
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
File: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft (raw, json)
Hash identifier: x3esP1bOETN4wtJcmONXADFAW1U091pKnKMT/kiCZW0=
Subject key identifier: 26:37:8E:0D:A7:54:48:81:AE:FB:F8:00:55:35:4D:B1:08:53:18:93
Authority key identifier: 6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
Certificate issuer: /CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Certificate serial: 7DCC75A3A22721843C83EE2B0277D54416341AEC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
Manifest number: 58
Signing time: Thu 26 Mar 2026 04:48:28 +0000
Manifest this update: Thu 26 Mar 2026 04:43:28 +0000
Manifest next update: Fri 27 Mar 2026 07:03:28 +0000
Files and hashes: 1: 3231302e38372e37332e302f32342d3234203d3e20323131333932.roa (hash: B103GkhAbfnBvb3weWZMCaWZpcf/6CwQGFLjnuopNmY=)
2: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl (hash: VKQsYnVSlnkqQ0G9v0n9uHGBTo1izbYq5Kh3GL8N7j0=)
3: 3231302e38372e37322e302f32342d3234203d3e20323131333932.roa (hash: mVbRhcTcLyvsAMfZJUY6i4bpMObDpb0oEicxlAT8TpY=)
4: 3231302e38372e37322e302f32332d3233203d3e20323131333932.roa (hash: Za6CTmgreoWhCuNZjZaegQ9ZSyzYL/pUPt044AAI5Rg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 05:24:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:cc:75:a3:a2:27:21:84:3c:83:ee:2b:02:77:d5:44:16:34:1a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E
Validity
Not Before: Mar 26 04:43:28 2026 GMT
Not After : Mar 27 07:03:28 2026 GMT
Subject: CN=26378E0DA7544881AEFBF80055354DB108531893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:05:7f:53:be:c3:40:b1:18:d5:43:f5:1d:
a6:29:d1:5e:31:9c:6a:12:9d:05:1e:de:df:44:63:
78:6e:8d:a5:ee:81:7d:15:38:bf:b0:71:d3:0f:f8:
c9:9c:15:7a:13:9c:2d:95:75:bc:d7:d7:55:ba:d9:
29:8b:40:c7:c2:d5:f3:59:eb:fa:9e:5c:21:95:01:
4d:98:5c:51:17:47:5f:02:a4:f9:d1:83:88:15:33:
17:fa:12:ba:82:b9:ec:98:be:02:aa:6e:dc:87:55:
38:4e:c7:58:79:64:40:c8:7d:f5:28:3b:59:5a:67:
6c:c1:96:c1:fa:7e:48:3d:dc:ce:d2:4b:23:27:95:
a3:f4:6a:1d:66:d9:59:7f:85:96:a0:b6:5c:08:2c:
d0:53:10:2d:37:a8:c2:4b:a9:69:0b:df:a5:98:1e:
ff:a6:6d:2d:20:23:db:98:73:3d:43:28:37:e6:9f:
2d:84:16:f0:2c:c7:89:7c:01:8b:fb:a3:50:b9:54:
a9:11:b7:da:45:01:74:3a:63:23:97:bb:1a:8f:12:
a9:94:f8:e0:b7:39:f8:4a:7f:77:4d:47:e3:21:ba:
03:05:3e:a3:53:25:07:59:f7:dd:81:6f:bf:9e:e6:
57:8d:9f:2c:f1:a5:18:b3:f5:53:f2:c8:e6:4e:0f:
7e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:37:8E:0D:A7:54:48:81:AE:FB:F8:00:55:35:4D:B1:08:53:18:93
X509v3 Authority Key Identifier:
keyid:6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a2:f0:8f:ce:6f:fd:4d:9d:24:e4:d7:dc:7d:3b:7d:ba:32:
9b:58:e1:16:cd:13:67:71:49:6d:46:40:42:a3:bd:2e:e4:05:
5f:71:54:b3:3c:a9:71:0e:5a:78:4b:4d:48:3d:91:0d:d1:bd:
e8:e9:6f:8e:38:e7:ed:b0:23:01:aa:33:2f:9b:78:32:75:6c:
ec:cd:94:30:64:4f:f0:83:6a:d8:aa:23:f1:ac:58:0b:0e:f5:
f6:67:0e:02:53:fa:09:20:4f:cb:fe:ac:4f:4b:49:62:c4:66:
ce:4e:56:85:f7:91:48:34:c1:bb:39:b5:5f:80:38:d4:fb:7b:
4b:9b:6b:03:0e:45:ae:e8:16:29:df:33:3f:14:e9:90:a7:e7:
b4:77:26:fa:eb:1d:d7:9d:1f:97:6a:a0:ee:e4:56:da:cb:9c:
92:51:5d:18:5d:9c:a7:1d:0a:89:54:d7:1e:34:4f:7c:f7:33:
ac:33:be:22:d1:ac:c1:4d:b5:e9:37:36:6a:00:43:b2:74:76:
c5:50:87:3e:37:fb:f0:1c:b5:ca:a8:cb:e7:f7:dc:0a:f8:5f:
48:7b:a9:54:66:6f:9e:50:2e:60:89:32:d3:b1:d4:a0:e0:2c:
69:67:5d:b7:cd:e2:ec:a9:56:40:3d:da:e8:74:d5:1f:2a:63:
c2:05:f5:71
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUfcx1o6InIYQ8g+4rAnfVRBY0GuwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZB
QjNCOTA3RTAeFw0yNjAzMjYwNDQzMjhaFw0yNjAzMjcwNzAzMjhaMDMxMTAvBgNV
BAMTKDI2Mzc4RTBEQTc1NDQ4ODFBRUZCRjgwMDU1MzU0REIxMDg1MzE4OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkHAV/U77DQLEY1UP1HaYp0V4x
nGoSnQUe3t9EY3hujaXugX0VOL+wcdMP+MmcFXoTnC2VdbzX11W62SmLQMfC1fNZ
6/qeXCGVAU2YXFEXR18CpPnRg4gVMxf6ErqCueyYvgKqbtyHVThOx1h5ZEDIffUo
O1laZ2zBlsH6fkg93M7SSyMnlaP0ah1m2Vl/hZagtlwILNBTEC03qMJLqWkL36WY
Hv+mbS0gI9uYcz1DKDfmny2EFvAsx4l8AYv7o1C5VKkRt9pFAXQ6YyOXuxqPEqmU
+OC3OfhKf3dNR+MhugMFPqNTJQdZ992Bb7+e5leNnyzxpRiz9VPyyOZOD355AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUJjeODadUSIGu+/gAVTVNsQhTGJMwHwYDVR0j
BBgwFoAUbsHjTq3qInCV1XjnhMhcj6s7kH4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTY4MzA2MTkwNzQ1OC8wLzZFQzFFMzRFQURFQTIyNzA5NUQ1NzhFNzg0Qzg1
QzhGQUIzQjkwN0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZBQjNCOTA3RS5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE5MDc0NTgvMC82RUMxRTM0RUFERUEy
MjcwOTVENTc4RTc4NEM4NUM4RkFCM0I5MDdFLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaLwj85v/U2d
JOTX3H07fboym1jhFs0TZ3FJbUZAQqO9LuQFX3FUszypcQ5aeEtNSD2RDdG96Olv
jjjn7bAjAaozL5t4MnVs7M2UMGRP8INq2Koj8axYCw719mcOAlP6CSBPy/6sT0tJ
YsRmzk5WhfeRSDTBuzm1X4A41Pt7S5trAw5FrugWKd8zPxTpkKfntHcm+usd150f
l2qg7uRW2sucklFdGF2cpx0KiVTXHjRPfPczrDO+ItGswU216Tc2agBDsnR2xVCH
Pjf78By1yqjL5/fcCvhfSHupVGZvnlAuYIky07HUoOAsaWddt83i7KlWQD3a6HTV
HypjwgX1cQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:53:56 2026 by rpki-client