$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft File: 060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft (raw, json) Hash identifier: jTyqfnunLY74BDX0hJn2avLd3z6ev2YjK6Iwa4JvfuQ= Subject key identifier: CD:CC:75:14:27:AB:77:B9:D2:3F:91:84:A0:F3:55:4E:56:5E:9D:11 Authority key identifier: 06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD Certificate issuer: /CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD Certificate serial: 3370807CA285260C25B13162782D671718690FFB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft Manifest number: 18 Signing time: Tue 12 May 2026 22:25:48 +0000 Manifest this update: Tue 12 May 2026 22:20:48 +0000 Manifest next update: Wed 13 May 2026 22:53:48 +0000 Files and hashes: 1: 3130332e3231362e34302e302f32322d3232203d3e2030.roa (hash: CJGUWXnox0zuB6o/j+gb69TVgAVyeUqTs1YSv3rOyk4=) 2: 060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl (hash: B8d26c2doE8DSlq+EJVGGnm7/qONxLEUxoVDwU35G74=) 3: 3130312e34392e3132382e302f31382d3138203d3e2030.roa (hash: EQ/aHDyPfGrqHqi7zcwJ4BpwFk8LfHUqOf3EobqjPg4=) 4: 3130312e34392e3134382e302f32332d3233203d3e2034383437.roa (hash: hD8pipimoNbXJuFtKR22JqYH5vAkWdps2g2kY8PbheI=) 5: 3135372e3131392e3137322e302f32322d3232203d3e2034383437.roa (hash: nfHPWryodoQGAWIQEwiQs1RdM4fk6gLb4mCgk+4BsD4=) 6: 323430343a653738303a3a2f33322d3332203d3e2030.roa (hash: jDt2YO5IfWb4E+JvZ4HL3Mb4PviL245jOkb90zp1nDg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:70:80:7c:a2:85:26:0c:25:b1:31:62:78:2d:67:17:18:69:0f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD Validity Not Before: May 12 22:20:48 2026 GMT Not After : May 13 22:53:48 2026 GMT Subject: CN=CDCC751427AB77B9D23F9184A0F3554E565E9D11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5a:56:88:4c:c7:c6:0c:ee:b2:15:48:f1:3c: f5:01:45:c4:01:52:46:9f:93:f4:f6:32:21:9f:3e: f9:b9:06:a4:c0:85:ac:82:79:29:43:c2:52:7e:28: 03:b3:18:71:62:d3:fb:cd:b3:a4:0d:2f:4d:59:c9: 04:08:3b:4a:d1:e2:1d:d9:bb:19:70:0a:2a:35:7f: c5:e7:e9:39:6c:9c:55:78:5e:7f:b1:a6:72:34:4d: 89:63:8f:43:ab:41:85:8f:84:b8:96:1c:85:7b:10: 22:89:b7:4d:dc:0f:00:95:f2:a7:2b:e8:6c:ed:65: 43:2b:74:09:69:60:9b:38:89:1e:25:7e:7e:12:5d: 08:34:86:f2:18:ff:bf:2f:a8:38:05:04:2b:c2:e4: b7:c7:63:fc:27:fa:8a:18:7a:e7:ff:76:79:05:81: be:a4:7e:4f:72:08:65:a5:fa:cb:3d:22:61:04:76: 97:39:bd:a9:15:60:53:e1:ed:6e:c2:73:0e:da:c9: 24:96:be:ff:c7:02:ca:94:05:cc:9d:20:0e:d1:ec: 99:50:18:03:06:4b:76:ba:5f:8b:5c:94:4f:cb:9a: 1a:a9:04:0c:a3:50:a6:64:2e:05:af:d1:7e:b4:de: 29:c4:f5:79:2d:61:76:4b:87:dd:4f:9d:df:3a:87: 0d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CC:75:14:27:AB:77:B9:D2:3F:91:84:A0:F3:55:4E:56:5E:9D:11 X509v3 Authority Key Identifier: keyid:06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d2:34:f6:9f:24:08:79:94:ca:09:03:86:ab:68:81:5b:f0: 43:bd:9d:90:11:7d:34:3a:fa:70:9b:af:18:e5:98:c9:da:c7: 5a:89:f1:56:f0:a5:b1:55:7a:fb:03:16:0d:87:ea:9f:7b:e5: cf:32:55:3a:4d:18:e0:17:73:ed:00:48:a4:bf:22:1d:33:46: 90:66:f4:06:9f:da:2d:4d:0e:6c:35:09:a7:8e:45:70:3e:dc: 8c:19:07:62:38:70:82:23:3b:f8:8c:22:a4:d5:f6:44:8d:b0: 2d:80:c4:11:39:78:34:39:23:89:91:ad:73:32:f7:c3:be:33: 80:66:f1:84:a1:86:72:ac:a8:8a:2c:46:ff:ff:91:3b:e7:cf: 50:d2:07:f7:7a:89:13:55:cb:dc:4a:1d:6d:89:40:d2:ce:1e: 28:98:f2:c4:5b:e7:01:20:c3:aa:30:10:cd:cb:1a:de:9a:68: 20:91:f8:0c:a9:fb:e1:de:7a:41:2f:4a:2b:d0:4b:d7:03:2b: 71:23:b1:b0:e2:33:70:f0:9d:d8:23:26:6a:11:a1:8f:36:17: 2d:d7:56:f2:09:d5:99:ad:fd:0a:df:96:b8:bb:2e:72:1d:d6: 04:8e:9e:da:55:42:08:d2:71:b7:39:a6:37:ee:38:dd:f9:ff: bd:40:aa:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM3CAfKKFJgwlsTFieC1nFxhpD/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYwNjc3RkZEQjhGQTNDNkM2REMyRjE4RURGN0JFREEw NjVGQjhBRDAeFw0yNjA1MTIyMjIwNDhaFw0yNjA1MTMyMjUzNDhaMDMxMTAvBgNV BAMTKENEQ0M3NTE0MjdBQjc3QjlEMjNGOTE4NEEwRjM1NTRFNTY1RTlEMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkWlaITMfGDO6yFUjxPPUBRcQB Ukafk/T2MiGfPvm5BqTAhayCeSlDwlJ+KAOzGHFi0/vNs6QNL01ZyQQIO0rR4h3Z uxlwCio1f8Xn6TlsnFV4Xn+xpnI0TYljj0OrQYWPhLiWHIV7ECKJt03cDwCV8qcr 6GztZUMrdAlpYJs4iR4lfn4SXQg0hvIY/78vqDgFBCvC5LfHY/wn+ooYeuf/dnkF gb6kfk9yCGWl+ss9ImEEdpc5vakVYFPh7W7Ccw7aySSWvv/HAsqUBcydIA7R7JlQ GAMGS3a6X4tclE/LmhqpBAyjUKZkLgWv0X603inE9XktYXZLh91Pnd86hw0ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzcx1FCerd7nSP5GEoPNVTlZenREwHwYDVR0j BBgwFoAUBgZ3/9uPo8bG3C8Y7fe+2gZfuK0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk5MTg4MDU0OTYyOTk1NS8wLzA2MDY3N0ZGREI4RkEzQzZDNkRDMkYxOEVERjdC RURBMDY1RkI4QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDYwNjc3RkZEQjhGQTNDNkM2REMyRjE4RURGN0JFREEwNjVGQjhBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5OTE4ODA1NDk2Mjk5NTUvMC8wNjA2NzdGRkRCOEZB M0M2QzZEQzJGMThFREY3QkVEQTA2NUZCOEFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtI09p8kCHmU ygkDhqtogVvwQ72dkBF9NDr6cJuvGOWYydrHWonxVvClsVV6+wMWDYfqn3vlzzJV Ok0Y4Bdz7QBIpL8iHTNGkGb0Bp/aLU0ObDUJp45FcD7cjBkHYjhwgiM7+IwipNX2 RI2wLYDEETl4NDkjiZGtczL3w74zgGbxhKGGcqyoiixG//+RO+fPUNIH93qJE1XL 3EodbYlA0s4eKJjyxFvnASDDqjAQzcsa3ppoIJH4DKn74d56QS9KK9BL1wMrcSOx sOIzcPCd2CMmahGhjzYXLddW8gnVma39Ct+WuLsuch3WBI6e2lVCCNJxtzmmN+44 3fn/vUCqvA== -----END CERTIFICATE-----Generated at Wed May 13 12:40:31 2026 by rpki-client