$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft File: 6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft (raw, json) Hash identifier: OeToqtxoYI6DKiYgzYbid5jcT9cDjs2GS8rIZLTeTGk= Subject key identifier: 1A:4C:42:85:3F:0B:74:3C:46:5B:98:05:E3:8D:0D:C0:59:D8:30:86 Authority key identifier: 6F:1B:DE:E7:52:DB:E3:5C:77:30:8D:3A:9B:77:5A:C4:97:B5:0C:04 Certificate issuer: /CN=6F1BDEE752DBE35C77308D3A9B775AC497B50C04 Certificate serial: 5E3439224D68EDA97F4F354135CD5731B866E727 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft Manifest number: 3A Signing time: Mon 02 Mar 2026 12:48:17 +0000 Manifest this update: Mon 02 Mar 2026 12:43:17 +0000 Manifest next update: Tue 03 Mar 2026 14:27:17 +0000 Files and hashes: 1: 6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl (hash: WvJmTGsbH/y4v1tS+y+3xwISxpkHk60zuHc5XcuCQR0=) 2: 3136372e3232302e3234342e302f32322d3233203d3e203538383632.roa (hash: S6YeUv7/1SNKdqeM0QDgAM+ogiwASSDMjBMWQQAcs0I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:34:39:22:4d:68:ed:a9:7f:4f:35:41:35:cd:57:31:b8:66:e7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F1BDEE752DBE35C77308D3A9B775AC497B50C04 Validity Not Before: Mar 2 12:43:17 2026 GMT Not After : Mar 3 14:27:17 2026 GMT Subject: CN=1A4C42853F0B743C465B9805E38D0DC059D83086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ad:0f:ed:e2:97:e5:19:1e:3b:3e:2b:a4:f2: 25:90:1b:31:69:02:6f:18:86:46:8e:ae:ce:b6:f6: b5:0b:36:91:b9:12:9f:4e:95:2b:26:16:d8:41:0b: 30:b0:b1:de:72:b1:97:0b:12:5a:2b:4f:20:1b:24: e2:64:59:0e:81:db:4b:cb:15:f5:51:39:c7:be:32: f2:45:44:10:63:98:78:b0:6d:c0:61:d8:95:52:8b: 45:23:c7:0d:e2:da:dd:b7:27:69:08:55:e2:c5:34: b8:5a:b6:4e:45:fc:74:ca:17:5e:b8:3f:c5:c0:e3: b5:ee:96:88:ad:fb:19:79:b9:00:2b:6d:38:ea:76: d5:82:17:eb:1b:78:f8:5e:d0:de:0c:b2:18:77:1b: de:63:ea:e6:7d:fc:8d:a2:3e:23:12:78:a7:3b:1b: ee:97:4d:0e:11:68:1e:01:f8:60:61:44:23:32:ea: 27:0d:f1:84:87:3c:39:d8:bb:4e:28:f1:29:15:e7: 22:8b:63:79:3c:05:54:27:e2:40:74:99:5a:82:55: d0:3b:1e:5b:6d:7e:60:bd:91:60:fa:01:13:34:df: f7:82:ea:6d:fb:7e:32:8a:00:09:61:b5:76:a3:dc: 14:59:57:b2:0c:5e:88:f5:7f:6b:b5:a2:8a:97:71: fe:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4C:42:85:3F:0B:74:3C:46:5B:98:05:E3:8D:0D:C0:59:D8:30:86 X509v3 Authority Key Identifier: keyid:6F:1B:DE:E7:52:DB:E3:5C:77:30:8D:3A:9B:77:5A:C4:97:B5:0C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:da:bd:6d:e6:a7:b9:1d:20:eb:3f:13:e2:db:80:bb:7c:01: 95:cf:f1:23:ed:75:cf:97:dc:c2:7c:f1:74:4f:7f:53:5f:7b: 03:7d:d2:c6:0d:f1:e8:87:30:74:aa:35:d8:04:01:ab:e9:5d: 0a:58:d8:9d:39:41:3a:7e:2b:ff:a8:55:cd:c9:74:ab:8b:fd: d9:d8:47:c2:37:3d:9a:aa:2b:a6:ec:a6:1c:00:eb:2a:86:d0: 10:95:03:7d:b4:59:b9:3f:09:27:6c:6e:5a:13:55:cd:f1:d8: e0:6c:a0:de:4d:11:e1:31:1f:7e:0e:00:0c:93:0f:ac:5d:e6: ee:de:3e:08:4d:a8:21:64:fe:3f:61:5c:2b:f0:cd:1e:ef:4b: 46:83:97:96:b6:21:ff:bd:de:63:72:89:9e:6e:8b:12:06:54: 75:96:05:4d:48:ce:2a:66:82:72:d6:f4:1b:6b:c9:15:97:9e: 96:82:d8:de:21:2b:6f:5f:b7:37:b5:a4:3d:d3:d6:c3:82:43: d9:31:0f:8a:94:e8:95:2a:dc:5e:60:fa:d3:ef:d9:7b:93:6a: af:f0:b0:3e:34:17:d4:e6:5f:d2:0e:01:08:ec:6c:c7:6c:a0: f5:8c:e9:73:33:66:49:be:1e:91:1e:4a:32:2e:60:f9:36:62: 2d:73:9e:87 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXjQ5Ik1o7al/TzVBNc1XMbhm5ycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYxQkRFRTc1MkRCRTM1Qzc3MzA4RDNBOUI3NzVBQzQ5 N0I1MEMwNDAeFw0yNjAzMDIxMjQzMTdaFw0yNjAzMDMxNDI3MTdaMDMxMTAvBgNV BAMTKDFBNEM0Mjg1M0YwQjc0M0M0NjVCOTgwNUUzOEQwREMwNTlEODMwODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+rQ/t4pflGR47Piuk8iWQGzFp Am8YhkaOrs629rULNpG5Ep9OlSsmFthBCzCwsd5ysZcLElorTyAbJOJkWQ6B20vL FfVROce+MvJFRBBjmHiwbcBh2JVSi0Ujxw3i2t23J2kIVeLFNLhatk5F/HTKF164 P8XA47Xuloit+xl5uQArbTjqdtWCF+sbePhe0N4Mshh3G95j6uZ9/I2iPiMSeKc7 G+6XTQ4RaB4B+GBhRCMy6icN8YSHPDnYu04o8SkV5yKLY3k8BVQn4kB0mVqCVdA7 HlttfmC9kWD6ARM03/eC6m37fjKKAAlhtXaj3BRZV7IMXoj1f2u1ooqXcf75AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGkxChT8LdDxGW5gF440NwFnYMIYwHwYDVR0j BBgwFoAUbxve51Lb41x3MI06m3daxJe1DAQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDM5MjU3OS8xLzZGMUJERUU3NTJEQkUzNUM3NzMwOEQzQTlCNzc1 QUM0OTdCNTBDMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNkYxQkRFRTc1MkRCRTM1Qzc3MzA4RDNBOUI3NzVBQzQ5N0I1MEMwNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMS82RjFCREVFNzUyREJF MzVDNzczMDhEM0E5Qjc3NUFDNDk3QjUwQzA0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdq9beanuR0g 6z8T4tuAu3wBlc/xI+11z5fcwnzxdE9/U197A33Sxg3x6IcwdKo12AQBq+ldCljY nTlBOn4r/6hVzcl0q4v92dhHwjc9mqorpuymHADrKobQEJUDfbRZuT8JJ2xuWhNV zfHY4Gyg3k0R4TEffg4ADJMPrF3m7t4+CE2oIWT+P2FcK/DNHu9LRoOXlrYh/73e Y3KJnm6LEgZUdZYFTUjOKmaCctb0G2vJFZeeloLY3iErb1+3N7WkPdPWw4JD2TEP ipTolSrcXmD60+/Ze5Nqr/CwPjQX1OZf0g4BCOxsx2yg9YzpczNmSb4ekR5KMi5g +TZiLXOehw== -----END CERTIFICATE-----Generated at Mon Mar 2 17:52:21 2026 by rpki-client