
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
File: D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft (raw, json)
Hash identifier: 29yUN2vP8tHPRE5PI2CURA6x4Ij6qhQ3IuaolH4knV0=
Subject key identifier: 9E:59:79:67:D4:8D:BD:CB:9B:9B:1B:B5:31:4C:E9:5A:4C:18:4A:5D
Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Certificate serial: 6028A9747123E0F26FBB502BC66759A09B222C14
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
Manifest number: 0144
Signing time: Thu 23 Jul 2026 17:04:09 +0000
Manifest this update: Thu 23 Jul 2026 16:59:09 +0000
Manifest next update: Fri 24 Jul 2026 20:48:09 +0000
Files and hashes: 1: AS14618.roa (hash: +Wv/2HA8AVUSNnadO5hz5VeeFjAexzBSpavN7fMFXGc=)
2: D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl (hash: 5Q+HfiD+1l2Bpp2kQiDmTNcbtBxjohOwMyPSqss6VuA=)
3: AS23724.roa (hash: 8krRNne+KRTBey0q0TJzCVIFcEgDHE+LzZ9++xzsw7Q=)
4: AS137753.roa (hash: 4+RHeerb+nMVnV6wUIKmstQv6v3WIzsDcvJF0B7glsg=)
5: AS618.roa (hash: R+C8Vc8lMDFPCjUBt8RrWNDpfiQzOxRJZjPH8n6RrH8=)
6: AS9808.roa (hash: nIrH1Plwi2PhCTPH5t4ZrR1yXUO+K6EewsCL9PEsI3s=)
7: AS4808.roa (hash: //nKQNAjooI9erX4CO+1oGcixsTIJNw6HHMIvfL9IMQ=)
8: AS58466.roa (hash: kSF22yBAy8SUSPPV8/o7H9vyPUoVyme9wGOZprZ2rcM=)
9: AS138421.roa (hash: 2wlstcl5tFV+5E8jvfptqjBcmgeaje3X7oXtiJyA3WY=)
10: AS16509.roa (hash: ZMwXvE4dHyIcjXmR+aleISP8m7PnxVmHxH9TxqYuPjw=)
11: AS131486.roa (hash: hv3NrWI7qndb9pwRQZGa9lhEKMv487gLxwAMSFSJIMw=)
12: AS137699.roa (hash: D0pnZlgzIum966fqLaKQBVafP4tAhNdkkWQtNVZ7QXg=)
13: AS136958.roa (hash: XwAwuw4m2OENSikj/rtTtQsqWwas7qpS239Aq1SA7eE=)
14: AS141679.roa (hash: QsBxvlTVUwKrMZj2U6EcyVvBhZjwk3O6PdTggf+BNR0=)
15: AS4837.roa (hash: fhYEL03qpRt46XUMS7A41XahZN88wXQKA1YPtuoTlhw=)
16: AS4811.roa (hash: 7/9rXmm3PTJE28aFP6e8Mej2tpluIiRvbq9OgQ78+fE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 10:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:28:a9:74:71:23:e0:f2:6f:bb:50:2b:c6:67:59:a0:9b:22:2c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5
Validity
Not Before: Jul 23 16:59:09 2026 GMT
Not After : Jul 24 20:48:09 2026 GMT
Subject: CN=9E597967D48DBDCB9B9B1BB5314CE95A4C184A5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:17:5c:78:91:94:76:a7:78:1d:89:48:b0:
d9:9e:8f:74:47:59:95:6b:78:17:21:cb:97:4b:ba:
c9:4b:97:a8:64:96:8d:99:f0:eb:eb:dd:d0:d1:18:
c7:68:b6:d7:14:1a:bf:50:58:1e:d7:70:ed:83:3a:
92:5b:b7:f0:2b:0a:05:9a:a5:19:54:af:dc:d3:0c:
35:67:83:f7:12:bf:c3:bb:3f:08:51:f6:31:f9:dd:
ab:0f:66:e8:86:fa:f2:24:8f:ad:6f:83:6a:a6:71:
de:68:1b:4f:c4:42:68:66:c6:46:b6:0f:b4:e0:6c:
ed:89:18:ec:d5:9b:22:00:65:ff:cc:2c:dd:ec:8d:
3f:d6:55:e7:88:35:aa:f1:dc:5e:37:e0:4c:a3:65:
8d:0b:ec:49:01:a6:49:57:07:85:7e:a7:bb:14:41:
09:34:ee:ad:d6:df:c9:c8:c7:74:9d:2d:5c:2c:73:
91:81:6f:51:a5:ae:3b:2a:fc:b0:84:be:73:95:95:
2f:3d:7d:b4:e4:05:a4:cf:fe:17:e6:84:6f:d5:80:
b4:4b:1b:07:ee:d1:25:17:94:51:f6:b4:69:3d:ec:
07:d2:f6:70:c8:52:bc:30:69:50:e7:41:ef:cb:91:
9c:78:aa:30:2c:b3:54:4d:11:92:e7:4f:fa:89:ae:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:59:79:67:D4:8D:BD:CB:9B:9B:1B:B5:31:4C:E9:5A:4C:18:4A:5D
X509v3 Authority Key Identifier:
keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6a:54:4e:aa:0a:53:2f:e4:bd:62:5d:d9:a4:0d:d0:ec:8a:
a1:6a:58:0c:90:d9:e8:ba:2d:ad:21:5e:f5:bb:d4:41:d2:a0:
30:e3:20:72:53:38:31:91:fe:85:11:dd:3a:01:2e:e0:9a:7b:
6b:10:d0:09:07:0c:26:30:5e:5d:23:08:27:1f:8d:db:c5:6a:
39:36:2f:79:86:c4:6f:de:8d:bb:3d:4e:4a:d6:a5:c5:a0:8c:
5f:6d:89:3f:e6:12:d5:2c:7b:6e:23:21:46:4e:1b:ed:c7:15:
e7:fe:da:c2:07:68:ab:35:5b:bc:77:34:6c:1f:f6:32:8f:39:
85:33:0a:03:47:b7:5a:a1:be:a1:e1:25:1f:e2:d6:a1:02:4f:
c9:a2:70:05:1b:76:0d:97:a4:4b:51:87:45:08:fd:f3:50:1e:
b3:09:c3:19:f0:f2:13:61:73:c5:dc:52:e3:d4:b6:64:8c:9e:
86:2d:a7:6b:56:29:78:a6:c0:ca:4b:1d:4c:bf:2a:2d:29:76:
73:d2:37:a2:85:a6:72:cd:07:23:cb:7a:bf:44:72:0b:23:09:
83:3e:d0:05:d2:2f:95:c3:34:e7:89:6a:46:de:b8:d8:8f:6c:
d1:03:40:e8:9e:c1:02:3e:e4:5a:bb:45:03:3d:50:a0:5b:0c:
13:0c:0b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:01 2026 by rpki-client