$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft File: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft (raw, json) Hash identifier: qPbkhl8T8crLzUB5aLoozD4CYAHnLUSmwOfmhDOq4sE= Subject key identifier: 94:93:9F:5B:E1:5A:41:BF:9C:CA:44:EE:4F:C1:39:89:BF:C3:34:1A Authority key identifier: A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9 Certificate issuer: /CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9 Certificate serial: 70E5B5E2615FF30E602DBA3FC8D4DAFDEE3386B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft Manifest number: 9A Signing time: Wed 13 May 2026 13:21:05 +0000 Manifest this update: Wed 13 May 2026 13:16:05 +0000 Manifest next update: Thu 14 May 2026 14:11:05 +0000 Files and hashes: 1: 3130332e3131302e3133392e302f32342d3234203d3e203539303132.roa (hash: V0EG+w4//opp0LXEw2L6fUoisMZUJ3b1c3mJzeOwhn4=) 2: 323430323a386263303a3a2f33322d3332203d3e203539303132.roa (hash: wRL2RgpwckoaF7H0gvAknICFvQDLSvcARgYe623q+hU=) 3: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl (hash: aQcOmQL63TCgLkJMbXXbjVdnG4/gVHxRzjfxHgwPCK0=) 4: 3130332e3131302e3133382e302f32342d3234203d3e203539303132.roa (hash: 74p3eAG8K0Xrv2nNxKKWTueHZVFekMZMwv9gE8TOGl0=) 5: 3130332e3131302e3133362e302f32322d3232203d3e203539303132.roa (hash: Gq1/YwE5iEcyh5S8JhVPyrDBUdmcenxdUCC+8WtWWiQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e5:b5:e2:61:5f:f3:0e:60:2d:ba:3f:c8:d4:da:fd:ee:33:86:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9 Validity Not Before: May 13 13:16:05 2026 GMT Not After : May 14 14:11:05 2026 GMT Subject: CN=94939F5BE15A41BF9CCA44EE4FC13989BFC3341A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a9:6c:fd:c8:7a:71:13:0d:1d:96:5c:f4:24: 92:87:ce:52:66:ba:45:2f:b6:d9:32:01:94:19:2e: 44:b2:cb:da:7c:1c:e6:35:44:f3:96:be:b2:a3:50: 3d:51:88:f0:a0:3d:38:82:b1:ef:d3:91:19:57:1f: 04:90:74:d8:af:19:b3:e8:c0:0c:b9:38:a9:d1:86: 13:0e:a4:f3:24:e4:18:f7:7f:53:b1:a2:25:b5:05: cf:aa:a3:a6:85:1f:a5:22:09:c8:b8:32:dd:0f:e2: ac:80:15:4b:8d:2e:31:36:2a:db:25:9a:fc:a4:08: d2:ab:fd:ac:41:47:a6:a6:19:0f:5d:81:1e:8c:02: c8:80:f0:0c:48:50:c6:14:c0:9f:4a:f2:f9:0f:10: 60:f4:79:f6:4b:2c:41:90:3b:a1:76:7b:89:72:ff: 44:3b:d1:21:fb:7d:50:d9:a8:bf:a1:12:e5:a2:67: 10:ba:52:c8:a8:1e:3b:19:9d:15:dd:38:49:3f:40: 2c:b6:a9:ab:7a:74:8e:8b:b7:35:fd:57:26:12:a9: bc:25:fc:49:57:ed:38:89:83:f5:0f:2c:a0:2d:b3: a8:60:f9:9a:ad:d7:0b:d1:10:a6:f8:57:87:03:07: ea:85:28:5e:e8:cc:5d:b9:18:27:80:36:55:72:1c: da:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:93:9F:5B:E1:5A:41:BF:9C:CA:44:EE:4F:C1:39:89:BF:C3:34:1A X509v3 Authority Key Identifier: keyid:A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ba:07:53:40:f1:1f:fb:f6:df:8f:61:61:56:ae:e6:e5:73: 05:70:3a:56:98:57:75:78:29:9a:8a:e2:11:29:4b:49:dd:c5: c7:36:b6:05:da:a6:bb:b9:00:f7:a0:79:bf:25:ab:6a:cc:2f: 13:9a:07:99:cd:9c:57:0b:2f:5c:d2:71:be:8a:35:0f:e7:0c: ae:10:f9:b6:63:10:e1:8f:20:b5:33:df:94:d1:b1:10:37:20: af:f6:e5:40:7e:bf:fc:ba:8d:d2:19:7b:2d:3f:8d:ff:69:74: 59:4f:2b:e3:1a:71:68:07:b8:c7:b1:79:12:8f:dd:db:1c:15: 40:a9:84:f6:91:39:20:23:83:a0:28:c8:cd:ea:74:4b:90:a2: 49:bc:10:0a:27:2e:e0:42:8c:63:da:d8:69:8f:76:42:d5:b8: 93:b1:c9:5c:5b:5b:f3:2b:79:25:2c:18:2b:10:cf:22:0f:5d: 42:4f:68:e2:84:2f:aa:78:46:3b:48:ed:a8:91:02:e0:e6:7f: 21:4f:0c:c1:6c:5b:0b:08:1a:bc:fa:93:a8:33:5e:56:54:c1: 40:f1:3a:1f:8b:18:bb:1b:23:d1:86:bd:1b:6e:d1:81:97:b8: b5:89:a7:1d:53:78:32:2d:c5:3e:e5:3b:e3:3a:18:40:9f:05: ca:64:f0:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcOW14mFf8w5gLbo/yNTa/e4zhrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZFRjRFQTI3QUE2REQzQUVERTdGODJBQkYxMTgwREJF MTgwODVGOTAeFw0yNjA1MTMxMzE2MDVaFw0yNjA1MTQxNDExMDVaMDMxMTAvBgNV BAMTKDk0OTM5RjVCRTE1QTQxQkY5Q0NBNDRFRTRGQzEzOTg5QkZDMzM0MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHqWz9yHpxEw0dllz0JJKHzlJm ukUvttkyAZQZLkSyy9p8HOY1RPOWvrKjUD1RiPCgPTiCse/TkRlXHwSQdNivGbPo wAy5OKnRhhMOpPMk5Bj3f1OxoiW1Bc+qo6aFH6UiCci4Mt0P4qyAFUuNLjE2Ktsl mvykCNKr/axBR6amGQ9dgR6MAsiA8AxIUMYUwJ9K8vkPEGD0efZLLEGQO6F2e4ly /0Q70SH7fVDZqL+hEuWiZxC6UsioHjsZnRXdOEk/QCy2qat6dI6LtzX9VyYSqbwl /ElX7TiJg/UPLKAts6hg+Zqt1wvREKb4V4cDB+qFKF7ozF25GCeANlVyHNp/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlJOfW+FaQb+cykTuT8E5ib/DNBowHwYDVR0j BBgwFoAUpu9Oonqm3Trt5/gqvxGA2+GAhfkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjE0MDAzNS8wL0E2RUY0RUEyN0FBNkREM0FFREU3RjgyQUJGMTE4 MERCRTE4MDg1RjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTZFRjRFQTI3QUE2REQzQUVERTdGODJBQkYxMTgwREJFMTgwODVGOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIxNDAwMzUvMC9BNkVGNEVBMjdBQTZE RDNBRURFN0Y4MkFCRjExODBEQkUxODA4NUY5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLoHU0DxH/v2 349hYVau5uVzBXA6VphXdXgpmoriESlLSd3Fxza2Bdqmu7kA96B5vyWraswvE5oH mc2cVwsvXNJxvoo1D+cMrhD5tmMQ4Y8gtTPflNGxEDcgr/blQH6//LqN0hl7LT+N /2l0WU8r4xpxaAe4x7F5Eo/d2xwVQKmE9pE5ICODoCjIzep0S5CiSbwQCicu4EKM Y9rYaY92QtW4k7HJXFtb8yt5JSwYKxDPIg9dQk9o4oQvqnhGO0jtqJEC4OZ/IU8M wWxbCwgavPqTqDNeVlTBQPE6H4sYuxsj0Ya9G27RgZe4tYmnHVN4Mi3FPuU74zoY QJ8FymTwQQ== -----END CERTIFICATE-----Generated at Wed May 13 19:42:34 2026 by rpki-client