$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft File: 6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft (raw, json) Hash identifier: s+Bvxrk8oFDHI3KANirOWcIUwl/eCcF5sQeZ4V3SS9k= Subject key identifier: 7A:65:24:14:97:64:AA:8C:F7:93:81:8B:32:DC:49:60:0C:35:D1:EA Authority key identifier: 6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1 Certificate issuer: /CN=6B3CB0044466142CEF0429B4E232A5AD2D38AAA1 Certificate serial: 79E6D3CA3335C277C90B972F3C4DD2AE37AA8472 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft Manifest number: 84 Signing time: Fri 24 Jul 2026 05:50:30 +0000 Manifest this update: Fri 24 Jul 2026 05:45:30 +0000 Manifest next update: Sat 25 Jul 2026 06:03:30 +0000 Files and hashes: 1: 323430303a383665303a3a2f33322d3332203d3e20313436383134.roa (hash: DLyf9Hka8LSknSJVSIf6Mgywzzt8gkawHdcew74fo+c=) 2: 3130332e3138392e3135342e302f32332d3233203d3e20313436383134.roa (hash: 4nDwr0x7auXaCdia53bmpvYSCG62VhpDsLJImLDcVGo=) 3: 6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl (hash: FyvxnGyD/wrhImVilJbuBJO3YiGsl+6T4HvNdEZolIA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e6:d3:ca:33:35:c2:77:c9:0b:97:2f:3c:4d:d2:ae:37:aa:84:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B3CB0044466142CEF0429B4E232A5AD2D38AAA1 Validity Not Before: Jul 24 05:45:30 2026 GMT Not After : Jul 25 06:03:30 2026 GMT Subject: CN=7A6524149764AA8CF793818B32DC49600C35D1EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:42:66:26:9e:16:bc:31:28:57:c8:65:4f:6e: ba:49:cf:ee:51:af:da:3e:e1:6d:74:77:10:c3:63: eb:fa:9d:64:4f:30:95:d6:97:cc:b2:f2:2a:d3:9c: ac:d3:3b:34:e5:56:3c:72:c6:8c:bd:9a:26:af:c8: f8:e6:65:36:af:f3:f2:06:8e:32:db:1c:8b:7e:ef: a4:05:8e:6a:c9:55:6a:34:be:43:f9:28:f0:8a:ef: d1:ac:04:6a:8b:34:1d:47:6b:4d:74:cd:ca:24:c6: 51:96:3e:34:76:68:9e:6e:06:0c:ae:ff:1f:0c:19: 28:dc:10:30:ae:6b:52:6a:49:da:57:57:7e:0a:76: f9:65:29:98:ce:29:0d:1e:6a:33:28:ed:15:1f:7d: 28:22:f2:d9:01:0e:b9:5e:8e:41:2a:8d:68:c3:b7: 22:89:0e:41:97:a7:9f:4b:2e:23:8c:59:b1:aa:8d: 80:2c:ff:12:11:0e:08:42:5c:4f:ad:f1:02:96:c8: 34:f6:26:4e:2f:12:91:c3:c5:20:1a:10:f2:41:b0: 76:9e:f2:37:da:98:67:2c:a6:49:06:c2:b0:5c:4e: 8a:a9:94:e3:b0:f8:ab:9b:43:c6:f4:ea:60:28:8d: eb:d6:11:1e:6e:fc:61:39:b8:69:92:b0:84:60:30: 9d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:65:24:14:97:64:AA:8C:F7:93:81:8B:32:DC:49:60:0C:35:D1:EA X509v3 Authority Key Identifier: keyid:6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:d8:23:bc:81:c2:f3:5e:cb:7b:2f:56:c1:7f:30:54:76:f5: ea:c5:6f:b1:9f:ec:c7:7b:0d:53:fd:20:fd:b6:2e:ff:c2:4d: bc:cc:b9:42:7e:45:30:11:45:b0:6d:90:55:61:69:ae:d7:1f: dc:8a:66:d1:de:89:f9:db:ca:51:0d:c8:3c:9b:fc:b2:6e:d4: a0:d3:42:6d:33:a6:03:5a:a7:cc:f4:33:0b:07:05:56:26:f0: 1d:ff:08:16:5f:6d:d8:5b:71:77:7c:be:29:fb:7d:11:c7:b6: a6:26:95:66:d6:e2:67:22:b4:00:0d:d9:33:62:84:53:60:95: a8:d2:ba:97:0d:9a:9e:fa:36:70:09:74:6f:e7:b1:89:96:ea: 22:f4:c5:90:fc:9c:4c:7c:ad:b6:13:94:8d:84:fb:5e:b0:42: e8:43:65:a3:ab:ff:f5:a2:7a:2e:b3:e5:7f:e5:01:1e:51:0b: 40:d3:48:41:24:81:c5:8f:37:6c:3d:f0:69:d0:9d:60:59:36: 5f:57:3b:1b:8c:99:b3:69:8e:f3:9f:78:83:a3:e1:76:c6:14: 92:c6:3d:2c:a1:da:04:7b:dc:cb:30:13:79:de:53:5e:15:fd: a7:9d:fe:23:73:64:c3:43:40:63:fd:28:6d:35:1c:40:0e:7c: a2:89:d8:84 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeebTyjM1wnfJC5cvPE3SrjeqhHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzQ0IwMDQ0NDY2MTQyQ0VGMDQyOUI0RTIzMkE1QUQy RDM4QUFBMTAeFw0yNjA3MjQwNTQ1MzBaFw0yNjA3MjUwNjAzMzBaMDMxMTAvBgNV BAMTKDdBNjUyNDE0OTc2NEFBOENGNzkzODE4QjMyREM0OTYwMEMzNUQxRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBQmYmnha8MShXyGVPbrpJz+5R r9o+4W10dxDDY+v6nWRPMJXWl8yy8irTnKzTOzTlVjxyxoy9miavyPjmZTav8/IG jjLbHIt+76QFjmrJVWo0vkP5KPCK79GsBGqLNB1Ha010zcokxlGWPjR2aJ5uBgyu /x8MGSjcEDCua1JqSdpXV34KdvllKZjOKQ0eajMo7RUffSgi8tkBDrlejkEqjWjD tyKJDkGXp59LLiOMWbGqjYAs/xIRDghCXE+t8QKWyDT2Jk4vEpHDxSAaEPJBsHae 8jfamGcspkkGwrBcToqplOOw+KubQ8b06mAojevWER5u/GE5uGmSsIRgMJ0pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUemUkFJdkqoz3k4GLMtxJYAw10eowHwYDVR0j BBgwFoAUazywBERmFCzvBCm04jKlrS04qqEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQwNDMzNzcxOTYwNzI5OC8wLzZCM0NCMDA0NDQ2NjE0MkNFRjA0MjlCNEUyMzJB NUFEMkQzOEFBQTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkIzQ0IwMDQ0NDY2MTQyQ0VGMDQyOUI0RTIzMkE1QUQyRDM4QUFBMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MDQzMzc3MTk2MDcyOTgvMC82QjNDQjAwNDQ0NjYx NDJDRUYwNDI5QjRFMjMyQTVBRDJEMzhBQUExLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtgjvIHC817L ey9WwX8wVHb16sVvsZ/sx3sNU/0g/bYu/8JNvMy5Qn5FMBFFsG2QVWFprtcf3Ipm 0d6J+dvKUQ3IPJv8sm7UoNNCbTOmA1qnzPQzCwcFVibwHf8IFl9t2Ftxd3y+Kft9 Ece2piaVZtbiZyK0AA3ZM2KEU2CVqNK6lw2anvo2cAl0b+exiZbqIvTFkPycTHyt thOUjYT7XrBC6ENlo6v/9aJ6LrPlf+UBHlELQNNIQSSBxY83bD3wadCdYFk2X1c7 G4yZs2mO8594g6PhdsYUksY9LKHaBHvcyzATed5TXhX9p53+I3Nkw0NAY/0obTUc QA58oonYhA== -----END CERTIFICATE-----Generated at Fri Jul 24 19:02:59 2026 by rpki-client