$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft File: 6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft (raw, json) Hash identifier: fSDYIjLMgQ0R1kB10MrVgHJGgmQmGBwqikBU8sTov/0= Subject key identifier: 65:7F:64:6D:63:91:B0:DD:65:AC:9E:98:59:47:68:A5:4F:BC:34:86 Authority key identifier: 6F:1B:DE:E7:52:DB:E3:5C:77:30:8D:3A:9B:77:5A:C4:97:B5:0C:04 Certificate issuer: /CN=6F1BDEE752DBE35C77308D3A9B775AC497B50C04 Certificate serial: 4C89F3853BECE39F04DE8602D25778306CB7E1AA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft Manifest number: 99 Signing time: Wed 13 May 2026 12:56:04 +0000 Manifest this update: Wed 13 May 2026 12:51:04 +0000 Manifest next update: Thu 14 May 2026 14:44:04 +0000 Files and hashes: 1: 3136372e3232302e3234342e302f32322d3233203d3e203538383632.roa (hash: S6YeUv7/1SNKdqeM0QDgAM+ogiwASSDMjBMWQQAcs0I=) 2: 6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl (hash: P4UEC+Qj/lUyZj0V4YUqZgH6iGO0p9x9CS27pmP58Bw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 12:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:89:f3:85:3b:ec:e3:9f:04:de:86:02:d2:57:78:30:6c:b7:e1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F1BDEE752DBE35C77308D3A9B775AC497B50C04 Validity Not Before: May 13 12:51:04 2026 GMT Not After : May 14 14:44:04 2026 GMT Subject: CN=657F646D6391B0DD65AC9E98594768A54FBC3486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:c6:44:73:16:43:43:c0:75:0d:6a:f2:dd: 6b:87:a5:d3:5c:17:17:9e:fe:1a:9f:e9:d6:ab:ab: 39:70:80:a1:e9:c8:c9:03:56:f5:6d:e9:0c:60:1a: be:e1:de:63:e7:71:ec:02:a4:d7:bc:5c:54:6d:d7: 62:93:be:e5:ef:9c:95:32:d6:fb:0b:1a:fc:c5:72: e0:6c:b3:ef:2c:f2:68:35:dd:20:19:aa:10:ac:b4: d4:ab:5f:d7:61:b0:37:8a:9f:a4:34:a9:aa:81:5f: 40:0c:c2:bb:cd:68:1b:b7:fa:5c:ac:d5:fd:c2:6a: 37:ff:0c:65:64:39:18:78:80:e5:d7:2b:f2:a4:66: a0:f0:55:7d:59:d1:dd:a8:6a:fa:0e:ec:6f:12:21: 8a:f6:65:94:f0:74:d9:94:8c:2f:2f:f6:83:69:af: 4b:db:45:15:4f:b9:79:56:c7:95:95:d4:11:bc:85: 97:a8:e5:ca:0f:f9:3b:ed:63:36:18:17:6c:85:c0: a7:bf:3e:f4:2f:72:55:d1:94:17:56:0f:14:b4:78: 9f:98:b3:bc:d1:47:1d:6c:58:fe:85:90:68:ad:45: 58:74:34:f8:ab:a1:d3:37:f3:0c:80:72:73:d7:02: 4e:2a:94:fa:84:3b:a0:45:6d:7a:1c:8a:c0:3b:6f: 3a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7F:64:6D:63:91:B0:DD:65:AC:9E:98:59:47:68:A5:4F:BC:34:86 X509v3 Authority Key Identifier: keyid:6F:1B:DE:E7:52:DB:E3:5C:77:30:8D:3A:9B:77:5A:C4:97:B5:0C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:96:dd:54:ad:29:bf:6d:e5:11:93:38:49:29:8f:b3:36:21: 6a:1a:ed:84:4d:6e:e6:ab:6a:6a:5c:a6:da:80:78:af:3f:19: b6:4f:56:ee:8e:c5:91:cb:47:14:e4:1d:6a:07:2f:ad:f8:85: 71:3b:40:85:c1:b7:7f:38:6f:f3:0d:c2:16:47:8a:9d:64:c4: fa:50:0b:8a:f2:72:bf:89:ec:9b:c7:4e:31:52:94:49:38:88: 67:ee:2f:3d:6f:39:4a:53:7e:f5:25:3c:1c:1c:5d:78:91:17: 63:78:3d:bb:94:b2:61:59:51:8e:d6:37:a8:43:1b:7e:c6:91: 1d:71:ae:e2:e4:9f:b7:cf:53:7c:8e:cd:ce:86:66:74:01:75: 06:14:79:bb:64:30:f2:11:9f:78:0d:56:12:bd:e1:9f:00:26: 51:e4:35:70:92:8d:9f:bf:aa:6b:73:35:c4:3d:96:84:9d:2f: 25:2a:30:5b:76:a5:b9:e0:48:1c:b0:13:c7:fb:b9:00:c0:24: d6:a0:ea:d4:d6:dd:15:db:46:7f:9e:b5:92:51:ac:7a:94:16: 72:b8:d5:44:54:b8:e2:68:35:1b:36:b7:f0:e6:4a:be:36:c0: ea:52:36:b3:cf:20:34:7c:fe:c4:db:73:09:e1:bc:5d:fa:77: da:2e:0c:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTInzhTvs458E3oYC0ld4MGy34aowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYxQkRFRTc1MkRCRTM1Qzc3MzA4RDNBOUI3NzVBQzQ5 N0I1MEMwNDAeFw0yNjA1MTMxMjUxMDRaFw0yNjA1MTQxNDQ0MDRaMDMxMTAvBgNV BAMTKDY1N0Y2NDZENjM5MUIwREQ2NUFDOUU5ODU5NDc2OEE1NEZCQzM0ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ecZEcxZDQ8B1DWry3WuHpdNc Fxee/hqf6darqzlwgKHpyMkDVvVt6QxgGr7h3mPncewCpNe8XFRt12KTvuXvnJUy 1vsLGvzFcuBss+8s8mg13SAZqhCstNSrX9dhsDeKn6Q0qaqBX0AMwrvNaBu3+lys 1f3Cajf/DGVkORh4gOXXK/KkZqDwVX1Z0d2oavoO7G8SIYr2ZZTwdNmUjC8v9oNp r0vbRRVPuXlWx5WV1BG8hZeo5coP+TvtYzYYF2yFwKe/PvQvclXRlBdWDxS0eJ+Y s7zRRx1sWP6FkGitRVh0NPirodM38wyAcnPXAk4qlPqEO6BFbXocisA7bzrdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZX9kbWORsN1lrJ6YWUdopU+8NIYwHwYDVR0j BBgwFoAUbxve51Lb41x3MI06m3daxJe1DAQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDM5MjU3OS8xLzZGMUJERUU3NTJEQkUzNUM3NzMwOEQzQTlCNzc1 QUM0OTdCNTBDMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNkYxQkRFRTc1MkRCRTM1Qzc3MzA4RDNBOUI3NzVBQzQ5N0I1MEMwNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMS82RjFCREVFNzUyREJF MzVDNzczMDhEM0E5Qjc3NUFDNDk3QjUwQzA0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA55bdVK0pv23l EZM4SSmPszYhahrthE1u5qtqalym2oB4rz8Ztk9W7o7FkctHFOQdagcvrfiFcTtA hcG3fzhv8w3CFkeKnWTE+lALivJyv4nsm8dOMVKUSTiIZ+4vPW85SlN+9SU8HBxd eJEXY3g9u5SyYVlRjtY3qEMbfsaRHXGu4uSft89TfI7NzoZmdAF1BhR5u2Qw8hGf eA1WEr3hnwAmUeQ1cJKNn7+qa3M1xD2WhJ0vJSowW3alueBIHLATx/u5AMAk1qDq 1NbdFdtGf561klGsepQWcrjVRFS44mg1Gza38OZKvjbA6lI2s88gNHz+xNtzCeG8 Xfp32i4Mpg== -----END CERTIFICATE-----Generated at Wed May 13 19:15:51 2026 by rpki-client