$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft File: 6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft (raw, json) Hash identifier: l+VgK1iP4U/PcwE5hKqsQ4omgKe23AtV8oNyqjNY+5k= Subject key identifier: DE:F9:F5:F4:EB:03:DA:AD:8E:FB:33:3E:80:98:AF:B1:AC:0D:65:87 Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Certificate serial: 03879E3701896D53940EDDA2A16451DEEA3AA490 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft Manifest number: 58 Signing time: Thu 26 Mar 2026 12:48:28 +0000 Manifest this update: Thu 26 Mar 2026 12:43:28 +0000 Manifest next update: Fri 27 Mar 2026 16:13:28 +0000 Files and hashes: 1: 3231392e37322e302e302f31362d3136203d3e2034383437.roa (hash: E35Ak8kryIUI2zOXyOabRVR/vhDEn+uGa0zCN0KdzcM=) 2: 3132302e34352e302e302f31362d3136203d3e2034383437.roa (hash: e3k7Iz2AbcrOnzEC7lCU4UO8ip/XOhRamxgrg+OBUAg=) 3: 3132302e34352e302e302f31362d3136203d3e203138313138.roa (hash: C4rcAlSgZV7754y5uPyyWtQVibM3t4nZdIrXFXZoZ7Q=) 4: 6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl (hash: 8EDFJKbDPeFZbJIWf4ZBhjw487q3BdMY31AHI1/lRT0=) 5: 3231392e37322e302e302f31362d3136203d3e203138313138.roa (hash: 3fGts9fS3mm4peYPa5y25NpoXBF5DOH88ZO6sDHG1lc=) 6: 3231392e37322e3136302e302f32342d3234203d3e203138313138.roa (hash: 8dtxM9VRFS14jXgTL0jlExD+rRZPerBYVc3WFemUOQQ=) 7: 3132302e34372e302e302f31362d3136203d3e203138313138.roa (hash: Ft5CLZw9t2CRUNmavoaGZC/hKN+eHg2+xR6CvXnjcRI=) 8: 3231392e37322e3136302e302f32342d3234203d3e20333938373034.roa (hash: d/cQSMYNBX/wZD+QYHNeyKRe0x+03uT3D/Oy6lO4iy8=) 9: 3132302e34372e302e302f31362d3136203d3e2034383437.roa (hash: lv7hLgB4DhaCLKjg4xf3dfIw4sVemT9lRXa3jqlxqXA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:87:9e:37:01:89:6d:53:94:0e:dd:a2:a1:64:51:de:ea:3a:a4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Validity Not Before: Mar 26 12:43:28 2026 GMT Not After : Mar 27 16:13:28 2026 GMT Subject: CN=DEF9F5F4EB03DAAD8EFB333E8098AFB1AC0D6587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:e8:37:91:15:92:6c:7e:93:dc:01:ff:3c: 82:c4:40:d0:e2:a7:61:4c:ec:ba:d9:eb:32:8d:9e: 25:d5:2a:b7:dd:a5:4b:b0:c7:43:82:2c:48:22:8e: 93:2c:d3:9e:dc:cd:ca:05:b7:65:fd:c0:2f:27:44: 1a:df:41:60:d9:5c:40:f5:f0:41:3d:9e:61:1e:0b: 7e:ab:95:88:82:dc:84:69:c8:2a:6f:6d:ce:16:fd: d9:d5:31:2e:0d:b2:8c:83:18:5c:d3:96:39:77:77: 35:37:2a:01:c9:e7:d5:74:1c:10:2e:86:99:1c:df: 5c:b9:e6:98:b2:c8:b6:22:90:cc:04:c4:c9:6d:dd: c0:b1:28:db:56:81:3b:aa:71:27:30:75:5f:1d:e2: 43:c6:d3:27:d2:c2:f2:fd:c1:29:20:32:21:ef:38: 52:9a:df:38:88:9b:f3:02:8a:0d:42:2c:13:83:33: 82:d6:14:10:ad:e7:a3:59:95:9f:e4:7c:bd:54:56: af:7d:36:88:bb:09:e2:d2:73:58:3f:bf:7b:3d:23: 7a:66:7c:1b:c9:c1:ad:55:26:ef:b7:03:fe:6a:b6: 2b:42:aa:9a:52:c3:db:c5:a1:aa:03:45:56:5f:81: 5f:58:12:a7:d4:30:39:88:2b:9c:9c:94:17:28:2f: 3b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F9:F5:F4:EB:03:DA:AD:8E:FB:33:3E:80:98:AF:B1:AC:0D:65:87 X509v3 Authority Key Identifier: keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:7f:23:eb:71:da:85:53:5a:fc:18:ca:da:0a:95:ce:81:d5: f2:c2:c7:7d:01:97:be:e0:af:6b:18:e4:0e:1a:b1:04:41:48: dc:90:18:e5:63:b7:db:04:cc:a9:70:9f:68:a9:48:c7:ea:5d: e1:6c:6c:f2:20:21:37:e2:f2:07:03:ec:38:51:06:a1:a0:9c: 84:11:97:89:f0:ec:e0:5c:3e:11:4b:a0:83:6c:e3:f9:b9:ef: 8e:a9:b4:e2:6c:29:5d:5d:51:cb:20:2f:21:7a:14:df:f8:cb: 12:0c:a4:d9:78:7a:53:ed:35:f9:dd:64:b8:a8:d6:57:df:0a: 6c:d4:73:b3:fb:da:83:28:3f:f2:84:b8:e3:a5:eb:54:56:09: 4a:6c:3f:b7:9b:06:e8:57:26:5d:89:40:1b:61:fe:ba:15:3d: 58:a4:7c:62:ec:f7:d9:b8:30:6e:54:0e:dc:7f:ee:99:84:30: 29:2e:9f:4f:a3:95:8b:20:d0:33:90:f3:e7:d5:61:31:2a:72: 0a:68:28:44:8d:0d:c8:cb:6d:15:25:b1:4c:9d:57:b5:b9:0e: 5a:6c:54:fa:0f:01:2a:46:c0:ec:f4:4d:30:9b:c5:37:82:e1: 0a:71:b2:50:6d:c4:d1:36:c9:22:5a:6f:fc:f1:79:21:5e:5f: a1:a7:74:9a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA4eeNwGJbVOUDt2ioWRR3uo6pJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE MTQxRjVENTAeFw0yNjAzMjYxMjQzMjhaFw0yNjAzMjcxNjEzMjhaMDMxMTAvBgNV BAMTKERFRjlGNUY0RUIwM0RBQUQ4RUZCMzMzRTgwOThBRkIxQUMwRDY1ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePug3kRWSbH6T3AH/PILEQNDi p2FM7LrZ6zKNniXVKrfdpUuwx0OCLEgijpMs057czcoFt2X9wC8nRBrfQWDZXED1 8EE9nmEeC36rlYiC3IRpyCpvbc4W/dnVMS4NsoyDGFzTljl3dzU3KgHJ59V0HBAu hpkc31y55piyyLYikMwExMlt3cCxKNtWgTuqcScwdV8d4kPG0yfSwvL9wSkgMiHv OFKa3ziIm/MCig1CLBODM4LWFBCt56NZlZ/kfL1UVq99Noi7CeLSc1g/v3s9I3pm fBvJwa1VJu+3A/5qtitCqppSw9vFoaoDRVZfgV9YEqfUMDmIK5yclBcoLzs/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3vn19OsD2q2O+zM+gJivsawNZYcwHwYDVR0j BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyMDk3MjkvMC82QjU3RUFEN0IzODMx OTI2OUFFOTNBM0UyNkZCMzk2N0QxNDFGNUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU38j63HahVNa /BjK2gqVzoHV8sLHfQGXvuCvaxjkDhqxBEFI3JAY5WO32wTMqXCfaKlIx+pd4Wxs 8iAhN+LyBwPsOFEGoaCchBGXifDs4Fw+EUugg2zj+bnvjqm04mwpXV1RyyAvIXoU 3/jLEgyk2Xh6U+01+d1kuKjWV98KbNRzs/vagyg/8oS446XrVFYJSmw/t5sG6Fcm XYlAG2H+uhU9WKR8Yuz32bgwblQO3H/umYQwKS6fT6OViyDQM5Dz59VhMSpyCmgo RI0NyMttFSWxTJ1XtbkOWmxU+g8BKkbA7PRNMJvFN4LhCnGyUG3E0TbJIlpv/PF5 IV5foad0mg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:11:33 2026 by rpki-client