
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
File: 060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft (raw, json)
Hash identifier: Q0b74pzuc1ycsCSmdaIgzcduaF2vyZXf3+6eHZoumto=
Subject key identifier: 3A:92:AB:92:FF:E1:12:91:F0:59:96:08:F6:EF:30:1A:25:2F:8A:EF
Authority key identifier: 06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD
Certificate issuer: /CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
Certificate serial: 5A5D30D54D540BBED1B4C769CF08D9F315DAAA0C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
Manifest number: B6
Signing time: Mon 28 Sep 2026 13:45:48 +0000
Manifest this update: Mon 28 Sep 2026 13:40:48 +0000
Manifest next update: Thu 01 Oct 2026 18:19:48 +0000
Files and hashes: 1: 060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl (hash: JTnc3b+bQGZ0nmcqHH+sNX0GtvwQvX/lGhpSKEZUiOI=)
2: 3135372e3131392e3137322e302f32322d3232203d3e2034383437.roa (hash: nfHPWryodoQGAWIQEwiQs1RdM4fk6gLb4mCgk+4BsD4=)
3: 323430343a653738303a3a2f33322d3332203d3e2030.roa (hash: jDt2YO5IfWb4E+JvZ4HL3Mb4PviL245jOkb90zp1nDg=)
4: 3130312e34392e3134382e302f32332d3233203d3e2034383437.roa (hash: hD8pipimoNbXJuFtKR22JqYH5vAkWdps2g2kY8PbheI=)
5: 3130312e34392e3132382e302f31382d3138203d3e2030.roa (hash: EQ/aHDyPfGrqHqi7zcwJ4BpwFk8LfHUqOf3EobqjPg4=)
6: 3130332e3231362e34302e302f32322d3232203d3e2030.roa (hash: CJGUWXnox0zuB6o/j+gb69TVgAVyeUqTs1YSv3rOyk4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl
rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:5d:30:d5:4d:54:0b:be:d1:b4:c7:69:cf:08:d9:f3:15:da:aa:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
Validity
Not Before: Sep 28 13:40:48 2026 GMT
Not After : Oct 1 18:19:48 2026 GMT
Subject: CN=3A92AB92FFE11291F0599608F6EF301A252F8AEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c9:b7:db:18:69:7e:56:96:3b:cb:23:f5:88:
33:88:96:5d:00:14:45:a9:04:bc:d6:8e:aa:79:ac:
e2:69:91:f8:fc:56:ed:35:85:1f:8b:10:4a:ee:c8:
37:11:83:e6:a0:c1:5c:b8:19:85:7d:50:43:12:8c:
47:4d:d6:26:d2:6e:f5:1e:de:e0:03:3b:dd:f3:c3:
f5:43:d2:eb:57:54:dd:e3:95:30:7a:22:ea:48:cf:
a7:ec:92:44:b7:62:8a:2f:ff:04:a4:b0:ee:5c:88:
40:ba:e0:de:73:50:46:02:fb:4e:9d:e9:ad:4a:62:
b7:d5:e9:80:cb:5a:62:ad:9b:e6:69:a6:42:04:69:
a1:c9:a5:f9:e9:62:2e:ae:34:bb:ed:50:48:d8:87:
96:ea:38:4e:5e:29:39:dc:a5:bd:f5:7a:ac:c7:17:
77:2a:e9:5c:d9:1b:42:4c:23:30:12:4f:ac:33:49:
36:37:80:51:67:68:38:0d:60:3a:07:05:11:38:25:
b5:d3:3b:05:74:fe:bd:e9:15:c9:b1:5e:a9:f7:8b:
a3:e1:cb:52:9b:98:79:bc:3c:70:fa:80:6a:f3:51:
fb:cd:ab:31:5c:8e:75:8f:d1:72:e6:c1:5f:a6:1c:
4e:c9:a6:fd:a3:79:f8:3d:a1:51:78:98:7e:b5:13:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:92:AB:92:FF:E1:12:91:F0:59:96:08:F6:EF:30:1A:25:2F:8A:EF
X509v3 Authority Key Identifier:
keyid:06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ad:9e:46:31:04:bd:6c:ff:31:75:b7:47:51:f8:ea:03:bc:
47:78:1e:c5:3b:74:c4:83:f2:a1:2e:1d:96:eb:9c:2e:e5:d6:
15:ce:c6:0c:6e:ab:29:90:e9:77:5b:4a:f2:7d:39:39:36:0e:
f9:ae:94:5d:04:d7:6c:dc:44:87:80:51:de:8b:84:59:4c:92:
f8:9b:9f:70:86:fc:17:38:4e:52:59:58:d7:6d:46:53:b8:2d:
f0:d3:31:a5:17:d1:dc:9c:59:29:43:29:63:fd:b1:d4:52:a6:
52:2b:05:5d:1e:02:be:0e:fa:8f:30:e7:e8:35:80:cc:bf:71:
3c:9e:d9:48:b9:62:55:a0:17:3a:5d:2b:f1:2d:cc:55:b0:30:
8f:ca:0e:d2:40:6e:8e:c2:f8:ce:11:62:7c:c6:d4:bc:67:1a:
40:48:1d:05:09:45:7e:20:60:ad:aa:e3:5a:a9:c9:ef:f6:45:
af:03:c6:03:8f:7a:3b:a4:da:53:ae:f9:1a:e2:6f:fc:31:65:
6a:99:3b:9b:93:1c:07:10:d4:f0:52:43:7f:d4:c6:ba:02:b4:
43:5f:b7:1c:31:78:41:ab:0d:a1:ee:7e:12:58:e5:28:33:e9:
c3:1c:01:83:a6:4a:0f:ac:97:14:35:12:21:75:1c:0b:0b:b0:
4b:d6:37:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:13:04 2026 by rpki-client