
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
File: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft (raw, json)
Hash identifier: 3bpHmUdQEZ/zSkE8vxEDoAFgWxaC4yVtcAHlQa2Rg3s=
Subject key identifier: 29:00:9C:02:74:3C:0F:23:8F:B2:46:39:29:EE:9D:B3:F5:CA:C6:FD
Authority key identifier: 6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
Certificate issuer: /CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Certificate serial: 3283EC726667C6C843A4325BC0D332785CA64481
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
Manifest number: 013B
Signing time: Thu 08 Oct 2026 19:17:42 +0000
Manifest this update: Thu 08 Oct 2026 19:12:42 +0000
Manifest next update: Sun 11 Oct 2026 20:21:42 +0000
Files and hashes: 1: 3231302e38372e37322e302f32332d3233203d3e20323131333932.roa (hash: Za6CTmgreoWhCuNZjZaegQ9ZSyzYL/pUPt044AAI5Rg=)
2: 3231302e38372e37332e302f32342d3234203d3e20323131333932.roa (hash: B103GkhAbfnBvb3weWZMCaWZpcf/6CwQGFLjnuopNmY=)
3: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl (hash: GCyqlOkoBRpwO+s82qMBesEF8ZIEZtVPylkuNuD6wFk=)
4: 3231302e38372e37322e302f32342d3234203d3e20323131333932.roa (hash: mVbRhcTcLyvsAMfZJUY6i4bpMObDpb0oEicxlAT8TpY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:83:ec:72:66:67:c6:c8:43:a4:32:5b:c0:d3:32:78:5c:a6:44:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Validity
Not Before: Oct 8 19:12:42 2026 GMT
Not After : Oct 11 20:21:42 2026 GMT
Subject: CN=29009C02743C0F238FB2463929EE9DB3F5CAC6FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:3c:25:fe:86:06:76:71:6b:47:d4:1b:2f:
b1:33:be:db:fe:50:d0:7e:ce:4d:96:95:c6:38:cb:
45:a3:65:cd:00:d7:5a:7d:2e:2d:03:ec:63:80:56:
4e:29:0f:73:d6:bd:f7:d7:33:75:d5:28:15:02:1a:
a7:e3:e4:62:4f:86:f1:d1:67:74:15:ac:f2:c6:8a:
e3:e0:d4:e5:56:c1:c9:24:9e:88:40:cc:b7:0a:59:
b2:5d:f9:81:26:91:6d:c8:33:0f:a5:bb:dc:60:ad:
1c:d0:d3:6b:d6:47:36:97:fd:49:02:29:13:92:23:
fa:32:3d:67:28:26:ff:ff:a6:1f:4b:ec:f2:be:5c:
6c:e6:8a:82:cd:17:3e:b1:f7:23:68:54:db:60:08:
11:6f:5b:c2:11:00:9a:29:63:2e:3a:4c:da:f0:57:
93:17:17:b8:80:05:49:63:42:c7:c7:33:59:22:66:
a6:e7:3e:ff:8a:55:81:fd:64:b4:3d:57:ed:fb:e6:
f7:36:aa:5b:f9:d9:a1:56:57:8f:02:60:20:31:e7:
ab:67:5b:62:07:59:2c:cf:6e:51:59:85:7d:c5:fa:
90:9c:a8:3c:98:c7:10:76:53:d7:d3:42:3f:b3:25:
f6:ea:ec:75:28:d9:49:f1:85:df:a4:1d:4f:e5:27:
c0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:00:9C:02:74:3C:0F:23:8F:B2:46:39:29:EE:9D:B3:F5:CA:C6:FD
X509v3 Authority Key Identifier:
keyid:6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7c:cb:b5:4d:21:e1:21:74:e9:26:d1:5e:59:5d:43:e3:3e:
8f:71:7b:13:1a:2c:6e:36:fe:84:7a:29:45:9a:82:a3:9e:10:
24:f5:f7:2c:71:b0:d5:80:88:11:e2:d6:38:e6:60:4a:e4:68:
2b:ae:e7:69:dc:bd:08:ff:6d:e9:93:6b:1d:45:98:9b:83:0a:
49:d1:46:c0:ba:74:9c:1f:38:3a:09:0b:ab:22:90:cf:8c:e0:
8f:fb:f6:aa:75:46:59:6b:62:52:b4:2a:d3:8d:4e:e4:c9:d4:
89:57:e1:bc:35:37:0a:d6:0f:84:c1:3e:a4:01:cf:8f:83:48:
aa:33:a4:0c:c3:0b:14:ce:c9:75:22:f8:e4:aa:5b:b3:3b:ae:
35:0b:fe:f3:0b:7d:6a:5d:6e:d9:96:61:7f:7c:d8:91:18:8b:
18:95:39:a5:7b:4d:37:dd:1c:b2:60:79:70:45:3f:ea:fc:30:
02:ab:4a:14:05:98:13:2f:8e:5e:c9:86:81:a4:28:b4:e1:3e:
4d:bc:73:1a:fc:e4:fc:2a:f6:60:2d:ef:84:93:fc:19:db:a2:
5e:d0:ab:eb:10:d6:e3:f7:2b:c7:4e:ea:d3:0a:7b:8f:07:52:
44:86:d0:0b:93:c7:0a:21:46:fa:25:92:68:ee:96:46:89:eb:
28:03:0e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:30:57 2026 by rpki-client