:f5:05:01:49:a9:
92:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A3:9C:FE:42:B3:75:D2:BF:DA:4A:75:29:C0:60:A8:67:88:97:46
X509v3 Authority Key Identifier:
keyid:6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a2:b7:60:1e:99:40:49:a8:87:43:29:29:4c:e8:b0:55:11:
5a:bc:dd:a8:90:e5:d7:33:5d:7b:d3:5f:cd:08:95:ed:34:d7:
81:b1:f9:64:06:bd:7a:88:c5:ce:34:de:4b:5b:fb:30:e5:7e:
53:50:a6:7d:ac:db:a4:f0:2c:f2:69:81:5b:bf:a2:70:5f:49:
1d:5f:04:f2:55:67:38:8d:7a:06:62:dd:1a:05:7a:e6:2f:ae:
ed:52:2b:60:33:e3:e8:fd:0f:92:6c:b8:c9:90:65:46:5a:b6:
92:bd:5c:0f:af:03:35:e1:13:b5:90:5b:30:de:6e:05:f4:f1:
ca:5a:c1:d3:13:cc:a9:88:c0:3a:e3:38:90:0c:42:64:45:b2:
18:d8:25:22:3e:78:5c:ec:04:4d:45:b4:2a:b3:77:93:1c:65:
f7:c3:2a:6b:1c:1e:c7:bc:62:cc:1f:a4:4a:19:f9:bf:1a:e6:
dc:05:d2:59:89:10:ad:c4:db:5d:66:72:31:4c:cd:f3:40:d3:
39:ee:7c:d6:66:51:89:0d:c8:6f:6e:01:70:2d:bc:45:a5:61:
f5:2a:c8:ad:ca:91:04:a7:52:39:25:7d:19:7d:84:91:09:39:
cf:25:46:db:fd:1d:02:7d:f4:72:67:de:9f:64:65:80:90:ca:
10:c4:08:b2
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUFk2cigutlElzIWAPLyI2dNXMAmswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZB
QjNCOTA3RTAeFw0yNjA1MTMwMzAwNTRaFw0yNjA1MTQwNjAxNTRaMDMxMTAvBgNV
BAMTKEQ4QTM5Q0ZFNDJCMzc1RDJCRkRBNEE3NTI5QzA2MEE4Njc4ODk3NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQoIMSCAYFN+8EJvfS2/ptXkh
AFhYs8JIRi5ALeOz4rxn3MYPhXlCUsasjagzeCUap58crrishcjr+Pjz9phMxNAA
+8o9+Irau0xeeVyZ4esJqdHF9bBokoM4MOwaHiqU5WH01YEmQIP7zha+kLgaxnom
uoPKlTnFY3ywhUOJDw+A/b5qUTfeEoLf4FlcbVE8/acfhGdoOIcgZfnEWEvjSasM
tPj1CD3MXe/CnquAMnhFsLA9kGE73OmJgyGdwd7bCXFmn3rG+cRRdViOXg27kuV7
ykMhjzasHmGrMExQulDIcDD2Jtv/oRSPgr1T7upBxD1nRGw/Dej1BQFJqZJDAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU2KOc/kKzddK/2kp1KcBgqGeIl0YwHwYDVR0j
BBgwFoAUbsHjTq3qInCV1XjnhMhcj6s7kH4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTY4MzA2MTkwNzQ1OC8wLzZFQzFFMzRFQURFQTIyNzA5NUQ1NzhFNzg0Qzg1
QzhGQUIzQjkwN0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZBQjNCOTA3RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE5MDc0NTgvMC82RUMxRTM0RUFERUEy
MjcwOTVENTc4RTc4NEM4NUM4RkFCM0I5MDdFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6K3YB6ZQEmo
h0MpKUzosFURWrzdqJDl1zNde9NfzQiV7TTXgbH5ZAa9eojFzjTeS1v7MOV+U1Cm
fazbpPAs8mmBW7+icF9JHV8E8lVnOI16BmLdGgV65i+u7VIrYDPj6P0Pkmy4yZBl
Rlq2kr1cD68DNeETtZBbMN5uBfTxylrB0xPMqYjAOuM4kAxCZEWyGNglIj54XOwE
TUW0KrN3kxxl98Mqaxwex7xizB+kShn5vxrm3AXSWYkQrcTbXWZyMUzN80DTOe58
1mZRiQ3Ib24BcC28RaVh9SrIrcqRBKdSOSV9GX2EkQk5zyVG2/0dAn30cmfen2Rl
gJDKEMQIsg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:16:38 2026 by rpki-client