$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft File: 6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft (raw, json) Hash identifier: xauU9IF/5PKOOokl3NmAhZgeGl3H2sEUQqGvYZeyOtc= Subject key identifier: 32:C3:F5:8D:A8:3D:F7:BD:06:40:18:54:85:4F:A8:5E:3D:56:FE:01 Authority key identifier: 6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3 Certificate issuer: /CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3 Certificate serial: 2A4388FA6E82266A6B751DD6E2C8C3877F54D758 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft Manifest number: 26 Signing time: Wed 13 May 2026 10:31:03 +0000 Manifest this update: Wed 13 May 2026 10:26:03 +0000 Manifest next update: Thu 14 May 2026 11:37:03 +0000 Files and hashes: 1: 3130332e3137302e3231332e302f32342d3234203d3e20313436383432.roa (hash: xHB51GTEu6E4O2uPU5Q+PFtFl9kWbp78dTmrzsJmvSE=) 2: 6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl (hash: KzIpVQY2Ba2P+rhHgcd5scC/qYerfh1BGS2lI+0t2kc=) 3: 3130332e3137302e3231322e302f32342d3234203d3e20313436383432.roa (hash: oIVYiH99ns+ZO8k2snXu2q5AtM9u9S/dgbN/MlAUrrI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:43:88:fa:6e:82:26:6a:6b:75:1d:d6:e2:c8:c3:87:7f:54:d7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3 Validity Not Before: May 13 10:26:03 2026 GMT Not After : May 14 11:37:03 2026 GMT Subject: CN=32C3F58DA83DF7BD06401854854FA85E3D56FE01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:43:2f:e9:41:cd:6d:6e:d8:00:c8:8f:66:0c: fd:1b:4e:e2:96:31:31:cb:28:6e:42:3a:a2:d7:82: a3:d1:fc:60:d8:f5:37:1d:8f:75:fb:91:b8:cf:31: cb:98:40:4a:58:13:c0:67:c3:30:98:e6:e6:b0:b5: a9:35:67:91:f8:4f:d5:85:50:1e:c5:30:fa:12:19: 35:06:55:29:7b:ba:24:94:42:1a:4e:43:54:0b:27: 12:72:58:c6:61:72:70:79:9d:2f:dd:20:04:a9:8e: 8a:3a:f3:5b:40:75:e6:d0:6e:c2:91:16:2e:09:9e: 8b:25:3b:86:9f:d1:1b:8b:81:16:c2:0e:b3:d9:4d: 0c:e5:04:17:5a:59:e1:64:63:31:c7:47:3d:7c:7e: d5:18:68:7f:53:c6:47:95:e2:34:20:2d:3b:30:79: 04:ec:da:a8:18:aa:de:22:f5:d9:17:c6:be:ee:7b: 99:ca:f3:30:b8:03:d3:76:ee:23:43:cb:29:0f:d0: 9a:41:4d:ea:bc:30:2c:90:ae:51:2a:18:e9:ea:6d: 23:9f:4c:be:57:59:d4:34:b5:25:95:4b:32:36:32: ac:6a:c9:a2:6c:5b:bd:ef:b8:4d:7e:a4:8b:67:48: 68:9a:a5:54:24:b6:c3:f0:26:aa:39:e3:8b:46:d6: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C3:F5:8D:A8:3D:F7:BD:06:40:18:54:85:4F:A8:5E:3D:56:FE:01 X509v3 Authority Key Identifier: keyid:6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:c1:78:f5:6a:c6:bc:29:76:d3:7b:76:a9:b0:9d:13:d2:d3: 93:03:d3:6e:e6:9b:cb:be:63:1e:a1:f1:a9:db:7d:7d:2a:96: 0c:0c:4d:d7:30:67:e6:e4:58:69:a6:b7:94:d4:52:27:5a:a4: 1a:08:0c:12:7e:83:69:73:69:a3:74:08:4e:5c:a2:41:e4:ee: 57:45:b0:38:89:c4:ae:f5:b7:29:a5:69:94:46:19:aa:d5:fb: 21:7b:2b:da:9a:c1:60:2b:6e:b9:09:18:15:22:c5:bd:0a:29: 1a:89:c0:46:af:7f:8a:60:93:44:9f:19:e6:c6:c3:d4:9a:75: f2:0c:0e:28:17:25:6e:87:55:3e:9e:d9:fc:bd:ae:d7:56:41: 45:ed:42:95:1f:d4:05:1b:ae:5e:36:3a:bf:26:c8:af:14:ec: 92:e1:ed:a6:86:9c:08:ee:3a:33:ee:eb:66:cb:5d:22:64:51: 91:fa:54:73:b8:50:68:ba:b9:3c:cb:7f:be:f2:c9:2c:13:bd: 0d:1b:c3:b1:db:1a:99:db:c0:f1:2d:89:4c:b3:20:19:44:7f: b3:c0:1e:3e:f9:e2:18:e1:a8:e8:de:1f:3b:18:1e:a2:94:6d: 06:05:87:ba:44:38:94:96:a7:11:f6:75:36:2b:03:94:cd:1b: 45:b2:b8:c9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKkOI+m6CJmprdR3W4sjDh39U11gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU0N0ZGNThBMUM1QUE4NTg0RDI5NTNDMUVBRDRERTg2 MTU3RUJEMzAeFw0yNjA1MTMxMDI2MDNaFw0yNjA1MTQxMTM3MDNaMDMxMTAvBgNV BAMTKDMyQzNGNThEQTgzREY3QkQwNjQwMTg1NDg1NEZBODVFM0Q1NkZFMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQQy/pQc1tbtgAyI9mDP0bTuKW MTHLKG5COqLXgqPR/GDY9Tcdj3X7kbjPMcuYQEpYE8BnwzCY5uawtak1Z5H4T9WF UB7FMPoSGTUGVSl7uiSUQhpOQ1QLJxJyWMZhcnB5nS/dIASpjoo681tAdebQbsKR Fi4JnoslO4af0RuLgRbCDrPZTQzlBBdaWeFkYzHHRz18ftUYaH9TxkeV4jQgLTsw eQTs2qgYqt4i9dkXxr7ue5nK8zC4A9N27iNDyykP0JpBTeq8MCyQrlEqGOnqbSOf TL5XWdQ0tSWVSzI2MqxqyaJsW73vuE1+pItnSGiapVQktsPwJqo544tG1qqPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMsP1jag9970GQBhUhU+oXj1W/gEwHwYDVR0j BBgwFoAUbkf/WKHFqoWE0pU8Hq1N6GFX69MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3NzM0NjQ1MzY4NDIyNS8wLzZFNDdGRjU4QTFDNUFBODU4NEQyOTUzQzFFQUQ0 REU4NjE1N0VCRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkU0N0ZGNThBMUM1QUE4NTg0RDI5NTNDMUVBRDRERTg2MTU3RUJEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzczNDY0NTM2ODQyMjUvMC82RTQ3RkY1OEExQzVB QTg1ODREMjk1M0MxRUFENERFODYxNTdFQkQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtMF49WrGvCl2 03t2qbCdE9LTkwPTbuaby75jHqHxqdt9fSqWDAxN1zBn5uRYaaa3lNRSJ1qkGggM En6DaXNpo3QITlyiQeTuV0WwOInErvW3KaVplEYZqtX7IXsr2prBYCtuuQkYFSLF vQopGonARq9/imCTRJ8Z5sbD1Jp18gwOKBclbodVPp7Z/L2u11ZBRe1ClR/UBRuu XjY6vybIrxTskuHtpoacCO46M+7rZstdImRRkfpUc7hQaLq5PMt/vvLJLBO9DRvD sdsamdvA8S2JTLMgGUR/s8AePvniGOGo6N4fOxgeopRtBgWHukQ4lJanEfZ1NisD lM0bRbK4yQ== -----END CERTIFICATE-----Generated at Wed May 13 16:11:40 2026 by rpki-client