$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft File: 6F998E710C20D2A9D256034668026243E86F9239.mft (raw, json) Hash identifier: cleo1ZB9KdEj/M+rnsi9mSUESeygHouPlPFWaD0JZTM= Subject key identifier: 3F:E4:1F:AB:9B:0C:E3:58:42:FF:DB:43:F3:60:9E:63:6D:1A:1A:87 Authority key identifier: 6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 Certificate issuer: /CN=6F998E710C20D2A9D256034668026243E86F9239 Certificate serial: 02893F4EF9B2C76151516F33FE0B055DA6FBFF25 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft Manifest number: 2F Signing time: Wed 13 May 2026 04:30:56 +0000 Manifest this update: Wed 13 May 2026 04:25:56 +0000 Manifest next update: Thu 14 May 2026 07:36:56 +0000 Files and hashes: 1: 6F998E710C20D2A9D256034668026243E86F9239.crl (hash: Q1bKsreogPsutSk+99oPIt9s9aGp4cKYlks0RJtjrjU=) 2: 323430313a36303a3a2f33322d3332203d3e2030.roa (hash: 71m86gm6yxnGiaqfSvrzEvHzssQUJiLPa3d4KKP4Eyw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:89:3f:4e:f9:b2:c7:61:51:51:6f:33:fe:0b:05:5d:a6:fb:ff:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F998E710C20D2A9D256034668026243E86F9239 Validity Not Before: May 13 04:25:56 2026 GMT Not After : May 14 07:36:56 2026 GMT Subject: CN=3FE41FAB9B0CE35842FFDB43F3609E636D1A1A87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fe:1e:ed:30:67:57:78:a3:f5:4a:ec:c7:17: 94:61:5b:39:d8:d1:9a:03:88:ed:bb:f2:a6:9b:40: bc:53:b0:cb:07:88:54:dd:0c:32:23:0d:5f:f8:e5: fa:71:db:49:a8:bc:eb:29:2a:50:e7:bd:0b:9a:6b: 1c:a3:5d:0b:02:5f:62:e2:2d:ea:75:91:be:4b:99: 76:bd:14:b3:05:fc:d8:e8:cc:ec:1d:a6:97:72:a2: 20:99:c2:b0:1d:70:e2:87:f8:cf:41:9c:72:32:bc: e9:0d:42:a3:2f:bb:d4:01:0e:5e:ab:4e:5d:86:18: 27:b5:54:b9:77:de:8b:9a:37:31:a5:49:e4:cc:52: 9e:ae:df:31:10:07:0a:83:d1:cf:f1:75:e1:e7:b5: 1d:09:5c:bf:50:6d:c3:a0:11:4d:ee:56:8b:3b:fc: 69:c5:d9:38:42:01:1d:ac:c7:f6:e6:9c:d5:4f:9a: 8a:d7:36:63:0e:a0:5c:e1:6c:77:b3:a1:9b:43:6a: d0:50:fb:1d:b5:4a:28:84:35:cf:fe:6e:6a:98:41: 49:8c:7e:31:14:4f:2a:60:54:ee:ad:0e:32:4e:81: 58:15:ec:cb:48:b0:7d:bc:b1:ce:4d:12:9a:f5:59: 6c:2b:15:92:55:d0:3c:b9:1f:ef:53:ab:c9:ff:05: f4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E4:1F:AB:9B:0C:E3:58:42:FF:DB:43:F3:60:9E:63:6D:1A:1A:87 X509v3 Authority Key Identifier: keyid:6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:18:bd:97:9d:ff:9e:69:4a:73:26:dc:01:4e:e7:c1:c8:00: e6:0c:40:75:c4:c4:24:65:bd:5f:e4:ed:03:fe:c4:47:50:71: e1:34:61:a1:39:ca:d9:7c:99:d8:8d:58:d8:e6:00:27:49:c2: 29:3c:a3:d0:98:3d:5c:37:b0:43:cf:19:6c:ee:e5:e5:4e:6d: 47:57:96:67:eb:36:0d:41:44:21:a1:2e:fa:af:45:66:90:60: 08:5d:fb:bc:c3:49:4c:bd:14:35:97:67:db:f2:13:8c:6f:b9: e8:1e:ac:ee:8a:af:b7:74:cf:a2:92:89:bf:ec:c6:16:2b:b8: 3c:65:0a:62:0f:fd:95:a9:5a:27:0f:29:29:38:52:0d:81:d0: 83:14:04:d1:c4:f9:a0:12:63:40:2b:4d:34:1a:44:41:70:d6: 23:5c:31:7f:0e:5e:28:98:22:94:c4:b1:8b:df:fa:92:54:d3: b3:bd:d8:7c:67:84:00:e1:6c:e8:a2:fc:a4:1b:ff:eb:7f:af: ef:03:c4:5d:b0:e9:3f:1a:ee:7a:fb:7b:c8:40:99:73:0d:13: d7:7d:d0:6c:d6:df:11:44:a0:84:30:e8:b0:ef:32:36:1d:3b: 40:e3:08:2d:ec:e4:41:1d:ea:82:d6:3f:ed:5b:ae:8b:ac:48: b1:50:97:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAok/Tvmyx2FRUW8z/gsFXab7/yUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNF ODZGOTIzOTAeFw0yNjA1MTMwNDI1NTZaFw0yNjA1MTQwNzM2NTZaMDMxMTAvBgNV BAMTKDNGRTQxRkFCOUIwQ0UzNTg0MkZGREI0M0YzNjA5RTYzNkQxQTFBODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/h7tMGdXeKP1SuzHF5RhWznY 0ZoDiO278qabQLxTsMsHiFTdDDIjDV/45fpx20movOspKlDnvQuaaxyjXQsCX2Li Lep1kb5LmXa9FLMF/NjozOwdppdyoiCZwrAdcOKH+M9BnHIyvOkNQqMvu9QBDl6r Tl2GGCe1VLl33ouaNzGlSeTMUp6u3zEQBwqD0c/xdeHntR0JXL9QbcOgEU3uVos7 /GnF2ThCAR2sx/bmnNVPmorXNmMOoFzhbHezoZtDatBQ+x21SiiENc/+bmqYQUmM fjEUTypgVO6tDjJOgVgV7MtIsH28sc5NEpr1WWwrFZJV0Dy5H+9Tq8n/BfTBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUP+Qfq5sM41hC/9tD82CeY20aGocwHwYDVR0j BBgwFoAUb5mOcQwg0qnSVgNGaAJiQ+hvkjkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU0NzY1NTk1NjEwMzE2OS8wLzZGOTk4RTcxMEMyMEQyQTlEMjU2MDM0NjY4MDI2 MjQzRTg2RjkyMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNFODZGOTIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NDc2NTU5NTYxMDMxNjkvMC82Rjk5OEU3MTBDMjBE MkE5RDI1NjAzNDY2ODAyNjI0M0U4NkY5MjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBi9l53/nmlK cybcAU7nwcgA5gxAdcTEJGW9X+TtA/7ER1Bx4TRhoTnK2XyZ2I1Y2OYAJ0nCKTyj 0Jg9XDewQ88ZbO7l5U5tR1eWZ+s2DUFEIaEu+q9FZpBgCF37vMNJTL0UNZdn2/IT jG+56B6s7oqvt3TPopKJv+zGFiu4PGUKYg/9lalaJw8pKThSDYHQgxQE0cT5oBJj QCtNNBpEQXDWI1wxfw5eKJgilMSxi9/6klTTs73YfGeEAOFs6KL8pBv/63+v7wPE XbDpPxruevt7yECZcw0T133QbNbfEUSghDDosO8yNh07QOMILezkQR3qgtY/7Vuu i6xIsVCXFA== -----END CERTIFICATE-----Generated at Wed May 13 13:45:35 2026 by rpki-client