$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft File: 6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft (raw, json) Hash identifier: NpErUpfZWxnFFoH2YnooMDFNy4qhM1E/9YCj/EoZX5Y= Subject key identifier: C0:2D:3E:CF:0C:15:AA:9A:F6:F5:5F:3B:97:E1:4F:2E:F5:B2:B0:C8 Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Certificate serial: 0BDA577FF14D2BD266FBBECCEC4FA7D1A55CED33 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft Manifest number: 37 Signing time: Sun 01 Mar 2026 19:18:16 +0000 Manifest this update: Sun 01 Mar 2026 19:13:16 +0000 Manifest next update: Mon 02 Mar 2026 22:43:16 +0000 Files and hashes: 1: 3132302e34352e302e302f31362d3136203d3e2034383437.roa (hash: e3k7Iz2AbcrOnzEC7lCU4UO8ip/XOhRamxgrg+OBUAg=) 2: 3132302e34352e302e302f31362d3136203d3e203138313138.roa (hash: C4rcAlSgZV7754y5uPyyWtQVibM3t4nZdIrXFXZoZ7Q=) 3: 3132302e34372e302e302f31362d3136203d3e2034383437.roa (hash: lv7hLgB4DhaCLKjg4xf3dfIw4sVemT9lRXa3jqlxqXA=) 4: 6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl (hash: dNChTWe4pSPNSKkJgst68Ra3JBNvDAgOT2cWBPSzyNo=) 5: 3231392e37322e302e302f31362d3136203d3e2034383437.roa (hash: E35Ak8kryIUI2zOXyOabRVR/vhDEn+uGa0zCN0KdzcM=) 6: 3231392e37322e302e302f31362d3136203d3e203138313138.roa (hash: 3fGts9fS3mm4peYPa5y25NpoXBF5DOH88ZO6sDHG1lc=) 7: 3231392e37322e3136302e302f32342d3234203d3e203138313138.roa (hash: 8dtxM9VRFS14jXgTL0jlExD+rRZPerBYVc3WFemUOQQ=) 8: 3231392e37322e3136302e302f32342d3234203d3e20333938373034.roa (hash: d/cQSMYNBX/wZD+QYHNeyKRe0x+03uT3D/Oy6lO4iy8=) 9: 3132302e34372e302e302f31362d3136203d3e203138313138.roa (hash: Ft5CLZw9t2CRUNmavoaGZC/hKN+eHg2+xR6CvXnjcRI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 22:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:da:57:7f:f1:4d:2b:d2:66:fb:be:cc:ec:4f:a7:d1:a5:5c:ed:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Validity Not Before: Mar 1 19:13:16 2026 GMT Not After : Mar 2 22:43:16 2026 GMT Subject: CN=C02D3ECF0C15AA9AF6F55F3B97E14F2EF5B2B0C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:83:3a:54:01:e5:27:d0:aa:26:3a:cb:7d: be:9c:92:34:0d:cd:69:f6:7e:14:1d:1d:58:94:7e: 2d:f4:56:24:d1:c5:63:e4:93:6b:c9:3b:c9:f4:e3: 8b:bf:17:f7:6d:5c:ae:6a:3c:aa:92:35:12:eb:a9: 66:ae:27:4d:5a:fa:e8:8b:5f:55:f7:44:4c:40:b4: 35:bc:66:40:6f:77:4e:be:6f:54:5c:20:87:49:33: 8b:08:69:ad:8c:79:e1:d2:5e:7b:c9:ca:7c:fa:64: 46:02:89:0d:e8:1d:f1:88:43:aa:ba:d3:96:f7:d0: 52:c7:84:83:a3:c4:bc:c2:99:02:79:ba:a1:2a:c7: f1:40:a2:0e:1f:0d:22:b4:17:70:55:a6:92:bf:20: 28:66:c7:f5:47:db:a5:ef:b4:24:7b:43:c5:f5:d5: 0c:c0:53:9a:5c:c9:5a:f7:41:78:53:69:5a:e2:f1: d7:e1:3b:a0:80:b7:1e:d4:71:89:0b:0e:0e:22:a2: 77:10:ad:4f:c0:9e:45:67:7d:9b:c5:46:83:95:f8: 88:c1:04:87:b9:32:16:08:b9:9f:26:a8:3b:d8:0e: 42:e7:e5:fb:7b:de:36:41:28:d4:8b:49:02:25:78: 20:6d:1b:dd:d7:f8:74:c9:dd:4c:9f:1b:e8:cd:76: 14:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2D:3E:CF:0C:15:AA:9A:F6:F5:5F:3B:97:E1:4F:2E:F5:B2:B0:C8 X509v3 Authority Key Identifier: keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:68:ab:46:4b:7a:44:d0:b7:3f:ed:76:d0:1a:f1:91:de:1b: 12:6f:14:8d:b5:61:cf:95:72:89:b2:bc:4b:95:9b:01:75:43: 10:fb:7a:3e:fe:b7:47:c8:13:95:df:32:9f:b1:da:c2:fa:31: c7:21:f4:eb:e2:cc:ce:40:c2:c4:7b:b4:cd:30:21:43:53:2f: a4:cc:36:77:41:fd:95:9c:96:94:fb:b6:64:f6:c0:08:0f:c0: 8a:f4:bc:07:cc:b8:cb:31:c1:b4:3c:d6:70:5c:19:ef:95:ac: dd:43:82:61:c1:56:e8:19:97:6b:e1:3e:ca:37:48:2b:99:8f: 7a:d6:3f:d3:db:c1:b1:7d:14:22:7b:62:22:51:12:f8:8c:a5: c5:d1:07:01:19:09:3d:5f:9b:1b:c3:d5:46:62:8b:5e:9d:5f: 89:a3:7d:b7:e5:4f:2a:ec:cf:3c:b4:25:47:47:fa:a1:9d:97: 7a:7d:d9:c4:af:c7:ab:ec:84:f1:1e:8f:b1:91:24:a1:88:c8: 87:b8:95:fc:a0:10:05:e8:d5:a6:95:03:86:49:49:55:f1:48: df:75:71:59:4d:54:70:82:1d:ea:43:4a:26:f7:7f:6d:9c:ef: 91:31:22:a7:0d:d5:38:86:1c:31:62:48:90:12:44:80:47:89: 3b:1b:bd:62 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUC9pXf/FNK9Jm+77M7E+n0aVc7TMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE MTQxRjVENTAeFw0yNjAzMDExOTEzMTZaFw0yNjAzMDIyMjQzMTZaMDMxMTAvBgNV BAMTKEMwMkQzRUNGMEMxNUFBOUFGNkY1NUYzQjk3RTE0RjJFRjVCMkIwQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFoYM6VAHlJ9CqJjrLfb6ckjQN zWn2fhQdHViUfi30ViTRxWPkk2vJO8n044u/F/dtXK5qPKqSNRLrqWauJ01a+uiL X1X3RExAtDW8ZkBvd06+b1RcIIdJM4sIaa2MeeHSXnvJynz6ZEYCiQ3oHfGIQ6q6 05b30FLHhIOjxLzCmQJ5uqEqx/FAog4fDSK0F3BVppK/IChmx/VH26XvtCR7Q8X1 1QzAU5pcyVr3QXhTaVri8dfhO6CAtx7UcYkLDg4ioncQrU/AnkVnfZvFRoOV+IjB BIe5MhYIuZ8mqDvYDkLn5ft73jZBKNSLSQIleCBtG93X+HTJ3UyfG+jNdhRvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwC0+zwwVqpr29V87l+FPLvWysMgwHwYDVR0j BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyMDk3MjkvMC82QjU3RUFEN0IzODMx OTI2OUFFOTNBM0UyNkZCMzk2N0QxNDFGNUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGirRkt6RNC3 P+120Brxkd4bEm8UjbVhz5VyibK8S5WbAXVDEPt6Pv63R8gTld8yn7HawvoxxyH0 6+LMzkDCxHu0zTAhQ1MvpMw2d0H9lZyWlPu2ZPbACA/AivS8B8y4yzHBtDzWcFwZ 75Ws3UOCYcFW6BmXa+E+yjdIK5mPetY/09vBsX0UIntiIlES+IylxdEHARkJPV+b G8PVRmKLXp1fiaN9t+VPKuzPPLQlR0f6oZ2Xen3ZxK/Hq+yE8R6PsZEkoYjIh7iV /KAQBejVppUDhklJVfFI33VxWU1UcIId6kNKJvd/bZzvkTEipw3VOIYcMWJIkBJE gEeJOxu9Yg== -----END CERTIFICATE-----Generated at Mon Mar 2 12:46:12 2026 by rpki-client