$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft File: 6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft (raw, json) Hash identifier: TN4JbfTqyorx1zgSd9z3oCYkza2gGQS7lvN0atwcl3E= Subject key identifier: C9:B9:A2:6C:BC:D0:B4:F3:98:B6:D4:CE:D3:22:EC:8B:DA:AC:EB:0F Authority key identifier: 6F:1B:DE:E7:52:DB:E3:5C:77:30:8D:3A:9B:77:5A:C4:97:B5:0C:04 Certificate issuer: /CN=6F1BDEE752DBE35C77308D3A9B775AC497B50C04 Certificate serial: 04B26EA75654CDBEAF75C9618191B8AFE7DEF3A4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 20:18:28 +0000 Manifest this update: Thu 26 Mar 2026 20:13:28 +0000 Manifest next update: Fri 27 Mar 2026 23:28:28 +0000 Files and hashes: 1: 3136372e3232302e3234342e302f32322d3233203d3e203538383632.roa (hash: S6YeUv7/1SNKdqeM0QDgAM+ogiwASSDMjBMWQQAcs0I=) 2: 6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl (hash: QJpZ/fOf+R17JTpZfh1MJM73RPhU5aDM0JTSaLMwx+g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b2:6e:a7:56:54:cd:be:af:75:c9:61:81:91:b8:af:e7:de:f3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F1BDEE752DBE35C77308D3A9B775AC497B50C04 Validity Not Before: Mar 26 20:13:28 2026 GMT Not After : Mar 27 23:28:28 2026 GMT Subject: CN=C9B9A26CBCD0B4F398B6D4CED322EC8BDAACEB0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d1:70:bd:84:2d:fe:48:b5:54:f0:f4:bf:a1: a3:44:76:1a:86:59:d9:bc:0a:43:3a:9d:9a:1f:3f: ce:4e:84:00:09:a5:7e:9e:2c:5d:14:48:28:86:2d: 4b:39:95:82:ac:12:03:15:05:07:62:e9:80:68:6d: dc:84:da:9c:a5:bf:7a:83:56:86:5e:3d:c3:04:fd: 6d:43:a6:bc:01:93:69:73:96:c3:f4:a9:0f:f4:51: 58:14:06:c7:4b:75:0d:19:fe:47:a6:31:06:3b:b3: 3d:6a:f7:1a:6d:b7:ae:48:ef:37:c5:62:1d:b3:a9: b9:76:c6:fb:e5:b1:3c:ef:ec:2a:89:ce:22:bf:dd: d2:03:18:98:f2:91:89:a2:73:d1:34:08:5a:85:bf: a7:ce:1a:05:98:dc:97:11:a0:e9:8c:ad:c4:aa:bc: 1f:dc:59:e7:63:35:17:8f:72:0c:e9:7c:30:e8:cb: 3c:f3:58:54:ca:0f:19:07:7c:f2:b3:5f:f1:b0:ea: 49:87:82:bb:ae:46:cf:a3:03:50:06:5c:eb:67:05: 66:fe:91:d4:c8:90:84:61:7d:03:6d:af:7e:17:c2: db:54:11:56:d1:65:be:da:dd:7e:b3:93:54:2f:61: b1:1a:fa:6e:8e:41:cc:04:80:12:6e:b3:07:be:1e: fa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B9:A2:6C:BC:D0:B4:F3:98:B6:D4:CE:D3:22:EC:8B:DA:AC:EB:0F X509v3 Authority Key Identifier: keyid:6F:1B:DE:E7:52:DB:E3:5C:77:30:8D:3A:9B:77:5A:C4:97:B5:0C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bf:33:b9:bb:73:e7:c7:6c:1a:fb:60:6b:db:31:ed:0f:b6: 2f:7d:87:94:d4:4b:b4:8c:da:65:80:b0:c9:67:19:76:17:92: 03:e1:75:2a:ee:a7:bf:d6:b6:a2:97:41:1c:0d:35:2c:b8:7b: de:fa:95:10:61:ef:be:da:3b:ba:84:53:62:45:05:39:4b:0b: da:d2:7f:3c:d8:9e:8d:9d:04:1d:46:f7:30:1f:25:4a:d9:2e: 38:d1:55:05:1f:fb:16:f8:f3:42:7f:71:93:2a:72:14:84:e4: d8:be:67:3c:f8:63:69:27:2b:03:b4:26:65:02:c0:18:45:a4: be:da:7c:96:15:65:cb:e9:a9:60:32:e9:75:68:88:fc:f4:ad: 19:38:cf:7f:4a:d4:11:c3:39:51:31:47:38:02:92:e9:87:0b: d9:59:b0:0e:8e:28:f9:dc:45:15:a0:51:a5:53:25:2f:cd:4d: ed:71:87:9d:36:61:12:db:41:89:60:3d:79:99:b1:84:84:4c: b7:bf:85:6e:73:3d:b6:6a:2a:b2:8d:92:76:f5:30:42:ca:fe: 38:2e:16:40:93:42:5d:da:cb:ac:a1:c8:e1:10:16:e4:a9:99: e7:03:17:f3:ef:ab:97:27:d2:3f:fe:43:5c:03:cb:fb:22:df: 7e:79:04:b5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBLJup1ZUzb6vdclhgZG4r+fe86QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYxQkRFRTc1MkRCRTM1Qzc3MzA4RDNBOUI3NzVBQzQ5 N0I1MEMwNDAeFw0yNjAzMjYyMDEzMjhaFw0yNjAzMjcyMzI4MjhaMDMxMTAvBgNV BAMTKEM5QjlBMjZDQkNEMEI0RjM5OEI2RDRDRUQzMjJFQzhCREFBQ0VCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH0XC9hC3+SLVU8PS/oaNEdhqG Wdm8CkM6nZofP85OhAAJpX6eLF0USCiGLUs5lYKsEgMVBQdi6YBobdyE2pylv3qD VoZePcME/W1DprwBk2lzlsP0qQ/0UVgUBsdLdQ0Z/kemMQY7sz1q9xptt65I7zfF Yh2zqbl2xvvlsTzv7CqJziK/3dIDGJjykYmic9E0CFqFv6fOGgWY3JcRoOmMrcSq vB/cWedjNRePcgzpfDDoyzzzWFTKDxkHfPKzX/Gw6kmHgruuRs+jA1AGXOtnBWb+ kdTIkIRhfQNtr34XwttUEVbRZb7a3X6zk1QvYbEa+m6OQcwEgBJuswe+HvpLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUybmibLzQtPOYttTO0yLsi9qs6w8wHwYDVR0j BBgwFoAUbxve51Lb41x3MI06m3daxJe1DAQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDM5MjU3OS8xLzZGMUJERUU3NTJEQkUzNUM3NzMwOEQzQTlCNzc1 QUM0OTdCNTBDMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNkYxQkRFRTc1MkRCRTM1Qzc3MzA4RDNBOUI3NzVBQzQ5N0I1MEMwNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMS82RjFCREVFNzUyREJF MzVDNzczMDhEM0E5Qjc3NUFDNDk3QjUwQzA0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALL8zubtz58ds Gvtga9sx7Q+2L32HlNRLtIzaZYCwyWcZdheSA+F1Ku6nv9a2opdBHA01LLh73vqV EGHvvto7uoRTYkUFOUsL2tJ/PNiejZ0EHUb3MB8lStkuONFVBR/7FvjzQn9xkypy FITk2L5nPPhjaScrA7QmZQLAGEWkvtp8lhVly+mpYDLpdWiI/PStGTjPf0rUEcM5 UTFHOAKS6YcL2VmwDo4o+dxFFaBRpVMlL81N7XGHnTZhEttBiWA9eZmxhIRMt7+F bnM9tmoqso2SdvUwQsr+OC4WQJNCXdrLrKHI4RAW5KmZ5wMX8++rlyfSP/5DXAPL +yLffnkEtQ== -----END CERTIFICATE-----Generated at Fri Mar 27 01:57:55 2026 by rpki-client