$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft File: 6E171695D3EF09F7A49B6AF0022DA63420988631.mft (raw, json) Hash identifier: 5A0WeQVxTSAXeiRvKq0dTuF6hxPWSzv6exW64kxPdh0= Subject key identifier: 3B:C8:FA:BF:96:57:A1:33:26:F7:17:0D:C0:A1:53:E2:4B:89:6B:8F Authority key identifier: 6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31 Certificate issuer: /CN=6E171695D3EF09F7A49B6AF0022DA63420988631 Certificate serial: 4F1961E87DD8AC8F28D6F43361745BA67092CA5D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 04:28:16 +0000 Manifest this update: Mon 02 Mar 2026 04:23:16 +0000 Manifest next update: Tue 03 Mar 2026 06:13:16 +0000 Files and hashes: 1: 3130332e3232372e3232382e302f32322d3232203d3e20313331353236.roa (hash: nYDYkZddHjE9LpPNDCfoTzhw2hIepJ22IneS6IcaytI=) 2: 6E171695D3EF09F7A49B6AF0022DA63420988631.crl (hash: CNT+bB4gfkG6WjvSuwZ/+tzJgvyo1K97njWFHWWARTA=) 3: 323430323a356534303a3a2f33322d3332203d3e20313331353236.roa (hash: 1h4OrgL9zEqJdmEkth2dOBjhiLKByYppiMUDngFpF44=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:19:61:e8:7d:d8:ac:8f:28:d6:f4:33:61:74:5b:a6:70:92:ca:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E171695D3EF09F7A49B6AF0022DA63420988631 Validity Not Before: Mar 2 04:23:16 2026 GMT Not After : Mar 3 06:13:16 2026 GMT Subject: CN=3BC8FABF9657A13326F7170DC0A153E24B896B8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:92:21:7e:65:34:b7:79:b2:25:29:57:63:bc: 86:39:d4:9d:fc:ad:4a:58:b3:e1:60:3e:29:97:7d: 0d:ca:39:98:4a:f7:b4:34:81:da:1f:9a:fa:3a:a2: a6:30:1c:c6:5d:d8:b5:c1:49:29:4c:a3:e3:90:bd: 42:5c:96:a1:40:f7:8e:af:ed:87:9f:a7:ec:d3:5e: 61:67:c8:40:80:45:ae:cf:77:57:55:d6:bb:f8:3d: ea:7b:b9:15:1d:82:08:4c:ad:0a:ea:c4:c7:e1:b7: 8c:61:58:f8:5e:d8:5d:59:d7:dd:54:6a:df:28:0b: fa:d7:de:50:49:a9:ed:4c:fa:ac:77:0b:b2:19:23: cd:3c:ed:ef:fb:10:4b:29:fe:ba:c7:e7:1a:d4:49: 27:2c:c2:32:69:83:a7:10:71:19:ae:02:21:61:96: da:73:2e:77:53:f2:49:1a:ea:40:bc:8e:d8:53:68: d4:ad:54:3a:b1:6d:e3:75:95:b0:dc:c4:79:9c:52: 3e:b0:5d:0c:cc:ec:bf:1f:3f:90:ac:7c:fc:43:6e: f1:6f:19:99:fe:d7:1b:1f:09:fa:d8:54:e9:a3:2c: fe:da:27:ea:b5:03:6f:ae:49:dd:46:09:ea:69:52: 62:1d:cb:ba:c1:0e:ee:b5:d3:95:23:bd:27:81:73: 83:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C8:FA:BF:96:57:A1:33:26:F7:17:0D:C0:A1:53:E2:4B:89:6B:8F X509v3 Authority Key Identifier: keyid:6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:58:13:60:af:26:88:21:f3:d6:f6:25:b9:6c:3e:c9:2e:c1: e2:78:08:3c:91:ad:dc:b6:f4:66:5b:bf:9a:84:5f:7f:0c:8a: 86:ff:6f:24:7c:0b:ff:ce:be:0a:ac:64:60:ba:4c:36:45:07: 09:bc:01:9a:eb:b0:7e:1d:71:b1:a9:76:d3:12:a8:dc:3f:39: e8:d9:e9:1e:60:c2:4b:3d:a4:76:57:54:33:b9:f4:81:7b:83: 8e:59:72:06:da:8a:0e:71:e0:c5:7d:00:0e:a6:81:0a:10:d1: 6e:e5:1c:73:b6:d6:23:56:fa:23:ef:ea:d9:d0:2f:29:d8:09: 5d:66:22:1c:c9:af:1f:17:d8:03:d3:21:a2:9e:a1:c6:f6:ad: 7f:b3:c1:a8:5d:f9:b1:14:c7:db:98:e7:64:e8:34:f5:f5:5c: 7e:44:4d:f1:9d:76:e9:44:24:1f:e8:0b:48:40:22:d0:06:f8: bf:c7:e1:b7:01:96:30:e1:19:79:76:2f:00:aa:6e:0b:5f:2a: 30:61:cf:e6:33:81:2e:a0:2c:87:09:c0:41:36:7e:1c:5c:44: 59:a2:5b:8c:ea:1e:2e:f2:0b:83:a4:17:71:52:63:58:d8:c8: 53:db:1a:6f:4f:76:09:0a:8c:07:7c:cd:dd:e8:5d:c5:f6:bd: e4:e8:8f:96 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTxlh6H3YrI8o1vQzYXRbpnCSyl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUxNzE2OTVEM0VGMDlGN0E0OUI2QUYwMDIyREE2MzQy MDk4ODYzMTAeFw0yNjAzMDIwNDIzMTZaFw0yNjAzMDMwNjEzMTZaMDMxMTAvBgNV BAMTKDNCQzhGQUJGOTY1N0ExMzMyNkY3MTcwREMwQTE1M0UyNEI4OTZCOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJkiF+ZTS3ebIlKVdjvIY51J38 rUpYs+FgPimXfQ3KOZhK97Q0gdofmvo6oqYwHMZd2LXBSSlMo+OQvUJclqFA946v 7Yefp+zTXmFnyECARa7Pd1dV1rv4Pep7uRUdgghMrQrqxMfht4xhWPhe2F1Z191U at8oC/rX3lBJqe1M+qx3C7IZI8087e/7EEsp/rrH5xrUSScswjJpg6cQcRmuAiFh ltpzLndT8kka6kC8jthTaNStVDqxbeN1lbDcxHmcUj6wXQzM7L8fP5CsfPxDbvFv GZn+1xsfCfrYVOmjLP7aJ+q1A2+uSd1GCeppUmIdy7rBDu6105UjvSeBc4OrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUO8j6v5ZXoTMm9xcNwKFT4kuJa48wHwYDVR0j BBgwFoAUbhcWldPvCfekm2rwAi2mNCCYhjEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTQ5NDAxOC8wLzZFMTcxNjk1RDNFRjA5RjdBNDlCNkFGMDAyMkRB NjM0MjA5ODg2MzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkUxNzE2OTVEM0VGMDlGN0E0OUI2QUYwMDIyREE2MzQyMDk4ODYzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE0OTQwMTgvMC82RTE3MTY5NUQzRUYw OUY3QTQ5QjZBRjAwMjJEQTYzNDIwOTg4NjMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyFgTYK8miCHz 1vYluWw+yS7B4ngIPJGt3Lb0Zlu/moRffwyKhv9vJHwL/86+CqxkYLpMNkUHCbwB muuwfh1xsal20xKo3D856NnpHmDCSz2kdldUM7n0gXuDjllyBtqKDnHgxX0ADqaB ChDRbuUcc7bWI1b6I+/q2dAvKdgJXWYiHMmvHxfYA9Mhop6hxvatf7PBqF35sRTH 25jnZOg09fVcfkRN8Z126UQkH+gLSEAi0Ab4v8fhtwGWMOEZeXYvAKpuC18qMGHP 5jOBLqAshwnAQTZ+HFxEWaJbjOoeLvILg6QXcVJjWNjIU9sab092CQqMB3zN3ehd xfa95OiPlg== -----END CERTIFICATE-----Generated at Mon Mar 2 07:31:22 2026 by rpki-client