
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
File: 6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft (raw, json)
Hash identifier: qpivopz30AgMmrL7ynIODWgg6NXEimYz9D6LspkQex0=
Subject key identifier: 54:A4:75:E7:81:C7:11:48:25:F2:E7:B1:CE:4E:F1:8B:2D:47:81:BA
Authority key identifier: 6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
Certificate issuer: /CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Certificate serial: 4B62108E4F70901379B9C135A453A2BCF7AB3C51
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
Manifest number: 88
Signing time: Thu 23 Jul 2026 21:39:38 +0000
Manifest this update: Thu 23 Jul 2026 21:34:38 +0000
Manifest next update: Fri 24 Jul 2026 22:50:38 +0000
Files and hashes: 1: 3230322e3133362e34382e302f32302d3234203d3e203234313433.roa (hash: kXzf8yQaI3V74mWAiZJh4sv0ugmfibkN4QVTR1OfWyg=)
2: 6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl (hash: BhT2hu/CTwROIDRvQJ7W28IL+eIQAQI8lWdSJnCTst8=)
3: 3230322e3133362e34382e302f32322d3234203d3e203234313433.roa (hash: PFrwBt4x6EG8Lnqd7KcG6HCXYGKj6tzV7yZvxGJNUyI=)
4: 36302e3233322e3133322e302f32332d3234203d3e203633353430.roa (hash: apaKvvxupjsq5UR3eCvl0M6COeaUaIt4WSH46noRsyA=)
5: 36302e3233322e3132382e302f31372d3232203d3e203234313433.roa (hash: ByH42KhU84BjARWvSf4oIylPRBp7bQn0rgPvnZhkzS8=)
6: 36302e3233322e3234342e302f32332d3234203d3e203633353430.roa (hash: sl0jjJ5XC+G90VmpUgx0qGVWokTgyUHCf8PLNvfFe7I=)
7: 3130332e32352e33322e302f32322d3234203d3e203234313433.roa (hash: wf1cTqP/fj3lGgy7YzJ5B8bA4GoRnpkTJeCwl6jOLB0=)
8: 323430303a626630303a3a2f33322d3634203d3e2030.roa (hash: b8zI6D91Guisd2Zwj5/eJF7bgYI/GaGgO4oEeGNNR5I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:50:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:62:10:8e:4f:70:90:13:79:b9:c1:35:a4:53:a2:bc:f7:ab:3c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Validity
Not Before: Jul 23 21:34:38 2026 GMT
Not After : Jul 24 22:50:38 2026 GMT
Subject: CN=54A475E781C7114825F2E7B1CE4EF18B2D4781BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:56:93:71:ba:54:3f:d8:13:c4:c6:bc:27:3b:
88:f5:e8:1f:00:6e:ed:57:fa:f5:94:37:4e:1b:1f:
aa:06:b8:19:9f:eb:07:40:d7:6e:d8:92:62:0a:18:
f3:15:7b:79:f2:32:78:20:1c:3d:12:ff:ba:3b:a3:
46:55:76:c8:a5:e0:6b:88:f6:86:3a:a2:0a:c6:6f:
e4:1c:f8:11:e0:12:b8:b8:9e:01:a2:c0:e0:40:52:
a0:92:ae:81:64:0d:37:76:2c:bf:aa:e5:46:b6:a5:
e2:8a:37:e1:90:a3:ec:56:bb:e5:45:7c:65:e1:4e:
9c:27:8b:3b:59:31:08:e1:17:8d:4e:1b:06:6a:c2:
cc:f4:55:98:72:21:4e:08:89:d2:1f:01:97:2e:ad:
1f:25:2f:8c:e3:bc:55:50:09:6a:fa:4c:66:07:cc:
07:08:f7:7f:5e:79:e8:53:d8:42:ea:b1:81:cb:72:
bc:5d:25:85:ca:c6:78:a4:9b:e8:f8:e2:1c:2c:9b:
43:c4:bc:ad:d3:23:bd:d2:8e:09:97:3b:31:b3:bf:
4a:2b:f6:4d:2a:78:1c:72:b1:e8:98:fd:72:04:3f:
84:f5:90:44:ce:b2:27:b1:45:9e:5d:00:5f:0c:9a:
a1:2f:27:30:07:12:07:8f:ac:3b:5f:13:cf:67:48:
0f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A4:75:E7:81:C7:11:48:25:F2:E7:B1:CE:4E:F1:8B:2D:47:81:BA
X509v3 Authority Key Identifier:
keyid:6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:60:97:45:49:c1:52:22:41:77:c8:b6:78:ea:33:7a:d8:7e:
e8:16:e0:c8:c0:c6:d0:a7:90:7e:04:5d:91:33:43:92:7b:ce:
43:d4:4a:9e:61:23:75:79:fc:42:05:b3:af:c3:be:f4:3c:c9:
d8:e1:9f:f1:2d:60:fc:b0:b5:5f:da:8d:e2:c1:ac:57:68:af:
0d:aa:6f:08:b8:3a:bd:ab:cf:36:b5:b3:36:63:72:3e:bb:40:
d6:8a:5d:1d:10:8f:7d:bf:6b:23:5b:83:ff:4a:15:50:e2:79:
fc:8c:e8:3a:be:bd:91:03:fd:8a:2b:33:19:7a:eb:d4:55:9e:
2e:e8:54:57:01:97:c3:8b:60:6c:6d:e3:65:96:45:d0:33:83:
f8:44:38:68:91:12:05:09:17:c5:fb:84:0e:d1:17:3d:7b:d1:
f2:cb:e4:19:11:bd:7a:df:eb:f7:77:11:e7:b6:9a:bf:e6:1b:
11:14:3d:85:f6:c6:7c:46:e8:37:45:48:87:91:84:ac:fb:05:
9e:0c:73:55:fb:d1:48:5d:0d:ca:04:81:f3:64:d1:aa:8e:89:
6a:69:bd:b2:99:43:ce:13:b2:10:23:6e:47:81:26:74:62:06:
44:4c:0a:a0:54:cd:7d:ce:ad:49:28:f8:e0:0a:72:c3:11:57:
6d:55:e0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:43 2026 by rpki-client