$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft File: 6F899B29F801AD1C8A8515E6EF9709910311F668.mft (raw, json) Hash identifier: a3NQSoMzBCWAErlcoPehyZeKzp8upeTbTKAn9UJCczg= Subject key identifier: DB:9E:1B:FA:6C:EA:B1:45:A2:C2:82:DE:2C:D9:F5:18:59:A8:88:D7 Authority key identifier: 6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 Certificate issuer: /CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Certificate serial: 7E73B9755CEF758995EE18C6B581FC95ABEBFC0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft Manifest number: 98 Signing time: Wed 13 May 2026 09:51:03 +0000 Manifest this update: Wed 13 May 2026 09:46:03 +0000 Manifest next update: Thu 14 May 2026 10:28:03 +0000 Files and hashes: 1: 6F899B29F801AD1C8A8515E6EF9709910311F668.crl (hash: KcWn0CMaVqtvZCU77u0Ka7DmWE8RrQXlWE42t2o2YPM=) 2: 3130332e3134322e38322e302f32332d3332203d3e20313531393531.roa (hash: mVq0tp8huRh6SC0n7rhOLpZu0QlXgV/WIGpxjqgh/TE=) 3: 3130332e3134322e38322e302f32332d3332203d3e20313439353133.roa (hash: gNbCXYLZTSZSDGKA8vf0miL9zRhPVc7YJOnU420lxlM=) 4: 3130332e3134322e38322e302f32342d3234203d3e20313439353133.roa (hash: YBLpKWnBY74NDcGKe6t2+bdDnzFkBiAsPzbxJySwzDk=) 5: 3130332e3134322e38332e302f32342d3234203d3e20313439353133.roa (hash: YsRlvfghH9rCCKNTUVL7cagdvzH0kbY4Bz95ToSRwi8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:73:b9:75:5c:ef:75:89:95:ee:18:c6:b5:81:fc:95:ab:eb:fc:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Validity Not Before: May 13 09:46:03 2026 GMT Not After : May 14 10:28:03 2026 GMT Subject: CN=DB9E1BFA6CEAB145A2C282DE2CD9F51859A888D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:08:3d:d1:b1:a1:40:b5:18:23:c2:24:b7:67: 46:40:f8:29:52:5d:3f:43:05:91:e1:5b:5d:f0:6f: 63:1d:d2:b6:45:9d:d4:eb:b7:7e:d8:77:5d:04:07: 3e:2d:b8:94:cd:6f:84:e3:d3:41:5f:6b:d1:bc:8e: da:66:ec:16:aa:b5:b5:d2:4a:60:22:61:d5:7f:62: 10:46:ea:76:4a:da:53:79:69:ab:5c:aa:d8:1e:44: 42:db:78:24:d5:d3:a4:1b:b5:b2:d3:b3:94:da:19: 9c:2a:a4:b0:c9:ea:53:10:5a:21:53:c8:5b:d9:16: 23:8c:fc:be:4f:38:bb:c7:cc:14:71:f2:d9:60:8c: 66:50:21:44:4c:bf:6f:32:0d:7b:79:97:95:06:81: f0:bb:18:01:c7:85:95:f8:00:b3:3c:8b:f7:19:f3: d5:51:d5:fd:54:f6:49:39:c3:0b:92:d1:16:fd:75: 23:18:7b:0f:42:15:63:0d:22:48:f0:9c:bf:33:ad: 07:60:65:f6:5e:65:5b:3d:42:14:23:38:a1:00:b5: 47:40:8f:15:ca:db:db:41:52:37:5e:33:d5:e9:7c: 7f:c5:3f:76:bb:30:0b:b5:ec:aa:cd:37:48:e2:e4: 98:d4:43:37:44:d5:2d:60:24:20:ab:8d:83:87:57: c7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:9E:1B:FA:6C:EA:B1:45:A2:C2:82:DE:2C:D9:F5:18:59:A8:88:D7 X509v3 Authority Key Identifier: keyid:6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:2a:84:a2:4f:59:fc:5c:88:1f:04:d5:93:94:59:4b:fc:df: 63:a9:1d:8c:81:9d:bb:0a:ea:db:0f:2f:80:a1:ec:10:9b:8b: ce:a9:1d:25:2e:44:60:5d:1c:58:34:c7:7c:8c:63:39:8b:32: c9:3f:3b:6e:64:26:35:9f:22:b4:ad:31:42:29:bf:3e:cf:55: 03:95:1c:29:24:a5:3d:fd:cd:9a:0d:be:fe:73:54:8c:09:01: ec:91:54:ef:1b:2e:cf:96:c6:ec:4f:21:48:5c:af:de:e6:23: 8c:82:56:c8:cd:00:53:3f:81:f4:ea:63:71:6c:b4:6e:03:ea: cd:18:b5:f1:80:c5:05:c6:bf:27:7e:c2:82:bd:78:79:2f:b1: b0:2a:98:2f:8d:c8:2a:10:00:cd:80:15:ff:5c:7e:ac:c8:cb: 2b:83:fc:2a:de:c0:10:fa:fd:64:cd:aa:2e:51:0d:39:ef:3f: 00:5d:ab:6f:66:28:c9:8d:14:09:3b:12:00:a5:b3:4a:61:9b: 02:2c:c9:c0:6d:51:d2:7a:d2:7b:ea:06:eb:d4:eb:84:ae:6f: 36:1e:f3:15:f6:5c:28:9c:13:98:55:e7:d8:ad:61:c5:47:9c: fe:46:bb:5f:d6:0e:fe:58:f2:10:80:90:10:b3:b1:cd:a1:49: 98:09:e2:33 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfnO5dVzvdYmV7hjGtYH8lavr/A8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEw MzExRjY2ODAeFw0yNjA1MTMwOTQ2MDNaFw0yNjA1MTQxMDI4MDNaMDMxMTAvBgNV BAMTKERCOUUxQkZBNkNFQUIxNDVBMkMyODJERTJDRDlGNTE4NTlBODg4RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkCD3RsaFAtRgjwiS3Z0ZA+ClS XT9DBZHhW13wb2Md0rZFndTrt37Yd10EBz4tuJTNb4Tj00Ffa9G8jtpm7BaqtbXS SmAiYdV/YhBG6nZK2lN5aatcqtgeRELbeCTV06QbtbLTs5TaGZwqpLDJ6lMQWiFT yFvZFiOM/L5POLvHzBRx8tlgjGZQIURMv28yDXt5l5UGgfC7GAHHhZX4ALM8i/cZ 89VR1f1U9kk5wwuS0Rb9dSMYew9CFWMNIkjwnL8zrQdgZfZeZVs9QhQjOKEAtUdA jxXK29tBUjdeM9XpfH/FP3a7MAu17KrNN0ji5JjUQzdE1S1gJCCrjYOHV8ezAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU254b+mzqsUWiwoLeLNn1GFmoiNcwHwYDVR0j BBgwFoAUb4mbKfgBrRyKhRXm75cJkQMR9mgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzY3NzU3MS8wLzZGODk5QjI5RjgwMUFEMUM4QTg1MTVFNkVGOTcw OTkxMDMxMUY2NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEwMzExRjY2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2Nzc1NzEvMC82Rjg5OUIyOUY4MDFB RDFDOEE4NTE1RTZFRjk3MDk5MTAzMTFGNjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCqEok9Z/FyI HwTVk5RZS/zfY6kdjIGduwrq2w8vgKHsEJuLzqkdJS5EYF0cWDTHfIxjOYsyyT87 bmQmNZ8itK0xQim/Ps9VA5UcKSSlPf3Nmg2+/nNUjAkB7JFU7xsuz5bG7E8hSFyv 3uYjjIJWyM0AUz+B9OpjcWy0bgPqzRi18YDFBca/J37Cgr14eS+xsCqYL43IKhAA zYAV/1x+rMjLK4P8Kt7AEPr9ZM2qLlENOe8/AF2rb2YoyY0UCTsSAKWzSmGbAizJ wG1R0nrSe+oG69TrhK5vNh7zFfZcKJwTmFXn2K1hxUec/ka7X9YO/ljyEICQELOx zaFJmAniMw== -----END CERTIFICATE-----Generated at Wed May 13 15:38:47 2026 by rpki-client