$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft File: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft (raw, json) Hash identifier: ygD1cw9gOOsQMzug9X7iCxp9ovxKwwTQxKHR7nYj7Vo= Subject key identifier: E9:C0:7E:4E:81:A1:90:D7:13:75:7A:F4:B1:67:4B:A8:3D:E3:05:27 Authority key identifier: 6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D Certificate issuer: /CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D Certificate serial: 02127F238165FA1E184723915E789F9DE14CFFA3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft Manifest number: 2A Signing time: Wed 13 May 2026 08:51:03 +0000 Manifest this update: Wed 13 May 2026 08:46:03 +0000 Manifest next update: Thu 14 May 2026 12:18:03 +0000 Files and hashes: 1: 3130332e34342e3137362e302f32332d3233203d3e2034383437.roa (hash: ae7SUgq9OA/NLExuOxlNbHZGMMv09rTQmfolmacGeB4=) 2: 3130332e34342e3137382e302f32332d3233203d3e2034383437.roa (hash: lSEivQpgfyTwattyz5XGR7SBQ4DIJ5haeZxfSmZXjnc=) 3: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl (hash: K4sCFb1ZoSLeAU+0YjSEY8Hj+DnPsyFHGJChY8P+laI=) 4: 3130332e34342e3139382e302f32342d3234203d3e2034383030.roa (hash: 6dqpVUqXBgLgk1fCILtRSZoIidor7YhnbVbc5fHfQhk=) 5: 34332e3232352e3231362e302f32322d3232203d3e2034383437.roa (hash: j/eV+lOtMaJE7zLazg78nWoyQGsOhGQyTahosxccrn8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:12:7f:23:81:65:fa:1e:18:47:23:91:5e:78:9f:9d:e1:4c:ff:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D Validity Not Before: May 13 08:46:03 2026 GMT Not After : May 14 12:18:03 2026 GMT Subject: CN=E9C07E4E81A190D713757AF4B1674BA83DE30527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e9:17:91:f2:3f:6d:af:d0:c0:7a:a0:9e:68: 46:7d:6f:46:4a:56:ff:53:c1:97:41:15:ee:23:6f: a3:77:ee:52:4f:ab:2e:6f:45:f5:70:c8:1a:e8:36: a5:94:2f:4d:8a:09:1d:3e:c7:ee:dd:10:9f:13:fe: c7:98:a5:b8:0f:6c:3f:ec:bf:5d:e9:0c:ef:d3:25: 90:99:b9:12:0b:39:24:f7:5f:89:3c:a4:77:ac:63: 05:9c:47:cb:f2:37:28:35:10:a2:1c:e0:82:0b:13: 1e:78:5d:60:7e:e9:88:45:18:6f:82:74:60:71:da: 9e:9f:d6:f3:4b:c9:dd:fd:f4:91:46:64:d2:fa:39: ae:9b:d7:cc:d3:f3:06:bd:96:5a:12:fc:07:eb:74: 6b:be:7a:1f:ae:21:d8:8c:7d:ea:2f:b1:4e:1e:c7: f6:68:12:21:df:6e:c6:b1:40:a3:3c:cb:2c:72:d1: 47:9d:5d:e6:42:17:31:3f:e6:09:dd:72:fd:34:73: 76:ec:e5:f7:7b:65:77:0f:30:13:d6:36:bf:c7:4d: 82:49:5d:99:f1:9b:20:79:91:ec:16:a5:ba:17:63: a7:0c:93:f7:f2:30:4e:46:45:d2:e4:04:51:91:b2: 8a:2c:7d:bd:85:60:3e:36:31:70:4a:58:7b:5d:63: 71:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:C0:7E:4E:81:A1:90:D7:13:75:7A:F4:B1:67:4B:A8:3D:E3:05:27 X509v3 Authority Key Identifier: keyid:6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:1c:53:96:19:ad:b1:c4:a9:b1:10:09:1a:f2:47:f5:11:ef: 96:19:a8:8f:12:d0:74:34:43:5f:c8:ea:dc:af:75:74:13:5f: cb:67:17:ab:9d:1e:8f:69:89:61:45:90:e0:c6:50:ec:89:50: 3b:ce:53:db:bb:54:22:c9:dc:cd:99:f2:a2:41:b3:aa:f6:84: 52:ae:96:e1:8f:1b:5a:06:23:ea:c0:fe:76:5e:f4:c5:96:c8: ad:26:42:c6:c9:fd:25:78:4a:fb:e6:08:85:85:88:5d:00:e4: e3:19:8a:ce:57:d4:40:d7:b1:d6:cb:ee:2b:33:f6:43:6b:80: 41:cb:2f:7f:56:8a:68:9d:3f:0e:ad:60:eb:0e:05:a5:42:f2: a8:70:d4:ef:97:d9:32:1d:14:7f:b3:c7:dc:b9:1c:7e:f3:81: 90:a8:c1:42:1f:24:cf:62:ef:ae:19:72:83:20:4f:cb:e0:d4: 01:c4:80:ca:2f:e5:f0:cd:f4:27:eb:b7:17:03:3b:51:3e:a4: 39:38:e4:b2:94:f0:d6:5c:7a:76:1f:b2:d8:47:6b:fa:18:ea: a6:2b:76:c9:a5:2c:26:8b:07:58:b2:e5:0b:0c:4b:69:6b:fa: 21:e1:a8:27:e3:52:fb:f9:11:4e:01:b1:d9:2f:c9:d0:e6:d2: eb:aa:a3:d3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAhJ/I4Fl+h4YRyORXnifneFM/6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCN0JFQzJGMjUxQjIwOUY1NzBERDE1NkZFMTU3NEI2 RDAzMEIzRDAeFw0yNjA1MTMwODQ2MDNaFw0yNjA1MTQxMjE4MDNaMDMxMTAvBgNV BAMTKEU5QzA3RTRFODFBMTkwRDcxMzc1N0FGNEIxNjc0QkE4M0RFMzA1MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc6ReR8j9tr9DAeqCeaEZ9b0ZK Vv9TwZdBFe4jb6N37lJPqy5vRfVwyBroNqWUL02KCR0+x+7dEJ8T/seYpbgPbD/s v13pDO/TJZCZuRILOST3X4k8pHesYwWcR8vyNyg1EKIc4IILEx54XWB+6YhFGG+C dGBx2p6f1vNLyd399JFGZNL6Oa6b18zT8wa9lloS/AfrdGu+eh+uIdiMfeovsU4e x/ZoEiHfbsaxQKM8yyxy0UedXeZCFzE/5gndcv00c3bs5fd7ZXcPMBPWNr/HTYJJ XZnxmyB5kewWpboXY6cMk/fyME5GRdLkBFGRsoosfb2FYD42MXBKWHtdY3GlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6cB+ToGhkNcTdXr0sWdLqD3jBScwHwYDVR0j BBgwFoAUbbe+wvJRsgn1cN0Vb+FXS20DCz0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk1NTc4NTc1MTQ2MTg5MS8wLzZEQjdCRUMyRjI1MUIyMDlGNTcwREQxNTZGRTE1 NzRCNkQwMzBCM0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkRCN0JFQzJGMjUxQjIwOUY1NzBERDE1NkZFMTU3NEI2RDAzMEIzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NTU3ODU3NTE0NjE4OTEvMC82REI3QkVDMkYyNTFC MjA5RjU3MEREMTU2RkUxNTc0QjZEMDMwQjNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRxTlhmtscSp sRAJGvJH9RHvlhmojxLQdDRDX8jq3K91dBNfy2cXq50ej2mJYUWQ4MZQ7IlQO85T 27tUIsnczZnyokGzqvaEUq6W4Y8bWgYj6sD+dl70xZbIrSZCxsn9JXhK++YIhYWI XQDk4xmKzlfUQNex1svuKzP2Q2uAQcsvf1aKaJ0/Dq1g6w4FpULyqHDU75fZMh0U f7PH3LkcfvOBkKjBQh8kz2LvrhlygyBPy+DUAcSAyi/l8M30J+u3FwM7UT6kOTjk spTw1lx6dh+y2Edr+hjqpit2yaUsJosHWLLlCwxLaWv6IeGoJ+NS+/kRTgGx2S/J 0ObS66qj0w== -----END CERTIFICATE-----Generated at Wed May 13 12:40:25 2026 by rpki-client