$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft File: 6F899B29F801AD1C8A8515E6EF9709910311F668.mft (raw, json) Hash identifier: 03BOAXDUV1pBVfYdZy3jQr0mb4byuO00gkP5eBghkxk= Subject key identifier: 67:7E:F7:5E:A9:E8:14:CD:93:BA:8D:C8:E0:16:00:80:88:F1:31:91 Authority key identifier: 6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 Certificate issuer: /CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Certificate serial: 6B8BC0E923DDA1BA421EF27396440409DCFFE1D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft Manifest number: 58 Signing time: Thu 26 Mar 2026 08:23:28 +0000 Manifest this update: Thu 26 Mar 2026 08:18:28 +0000 Manifest next update: Fri 27 Mar 2026 09:46:28 +0000 Files and hashes: 1: 3130332e3134322e38322e302f32342d3234203d3e20313439353133.roa (hash: YBLpKWnBY74NDcGKe6t2+bdDnzFkBiAsPzbxJySwzDk=) 2: 6F899B29F801AD1C8A8515E6EF9709910311F668.crl (hash: 0iafahhhghAGekUeypek5Mo09pTg/bK+PpXBR4ALqc0=) 3: 3130332e3134322e38322e302f32332d3332203d3e20313439353133.roa (hash: gNbCXYLZTSZSDGKA8vf0miL9zRhPVc7YJOnU420lxlM=) 4: 3130332e3134322e38332e302f32342d3234203d3e20313439353133.roa (hash: YsRlvfghH9rCCKNTUVL7cagdvzH0kbY4Bz95ToSRwi8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:8b:c0:e9:23:dd:a1:ba:42:1e:f2:73:96:44:04:09:dc:ff:e1:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Validity Not Before: Mar 26 08:18:28 2026 GMT Not After : Mar 27 09:46:28 2026 GMT Subject: CN=677EF75EA9E814CD93BA8DC8E016008088F13191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:a1:64:4b:2e:b8:ee:8c:90:f4:b7:e0:f3: f5:3b:f7:a5:fd:2f:1c:ce:06:f9:65:a5:7c:1e:a1: 6d:5e:99:45:74:90:16:1d:81:83:7d:55:f9:02:b1: e3:7a:bd:93:e4:8e:81:e5:ef:46:4d:12:67:45:78: 56:8e:d1:ad:3f:b5:23:bd:d9:d7:84:c7:ee:53:cc: 58:29:ce:a8:27:d8:bb:cb:ed:96:41:f2:15:8a:7b: 59:b6:f7:5e:1c:71:74:28:7f:0e:f9:c0:28:9c:27: 54:b4:2c:e2:e4:c0:a8:19:29:c0:bc:ea:f7:8c:04: 69:c4:4e:a1:d3:0b:a9:0d:c5:6d:d4:ee:11:e7:0d: ec:5a:97:4f:0f:43:fc:12:62:da:e1:98:99:a1:df: 8d:c8:19:26:8d:dd:be:2c:f9:7f:98:c6:0b:79:2d: 1c:a5:54:05:b6:2b:b9:6a:28:a6:0e:2c:6c:14:b2: 3e:f7:41:59:df:b9:5c:bb:f7:ed:6e:ee:6d:46:6d: 35:ba:c8:bb:78:d1:c1:c7:d7:36:34:93:3b:40:5b: 37:7c:bf:84:c2:3c:4c:99:af:72:bb:c6:c3:b6:08: 5d:3e:2e:ab:b5:14:77:6c:c5:76:41:1e:77:b1:aa: ff:8e:11:1a:2a:84:2b:0d:3f:d9:4d:8a:0c:d9:8d: bd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7E:F7:5E:A9:E8:14:CD:93:BA:8D:C8:E0:16:00:80:88:F1:31:91 X509v3 Authority Key Identifier: keyid:6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:ae:f8:3f:43:ff:cd:c8:52:49:81:91:62:9a:bb:5a:6b:5e: 5a:3e:23:40:33:40:30:68:e0:70:bc:22:6f:38:45:d4:61:dd: de:a8:7d:1b:2c:65:c7:25:40:be:92:3e:e8:e9:52:a5:d8:f0: f4:1c:e5:6c:13:61:01:a6:59:1a:1d:5f:1c:66:8d:30:a3:d4: 25:11:2e:8c:cf:ee:ac:a1:26:47:4c:81:29:ce:79:ea:81:a8: 7c:a1:8b:78:62:f8:a0:2e:cc:1c:96:aa:fa:79:85:d4:6a:72: 9c:33:46:7d:5a:25:fc:95:53:47:07:e5:6d:75:97:e4:f4:85: dd:3e:91:f3:52:37:b0:59:a1:35:4c:dd:bb:e6:a8:3c:ed:b9: b1:56:00:fe:b0:cd:58:a4:92:fa:5c:53:57:f6:07:25:0d:91: 2d:1b:ab:72:af:fd:ae:01:d9:a7:47:ea:0d:33:dc:4d:4a:0c: f5:b3:09:eb:d0:97:e9:5a:24:46:fd:b2:fb:fa:10:14:df:b6: 88:ab:9b:d1:af:98:18:0e:e0:c9:92:80:9f:5c:2b:47:81:f4: c6:11:c5:5a:57:c9:03:4f:a9:8a:db:cb:49:7d:03:dd:74:18: 54:9d:d0:e5:7f:12:7a:05:7d:55:27:95:b8:f8:77:57:29:e7: 0e:a2:41:82 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa4vA6SPdobpCHvJzlkQECdz/4dUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEw MzExRjY2ODAeFw0yNjAzMjYwODE4MjhaFw0yNjAzMjcwOTQ2MjhaMDMxMTAvBgNV BAMTKDY3N0VGNzVFQTlFODE0Q0Q5M0JBOERDOEUwMTYwMDgwODhGMTMxOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bKFkSy647oyQ9Lfg8/U796X9 LxzOBvllpXweoW1emUV0kBYdgYN9VfkCseN6vZPkjoHl70ZNEmdFeFaO0a0/tSO9 2deEx+5TzFgpzqgn2LvL7ZZB8hWKe1m2914ccXQofw75wCicJ1S0LOLkwKgZKcC8 6veMBGnETqHTC6kNxW3U7hHnDexal08PQ/wSYtrhmJmh343IGSaN3b4s+X+Yxgt5 LRylVAW2K7lqKKYOLGwUsj73QVnfuVy79+1u7m1GbTW6yLt40cHH1zY0kztAWzd8 v4TCPEyZr3K7xsO2CF0+Lqu1FHdsxXZBHnexqv+OERoqhCsNP9lNigzZjb0BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZ373XqnoFM2Tuo3I4BYAgIjxMZEwHwYDVR0j BBgwFoAUb4mbKfgBrRyKhRXm75cJkQMR9mgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzY3NzU3MS8wLzZGODk5QjI5RjgwMUFEMUM4QTg1MTVFNkVGOTcw OTkxMDMxMUY2NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEwMzExRjY2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2Nzc1NzEvMC82Rjg5OUIyOUY4MDFB RDFDOEE4NTE1RTZFRjk3MDk5MTAzMTFGNjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWK74P0P/zchS SYGRYpq7WmteWj4jQDNAMGjgcLwibzhF1GHd3qh9GyxlxyVAvpI+6OlSpdjw9Bzl bBNhAaZZGh1fHGaNMKPUJREujM/urKEmR0yBKc556oGofKGLeGL4oC7MHJaq+nmF 1GpynDNGfVol/JVTRwflbXWX5PSF3T6R81I3sFmhNUzdu+aoPO25sVYA/rDNWKSS +lxTV/YHJQ2RLRurcq/9rgHZp0fqDTPcTUoM9bMJ69CX6VokRv2y+/oQFN+2iKub 0a+YGA7gyZKAn1wrR4H0xhHFWlfJA0+pitvLSX0D3XQYVJ3Q5X8SegV9VSeVuPh3 VynnDqJBgg== -----END CERTIFICATE-----Generated at Fri Mar 27 01:57:01 2026 by rpki-client