$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft File: 6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft (raw, json) Hash identifier: EvjR49qi6gkdFSXeGLN0dKjBntzEnRiTGQsxp1Lbcv4= Subject key identifier: 1D:3A:60:36:B3:B3:5F:AA:F4:64:EF:7C:9F:B7:D5:30:F6:F7:2E:BD Authority key identifier: 6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1 Certificate issuer: /CN=6B3CB0044466142CEF0429B4E232A5AD2D38AAA1 Certificate serial: 7B1ABC52294F29738030086F6FDDC8F8C8F5E753 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft Manifest number: 25 Signing time: Wed 13 May 2026 16:41:05 +0000 Manifest this update: Wed 13 May 2026 16:36:05 +0000 Manifest next update: Thu 14 May 2026 17:40:05 +0000 Files and hashes: 1: 323430303a383665303a3a2f33322d3332203d3e20313436383134.roa (hash: DLyf9Hka8LSknSJVSIf6Mgywzzt8gkawHdcew74fo+c=) 2: 6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl (hash: gVg908FyxEVTvCwihn0NlwOAHpvM7lTAza6BN+kC02Y=) 3: 3130332e3138392e3135342e302f32332d3233203d3e20313436383134.roa (hash: 4nDwr0x7auXaCdia53bmpvYSCG62VhpDsLJImLDcVGo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:1a:bc:52:29:4f:29:73:80:30:08:6f:6f:dd:c8:f8:c8:f5:e7:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B3CB0044466142CEF0429B4E232A5AD2D38AAA1 Validity Not Before: May 13 16:36:05 2026 GMT Not After : May 14 17:40:05 2026 GMT Subject: CN=1D3A6036B3B35FAAF464EF7C9FB7D530F6F72EBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b8:54:9e:b8:c0:68:56:f9:5c:07:7f:f6:3d: 6b:cd:ea:bc:67:be:ab:20:cc:fe:69:d4:92:36:da: 3c:f9:9a:86:d1:3e:3d:e2:cc:fb:21:3c:e9:1a:a2: 41:c7:c3:c8:ed:eb:c5:9c:b0:04:16:d8:c3:df:a3: a7:4b:9b:64:f1:98:a2:a0:61:60:b7:4e:90:5a:2f: 70:b7:5d:48:14:94:77:dd:0f:27:10:04:37:99:51: da:e0:e0:0d:b5:44:35:03:df:78:94:49:86:e9:9d: b6:ef:4e:b1:5a:ea:ad:76:ca:e4:96:42:c5:e5:32: 4f:29:d8:61:b4:52:18:2b:dd:db:f2:12:c4:c9:0d: 00:a8:0e:4b:f1:5e:60:18:0d:68:0d:0d:d6:11:c5: 6d:88:b2:4f:b7:e9:99:4c:ef:de:0c:f0:3d:5b:9e: a6:05:01:da:48:1b:d2:78:45:55:85:e3:22:76:fc: c4:fa:64:c1:15:a7:f1:02:c4:6f:20:4c:ab:53:ea: 18:ed:d9:ea:1b:5f:31:2e:90:40:38:8a:16:60:ab: 54:c4:dc:dc:b1:97:c9:41:75:46:be:83:fd:3e:ec: 2e:6c:4b:58:c3:b1:95:ca:72:17:3a:84:7c:bc:9d: db:76:14:41:80:7c:44:85:0a:78:99:fc:bc:d0:43: 31:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3A:60:36:B3:B3:5F:AA:F4:64:EF:7C:9F:B7:D5:30:F6:F7:2E:BD X509v3 Authority Key Identifier: keyid:6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:e4:c2:23:7a:d0:03:5d:85:4d:ec:8c:c3:5d:fd:58:0c:d7: d0:7d:4a:93:47:93:db:2d:38:4c:75:71:49:77:3c:3e:3d:45: ae:59:bf:d9:38:a1:76:38:55:71:3b:84:63:29:a5:57:23:10: 1d:98:10:4a:82:cb:82:ef:83:ab:47:8d:0b:55:46:d9:5c:b4: 6d:01:e5:5b:40:87:42:2b:a9:20:75:b7:5a:8d:12:1b:03:38: fc:e8:3a:e3:8a:78:61:4c:c2:49:d6:ca:c7:e5:36:a3:69:23: 16:02:14:51:78:5d:90:ad:74:76:fb:44:94:2f:28:31:e0:4d: 22:b4:fe:c9:0c:2b:25:7e:ba:47:93:a4:c5:68:ae:f4:9d:69: 5a:e7:fc:49:45:55:08:b3:6e:17:d7:01:45:1c:e4:f3:be:4b: aa:8c:f0:1e:9f:41:0c:f2:b4:73:82:c4:4b:da:b5:96:f5:8f: 0f:42:da:56:53:2f:24:51:96:39:a7:7a:6c:95:db:5e:19:7c: 3d:f9:04:00:4d:aa:87:8e:a0:37:54:61:b5:41:6c:6f:b7:cb: 2b:93:54:6f:85:88:7b:e7:1a:98:b0:7c:99:74:e2:6f:e2:e3: 49:ab:63:fc:ed:e8:60:41:64:12:b9:70:f1:af:0b:28:cf:17: 9f:36:e7:3a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUexq8UilPKXOAMAhvb93I+Mj151MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzQ0IwMDQ0NDY2MTQyQ0VGMDQyOUI0RTIzMkE1QUQy RDM4QUFBMTAeFw0yNjA1MTMxNjM2MDVaFw0yNjA1MTQxNzQwMDVaMDMxMTAvBgNV BAMTKDFEM0E2MDM2QjNCMzVGQUFGNDY0RUY3QzlGQjdENTMwRjZGNzJFQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmuFSeuMBoVvlcB3/2PWvN6rxn vqsgzP5p1JI22jz5mobRPj3izPshPOkaokHHw8jt68WcsAQW2MPfo6dLm2TxmKKg YWC3TpBaL3C3XUgUlHfdDycQBDeZUdrg4A21RDUD33iUSYbpnbbvTrFa6q12yuSW QsXlMk8p2GG0Uhgr3dvyEsTJDQCoDkvxXmAYDWgNDdYRxW2Isk+36ZlM794M8D1b nqYFAdpIG9J4RVWF4yJ2/MT6ZMEVp/ECxG8gTKtT6hjt2eobXzEukEA4ihZgq1TE 3Nyxl8lBdUa+g/0+7C5sS1jDsZXKchc6hHy8ndt2FEGAfESFCniZ/LzQQzF1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHTpgNrOzX6r0ZO98n7fVMPb3Lr0wHwYDVR0j BBgwFoAUazywBERmFCzvBCm04jKlrS04qqEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQwNDMzNzcxOTYwNzI5OC8wLzZCM0NCMDA0NDQ2NjE0MkNFRjA0MjlCNEUyMzJB NUFEMkQzOEFBQTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkIzQ0IwMDQ0NDY2MTQyQ0VGMDQyOUI0RTIzMkE1QUQyRDM4QUFBMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MDQzMzc3MTk2MDcyOTgvMC82QjNDQjAwNDQ0NjYx NDJDRUYwNDI5QjRFMjMyQTVBRDJEMzhBQUExLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvuTCI3rQA12F TeyMw139WAzX0H1Kk0eT2y04THVxSXc8Pj1Frlm/2TihdjhVcTuEYymlVyMQHZgQ SoLLgu+Dq0eNC1VG2Vy0bQHlW0CHQiupIHW3Wo0SGwM4/Og644p4YUzCSdbKx+U2 o2kjFgIUUXhdkK10dvtElC8oMeBNIrT+yQwrJX66R5OkxWiu9J1pWuf8SUVVCLNu F9cBRRzk875LqozwHp9BDPK0c4LES9q1lvWPD0LaVlMvJFGWOad6bJXbXhl8PfkE AE2qh46gN1RhtUFsb7fLK5NUb4WIe+camLB8mXTib+LjSatj/O3oYEFkErlw8a8L KM8XnzbnOg== -----END CERTIFICATE-----Generated at Wed May 13 20:55:06 2026 by rpki-client