$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft File: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft (raw, json) Hash identifier: /9JVMWGLuGVp675rRh4wTYB5Pijxpss1UVjpm0ihF+Q= Subject key identifier: 00:9F:D6:78:56:20:43:19:08:9A:06:08:79:C5:0A:F7:F5:BE:AC:39 Authority key identifier: 6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72 Certificate issuer: /CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72 Certificate serial: 5A3367EE79DF4F7F1ACA8DC4433B7077D40A2D3B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft Manifest number: 3B Signing time: Tue 12 May 2026 22:40:48 +0000 Manifest this update: Tue 12 May 2026 22:35:48 +0000 Manifest next update: Thu 14 May 2026 00:31:48 +0000 Files and hashes: 1: 3130332e3133392e3231332e302f32342d3234203d3e2034383437.roa (hash: k1rAJlK3nl+RMukZCZAOyW2Ztrz5xzJsS+9Jm+UCWLI=) 2: 3130332e3133392e3231322e302f32342d3234203d3e2034383437.roa (hash: fgedEchRrP66KqqHCaA1a1U1d7AKMe+NspTQhBPC/H4=) 3: 3130332e3130352e3230332e302f32342d3234203d3e20313337373634.roa (hash: njPdr9nkl5PqUnxF8eOxJG8abgbqDS3nA0LWdpX0NDQ=) 4: 3130332e3130352e3230322e302f32342d3234203d3e20313337373634.roa (hash: yVxOUCxwSQgdQ2Vm2tB9MZclhRZA4b88sSbFOq2CQHY=) 5: 3130332e3130352e3230302e302f32342d3234203d3e20313337373634.roa (hash: wAWydnytWwQ6KDrEdMo8gC5yClAHE5G7egoVtj8VJEQ=) 6: 323430333a356563303a3a2f33322d3332203d3e2030.roa (hash: pn5P8/momGxXTFfknwO8tuClvccGh1zTNEWhwlA2qwo=) 7: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl (hash: 6GirO5pzo/2qksfu2ZLlFs5UNG7sYgRuEyPlm2HYm7g=) 8: 3130332e3130352e3230312e302f32342d3234203d3e20313337373634.roa (hash: NVUII80DwSw0zpMxLmgIHiGlPbICMvueravTJ8IQZ6Y=) 9: 3130332e39382e34302e302f32322d3232203d3e2030.roa (hash: e8iEGGHTv4+FgS9wkri7Y69nnBMxrR4pBM+NO8acXaE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:33:67:ee:79:df:4f:7f:1a:ca:8d:c4:43:3b:70:77:d4:0a:2d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72 Validity Not Before: May 12 22:35:48 2026 GMT Not After : May 14 00:31:48 2026 GMT Subject: CN=009FD67856204319089A060879C50AF7F5BEAC39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d8:ba:56:73:3a:ef:a3:4f:34:44:5e:2b:ad: a8:9d:bf:6f:41:77:7c:09:ca:99:3b:17:c0:7f:df: d4:47:d5:f3:c2:7c:20:c4:86:69:4e:19:77:4c:b0: 68:3b:ee:08:72:be:86:86:bb:10:ba:c2:8e:b6:98: 91:ca:75:26:f4:c7:68:c0:55:1b:df:40:82:80:a3: 8b:57:6f:40:8c:88:a1:2b:fa:b6:da:39:7e:77:e5: b9:c3:1b:92:cb:c9:c5:d1:18:c1:06:08:6d:3d:e1: c4:94:56:f1:07:dd:a3:5a:1f:69:16:5e:a7:e1:65: bc:ff:66:92:d4:78:6a:9b:69:b6:2e:ce:21:89:e3: 39:60:4b:7f:4a:65:b5:d9:bd:bd:0b:77:90:f7:0e: 90:a6:f2:8d:6c:7a:26:5e:c9:12:cd:fd:cc:2d:46: 10:54:db:fd:9e:9b:a7:7f:29:b4:c6:64:10:63:90: 69:39:c9:a3:df:36:6f:0e:09:42:c5:6f:03:81:73: 90:8c:e5:d7:c5:f1:29:79:58:3e:d2:fb:b8:dd:53: fa:10:d4:ab:32:2c:5b:e2:11:e4:69:99:66:f4:d1: cb:5c:14:26:c0:37:f0:b5:10:6f:21:e4:1d:9e:ef: 76:16:9b:c0:3b:a2:92:13:f9:10:8e:97:88:0c:ac: e0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9F:D6:78:56:20:43:19:08:9A:06:08:79:C5:0A:F7:F5:BE:AC:39 X509v3 Authority Key Identifier: keyid:6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:16:04:f7:7a:df:f7:1c:71:7b:5f:cc:b5:93:61:d6:15:84: a6:19:58:5e:de:c5:b8:40:89:f7:45:87:c6:cc:d6:87:77:7c: 0c:1d:19:b3:4c:ed:a0:a5:1a:98:6d:f7:29:de:c0:08:44:35: 35:81:0e:fc:81:a4:5b:0c:66:0f:74:c0:7d:8c:22:b5:4e:32: 88:f8:8d:0a:7b:80:9e:5d:e9:8b:ac:bc:2e:1c:28:70:f4:d8: 3b:ff:35:24:f0:3e:8c:64:bc:66:12:79:bc:62:8f:b2:90:9c: 33:3e:d7:0a:17:1e:bf:b3:d0:f3:8c:71:57:a1:bc:d1:f6:85: e6:7e:82:66:72:a1:16:81:f6:2d:a8:87:04:c5:fd:51:fd:05: f9:ef:44:a4:b7:49:42:a4:50:32:fe:30:c3:69:bd:ac:27:b5: 92:b1:97:b1:c8:fa:4f:48:ba:f1:11:15:e2:6e:3c:c1:d9:4f: 98:c0:8f:7f:38:cc:bb:36:c0:bc:6a:1c:11:bb:d7:2b:9d:91: a1:35:03:ee:9c:35:4f:f4:d0:ec:a6:21:74:67:91:84:6d:fc: 6b:ab:65:ba:33:3f:6f:28:a2:a9:60:c7:34:7c:1f:ea:bf:06: 87:24:c5:33:d5:a9:eb:47:c5:03:4c:93:27:7a:61:1d:44:00: 12:c9:d4:dd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWjNn7nnfT38ayo3EQztwd9QKLTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYz NjUzNkU3MjAeFw0yNjA1MTIyMjM1NDhaFw0yNjA1MTQwMDMxNDhaMDMxMTAvBgNV BAMTKDAwOUZENjc4NTYyMDQzMTkwODlBMDYwODc5QzUwQUY3RjVCRUFDMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2LpWczrvo080RF4rraidv29B d3wJypk7F8B/39RH1fPCfCDEhmlOGXdMsGg77ghyvoaGuxC6wo62mJHKdSb0x2jA VRvfQIKAo4tXb0CMiKEr+rbaOX535bnDG5LLycXRGMEGCG094cSUVvEH3aNaH2kW XqfhZbz/ZpLUeGqbabYuziGJ4zlgS39KZbXZvb0Ld5D3DpCm8o1seiZeyRLN/cwt RhBU2/2em6d/KbTGZBBjkGk5yaPfNm8OCULFbwOBc5CM5dfF8Sl5WD7S+7jdU/oQ 1KsyLFviEeRpmWb00ctcFCbAN/C1EG8h5B2e73YWm8A7opIT+RCOl4gMrOAzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAJ/WeFYgQxkImgYIecUK9/W+rDkwHwYDVR0j BBgwFoAUa4a9P6D7Cze6xk1sjS2fZjZTbnIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1MTY3MDg1Mjk0Mzg3My8wLzZCODZCRDNGQTBGQjBCMzdCQUM2NEQ2QzhEMkQ5 RjY2MzY1MzZFNzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYzNjUzNkU3Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTE2NzA4NTI5NDM4NzMvMC82Qjg2QkQzRkEwRkIw QjM3QkFDNjRENkM4RDJEOUY2NjM2NTM2RTcyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURYE93rf9xxx e1/MtZNh1hWEphlYXt7FuECJ90WHxszWh3d8DB0Zs0ztoKUamG33Kd7ACEQ1NYEO /IGkWwxmD3TAfYwitU4yiPiNCnuAnl3pi6y8LhwocPTYO/81JPA+jGS8ZhJ5vGKP spCcMz7XChcev7PQ84xxV6G80faF5n6CZnKhFoH2LaiHBMX9Uf0F+e9EpLdJQqRQ Mv4ww2m9rCe1krGXscj6T0i68REV4m48wdlPmMCPfzjMuzbAvGocEbvXK52RoTUD 7pw1T/TQ7KYhdGeRhG38a6tlujM/byiiqWDHNHwf6r8GhyTFM9Wp60fFA0yTJ3ph HUQAEsnU3Q== -----END CERTIFICATE-----Generated at Wed May 13 13:44:47 2026 by rpki-client