
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
File: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft (raw, json)
Hash identifier: 3GcHK8sWVS1ZcxPoSiSbyi51he7jzNl3dmlJW70FACM=
Subject key identifier: 51:11:76:0E:2B:02:18:42:A3:A5:F5:1A:F6:10:94:B1:C3:9B:13:FE
Authority key identifier: 6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D
Certificate issuer: /CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D
Certificate serial: 110C7E766154AE2B805CDACB595EF50601C3B08D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
Manifest number: 88
Signing time: Thu 23 Jul 2026 12:13:38 +0000
Manifest this update: Thu 23 Jul 2026 12:08:38 +0000
Manifest next update: Fri 24 Jul 2026 16:04:38 +0000
Files and hashes: 1: 3130332e34342e3137362e302f32332d3233203d3e2034383437.roa (hash: ae7SUgq9OA/NLExuOxlNbHZGMMv09rTQmfolmacGeB4=)
2: 3130332e34342e3139382e302f32342d3234203d3e2034383030.roa (hash: 6dqpVUqXBgLgk1fCILtRSZoIidor7YhnbVbc5fHfQhk=)
3: 34332e3232352e3231362e302f32322d3232203d3e2034383437.roa (hash: j/eV+lOtMaJE7zLazg78nWoyQGsOhGQyTahosxccrn8=)
4: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl (hash: 9L1FWNezIAdhwQ5iE+ScvBqy0egcuiXI6nCsQs38cUI=)
5: 3130332e34342e3137382e302f32332d3233203d3e2034383437.roa (hash: lSEivQpgfyTwattyz5XGR7SBQ4DIJ5haeZxfSmZXjnc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 16:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:0c:7e:76:61:54:ae:2b:80:5c:da:cb:59:5e:f5:06:01:c3:b0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D
Validity
Not Before: Jul 23 12:08:38 2026 GMT
Not After : Jul 24 16:04:38 2026 GMT
Subject: CN=5111760E2B021842A3A5F51AF61094B1C39B13FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:d3:c3:b2:b9:e3:73:cf:2f:2f:2a:06:7b:
72:0d:0e:c4:94:ee:2d:fe:d5:e9:29:96:94:53:66:
0e:7c:6d:56:8b:c7:41:bb:e9:9d:b9:b6:39:66:af:
87:d5:d0:62:ba:0b:b2:f3:e1:ce:5b:bb:f2:52:c5:
08:82:14:48:f9:d0:ed:79:a3:c0:88:ff:68:c3:3d:
b3:2d:c9:57:a0:e5:54:9a:69:b4:a2:89:d9:bd:ab:
65:03:1a:a4:0f:bf:be:da:d8:b0:d1:63:c4:6b:ba:
f0:a3:40:83:f7:e5:d6:88:60:5a:37:eb:22:91:e7:
65:2b:f6:df:2c:a1:85:28:ea:73:70:94:64:bb:67:
2c:cd:76:57:13:8b:e3:51:bb:c7:e9:c2:d6:8c:43:
b0:cf:48:55:fe:36:a8:c8:b9:e0:aa:06:da:e7:0e:
ce:e7:20:53:fb:86:6e:de:27:ac:e4:1c:7f:03:0c:
ea:e1:55:c2:15:13:91:9b:44:35:0c:42:d1:0c:0d:
56:d2:cc:26:72:0e:b3:fc:5e:77:d5:f8:31:f9:9a:
00:3e:29:6e:67:88:08:9c:b6:96:96:33:29:e7:52:
f8:b2:26:5d:c0:37:fb:ad:75:d9:eb:52:b4:17:bc:
5f:c8:84:a2:33:8d:5d:38:0d:51:72:dc:76:d3:f4:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:11:76:0E:2B:02:18:42:A3:A5:F5:1A:F6:10:94:B1:C3:9B:13:FE
X509v3 Authority Key Identifier:
keyid:6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:de:3f:84:2c:4c:cd:bf:3a:8b:5a:22:8e:6f:02:e3:3f:87:
b3:b0:68:9d:62:49:58:c0:60:ad:8b:e8:58:a9:26:76:f5:c9:
7c:b7:27:60:cb:76:a3:f9:bc:92:89:d1:b5:6e:ce:09:bc:e4:
a5:53:16:a2:ef:2d:be:43:01:92:14:6d:c8:c5:1e:c5:4e:47:
30:19:32:7e:77:9e:64:f0:4d:3b:58:c6:0b:cb:b0:30:a3:60:
08:7d:96:4e:f3:d7:30:73:4f:1c:dd:76:55:a3:92:ad:89:55:
5f:7b:a2:a0:05:9c:3d:4f:e1:6d:95:64:49:f8:90:20:bd:d1:
c5:45:b9:a4:9a:4e:43:a3:48:70:22:24:ab:60:a6:f2:e7:f8:
9d:bd:58:05:46:87:a0:77:2f:b4:11:aa:a5:ce:0f:23:2b:1a:
90:8a:f6:82:81:82:63:70:51:f6:b7:33:d2:48:0e:13:9c:3b:
05:1d:60:77:ba:71:57:bd:7e:45:fb:b7:74:57:84:6d:f6:07:
38:dc:a0:f4:db:47:8a:32:e3:ea:a3:5b:50:c3:d5:78:90:fb:
b5:72:f4:1d:bc:ee:ec:17:26:88:01:18:80:a7:a1:e6:0d:78:
77:22:07:78:0f:95:97:7a:0f:ff:91:63:7f:ea:bb:8a:b1:7d:
1e:7a:49:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:21:12 2026 by rpki-client