$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft File: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft (raw, json) Hash identifier: mo+YFJD1EFh5GNlqNJcuv/P7cW5tGG4vfIVR+xPw6qo= Subject key identifier: 1A:2D:79:51:0E:5A:53:9C:C6:77:27:4B:0D:E8:1F:EA:57:97:CE:22 Authority key identifier: A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9 Certificate issuer: /CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9 Certificate serial: 21443BB6C998B6C31C7AEC69F5ACD1BDEA38BB1F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 19:28:28 +0000 Manifest this update: Thu 26 Mar 2026 19:23:28 +0000 Manifest next update: Fri 27 Mar 2026 20:27:28 +0000 Files and hashes: 1: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl (hash: 7awxgSWS7JJNdSYz1qkXFBvS5gnUwA3fCCLllByvIGE=) 2: 3130332e3131302e3133362e302f32322d3232203d3e203539303132.roa (hash: Gq1/YwE5iEcyh5S8JhVPyrDBUdmcenxdUCC+8WtWWiQ=) 3: 323430323a386263303a3a2f33322d3332203d3e203539303132.roa (hash: wRL2RgpwckoaF7H0gvAknICFvQDLSvcARgYe623q+hU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:44:3b:b6:c9:98:b6:c3:1c:7a:ec:69:f5:ac:d1:bd:ea:38:bb:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9 Validity Not Before: Mar 26 19:23:28 2026 GMT Not After : Mar 27 20:27:28 2026 GMT Subject: CN=1A2D79510E5A539CC677274B0DE81FEA5797CE22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a0:28:f2:9d:51:cb:61:7e:1c:d7:c2:c3:a5: 88:51:91:78:26:d3:28:6d:15:02:34:64:cb:43:2f: 47:cb:a6:67:78:0d:29:e2:77:cd:4f:84:c4:c7:bb: 29:cf:0d:50:93:4d:fd:e6:f6:46:22:92:a7:82:1f: ac:c9:64:96:f0:76:c0:54:8a:10:26:c5:bd:47:45: 6a:4d:12:69:75:fd:f9:f5:5a:d2:3a:c7:f0:bf:e4: 9f:f9:09:08:d4:f6:60:4a:38:b0:ee:d5:76:36:00: ba:99:63:70:f4:1a:89:46:f4:05:1c:2d:d7:e8:09: 44:11:33:77:f2:01:8a:2c:ae:7a:49:79:d6:91:c8: 54:19:4b:83:fa:41:52:4e:d1:e7:79:7d:6b:b5:eb: f5:2d:6a:cc:4d:a7:b5:e3:5f:14:5b:27:e8:a3:b5: b8:7a:93:ac:12:fe:a1:26:90:d2:4f:f5:77:0a:ef: a3:7c:cf:45:1e:51:7c:18:f4:ff:10:bf:e3:e6:91: d5:2f:4e:4f:93:e8:39:16:2f:b6:ea:ca:49:89:b2: 47:e0:9d:bb:94:ae:43:1e:98:17:14:91:47:21:c3: 8b:11:5c:96:fe:bd:f5:82:df:1d:2b:8d:3f:5a:69: b1:19:b4:80:2d:db:82:88:ad:69:9e:30:82:15:54: 86:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2D:79:51:0E:5A:53:9C:C6:77:27:4B:0D:E8:1F:EA:57:97:CE:22 X509v3 Authority Key Identifier: keyid:A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:13:58:5d:09:d0:4d:66:05:87:5e:a2:d6:0a:75:a7:4a:e2: cc:fb:de:79:66:cb:60:c2:ce:fb:d7:bd:5e:54:36:f3:af:b5: 9e:52:4a:fe:6a:a7:2e:37:e8:7e:cc:97:04:61:56:bb:b9:fb: 93:ab:16:c5:5f:48:3f:b5:ad:43:23:d8:37:20:4d:58:7e:08: 7b:9e:b9:3f:01:26:4b:ca:35:1f:fd:82:08:61:9b:d7:36:5c: 27:2b:83:de:53:9d:19:e7:c7:e1:3c:e6:9d:77:a5:89:8e:f2: 40:4b:6e:35:22:3f:c2:2e:f0:d8:4a:ab:70:11:ab:37:fd:c7: 68:3d:01:4c:d6:31:21:1a:39:47:2c:71:0c:fb:a0:da:34:8d: e4:9a:ff:2e:74:31:8e:67:6a:c0:20:ce:66:ac:fd:16:fe:8a: e7:9b:53:47:24:ff:d8:e1:bd:7b:03:b3:da:b6:b5:5a:8b:47: b8:b4:08:40:2d:9c:7f:27:ad:92:3e:9e:e9:96:48:12:97:46: 2c:6d:95:79:95:3a:7f:bb:61:16:63:d7:33:27:5e:00:ad:65: dd:27:e0:18:1c:49:85:62:40:da:5b:59:6a:e5:c0:81:14:b9: 24:4c:04:62:83:9f:56:1a:47:c5:55:11:07:9b:66:0b:a4:01: 03:ba:ee:b6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIUQ7tsmYtsMceuxp9azRveo4ux8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZFRjRFQTI3QUE2REQzQUVERTdGODJBQkYxMTgwREJF MTgwODVGOTAeFw0yNjAzMjYxOTIzMjhaFw0yNjAzMjcyMDI3MjhaMDMxMTAvBgNV BAMTKDFBMkQ3OTUxMEU1QTUzOUNDNjc3Mjc0QjBERTgxRkVBNTc5N0NFMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIoCjynVHLYX4c18LDpYhRkXgm 0yhtFQI0ZMtDL0fLpmd4DSnid81PhMTHuynPDVCTTf3m9kYikqeCH6zJZJbwdsBU ihAmxb1HRWpNEml1/fn1WtI6x/C/5J/5CQjU9mBKOLDu1XY2ALqZY3D0GolG9AUc LdfoCUQRM3fyAYosrnpJedaRyFQZS4P6QVJO0ed5fWu16/UtasxNp7XjXxRbJ+ij tbh6k6wS/qEmkNJP9XcK76N8z0UeUXwY9P8Qv+PmkdUvTk+T6DkWL7bqykmJskfg nbuUrkMemBcUkUchw4sRXJb+vfWC3x0rjT9aabEZtIAt24KIrWmeMIIVVIbRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGi15UQ5aU5zGdydLDegf6leXziIwHwYDVR0j BBgwFoAUpu9Oonqm3Trt5/gqvxGA2+GAhfkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjE0MDAzNS8wL0E2RUY0RUEyN0FBNkREM0FFREU3RjgyQUJGMTE4 MERCRTE4MDg1RjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTZFRjRFQTI3QUE2REQzQUVERTdGODJBQkYxMTgwREJFMTgwODVGOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIxNDAwMzUvMC9BNkVGNEVBMjdBQTZE RDNBRURFN0Y4MkFCRjExODBEQkUxODA4NUY5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBNYXQnQTWYF h16i1gp1p0rizPveeWbLYMLO+9e9XlQ286+1nlJK/mqnLjfofsyXBGFWu7n7k6sW xV9IP7WtQyPYNyBNWH4Ie565PwEmS8o1H/2CCGGb1zZcJyuD3lOdGefH4TzmnXel iY7yQEtuNSI/wi7w2EqrcBGrN/3HaD0BTNYxIRo5RyxxDPug2jSN5Jr/LnQxjmdq wCDOZqz9Fv6K55tTRyT/2OG9ewOz2ra1WotHuLQIQC2cfyetkj6e6ZZIEpdGLG2V eZU6f7thFmPXMydeAK1l3SfgGBxJhWJA2ltZauXAgRS5JEwEYoOfVhpHxVURB5tm C6QBA7rutg== -----END CERTIFICATE-----Generated at Fri Mar 27 02:03:15 2026 by rpki-client