$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft File: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft (raw, json) Hash identifier: IvM7OH/KsPzYijHB+XM18r2kebOSbQo5iiwDnWeBDYE= Subject key identifier: 21:05:F1:ED:F9:49:B9:BB:CC:CE:46:03:30:97:E5:9E:FD:9E:AF:96 Authority key identifier: 6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72 Certificate issuer: /CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72 Certificate serial: 7EE144FCD5161EFBFF81394A65DCB39482CE04C5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft Manifest number: 17 Signing time: Thu 16 Apr 2026 07:01:26 +0000 Manifest this update: Thu 16 Apr 2026 06:56:26 +0000 Manifest next update: Fri 17 Apr 2026 08:54:26 +0000 Files and hashes: 1: 3130332e3133392e3231332e302f32342d3234203d3e2034383437.roa (hash: k1rAJlK3nl+RMukZCZAOyW2Ztrz5xzJsS+9Jm+UCWLI=) 2: 3130332e3130352e3230312e302f32342d3234203d3e20313337373634.roa (hash: NVUII80DwSw0zpMxLmgIHiGlPbICMvueravTJ8IQZ6Y=) 3: 3130332e39382e34302e302f32322d3232203d3e2030.roa (hash: e8iEGGHTv4+FgS9wkri7Y69nnBMxrR4pBM+NO8acXaE=) 4: 3130332e3130352e3230322e302f32342d3234203d3e20313337373634.roa (hash: yVxOUCxwSQgdQ2Vm2tB9MZclhRZA4b88sSbFOq2CQHY=) 5: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl (hash: lZ0SM9yPfhCgixSEdQ13PyinoJL66NdEHN9fM7NZ8sY=) 6: 3130332e3133392e3231322e302f32342d3234203d3e2034383437.roa (hash: fgedEchRrP66KqqHCaA1a1U1d7AKMe+NspTQhBPC/H4=) 7: 3130332e3130352e3230302e302f32342d3234203d3e20313337373634.roa (hash: wAWydnytWwQ6KDrEdMo8gC5yClAHE5G7egoVtj8VJEQ=) 8: 3130332e3130352e3230332e302f32342d3234203d3e20313337373634.roa (hash: njPdr9nkl5PqUnxF8eOxJG8abgbqDS3nA0LWdpX0NDQ=) 9: 323430333a356563303a3a2f33322d3332203d3e2030.roa (hash: pn5P8/momGxXTFfknwO8tuClvccGh1zTNEWhwlA2qwo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 08:54:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e1:44:fc:d5:16:1e:fb:ff:81:39:4a:65:dc:b3:94:82:ce:04:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72 Validity Not Before: Apr 16 06:56:26 2026 GMT Not After : Apr 17 08:54:26 2026 GMT Subject: CN=2105F1EDF949B9BBCCCE46033097E59EFD9EAF96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0a:81:b6:d9:02:cf:12:d7:7f:ee:13:62:11: 80:47:72:c1:66:40:83:d9:b9:ac:b7:28:ed:c4:12: e8:aa:38:36:d0:a1:e9:4c:09:ce:0b:9b:86:99:1e: e3:4e:28:a4:62:b8:29:09:5e:3d:3c:0a:fd:f2:53: 44:75:71:34:ec:82:2e:b5:4e:7c:2b:e9:1d:21:6a: 63:0c:a9:e3:d8:9a:56:de:dc:7d:bb:97:fe:c6:28: 3e:8e:b5:89:6e:5c:c3:fe:05:a1:b0:4e:b7:9e:76: c3:2a:0f:a3:fd:26:84:41:ce:6e:31:ca:7c:1d:7f: f3:e1:f6:06:fa:79:5f:c7:84:fe:b6:8b:de:8c:b5: a5:ec:ed:12:5d:e8:ad:b2:02:70:41:fb:15:81:b5: c8:bf:32:b4:a6:7d:75:1d:70:d8:80:71:32:c9:13: 72:5c:39:28:42:48:91:18:36:e2:92:53:5b:f2:b5: 63:51:c4:10:57:96:58:dc:b7:05:0e:ef:f1:f7:f7: 3a:18:d9:39:49:b7:33:47:6f:89:01:95:7c:61:8f: 57:a0:9b:bb:47:f5:cb:47:ba:b7:30:48:4c:9e:6a: 71:a7:df:1a:85:1a:f9:8f:bc:69:40:99:57:47:b7: c1:36:b0:a2:cf:f4:48:8a:98:3f:f8:5b:c3:b3:92: 71:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:05:F1:ED:F9:49:B9:BB:CC:CE:46:03:30:97:E5:9E:FD:9E:AF:96 X509v3 Authority Key Identifier: keyid:6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:7f:0c:f4:df:db:2b:8f:10:08:26:42:92:a8:1b:cb:0b:cd: 88:7c:37:ab:b7:3a:85:c7:bd:62:9f:c0:7b:c6:7e:1e:8a:13: 80:35:2a:e2:ad:a9:16:06:af:82:8f:08:09:f5:17:5b:c9:f4: 3a:81:be:c5:09:19:7f:00:da:91:05:8b:36:f3:2a:1d:28:45: 73:e3:fb:24:55:cc:ba:a4:78:8f:55:74:87:ec:c5:31:ec:18: c8:f7:4c:ff:c3:ab:7e:37:e1:1b:a8:e6:be:f1:0b:af:55:da: f3:06:ac:7f:0f:7c:c2:f9:0b:66:9f:58:88:be:f2:1e:1c:39: 1d:23:15:0d:11:38:30:ca:0e:db:7d:43:e3:28:fa:db:78:84: 84:04:04:1d:9f:fb:19:af:7a:d8:d2:99:19:79:fc:fb:3d:97: d0:0d:40:58:4c:e0:00:cc:7b:f7:61:69:27:4f:7a:39:ae:86: 35:6e:24:5f:fc:04:c7:cd:f7:e2:e8:c8:c9:7c:c2:7f:0c:3e: 75:66:f7:b1:08:d7:f0:57:3a:28:c7:e8:48:d4:ed:4b:7a:e2: aa:52:b1:c4:1c:97:5f:85:a4:bf:c3:4d:85:3a:55:43:b3:52: be:ee:74:45:ea:33:a7:b7:09:15:e8:7a:57:b4:a3:66:a2:ef: 96:d4:e8:af -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfuFE/NUWHvv/gTlKZdyzlILOBMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYz NjUzNkU3MjAeFw0yNjA0MTYwNjU2MjZaFw0yNjA0MTcwODU0MjZaMDMxMTAvBgNV BAMTKDIxMDVGMUVERjk0OUI5QkJDQ0NFNDYwMzMwOTdFNTlFRkQ5RUFGOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgCoG22QLPEtd/7hNiEYBHcsFm QIPZuay3KO3EEuiqODbQoelMCc4Lm4aZHuNOKKRiuCkJXj08Cv3yU0R1cTTsgi61 Tnwr6R0hamMMqePYmlbe3H27l/7GKD6OtYluXMP+BaGwTreedsMqD6P9JoRBzm4x ynwdf/Ph9gb6eV/HhP62i96MtaXs7RJd6K2yAnBB+xWBtci/MrSmfXUdcNiAcTLJ E3JcOShCSJEYNuKSU1vytWNRxBBXlljctwUO7/H39zoY2TlJtzNHb4kBlXxhj1eg m7tH9ctHurcwSEyeanGn3xqFGvmPvGlAmVdHt8E2sKLP9EiKmD/4W8OzknHdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIQXx7flJubvMzkYDMJflnv2er5YwHwYDVR0j BBgwFoAUa4a9P6D7Cze6xk1sjS2fZjZTbnIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1MTY3MDg1Mjk0Mzg3My8wLzZCODZCRDNGQTBGQjBCMzdCQUM2NEQ2QzhEMkQ5 RjY2MzY1MzZFNzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYzNjUzNkU3Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTE2NzA4NTI5NDM4NzMvMC82Qjg2QkQzRkEwRkIw QjM3QkFDNjRENkM4RDJEOUY2NjM2NTM2RTcyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKH8M9N/bK48Q CCZCkqgbywvNiHw3q7c6hce9Yp/Ae8Z+HooTgDUq4q2pFgavgo8ICfUXW8n0OoG+ xQkZfwDakQWLNvMqHShFc+P7JFXMuqR4j1V0h+zFMewYyPdM/8OrfjfhG6jmvvEL r1Xa8wasfw98wvkLZp9YiL7yHhw5HSMVDRE4MMoO231D4yj623iEhAQEHZ/7Ga96 2NKZGXn8+z2X0A1AWEzgAMx792FpJ096Oa6GNW4kX/wEx8334ujIyXzCfww+dWb3 sQjX8Fc6KMfoSNTtS3riqlKxxByXX4Wkv8NNhTpVQ7NSvu50Reozp7cJFeh6V7Sj ZqLvltTorw== -----END CERTIFICATE-----Generated at Thu Apr 16 23:53:57 2026 by rpki-client