
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
File: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft (raw, json)
Hash identifier: 00OOnSYp7Njka8NDw4bcKbrAd7s8gHmJCp7eIeB6U+U=
Subject key identifier: B2:AC:FC:03:70:29:E5:A2:69:8A:1B:64:45:A0:CB:B8:E6:6B:08:82
Authority key identifier: 6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C
Certificate issuer: /CN=A91EFAA20000/serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C
Certificate serial: 392BF838C236C6915D85EDB6D6354C64E5ADBBE4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
Manifest number: 1E
Signing time: Tue 12 May 2026 11:53:56 +0000
Manifest this update: Tue 12 May 2026 11:48:56 +0000
Manifest next update: Wed 13 May 2026 12:09:56 +0000
Files and hashes: 1: 3230332e39342e302e302f31392d3139203d3e203137373339.roa (hash: +m3tQEFjHE7EvQqZt5ZFMX5uxgUV2P9Xu/hnIBd3mN4=)
2: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl (hash: wL04UREyGNX2RG6mUCCfYi+PkKBZzNZxwTiGkcOhPso=)
3: 323430373a343838303a3a2f33322d3332203d3e2030.roa (hash: ijCaVomoD4Gp49iRFc8q+IjUsH7ACZllQmvyC2Sz9cQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl
rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 12:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:2b:f8:38:c2:36:c6:91:5d:85:ed:b6:d6:35:4c:64:e5:ad:bb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFAA20000, serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C
Validity
Not Before: May 12 11:48:56 2026 GMT
Not After : May 13 12:09:56 2026 GMT
Subject: CN=B2ACFC037029E5A2698A1B6445A0CBB8E66B0882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:6e:c4:b3:6f:f8:c5:d8:94:a9:ce:eb:19:
08:31:dd:24:e0:a2:ba:ea:e7:f9:29:77:95:09:d0:
0b:f7:53:5c:71:38:6a:a9:1b:05:fe:50:fd:be:c5:
d8:90:2e:bd:de:80:dd:0c:a7:60:ed:f2:33:08:65:
1e:e4:80:9b:82:43:ca:d0:bb:27:71:ed:e9:02:65:
bc:ab:3f:fb:70:8c:8c:fc:be:12:95:2c:02:54:b7:
2a:18:c9:b9:f4:a2:81:5e:88:69:df:a2:bb:36:9d:
51:42:d5:71:a3:80:28:52:b4:72:61:17:c4:1f:f7:
1b:9d:fb:d5:b6:5b:80:73:17:94:2b:a1:bc:f8:a3:
1d:81:fb:d9:57:57:66:3d:70:1b:58:60:65:ec:f5:
30:76:f4:10:aa:7c:8a:3a:0f:fd:69:77:01:c0:78:
7b:a7:51:9e:16:5d:60:4d:a0:91:5a:96:7e:a0:7c:
62:59:cb:f0:68:44:8b:7b:aa:4b:df:0f:24:c4:3f:
2a:8c:2a:2a:ca:56:76:b2:c4:05:02:49:f5:82:87:
d5:0c:e1:ae:4c:ba:2c:cc:37:e3:6f:8c:a4:b0:94:
f4:7c:da:78:8b:0b:15:50:a0:f7:75:c8:b5:e9:b4:
ee:e9:51:d9:f5:b5:22:57:85:df:32:a6:30:e5:e4:
53:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AC:FC:03:70:29:E5:A2:69:8A:1B:64:45:A0:CB:B8:E6:6B:08:82
X509v3 Authority Key Identifier:
keyid:6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:17:c8:f6:82:ce:6b:87:06:f7:f7:37:47:9c:6d:1a:18:47:
ab:2d:cd:09:3f:1e:f5:f7:31:24:8d:9d:a5:15:59:3c:5f:ff:
e9:96:7d:3a:12:8c:2f:af:0f:21:5c:45:ea:6c:eb:86:0d:cb:
c3:84:3f:81:2a:4a:78:63:59:d3:ae:12:c4:6a:f0:27:c5:ad:
9e:d9:a5:bb:79:72:3f:4e:ca:a1:a2:c6:a8:10:cc:0a:b3:16:
18:61:d3:88:1d:86:d8:c5:ba:1d:33:a7:61:ce:98:1b:bc:9c:
71:8c:74:07:c3:8b:c2:f3:34:7e:a2:f7:97:e9:60:a3:a7:b3:
d4:5c:51:63:5a:9f:74:69:2a:1b:a0:57:71:37:8f:6d:c3:dd:
b6:c4:cd:d7:26:39:47:7c:3c:fc:0b:49:ac:c2:b7:1d:7d:b4:
b6:17:7c:6d:c1:7b:d0:2e:b0:95:35:07:b1:83:40:33:b4:9f:
53:58:01:67:fc:38:d6:c7:b8:f9:b4:24:72:55:48:80:8e:02:
05:23:ea:ba:ee:98:4f:0a:f4:89:b8:d1:23:47:3d:df:f3:28:
48:88:9e:08:9d:ed:cf:ea:1e:ad:45:00:f0:a4:19:99:1b:3e:
30:68:52:79:0b:08:71:75:1e:7b:d6:08:2c:bb:9d:5d:83:c0:
7f:38:db:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:12:12 2026 by rpki-client