$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft File: 6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft (raw, json) Hash identifier: wEVhQAtRMYqPe89yzLrnoQd0/1u4EwHfqqP1ZVL5+wk= Subject key identifier: 5B:CC:DA:32:BD:43:A3:05:DC:CE:05:76:8E:00:B1:F2:AC:98:FA:AE Authority key identifier: 6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40 Certificate issuer: /CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40 Certificate serial: 59DC93800DD6F6CB62775E8D36CDBFAAD43A81B1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft Manifest number: 08 Signing time: Wed 13 May 2026 07:21:02 +0000 Manifest this update: Wed 13 May 2026 07:16:02 +0000 Manifest next update: Thu 14 May 2026 08:45:02 +0000 Files and hashes: 1: 6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl (hash: QLJ0PNOQnba3ZQX7ROImyHZtvLrA1X9k0l16ozYFOfY=) 2: 34352e3132312e35352e302f32342d3234203d3e203633353330.roa (hash: uQaKS12tHszrpruD4chXY46WQvO1G4VYxpx2NC0zXpc=) 3: 3130332e3230372e3138342e302f32322d3232203d3e203633353330.roa (hash: p4rGdOCdtSi/gskb6wDTowKIkMH8aqSZrt6W9t8cL0g=) 4: 323430303a613561303a3a2f33322d3332203d3e203633353330.roa (hash: uDfGInXKfeUSoNP2hY+TcDh0GI9nZQpiCTQ28Fl51mE=) 5: 34352e3132312e35322e302f32342d3234203d3e203633353330.roa (hash: MNGTiHV2NzvYS3MQd9CssunlWa/3AOgu8HFnKTzLd+I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:dc:93:80:0d:d6:f6:cb:62:77:5e:8d:36:cd:bf:aa:d4:3a:81:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40 Validity Not Before: May 13 07:16:02 2026 GMT Not After : May 14 08:45:02 2026 GMT Subject: CN=5BCCDA32BD43A305DCCE05768E00B1F2AC98FAAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:dc:de:24:16:19:6e:2d:c5:98:7a:23:0c:bd: 26:b4:0d:7f:81:8a:ff:41:99:05:1d:16:a4:d9:b1: f1:cb:a7:c4:a0:6c:d4:16:72:93:6b:8b:28:22:aa: 21:c9:fd:0b:59:a4:94:01:f9:07:d3:cd:02:70:fc: a2:b5:a7:b4:16:5d:e2:ab:14:72:c2:35:de:cc:12: f8:36:79:70:34:e2:e1:9a:13:5c:f7:07:bb:07:7f: 8f:d2:9b:05:b9:4e:a2:73:06:8b:56:f9:64:06:45: 8b:a9:b4:85:36:0e:92:24:6a:1c:45:aa:7f:45:9d: 9d:64:a1:c0:97:6a:9c:79:eb:c8:9f:8c:da:3f:8c: 1b:5e:b7:37:1a:9c:47:0e:dd:17:e8:e7:12:03:f8: 08:19:29:54:21:c5:d5:b8:cc:8f:63:0c:5a:2f:78: f0:79:c1:7e:d9:84:09:ab:b8:28:47:92:36:fc:7e: 9f:c7:ea:a2:2b:6d:06:9d:ac:78:93:ab:fd:9e:dd: 04:e4:9c:f6:90:2c:b1:fa:f3:88:30:92:06:48:5c: 61:46:6b:b5:fd:c6:8e:cd:ea:e2:48:c2:d1:39:aa: 75:64:19:6d:3e:3a:4d:63:74:20:63:42:56:a8:ae: da:ed:35:72:b2:af:b5:40:af:5d:7a:80:65:e5:53: e3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CC:DA:32:BD:43:A3:05:DC:CE:05:76:8E:00:B1:F2:AC:98:FA:AE X509v3 Authority Key Identifier: keyid:6F:B7:28:BF:3C:B4:1A:02:F3:DF:55:AC:25:9F:5D:D1:0B:79:EE:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105370877056253965/0/6FB728BF3CB41A02F3DF55AC259F5DD10B79EE40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:32:39:35:88:3f:63:a7:ed:99:9b:0c:85:3a:c7:a4:b6:f4: b7:42:1e:99:aa:3d:10:bb:ba:9e:cd:fc:b7:59:3e:37:aa:fa: 26:a4:d7:2d:27:4a:3d:94:32:05:22:33:97:9f:4e:55:9d:b9: d9:02:c9:af:41:73:cd:8e:86:65:aa:51:45:0e:cd:a1:3b:e5: a7:01:01:4b:76:89:9f:2d:46:71:ce:33:09:07:9c:3c:08:6b: b6:8f:df:c7:7d:9b:09:32:22:a4:03:ac:05:c0:2f:d6:e2:b5: c7:a1:1c:6b:7d:5a:2f:c6:58:dd:53:7f:45:18:56:81:c8:be: 74:b0:58:ab:12:47:9f:6b:65:a7:96:31:ed:d1:af:05:7e:e3: 4d:c4:97:6d:18:ea:77:65:b6:1a:3b:40:ae:8e:e3:44:8f:6c: a9:2b:e0:aa:62:d2:1f:72:90:9e:84:9b:cf:0a:9e:62:ad:04: dd:e6:6f:04:0a:5d:98:3d:d5:20:7b:25:66:2b:71:48:32:b6: 9b:45:4c:89:54:ed:ce:c3:b8:67:fd:58:c5:a7:fe:23:94:bf: 00:46:29:7a:ce:68:97:0e:e9:ee:c0:8e:f0:59:5b:e4:79:61: 26:87:4b:6e:aa:d4:1f:f1:00:ef:a3:7f:e9:7d:92:31:38:2a: 69:d3:9e:a5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWdyTgA3W9stid16NNs2/qtQ6gbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkZCNzI4QkYzQ0I0MUEwMkYzREY1NUFDMjU5RjVERDEw Qjc5RUU0MDAeFw0yNjA1MTMwNzE2MDJaFw0yNjA1MTQwODQ1MDJaMDMxMTAvBgNV BAMTKDVCQ0NEQTMyQkQ0M0EzMDVEQ0NFMDU3NjhFMDBCMUYyQUM5OEZBQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO3N4kFhluLcWYeiMMvSa0DX+B iv9BmQUdFqTZsfHLp8SgbNQWcpNriygiqiHJ/QtZpJQB+QfTzQJw/KK1p7QWXeKr FHLCNd7MEvg2eXA04uGaE1z3B7sHf4/SmwW5TqJzBotW+WQGRYuptIU2DpIkahxF qn9FnZ1kocCXapx568ifjNo/jBtetzcanEcO3Rfo5xID+AgZKVQhxdW4zI9jDFov ePB5wX7ZhAmruChHkjb8fp/H6qIrbQadrHiTq/2e3QTknPaQLLH684gwkgZIXGFG a7X9xo7N6uJIwtE5qnVkGW0+Ok1jdCBjQlaortrtNXKyr7VAr116gGXlU+O1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUW8zaMr1DowXczgV2jgCx8qyY+q4wHwYDVR0j BBgwFoAUb7covzy0GgLz31WsJZ9d0Qt57kAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM3MDg3NzA1NjI1Mzk2NS8wLzZGQjcyOEJGM0NCNDFBMDJGM0RGNTVBQzI1OUY1 REQxMEI3OUVFNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkZCNzI4QkYzQ0I0MUEwMkYzREY1NUFDMjU5RjVERDEwQjc5RUU0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzNzA4NzcwNTYyNTM5NjUvMC82RkI3MjhCRjNDQjQx QTAyRjNERjU1QUMyNTlGNUREMTBCNzlFRTQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjI5NYg/Y6ft mZsMhTrHpLb0t0Iemao9ELu6ns38t1k+N6r6JqTXLSdKPZQyBSIzl59OVZ252QLJ r0FzzY6GZapRRQ7NoTvlpwEBS3aJny1Gcc4zCQecPAhrto/fx32bCTIipAOsBcAv 1uK1x6Eca31aL8ZY3VN/RRhWgci+dLBYqxJHn2tlp5Yx7dGvBX7jTcSXbRjqd2W2 GjtAro7jRI9sqSvgqmLSH3KQnoSbzwqeYq0E3eZvBApdmD3VIHslZitxSDK2m0VM iVTtzsO4Z/1Yxaf+I5S/AEYpes5olw7p7sCO8Flb5HlhJodLbqrUH/EA76N/6X2S MTgqadOepQ== -----END CERTIFICATE-----Generated at Wed May 13 20:55:05 2026 by rpki-client