
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
File: 6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft (raw, json)
Hash identifier: +vMTshmd0exnHBnBoBM4OrZ7ngE9vdmQI3uosmGEvNw=
Subject key identifier: D0:17:4D:DC:A5:37:89:C3:7E:AC:CF:68:6B:16:D2:1E:CA:CA:C4:42
Authority key identifier: 6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
Certificate issuer: /CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Certificate serial: 6FB115B849A48CC70A0A91358C0657B8099A689E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
Manifest number: 27
Signing time: Wed 13 May 2026 05:30:58 +0000
Manifest this update: Wed 13 May 2026 05:25:58 +0000
Manifest next update: Thu 14 May 2026 09:25:58 +0000
Files and hashes: 1: 36302e3233322e3132382e302f31372d3232203d3e203234313433.roa (hash: ByH42KhU84BjARWvSf4oIylPRBp7bQn0rgPvnZhkzS8=)
2: 36302e3233322e3133322e302f32332d3234203d3e203633353430.roa (hash: apaKvvxupjsq5UR3eCvl0M6COeaUaIt4WSH46noRsyA=)
3: 3230322e3133362e34382e302f32322d3234203d3e203234313433.roa (hash: PFrwBt4x6EG8Lnqd7KcG6HCXYGKj6tzV7yZvxGJNUyI=)
4: 3130332e32352e33322e302f32322d3234203d3e203234313433.roa (hash: wf1cTqP/fj3lGgy7YzJ5B8bA4GoRnpkTJeCwl6jOLB0=)
5: 323430303a626630303a3a2f33322d3634203d3e2030.roa (hash: b8zI6D91Guisd2Zwj5/eJF7bgYI/GaGgO4oEeGNNR5I=)
6: 3230322e3133362e34382e302f32302d3234203d3e203234313433.roa (hash: kXzf8yQaI3V74mWAiZJh4sv0ugmfibkN4QVTR1OfWyg=)
7: 6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl (hash: 3V/7RCDa1ULh2+1VuwoQYicZdwW7HLVl3hRFEj/a+M8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:b1:15:b8:49:a4:8c:c7:0a:0a:91:35:8c:06:57:b8:09:9a:68:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Validity
Not Before: May 13 05:25:58 2026 GMT
Not After : May 14 09:25:58 2026 GMT
Subject: CN=D0174DDCA53789C37EACCF686B16D21ECACAC442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:30:e1:b1:4e:8b:26:95:fb:4f:53:6c:af:
fb:fa:b0:dc:0d:0b:d2:ac:15:e0:91:e4:da:84:7b:
27:5a:74:74:24:6b:5f:a8:ec:e6:15:1e:8f:4d:3d:
d1:c9:1d:91:92:a3:e5:a2:f2:0d:a5:bb:3e:41:63:
e9:5a:00:c3:cf:49:bb:20:55:9e:a5:8f:21:ae:62:
d0:8e:73:8b:cc:e7:a6:ee:4c:60:d8:f1:bd:51:cd:
67:d5:6e:20:4d:02:8f:77:4f:18:5e:53:8d:1e:d7:
3f:c2:a5:56:f3:9c:fe:13:73:99:98:f9:8d:24:b4:
70:18:3d:5a:62:92:ed:8a:ee:5f:f3:04:65:cc:49:
b0:25:d7:6e:de:57:fa:33:d8:83:ff:bc:28:f3:1b:
f5:3e:a0:d0:03:9c:c3:5f:86:d2:fd:30:57:32:fd:
ce:c2:be:d2:75:dd:55:cf:b5:e6:f0:2c:ae:c5:2d:
64:dc:e1:31:45:dd:96:ed:13:de:18:5b:22:87:96:
d1:ae:06:9d:23:e4:d9:9e:aa:49:d2:44:fc:62:46:
67:e6:b6:01:57:36:a8:1b:cf:4e:a1:b6:a3:c7:7e:
89:ad:81:d2:1f:bc:c7:c4:3c:bd:42:5c:45:8e:22:
3e:1e:18:ac:4e:06:28:fe:b9:50:27:f5:e7:ec:ae:
c7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:17:4D:DC:A5:37:89:C3:7E:AC:CF:68:6B:16:D2:1E:CA:CA:C4:42
X509v3 Authority Key Identifier:
keyid:6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:16:6d:3b:8c:7e:30:e3:e0:b2:47:e9:28:17:b4:de:ed:33:
4b:7f:26:8f:c8:91:41:35:1a:e8:3b:79:02:79:9b:ad:cc:74:
eb:75:60:bb:35:21:b0:e4:9f:7a:12:46:ce:d3:3f:58:93:9a:
00:67:7a:00:7c:51:d3:de:e0:fe:65:87:29:e3:bb:d8:da:35:
ab:4d:8a:b1:82:90:10:c2:cb:21:f9:d7:3c:4a:ae:2d:67:3f:
9f:fd:06:9b:c6:e6:48:fa:51:06:57:96:1e:13:5c:d3:16:2f:
bd:d3:e1:df:b6:d1:ca:b7:22:e2:44:54:61:ae:69:5d:fd:8c:
0f:d3:43:04:b8:36:49:6e:14:db:ae:63:5c:41:d7:37:df:7f:
32:4b:e4:b5:61:e1:42:96:95:75:30:c2:8a:bb:f5:71:cb:f6:
09:0b:c0:4b:f9:7f:c4:6d:30:77:bc:1a:39:1d:a0:55:63:ed:
cc:80:5a:5a:a7:de:a9:88:3d:b1:13:36:39:aa:31:e1:8c:44:
23:0a:11:6f:f2:d8:16:99:3d:f4:c5:53:ef:87:ce:ae:27:2f:
d6:dd:87:82:5d:44:0f:3b:1f:2e:05:62:00:38:26:5b:06:64:
12:fb:18:e4:a0:ac:b5:dd:31:82:71:52:23:c8:98:47:93:50:
e8:50:f6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:36 2026 by rpki-client