$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft File: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft (raw, json) Hash identifier: w7Hwcage/tI5zOS4/ewVoOlgyqRAxdzWbxft80B69FY= Subject key identifier: 7D:82:55:13:EB:59:9B:3C:F5:0B:3A:93:91:C9:FD:8E:9B:B3:D5:3A Authority key identifier: A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9 Certificate issuer: /CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9 Certificate serial: 6BFA34D25B75CE9B6B96B889CC2C44013B6BE210 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 10:13:17 +0000 Manifest this update: Mon 02 Mar 2026 10:08:17 +0000 Manifest next update: Tue 03 Mar 2026 12:44:17 +0000 Files and hashes: 1: 3130332e3131302e3133362e302f32322d3232203d3e203539303132.roa (hash: Gq1/YwE5iEcyh5S8JhVPyrDBUdmcenxdUCC+8WtWWiQ=) 2: 323430323a386263303a3a2f33322d3332203d3e203539303132.roa (hash: wRL2RgpwckoaF7H0gvAknICFvQDLSvcARgYe623q+hU=) 3: A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl (hash: AZDwuSLE/ts+9DRxRL/9UK3TuKUSInXYqHJeqnU1JyI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fa:34:d2:5b:75:ce:9b:6b:96:b8:89:cc:2c:44:01:3b:6b:e2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9 Validity Not Before: Mar 2 10:08:17 2026 GMT Not After : Mar 3 12:44:17 2026 GMT Subject: CN=7D825513EB599B3CF50B3A9391C9FD8E9BB3D53A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:16:81:64:cb:e4:31:dc:20:f8:4a:5f:aa:a0: 6f:f1:75:00:4c:53:58:5a:be:ee:25:c1:e2:db:ff: b0:82:c3:fe:2a:c5:f7:e8:97:d9:fc:54:47:38:ca: eb:6a:0e:3e:3c:8e:2e:97:07:33:22:b4:31:05:88: 47:8a:bb:3a:23:54:44:f5:a2:09:1a:3a:a1:63:fe: 6a:82:c5:8b:b3:3d:89:81:8e:75:e3:e9:ba:de:fb: 5d:d4:17:94:af:78:5c:24:ea:bd:e6:25:ec:27:3c: 50:f8:b7:c9:ab:a3:b5:b8:52:56:9d:a7:27:84:17: 28:61:c4:70:48:af:ff:ee:dd:cd:45:07:89:c7:11: ee:d7:14:11:dd:3d:8f:01:86:78:e9:3d:f4:78:87: 98:d6:54:be:5c:fb:e9:a4:e4:ac:7c:f0:89:ce:8b: c0:6e:29:3f:1b:fc:03:eb:22:8f:32:7d:43:b1:2f: ff:6e:ea:5a:30:20:d0:b3:dc:94:62:06:64:a4:16: 27:74:07:77:cb:5f:56:4b:5e:3b:71:0b:ea:50:ed: 3c:bc:ae:ac:a5:f3:cf:32:1f:2d:ae:16:9b:26:12: 9f:04:99:95:6e:fe:f1:f1:16:78:09:bf:1c:aa:93: 46:a6:c9:ba:a8:4c:76:ce:b5:9d:38:52:b4:82:63: 86:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:82:55:13:EB:59:9B:3C:F5:0B:3A:93:91:C9:FD:8E:9B:B3:D5:3A X509v3 Authority Key Identifier: keyid:A6:EF:4E:A2:7A:A6:DD:3A:ED:E7:F8:2A:BF:11:80:DB:E1:80:85:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972140035/0/A6EF4EA27AA6DD3AEDE7F82ABF1180DBE18085F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d0:be:2f:bf:fb:72:18:93:84:02:f0:83:b4:85:df:62:99: 20:c2:5c:73:a4:a8:4a:8f:8b:56:80:7b:ac:f9:eb:3a:16:88: 28:0f:f7:22:6d:d0:9a:30:69:78:a5:60:69:20:ec:b0:91:a2: 36:42:c2:cb:73:a0:e5:21:28:d6:ba:92:35:c2:ae:9b:cf:62: cc:d3:b5:9e:12:60:ca:d0:68:ca:63:d0:3c:0e:00:af:3f:98: 2c:4d:40:3b:4a:5f:6d:b3:cd:30:96:df:28:f2:50:53:84:3f: 84:5b:86:e7:d3:61:a8:71:fa:b2:4c:a4:8a:f3:3c:8d:0b:63: 04:a1:fd:0d:3d:01:b7:1a:e3:e7:38:ad:d7:ce:f1:5d:79:1e: 7b:f2:62:ee:d2:8a:d1:cb:5d:91:f1:3a:a8:a2:1a:b9:ee:eb: 4a:60:e3:e1:33:18:4e:fe:48:75:64:bf:3d:0b:f0:12:e1:90: 41:2a:2e:f5:2e:96:24:ad:d1:6e:bd:d9:c5:c8:20:ea:67:aa: 62:f2:2c:4b:93:ee:ae:61:04:38:4a:f3:c1:09:0b:93:4a:ea: 29:c2:c2:a9:4a:fb:c4:97:99:21:0f:4d:38:25:d4:fc:a4:95: af:29:e6:fa:f6:0c:d8:49:2b:68:68:62:62:1a:b2:2d:0f:bb: 36:65:90:11 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa/o00lt1zptrlriJzCxEATtr4hAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZFRjRFQTI3QUE2REQzQUVERTdGODJBQkYxMTgwREJF MTgwODVGOTAeFw0yNjAzMDIxMDA4MTdaFw0yNjAzMDMxMjQ0MTdaMDMxMTAvBgNV BAMTKDdEODI1NTEzRUI1OTlCM0NGNTBCM0E5MzkxQzlGRDhFOUJCM0Q1M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdFoFky+Qx3CD4Sl+qoG/xdQBM U1havu4lweLb/7CCw/4qxffol9n8VEc4yutqDj48ji6XBzMitDEFiEeKuzojVET1 ogkaOqFj/mqCxYuzPYmBjnXj6bre+13UF5SveFwk6r3mJewnPFD4t8mro7W4Ulad pyeEFyhhxHBIr//u3c1FB4nHEe7XFBHdPY8BhnjpPfR4h5jWVL5c++mk5Kx88InO i8BuKT8b/APrIo8yfUOxL/9u6lowINCz3JRiBmSkFid0B3fLX1ZLXjtxC+pQ7Ty8 rqyl888yHy2uFpsmEp8EmZVu/vHxFngJvxyqk0amybqoTHbOtZ04UrSCY4ZvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfYJVE+tZmzz1CzqTkcn9jpuz1TowHwYDVR0j BBgwFoAUpu9Oonqm3Trt5/gqvxGA2+GAhfkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjE0MDAzNS8wL0E2RUY0RUEyN0FBNkREM0FFREU3RjgyQUJGMTE4 MERCRTE4MDg1RjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTZFRjRFQTI3QUE2REQzQUVERTdGODJBQkYxMTgwREJFMTgwODVGOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIxNDAwMzUvMC9BNkVGNEVBMjdBQTZE RDNBRURFN0Y4MkFCRjExODBEQkUxODA4NUY5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNC+L7/7chiT hALwg7SF32KZIMJcc6SoSo+LVoB7rPnrOhaIKA/3Im3QmjBpeKVgaSDssJGiNkLC y3Og5SEo1rqSNcKum89izNO1nhJgytBoymPQPA4Arz+YLE1AO0pfbbPNMJbfKPJQ U4Q/hFuG59NhqHH6skykivM8jQtjBKH9DT0Btxrj5zit187xXXkee/Ji7tKK0ctd kfE6qKIaue7rSmDj4TMYTv5IdWS/PQvwEuGQQSou9S6WJK3Rbr3Zxcgg6meqYvIs S5PurmEEOErzwQkLk0rqKcLCqUr7xJeZIQ9NOCXU/KSVrynm+vYM2EkraGhiYhqy LQ+7NmWQEQ== -----END CERTIFICATE-----Generated at Mon Mar 2 13:13:30 2026 by rpki-client