$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft File: 6E171695D3EF09F7A49B6AF0022DA63420988631.mft (raw, json) Hash identifier: 55/ImBqfbnnrbmI6xcBxXPuCRqPyJsQJrO//fgNoWpk= Subject key identifier: 76:F5:D1:26:4C:AD:3C:BB:55:AC:24:63:83:7E:CA:0B:02:35:91:D6 Authority key identifier: 6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31 Certificate issuer: /CN=6E171695D3EF09F7A49B6AF0022DA63420988631 Certificate serial: 4F7F3400FB715E684C44C20404E4CA0D83F64887 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 17:18:28 +0000 Manifest this update: Thu 26 Mar 2026 17:13:28 +0000 Manifest next update: Fri 27 Mar 2026 18:20:28 +0000 Files and hashes: 1: 3130332e3232372e3232382e302f32322d3232203d3e20313331353236.roa (hash: nYDYkZddHjE9LpPNDCfoTzhw2hIepJ22IneS6IcaytI=) 2: 6E171695D3EF09F7A49B6AF0022DA63420988631.crl (hash: Lvk98XJG+LGUgkjCscpDW6A3aj2uiG5LIIa2A+zw3lw=) 3: 323430323a356534303a3a2f33322d3332203d3e20313331353236.roa (hash: 1h4OrgL9zEqJdmEkth2dOBjhiLKByYppiMUDngFpF44=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:7f:34:00:fb:71:5e:68:4c:44:c2:04:04:e4:ca:0d:83:f6:48:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E171695D3EF09F7A49B6AF0022DA63420988631 Validity Not Before: Mar 26 17:13:28 2026 GMT Not After : Mar 27 18:20:28 2026 GMT Subject: CN=76F5D1264CAD3CBB55AC2463837ECA0B023591D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:9a:76:79:3a:c7:00:66:61:4e:3d:9b:3b: 03:31:14:e8:c8:6e:c4:24:94:c9:fa:3d:06:ea:36: aa:ed:2c:9b:d4:0d:48:86:32:52:4d:13:eb:47:f4: d1:8c:03:3b:cc:60:cb:d6:89:10:f1:53:e4:04:dc: b6:b0:85:16:d6:d5:0f:f3:1f:fb:ca:ed:f2:91:af: 6b:1d:10:5e:98:f4:89:fc:de:10:6a:e4:b9:98:f9: 41:c8:95:03:4a:48:c8:b5:a3:d7:6a:ce:0e:0c:36: 8c:d8:06:88:8e:46:7b:44:d5:57:74:4a:de:61:75: 23:90:f7:d0:c0:da:67:91:a2:a2:05:50:57:e0:8f: 6e:25:93:ef:fd:ac:d4:cf:c9:5a:84:bd:3d:f5:a7: 8a:77:e5:66:08:d3:12:c7:7a:d7:09:11:9a:92:55: 26:a2:02:46:6b:ac:4b:4b:23:bf:83:b5:2d:a8:99: 70:36:41:8d:fc:d6:2c:22:0a:db:78:52:da:63:86: 0b:6e:f0:06:a2:99:9b:ef:60:57:80:66:5f:40:df: 51:a9:8d:89:fb:02:c8:f7:d3:9a:a0:a7:d8:e3:37: 86:2e:7c:89:2e:24:70:d0:f4:06:90:6d:4d:3f:39: 5e:70:38:74:b9:a7:61:4c:30:4e:9d:42:67:27:21: dd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:F5:D1:26:4C:AD:3C:BB:55:AC:24:63:83:7E:CA:0B:02:35:91:D6 X509v3 Authority Key Identifier: keyid:6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:8b:39:0f:40:c2:8c:d2:fd:ba:b2:d9:bf:5f:5c:81:d0:b1: 56:42:08:66:43:0e:ea:c6:56:a2:fa:1d:1b:33:f2:78:88:6b: 56:4f:41:27:b3:00:75:20:f5:1b:07:ed:47:a9:21:fe:5d:83: bb:10:30:24:c6:fb:00:6f:5b:2d:4d:52:39:99:06:b6:b2:0f: 16:43:50:c4:a4:8d:4f:81:e6:77:03:60:50:ac:72:51:a3:0b: 0d:45:47:b9:89:84:01:62:72:28:8b:82:f9:5a:70:90:84:6d: 5a:10:6d:50:3b:4e:62:b5:03:cb:43:91:da:7a:b5:59:c5:d8: 2c:ae:b4:3d:18:74:24:60:99:a1:89:bb:13:6f:53:f9:3f:ba: 27:02:7d:03:e8:b6:9a:1d:f5:65:c9:9f:16:b5:52:fc:10:02: a9:cb:a1:5e:48:7d:19:37:1e:51:2e:5d:16:65:3c:d9:eb:87: 06:2e:dc:cf:eb:b2:02:19:44:8b:4e:35:82:b6:26:fd:78:66: 10:11:e8:22:14:a7:bd:9c:a1:78:e5:22:c1:fb:2f:70:7b:b6: 82:99:1f:5a:ac:d3:47:63:6a:f5:70:c7:f1:a3:48:e7:23:08: d4:f0:85:ca:18:33:d0:c7:2d:f9:fe:cf:b9:27:20:5e:15:fb: bb:93:64:ae -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT380APtxXmhMRMIEBOTKDYP2SIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUxNzE2OTVEM0VGMDlGN0E0OUI2QUYwMDIyREE2MzQy MDk4ODYzMTAeFw0yNjAzMjYxNzEzMjhaFw0yNjAzMjcxODIwMjhaMDMxMTAvBgNV BAMTKDc2RjVEMTI2NENBRDNDQkI1NUFDMjQ2MzgzN0VDQTBCMDIzNTkxRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCps5p2eTrHAGZhTj2bOwMxFOjI bsQklMn6PQbqNqrtLJvUDUiGMlJNE+tH9NGMAzvMYMvWiRDxU+QE3LawhRbW1Q/z H/vK7fKRr2sdEF6Y9In83hBq5LmY+UHIlQNKSMi1o9dqzg4MNozYBoiORntE1Vd0 St5hdSOQ99DA2meRoqIFUFfgj24lk+/9rNTPyVqEvT31p4p35WYI0xLHetcJEZqS VSaiAkZrrEtLI7+DtS2omXA2QY381iwiCtt4Utpjhgtu8AaimZvvYFeAZl9A31Gp jYn7Asj305qgp9jjN4YufIkuJHDQ9AaQbU0/OV5wOHS5p2FMME6dQmcnId0JAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdvXRJkytPLtVrCRjg37KCwI1kdYwHwYDVR0j BBgwFoAUbhcWldPvCfekm2rwAi2mNCCYhjEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTQ5NDAxOC8wLzZFMTcxNjk1RDNFRjA5RjdBNDlCNkFGMDAyMkRB NjM0MjA5ODg2MzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkUxNzE2OTVEM0VGMDlGN0E0OUI2QUYwMDIyREE2MzQyMDk4ODYzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE0OTQwMTgvMC82RTE3MTY5NUQzRUYw OUY3QTQ5QjZBRjAwMjJEQTYzNDIwOTg4NjMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYs5D0DCjNL9 urLZv19cgdCxVkIIZkMO6sZWovodGzPyeIhrVk9BJ7MAdSD1GwftR6kh/l2DuxAw JMb7AG9bLU1SOZkGtrIPFkNQxKSNT4HmdwNgUKxyUaMLDUVHuYmEAWJyKIuC+Vpw kIRtWhBtUDtOYrUDy0OR2nq1WcXYLK60PRh0JGCZoYm7E29T+T+6JwJ9A+i2mh31 ZcmfFrVS/BACqcuhXkh9GTceUS5dFmU82euHBi7cz+uyAhlEi041grYm/XhmEBHo IhSnvZyheOUiwfsvcHu2gpkfWqzTR2Nq9XDH8aNI5yMI1PCFyhgz0Mct+f7PuScg XhX7u5Nkrg== -----END CERTIFICATE-----Generated at Fri Mar 27 00:36:03 2026 by rpki-client