
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
File: 6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft (raw, json)
Hash identifier: +zu0O0FEEJ4oUIkaXugtQdHMqVl+jEizzQvwPcKK3L4=
Subject key identifier: 4B:90:72:AC:85:FC:60:D5:DF:6C:C7:42:4E:EA:F1:83:9A:0F:41:C5
Authority key identifier: 6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
Certificate issuer: /CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Certificate serial: 2A5D98B769B3DBD767B6CB75A740EFCD1F48FEE7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
Manifest number: C9
Signing time: Wed 07 Oct 2026 18:21:38 +0000
Manifest this update: Wed 07 Oct 2026 18:16:38 +0000
Manifest next update: Sat 10 Oct 2026 23:06:38 +0000
Files and hashes: 1: 36302e3233322e3132382e302f31372d3232203d3e203234313433.roa (hash: ByH42KhU84BjARWvSf4oIylPRBp7bQn0rgPvnZhkzS8=)
2: 3230322e3133362e34382e302f32322d3234203d3e203234313433.roa (hash: PFrwBt4x6EG8Lnqd7KcG6HCXYGKj6tzV7yZvxGJNUyI=)
3: 3230322e3133362e34382e302f32302d3234203d3e203234313433.roa (hash: kXzf8yQaI3V74mWAiZJh4sv0ugmfibkN4QVTR1OfWyg=)
4: 3130332e32352e33322e302f32322d3234203d3e203234313433.roa (hash: wf1cTqP/fj3lGgy7YzJ5B8bA4GoRnpkTJeCwl6jOLB0=)
5: 6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl (hash: h8nDD3zkzg0/F/KI9ldh4+7Zo0MnuKcAkQpYK6vk/xo=)
6: 36302e3233322e3234342e302f32332d3234203d3e203633353430.roa (hash: sl0jjJ5XC+G90VmpUgx0qGVWokTgyUHCf8PLNvfFe7I=)
7: 323430303a626630303a3a2f33322d3634203d3e2030.roa (hash: b8zI6D91Guisd2Zwj5/eJF7bgYI/GaGgO4oEeGNNR5I=)
8: 36302e3233322e3133322e302f32332d3234203d3e203633353430.roa (hash: apaKvvxupjsq5UR3eCvl0M6COeaUaIt4WSH46noRsyA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 23:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:5d:98:b7:69:b3:db:d7:67:b6:cb:75:a7:40:ef:cd:1f:48:fe:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Validity
Not Before: Oct 7 18:16:38 2026 GMT
Not After : Oct 10 23:06:38 2026 GMT
Subject: CN=4B9072AC85FC60D5DF6CC7424EEAF1839A0F41C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6c:e0:2e:59:5a:f1:3f:e6:7b:92:fa:2c:81:
03:f3:c8:b0:72:57:5c:66:b7:6d:c3:3f:c7:fe:94:
44:92:5e:35:54:56:7e:ce:8f:2f:90:42:3d:c7:8c:
63:5d:dd:d2:3d:82:c9:5c:4e:e2:5d:0c:19:89:7e:
6e:45:8b:c8:4f:cc:1d:73:f2:b5:e7:8f:91:3d:bd:
40:e7:cb:7d:00:77:e6:de:9d:43:4e:5f:9f:e4:e2:
48:ee:85:89:0d:b4:66:f3:14:8b:c9:ad:13:3c:e1:
e5:ee:ae:58:4f:b3:d8:bc:72:d8:08:3e:16:a5:4b:
01:84:4a:a5:d7:5e:e1:fb:f7:64:c7:1b:5c:20:70:
93:04:78:38:1a:7e:c1:e9:f3:54:a5:35:93:f4:a5:
b5:0d:11:9a:a7:9e:ab:98:87:5e:a5:0d:e0:9d:02:
7d:aa:df:ff:73:48:3d:d8:f4:82:81:a1:a9:d9:9f:
7b:26:cd:70:af:0d:45:d0:be:12:7c:68:b9:20:94:
59:02:47:41:42:69:0c:e0:80:78:a1:2d:2b:6d:28:
e6:82:4b:8f:f0:3c:79:94:80:d5:83:a6:d9:f6:2c:
70:09:7b:f8:64:5f:27:49:5e:0f:59:82:c9:06:9d:
35:d5:c7:06:4c:19:12:2a:32:cb:0e:e3:89:16:cf:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:90:72:AC:85:FC:60:D5:DF:6C:C7:42:4E:EA:F1:83:9A:0F:41:C5
X509v3 Authority Key Identifier:
keyid:6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:32:08:84:82:1d:55:56:83:fc:91:b3:82:1f:b9:09:2f:9a:
88:78:d2:27:dd:b2:16:05:9b:90:2c:45:df:d1:a7:02:b6:31:
5b:f0:5a:03:69:70:5c:a5:6f:10:f3:ff:58:97:ba:f4:de:32:
82:96:3a:c3:71:28:62:fc:3e:62:0f:c4:b7:60:77:1b:65:20:
a0:cb:13:c9:b6:54:cd:20:e0:dd:dd:f0:9e:60:59:0a:ec:08:
81:5a:25:d4:fa:41:2b:e8:5a:b2:c4:d4:11:91:6b:bf:f5:d7:
2b:12:ca:21:7a:3e:0f:b8:02:3c:3c:2f:6c:0e:1e:a0:02:ad:
92:63:0f:09:ea:ee:88:77:91:96:05:67:86:a1:f2:9e:d4:c7:
85:40:33:02:4e:07:1f:13:44:97:1f:bd:8f:bb:95:39:b2:17:
89:bb:35:95:44:1d:3e:b0:c8:16:85:b6:d3:39:d9:d0:9c:27:
38:85:16:09:3c:27:6d:52:0f:ef:f3:91:bc:50:5c:15:12:9f:
3f:74:67:f1:4f:ee:31:be:c3:7a:1e:80:c0:ff:39:0e:84:6a:
91:66:2a:32:05:09:e2:30:1d:21:71:c8:46:ca:fe:e2:47:8b:
29:91:f3:05:38:4f:60:e9:b3:a7:3e:72:08:8a:58:56:fc:d9:
2a:5c:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 22:31:19 2026 by rpki-client