$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft File: 6F899B29F801AD1C8A8515E6EF9709910311F668.mft (raw, json) Hash identifier: eks2sc8kQIS0EOJfP9CwvCUfqmuykLvGOGWweC9K67Y= Subject key identifier: 51:8E:D9:AD:81:13:C6:75:ED:73:20:B0:73:4E:A1:B2:F0:BF:1F:C5 Authority key identifier: 6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 Certificate issuer: /CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Certificate serial: 6BCF0B9428008FB4B925B671F5443C2A0590F292 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 17:39:44 +0000 Manifest this update: Fri 17 Apr 2026 17:34:44 +0000 Manifest next update: Sat 18 Apr 2026 20:16:44 +0000 Files and hashes: 1: 3130332e3134322e38322e302f32342d3234203d3e20313439353133.roa (hash: YBLpKWnBY74NDcGKe6t2+bdDnzFkBiAsPzbxJySwzDk=) 2: 3130332e3134322e38332e302f32342d3234203d3e20313439353133.roa (hash: YsRlvfghH9rCCKNTUVL7cagdvzH0kbY4Bz95ToSRwi8=) 3: 3130332e3134322e38322e302f32332d3332203d3e20313439353133.roa (hash: gNbCXYLZTSZSDGKA8vf0miL9zRhPVc7YJOnU420lxlM=) 4: 6F899B29F801AD1C8A8515E6EF9709910311F668.crl (hash: 0gXwrs6KeXkX8Bo+xs9gF2m/E77hKIRd+DhD/HHEO7s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:cf:0b:94:28:00:8f:b4:b9:25:b6:71:f5:44:3c:2a:05:90:f2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Validity Not Before: Apr 17 17:34:44 2026 GMT Not After : Apr 18 20:16:44 2026 GMT Subject: CN=518ED9AD8113C675ED7320B0734EA1B2F0BF1FC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e9:48:73:2d:9d:47:9a:98:64:33:e6:a3:84: 7e:e8:3f:98:4d:05:98:56:0c:b9:57:87:03:f0:70: 4f:df:21:fc:fa:a9:74:0e:58:33:e2:69:9d:ff:14: 14:0d:1a:04:41:4c:36:dc:c2:66:31:87:0b:35:df: ad:58:fd:1c:c0:66:dd:4a:07:b1:4b:44:09:ed:df: 4a:ef:66:da:e8:e1:8d:ce:ce:48:f3:69:2a:dd:89: 14:6d:24:0d:25:72:07:74:fb:65:f9:11:2a:36:cc: f7:92:7a:24:02:80:c8:96:16:45:97:b2:49:4e:35: 9f:26:35:93:7d:15:ee:67:77:9a:b3:3c:1b:2a:da: d2:3f:b3:bc:1b:92:44:74:39:e7:c1:00:27:3c:4d: 7a:44:1b:77:33:80:07:7e:9f:f2:f4:6d:bc:a1:c0: 73:96:85:bf:9f:98:bc:ab:2b:4d:46:6a:ae:bd:16: 7b:d4:4d:af:9f:22:cc:45:8e:23:f1:e5:1c:7c:be: 2d:6c:73:fe:c0:3f:7b:0b:f1:93:90:75:5c:8c:93: 46:d6:0d:96:de:12:a0:34:fb:25:a5:26:24:65:0a: b0:2a:85:72:41:ea:4a:54:02:a5:59:f5:9a:4a:ed: 14:41:69:72:00:03:b8:87:6e:9d:30:0f:6e:a2:b8: dd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8E:D9:AD:81:13:C6:75:ED:73:20:B0:73:4E:A1:B2:F0:BF:1F:C5 X509v3 Authority Key Identifier: keyid:6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:17:3d:c4:26:46:63:48:76:5d:af:4e:61:af:9b:d4:c7:57: 78:0b:ba:57:6d:14:8f:d7:d7:d0:79:7f:ac:6f:e9:cb:e1:c0: 67:af:ea:24:bf:96:50:eb:d1:03:c3:8d:6f:c2:14:18:eb:f7: eb:42:d9:ef:2a:4f:90:74:87:f6:17:ac:97:5f:d2:cf:c0:fe: 1d:bb:4f:af:6c:d5:2d:9c:9e:6e:25:69:11:c5:a3:94:5d:90: cf:11:83:94:69:53:27:ee:2a:a0:b7:75:a4:a9:08:40:38:f4: ca:9a:bc:b9:f9:96:92:a9:2a:c5:44:2d:04:ac:a3:8b:6f:fb: af:6a:60:fe:44:65:0b:31:2e:ae:6b:c7:ff:9f:cf:f6:1b:d4: c5:ec:fe:a8:48:50:e6:39:d2:86:a2:8d:51:91:25:6e:88:d3: 9b:99:97:f8:88:58:fa:d5:05:d0:c7:4a:c6:87:f2:02:4e:47: 9f:38:cd:af:09:bb:fa:69:72:ac:cb:52:bf:97:93:13:e0:82: 11:07:06:11:9a:a2:ad:c3:14:f5:66:d9:c1:22:fd:43:e4:a1: 9f:c2:ce:59:3e:ff:0b:88:b7:6b:1a:06:2e:f0:30:da:10:c4: 53:02:ec:f7:5d:cd:67:1b:28:f8:8b:62:7f:38:34:c6:a2:11: d1:97:4f:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa88LlCgAj7S5JbZx9UQ8KgWQ8pIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEw MzExRjY2ODAeFw0yNjA0MTcxNzM0NDRaFw0yNjA0MTgyMDE2NDRaMDMxMTAvBgNV BAMTKDUxOEVEOUFEODExM0M2NzVFRDczMjBCMDczNEVBMUIyRjBCRjFGQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16UhzLZ1HmphkM+ajhH7oP5hN BZhWDLlXhwPwcE/fIfz6qXQOWDPiaZ3/FBQNGgRBTDbcwmYxhws1361Y/RzAZt1K B7FLRAnt30rvZtro4Y3OzkjzaSrdiRRtJA0lcgd0+2X5ESo2zPeSeiQCgMiWFkWX sklONZ8mNZN9Fe5nd5qzPBsq2tI/s7wbkkR0OefBACc8TXpEG3czgAd+n/L0bbyh wHOWhb+fmLyrK01Gaq69FnvUTa+fIsxFjiPx5Rx8vi1sc/7AP3sL8ZOQdVyMk0bW DZbeEqA0+yWlJiRlCrAqhXJB6kpUAqVZ9ZpK7RRBaXIAA7iHbp0wD26iuN2dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUY7ZrYETxnXtcyCwc06hsvC/H8UwHwYDVR0j BBgwFoAUb4mbKfgBrRyKhRXm75cJkQMR9mgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzY3NzU3MS8wLzZGODk5QjI5RjgwMUFEMUM4QTg1MTVFNkVGOTcw OTkxMDMxMUY2NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEwMzExRjY2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2Nzc1NzEvMC82Rjg5OUIyOUY4MDFB RDFDOEE4NTE1RTZFRjk3MDk5MTAzMTFGNjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohc9xCZGY0h2 Xa9OYa+b1MdXeAu6V20Uj9fX0Hl/rG/py+HAZ6/qJL+WUOvRA8ONb8IUGOv360LZ 7ypPkHSH9hesl1/Sz8D+HbtPr2zVLZyebiVpEcWjlF2QzxGDlGlTJ+4qoLd1pKkI QDj0ypq8ufmWkqkqxUQtBKyji2/7r2pg/kRlCzEurmvH/5/P9hvUxez+qEhQ5jnS hqKNUZElbojTm5mX+IhY+tUF0MdKxofyAk5HnzjNrwm7+mlyrMtSv5eTE+CCEQcG EZqircMU9WbZwSL9Q+Shn8LOWT7/C4i3axoGLvAw2hDEUwLs913NZxso+Itifzg0 xqIR0ZdPVw== -----END CERTIFICATE-----Generated at Sat Apr 18 00:02:31 2026 by rpki-client