$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft File: 6A45D8322C3648F91E212472F604CAFDBA7019BB.mft (raw, json) Hash identifier: 1gZkamkOVuT4a2odmmSL+p+XirxPDLDjOifYBCMHwIw= Subject key identifier: 98:7C:E1:8F:92:40:50:9D:FE:92:93:19:60:EC:79:AF:96:18:3B:BF Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB Certificate issuer: /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Certificate serial: 1DD7A52324CC0633FB7BE0553347ECAFD1001966 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 05:13:16 +0000 Manifest this update: Mon 02 Mar 2026 05:08:16 +0000 Manifest next update: Tue 03 Mar 2026 08:25:16 +0000 Files and hashes: 1: 3130332e34332e3133352e302f32342d3234203d3e203535393931.roa (hash: Iqvi8zah1N+/MUEIpeWL683Upeca1a29t8qNXjNsWBE=) 2: 6A45D8322C3648F91E212472F604CAFDBA7019BB.crl (hash: HscagM39tEQ3ebKrreC6SLHIF23FQ4aPdCJnBP9gXho=) 3: 3130332e3233352e3130322e302f32342d3234203d3e203535393931.roa (hash: d/U3NIj7qaoBeCrDzGEzR4wsfsmAGdyLg/VID04jiyw=) 4: 3130332e3233352e3130302e302f32342d3234203d3e203535393931.roa (hash: mqgyVIKWcd9YPXCsBu33JjhSj4t3CTMMoRkvfZ77xG4=) 5: 3130332e34332e3133322e302f32342d3234203d3e203535393931.roa (hash: PQwpOdF5Ex7Q2R7j4oTKXqncuOc5DZABUSDAojSAQug=) 6: 3130332e34332e3133342e302f32342d3234203d3e203535393931.roa (hash: Arahau1/zdBFquh22OcOxXJ61Cw0C3+PJGtnB+0ekGo=) 7: 3130332e34332e3133332e302f32342d3234203d3e203535393931.roa (hash: XdGamdMSAy1lnVU2jYcYZZbhDxqwsaKSaAwC9H6/vA8=) 8: 3130332e34332e3133342e302f32332d3233203d3e203535393839.roa (hash: IefQkI8Hfyxc4tb4gs5aVgR/yG32bYmYgetSb9VLX28=) 9: 3130332e3233352e3130332e302f32342d3234203d3e203535393931.roa (hash: sn5OSKvc07ovlAcz0b/lVzsgYr8++T6hfED7k7DkGRA=) 10: 3130332e3233352e3130312e302f32342d3234203d3e203535393931.roa (hash: y4iD+WZmyRqylC4ATqqLB8S0AwLFBnSmYnNr2Eb09NA=) 11: 3130332e34332e3133342e302f32332d3233203d3e2034383337.roa (hash: FyzFdZgKo3BDxyrLpNZ7QCXKhLr45lg7mKPng6cg7mg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d7:a5:23:24:cc:06:33:fb:7b:e0:55:33:47:ec:af:d1:00:19:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Validity Not Before: Mar 2 05:08:16 2026 GMT Not After : Mar 3 08:25:16 2026 GMT Subject: CN=987CE18F9240509DFE92931960EC79AF96183BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:38:43:6a:fc:41:1a:2a:ec:06:4f:5b:d6:27: 77:be:ce:4b:f3:6b:9b:84:83:6d:cb:1f:20:f0:66: 22:1e:b4:d6:de:6c:1d:e4:82:de:af:52:62:0d:a7: 70:cd:4b:b8:f3:29:fa:14:50:d8:78:f4:61:af:b7: 0d:08:71:72:c6:ea:a1:cd:3d:65:2a:ff:92:1b:1f: bb:65:73:f7:f8:7e:de:3c:9f:ad:b9:d4:4e:71:1e: dd:37:a1:15:99:e4:f7:5e:83:0f:5c:8f:bd:df:90: 1f:87:e1:6e:a4:84:2f:1a:c0:44:30:76:a8:28:79: b0:d8:c8:4a:c1:c9:7c:81:ea:82:88:ea:b4:da:c0: 39:99:63:14:9e:57:a5:ac:59:ce:a0:db:01:20:88: 49:09:13:9c:ce:b3:cc:24:ab:73:98:f6:57:74:ac: cd:a4:d6:f9:37:27:80:50:1e:49:7f:e0:87:13:a4: 98:2b:e2:9b:5d:5d:ca:e7:44:3f:ac:15:6c:77:25: 69:4e:de:f6:b2:2e:d1:d8:b7:d7:55:b3:f2:3d:17: b7:79:b5:71:17:2c:62:3c:cd:8f:2c:f5:eb:af:ac: 76:99:ab:f1:06:d3:b6:d9:1a:d5:a8:ee:bd:cd:42: c0:57:ab:50:d0:33:71:1f:c6:d2:7c:ef:13:f9:ee: 28:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7C:E1:8F:92:40:50:9D:FE:92:93:19:60:EC:79:AF:96:18:3B:BF X509v3 Authority Key Identifier: keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:77:00:8f:53:f5:d1:fc:bb:36:eb:1a:d9:13:05:41:c7:45: b0:bf:c6:ca:44:8e:ad:e7:3b:7a:dc:21:4c:ae:7f:b6:7f:0f: 7a:9e:bc:58:77:69:00:94:79:b2:82:7d:d3:cc:84:b9:38:b7: 18:b6:2f:5f:a6:87:38:15:38:a4:94:fe:98:74:d0:e5:7d:cc: 47:e6:a5:48:0e:18:c0:3c:da:cf:9f:a6:0f:22:f9:8b:e4:78: 25:41:25:14:59:8f:cf:15:7b:bc:37:fa:b0:27:2e:92:f5:43: 8b:cd:52:82:1e:94:5b:f6:f5:bc:53:5e:11:91:1c:ff:06:2b: 1a:8d:70:6e:fa:92:a9:e7:6a:4d:88:01:ff:ee:9c:ba:49:63: 0e:4c:ba:6c:0a:02:2f:d7:e0:bd:48:15:19:b3:de:b8:20:57: 38:ab:0d:72:2a:71:be:35:5f:99:4e:b6:96:96:04:7e:17:3c: c2:b4:54:a1:b2:81:05:3f:a2:5a:50:8a:83:f8:72:73:07:87: 20:96:a4:6a:47:2f:c0:d6:b4:2b:a8:9e:7e:ce:96:c6:e3:68: a2:e2:39:45:ac:af:36:d0:76:dd:8e:34:f5:b9:fd:4d:3c:11: 79:ea:12:1f:68:f4:d8:e3:55:e2:43:c6:c3:74:d2:07:c7:b7: 6c:d6:34:b9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHdelIyTMBjP7e+BVM0fsr9EAGWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRC QTcwMTlCQjAeFw0yNjAzMDIwNTA4MTZaFw0yNjAzMDMwODI1MTZaMDMxMTAvBgNV BAMTKDk4N0NFMThGOTI0MDUwOURGRTkyOTMxOTYwRUM3OUFGOTYxODNCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHOENq/EEaKuwGT1vWJ3e+zkvz a5uEg23LHyDwZiIetNbebB3kgt6vUmINp3DNS7jzKfoUUNh49GGvtw0IcXLG6qHN PWUq/5IbH7tlc/f4ft48n6251E5xHt03oRWZ5Pdegw9cj73fkB+H4W6khC8awEQw dqgoebDYyErByXyB6oKI6rTawDmZYxSeV6WsWc6g2wEgiEkJE5zOs8wkq3OY9ld0 rM2k1vk3J4BQHkl/4IcTpJgr4ptdXcrnRD+sFWx3JWlO3vayLtHYt9dVs/I9F7d5 tXEXLGI8zY8s9euvrHaZq/EG07bZGtWo7r3NQsBXq1DQM3EfxtJ87xP57ig3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmHzhj5JAUJ3+kpMZYOx5r5YYO78wHwYDVR0j BBgwFoAUakXYMiw2SPkeISRy9gTK/bpwGbswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTI4OTIxNy8wLzZBNDVEODMyMkMzNjQ4RjkxRTIxMjQ3MkY2MDRD QUZEQkE3MDE5QkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRCQTcwMTlCQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyODkyMTcvMC82QTQ1RDgzMjJDMzY0 OEY5MUUyMTI0NzJGNjA0Q0FGREJBNzAxOUJCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3cAj1P10fy7 Nusa2RMFQcdFsL/GykSOrec7etwhTK5/tn8Pep68WHdpAJR5soJ908yEuTi3GLYv X6aHOBU4pJT+mHTQ5X3MR+alSA4YwDzaz5+mDyL5i+R4JUElFFmPzxV7vDf6sCcu kvVDi81Sgh6UW/b1vFNeEZEc/wYrGo1wbvqSqedqTYgB/+6cukljDky6bAoCL9fg vUgVGbPeuCBXOKsNcipxvjVfmU62lpYEfhc8wrRUobKBBT+iWlCKg/hycweHIJak akcvwNa0K6iefs6WxuNoouI5RayvNtB23Y409bn9TTwReeoSH2j02ONV4kPGw3TS B8e3bNY0uQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:43:17 2026 by rpki-client