
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
File: 6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft (raw, json)
Hash identifier: SM541AIzDw5t7+s4JTrYpAfMcsR9+vnQPfUb/2HrgpM=
Subject key identifier: 7B:7A:22:2F:0C:23:90:BD:CF:62:0A:B3:70:91:3C:29:4E:00:39:10
Authority key identifier: 6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
Certificate issuer: /CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Certificate serial: 314B777D589FB594B2F5C27DCDEA57CA55E87557
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
Manifest number: 89
Signing time: Fri 24 Jul 2026 14:51:29 +0000
Manifest this update: Fri 24 Jul 2026 14:46:29 +0000
Manifest next update: Sat 25 Jul 2026 15:08:29 +0000
Files and hashes: 1: 3230322e3133362e34382e302f32322d3234203d3e203234313433.roa (hash: PFrwBt4x6EG8Lnqd7KcG6HCXYGKj6tzV7yZvxGJNUyI=)
2: 36302e3233322e3133322e302f32332d3234203d3e203633353430.roa (hash: apaKvvxupjsq5UR3eCvl0M6COeaUaIt4WSH46noRsyA=)
3: 36302e3233322e3132382e302f31372d3232203d3e203234313433.roa (hash: ByH42KhU84BjARWvSf4oIylPRBp7bQn0rgPvnZhkzS8=)
4: 3130332e32352e33322e302f32322d3234203d3e203234313433.roa (hash: wf1cTqP/fj3lGgy7YzJ5B8bA4GoRnpkTJeCwl6jOLB0=)
5: 3230322e3133362e34382e302f32302d3234203d3e203234313433.roa (hash: kXzf8yQaI3V74mWAiZJh4sv0ugmfibkN4QVTR1OfWyg=)
6: 6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl (hash: pTNDpxhWvBdu0IHb/rUwgD60WXrk2W7Xy84I07Q4c3w=)
7: 323430303a626630303a3a2f33322d3634203d3e2030.roa (hash: b8zI6D91Guisd2Zwj5/eJF7bgYI/GaGgO4oEeGNNR5I=)
8: 36302e3233322e3234342e302f32332d3234203d3e203633353430.roa (hash: sl0jjJ5XC+G90VmpUgx0qGVWokTgyUHCf8PLNvfFe7I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4b:77:7d:58:9f:b5:94:b2:f5:c2:7d:cd:ea:57:ca:55:e8:75:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Validity
Not Before: Jul 24 14:46:29 2026 GMT
Not After : Jul 25 15:08:29 2026 GMT
Subject: CN=7B7A222F0C2390BDCF620AB370913C294E003910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:b0:90:83:cf:97:e2:36:3b:f1:0e:4e:48:
6c:5c:79:3d:36:6f:77:68:32:f0:da:89:3a:9a:7b:
1a:ea:af:cc:31:6b:91:8c:0d:d2:a1:2a:92:09:82:
b8:29:ed:f0:db:60:a3:be:19:76:3e:32:d9:20:0a:
de:38:eb:f6:9e:5c:00:05:c7:da:2a:63:ec:9f:68:
af:3a:5c:81:c3:97:1b:1b:5e:cf:a2:0a:cd:95:6b:
3e:15:10:ca:98:ae:f0:9b:5b:c0:f1:25:45:f2:83:
e6:5a:fc:2b:bf:e2:d8:3b:f9:f7:e0:8f:1a:a6:9d:
b0:d9:91:21:2c:d1:30:df:66:1e:2f:5b:68:81:1e:
58:cc:cc:ec:c9:7c:02:9a:3b:55:3f:b4:53:9a:a7:
08:d3:7b:6c:fe:6f:86:9a:4e:73:3a:e5:1d:bb:22:
40:b3:77:f6:02:29:e4:09:d7:f2:04:a9:66:12:f8:
99:99:6a:21:de:7f:3c:00:88:da:ba:75:b3:7c:d0:
bc:e9:15:7e:0b:6d:28:93:01:9a:1a:34:54:a1:47:
cc:57:0b:c0:ca:06:fe:ff:8b:de:3c:5a:1b:7a:6f:
96:5d:f7:91:65:12:b8:a4:05:98:2f:74:2c:3e:df:
ce:f9:e2:11:a6:fe:3f:27:64:b9:ac:73:ab:5c:7b:
29:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7A:22:2F:0C:23:90:BD:CF:62:0A:B3:70:91:3C:29:4E:00:39:10
X509v3 Authority Key Identifier:
keyid:6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:79:79:02:30:b6:65:f2:44:e3:c5:82:6e:7e:c2:77:15:a8:
18:4d:1b:7d:e2:e4:4a:66:c8:01:d1:6f:9a:cc:27:74:d0:ab:
88:d4:6f:e9:26:e8:d0:0c:bc:28:c0:fa:f7:68:d0:8e:6f:fe:
b8:ae:01:3d:4e:02:4a:8d:4c:d6:c0:01:ad:72:eb:31:4e:07:
1f:10:14:08:79:58:40:ea:96:ec:f1:88:d8:92:94:6c:78:5a:
95:5c:52:23:3b:57:04:bf:88:c8:ac:9a:1d:93:3b:af:f2:23:
c1:5a:fb:38:e7:d4:c4:9e:ff:04:21:cc:ec:96:ad:1e:84:e5:
5a:48:e7:66:02:b8:4d:cb:bf:4b:31:ef:a4:d7:5e:b6:c2:40:
08:7d:af:85:7e:15:ac:fd:87:12:14:98:e1:92:46:69:66:bb:
a2:f1:f2:c3:f9:fe:e1:b3:ee:24:68:6f:b8:26:2b:01:9b:31:
70:49:2d:d7:8c:9a:58:ea:5d:2d:16:a7:e0:cc:5b:fd:e3:d6:
35:ab:06:c3:30:d3:a9:e8:09:2d:00:6e:a8:21:e4:ea:e5:5d:
c8:ad:25:0e:c4:df:35:2b:e2:92:25:c0:49:af:12:36:21:e6:
52:34:c1:b3:05:47:70:91:f8:0c:a1:d8:2f:40:46:27:d3:b2:
e0:2a:75:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:38 2026 by rpki-client