$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft File: 6F899B29F801AD1C8A8515E6EF9709910311F668.mft (raw, json) Hash identifier: wSmMGG27fhYSsMaYgSmCZVJ1C2GISX2xI5Mxr/AZ5oU= Subject key identifier: BA:5F:2B:9B:37:27:0C:67:F9:55:89:6D:E6:18:82:6E:9B:AE:E3:B1 Authority key identifier: 6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 Certificate issuer: /CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Certificate serial: 50DA9D9DD5EFB8920E5DBEBC8E4A5D3BECA61407 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft Manifest number: 37 Signing time: Sun 01 Mar 2026 09:33:16 +0000 Manifest this update: Sun 01 Mar 2026 09:28:16 +0000 Manifest next update: Mon 02 Mar 2026 10:51:16 +0000 Files and hashes: 1: 3130332e3134322e38322e302f32342d3234203d3e20313439353133.roa (hash: YBLpKWnBY74NDcGKe6t2+bdDnzFkBiAsPzbxJySwzDk=) 2: 3130332e3134322e38322e302f32332d3332203d3e20313439353133.roa (hash: gNbCXYLZTSZSDGKA8vf0miL9zRhPVc7YJOnU420lxlM=) 3: 3130332e3134322e38332e302f32342d3234203d3e20313439353133.roa (hash: YsRlvfghH9rCCKNTUVL7cagdvzH0kbY4Bz95ToSRwi8=) 4: 6F899B29F801AD1C8A8515E6EF9709910311F668.crl (hash: /sgZn9JiKwNUa9eh2skg80yy5HBxOQZgrgJk0O9IglI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 09:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:da:9d:9d:d5:ef:b8:92:0e:5d:be:bc:8e:4a:5d:3b:ec:a6:14:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Validity Not Before: Mar 1 09:28:16 2026 GMT Not After : Mar 2 10:51:16 2026 GMT Subject: CN=BA5F2B9B37270C67F955896DE618826E9BAEE3B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:08:5d:fe:3a:41:12:8b:1e:d4:1f:b6:1f: dc:9a:53:2a:b0:81:8b:1e:8c:cc:6e:c2:03:45:17: 72:47:4a:d8:3c:48:56:b9:72:17:b2:f4:ea:36:ba: 0b:e4:66:47:e9:5a:20:6f:0e:51:ec:12:bd:ae:d8: 24:d2:bd:29:dd:25:c5:b4:bb:17:18:be:3c:b1:4d: b3:9c:9f:87:a4:92:4e:4b:c1:1f:e4:f5:6c:b2:c7: 98:7a:3c:b1:43:d5:e3:08:d2:b9:03:f6:f8:04:50: 34:8c:30:1f:e6:a1:ed:19:5f:32:d8:61:10:59:c9: ba:eb:1e:d8:fb:39:8a:c0:70:3e:a7:05:30:09:ee: 58:8b:cb:6b:65:c8:c7:6d:00:e9:63:41:e1:5a:87: c9:cb:7e:10:3a:0e:20:0d:5b:f3:3c:3a:f9:a0:b5: 74:f3:e0:71:7a:df:6c:51:49:6c:a9:a7:4a:61:f6: 07:13:d7:5b:d2:73:94:0e:04:81:70:5c:29:fd:24: cb:e9:bd:d9:c1:fb:cc:e1:05:ea:e7:fb:03:2b:e3: 86:cd:2e:fc:dd:a7:59:d7:cb:46:75:0c:18:2b:ee: b0:e8:fa:fc:c7:21:7d:84:49:56:97:93:99:de:90: 82:9d:4f:74:02:95:45:a6:29:47:b6:27:8d:92:e2: a8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5F:2B:9B:37:27:0C:67:F9:55:89:6D:E6:18:82:6E:9B:AE:E3:B1 X509v3 Authority Key Identifier: keyid:6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:96:d3:04:7c:ed:26:43:dc:41:1e:22:4e:a5:5e:77:bc:6b: d0:dd:07:f7:12:15:88:3f:7f:3a:be:b9:6e:ea:6f:04:9f:08: de:2f:96:1a:d6:94:7a:66:d6:51:c6:c1:9b:6f:85:8f:90:bd: f6:80:9a:00:a4:ab:90:94:7f:d2:e4:f6:45:49:dc:c3:64:9c: 98:d9:39:4a:28:55:88:1f:fa:2f:f8:90:00:f7:ae:ef:7c:24: 4a:1c:97:d9:54:ef:44:1b:2d:e5:a7:4a:43:be:8e:2e:25:a7: db:ad:b7:7d:e9:9b:81:cb:78:5c:51:44:4c:81:18:a1:71:1b: a0:05:f6:0a:4d:93:c9:e6:7e:98:8b:58:9b:4c:99:a5:17:25: 4e:57:ad:d0:af:77:bd:ed:df:73:cf:a3:c6:d5:6a:20:df:c4: ee:66:a4:0a:64:d9:ff:28:c2:f7:91:f0:93:92:8f:95:c7:ab: f9:3b:91:3e:db:ce:e1:78:25:aa:c3:05:3d:31:ae:ea:27:c9: 8f:e8:ba:26:7a:c3:7b:5c:26:d0:13:e3:9a:21:a5:f2:a4:dc: 44:c3:0b:34:1e:77:f2:65:0d:f0:10:7e:d0:57:6a:77:fb:fb: 8f:70:e7:a2:ba:ea:7c:94:a4:46:29:78:bf:57:5f:db:b8:d8: a4:b1:bd:7e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUNqdndXvuJIOXb68jkpdO+ymFAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEw MzExRjY2ODAeFw0yNjAzMDEwOTI4MTZaFw0yNjAzMDIxMDUxMTZaMDMxMTAvBgNV BAMTKEJBNUYyQjlCMzcyNzBDNjdGOTU1ODk2REU2MTg4MjZFOUJBRUUzQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1zghd/jpBEose1B+2H9yaUyqw gYsejMxuwgNFF3JHStg8SFa5chey9Oo2ugvkZkfpWiBvDlHsEr2u2CTSvSndJcW0 uxcYvjyxTbOcn4ekkk5LwR/k9Wyyx5h6PLFD1eMI0rkD9vgEUDSMMB/moe0ZXzLY YRBZybrrHtj7OYrAcD6nBTAJ7liLy2tlyMdtAOljQeFah8nLfhA6DiANW/M8Ovmg tXTz4HF632xRSWypp0ph9gcT11vSc5QOBIFwXCn9JMvpvdnB+8zhBern+wMr44bN Lvzdp1nXy0Z1DBgr7rDo+vzHIX2ESVaXk5nekIKdT3QClUWmKUe2J42S4qinAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUul8rmzcnDGf5VYlt5hiCbpuu47EwHwYDVR0j BBgwFoAUb4mbKfgBrRyKhRXm75cJkQMR9mgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzY3NzU3MS8wLzZGODk5QjI5RjgwMUFEMUM4QTg1MTVFNkVGOTcw OTkxMDMxMUY2NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEwMzExRjY2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2Nzc1NzEvMC82Rjg5OUIyOUY4MDFB RDFDOEE4NTE1RTZFRjk3MDk5MTAzMTFGNjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZbTBHztJkPc QR4iTqVed7xr0N0H9xIViD9/Or65bupvBJ8I3i+WGtaUembWUcbBm2+Fj5C99oCa AKSrkJR/0uT2RUncw2ScmNk5SihViB/6L/iQAPeu73wkShyX2VTvRBst5adKQ76O LiWn2623fembgct4XFFETIEYoXEboAX2Ck2TyeZ+mItYm0yZpRclTlet0K93ve3f c8+jxtVqIN/E7makCmTZ/yjC95Hwk5KPlcer+TuRPtvO4XglqsMFPTGu6ifJj+i6 JnrDe1wm0BPjmiGl8qTcRMMLNB538mUN8BB+0Fdqd/v7j3DnorrqfJSkRil4v1df 27jYpLG9fg== -----END CERTIFICATE-----Generated at Sun Mar 1 23:26:09 2026 by rpki-client