$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft File: 6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft (raw, json) Hash identifier: 8siENjkk74hUAU+q9yqBDMcstEX/DSe/r3ESRMHUTd8= Subject key identifier: 53:78:DE:BB:FB:F9:32:25:86:73:7D:7E:B8:0B:67:FE:63:4E:6E:62 Authority key identifier: 6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5 Certificate issuer: /CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5 Certificate serial: 0FD42B83B1691BA194EC06AEFD22DB27542E9F59 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft Manifest number: 04 Signing time: Thu 16 Apr 2026 18:49:33 +0000 Manifest this update: Thu 16 Apr 2026 18:44:33 +0000 Manifest next update: Fri 17 Apr 2026 19:40:33 +0000 Files and hashes: 1: 3130332e32352e33322e302f32322d3234203d3e203234313433.roa (hash: wf1cTqP/fj3lGgy7YzJ5B8bA4GoRnpkTJeCwl6jOLB0=) 2: 3230322e3133362e34382e302f32302d3234203d3e203234313433.roa (hash: kXzf8yQaI3V74mWAiZJh4sv0ugmfibkN4QVTR1OfWyg=) 3: 36302e3233322e3132382e302f31372d3232203d3e203234313433.roa (hash: ByH42KhU84BjARWvSf4oIylPRBp7bQn0rgPvnZhkzS8=) 4: 6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl (hash: yXAWrR89acGCP43hhux+kGED4/wxxAXB4cSfRuw3yGM=) 5: 3230322e3133362e34382e302f32322d3234203d3e203234313433.roa (hash: PFrwBt4x6EG8Lnqd7KcG6HCXYGKj6tzV7yZvxGJNUyI=) 6: 323430303a626630303a3a2f33322d3634203d3e2030.roa (hash: b8zI6D91Guisd2Zwj5/eJF7bgYI/GaGgO4oEeGNNR5I=) 7: 36302e3233322e3133322e302f32332d3234203d3e203633353430.roa (hash: apaKvvxupjsq5UR3eCvl0M6COeaUaIt4WSH46noRsyA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 17:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d4:2b:83:b1:69:1b:a1:94:ec:06:ae:fd:22:db:27:54:2e:9f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5 Validity Not Before: Apr 16 18:44:33 2026 GMT Not After : Apr 17 19:40:33 2026 GMT Subject: CN=5378DEBBFBF9322586737D7EB80B67FE634E6E62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a8:b9:d1:4b:7d:8b:05:58:ae:3f:23:b7:3f: 53:15:f8:50:1d:33:38:16:d1:f8:88:9b:b9:41:bd: aa:c5:39:53:bb:22:4d:c1:46:95:ab:ec:82:ba:8d: 1f:40:e8:a8:71:ad:13:d4:7c:23:8c:17:c4:11:c1: fa:c3:6f:ac:73:84:80:01:af:4b:dd:20:3c:8c:95: db:1f:55:ad:af:97:04:25:f2:50:b1:1c:88:51:b8: 58:2d:1b:fb:d5:dc:d2:b4:21:d2:95:e1:2f:1a:29: 0e:af:f8:61:63:e2:f3:da:83:dd:0f:86:db:3a:07: 54:0f:66:18:b2:32:5f:7d:0c:b1:eb:cb:cf:82:4a: c2:9f:95:65:22:63:2a:14:71:dd:bf:1d:fc:bb:14: 24:fe:d6:7f:f6:7a:00:99:70:1e:62:84:11:87:00: e3:77:b3:d1:0d:c2:85:9e:18:6d:02:96:fd:5e:6b: 13:21:89:7a:f8:69:fa:93:8a:b9:10:69:91:5a:1c: b7:06:ce:71:11:16:ca:ee:02:a6:55:7f:6d:80:e1: 0a:fd:9e:50:a1:41:52:11:9e:c4:2a:e1:ce:0e:57: a4:12:dc:0b:e4:98:5a:25:78:bc:74:02:94:23:40: 37:76:5b:d7:1a:0b:73:78:96:15:bb:5a:9c:cd:03: 96:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:78:DE:BB:FB:F9:32:25:86:73:7D:7E:B8:0B:67:FE:63:4E:6E:62 X509v3 Authority Key Identifier: keyid:6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:07:63:95:42:a8:e3:23:8a:51:c8:7a:51:5d:bc:e2:51:16: 11:44:b9:20:e4:dd:87:f1:5b:77:fb:72:fb:ae:77:53:23:38: 0d:e6:ea:89:eb:57:f0:3f:63:cf:e3:0e:b9:aa:6d:e7:6f:d0: c3:92:8a:b3:8e:43:ff:8d:d6:2a:5a:73:72:fc:92:5f:4d:65: 7f:82:bc:a8:ac:30:8a:fd:35:7c:e4:42:41:05:6d:d0:01:d2: 9b:7d:9f:1a:36:de:4e:68:98:fc:1e:aa:79:fe:6e:7e:5e:c3: 49:3e:85:e1:81:3e:d8:d6:f9:7a:00:9c:3d:41:52:90:20:2b: 9d:02:de:90:ca:51:b9:ca:53:ab:ac:0b:3a:20:17:da:7a:bf: aa:15:23:96:dc:7a:36:74:d1:66:cb:65:93:c2:b8:57:3a:60: c5:68:01:82:ba:4a:02:13:0b:f4:18:5b:28:67:16:e8:d8:18: 0a:91:66:f4:b5:81:1f:d2:d7:a5:6f:fc:43:1c:77:0e:88:df: 15:3e:97:20:ff:5c:a6:67:cb:73:1b:ff:be:fb:f8:3c:13:0a: 97:73:b9:4b:eb:5b:98:10:d5:c1:92:5f:79:3c:94:f1:54:63: 30:29:75:ba:ff:2d:30:2e:b7:52:f9:e8:cc:76:8b:93:ed:4f: 4f:bd:9e:91 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUD9Qrg7FpG6GU7Aau/SLbJ1Qun1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYxMUNCREFBRDYzQTdCQkM5ODZFRkM3MERENUM5OUJF MzIzMDFENTAeFw0yNjA0MTYxODQ0MzNaFw0yNjA0MTcxOTQwMzNaMDMxMTAvBgNV BAMTKDUzNzhERUJCRkJGOTMyMjU4NjczN0Q3RUI4MEI2N0ZFNjM0RTZFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXqLnRS32LBViuPyO3P1MV+FAd MzgW0fiIm7lBvarFOVO7Ik3BRpWr7IK6jR9A6KhxrRPUfCOMF8QRwfrDb6xzhIAB r0vdIDyMldsfVa2vlwQl8lCxHIhRuFgtG/vV3NK0IdKV4S8aKQ6v+GFj4vPag90P hts6B1QPZhiyMl99DLHry8+CSsKflWUiYyoUcd2/Hfy7FCT+1n/2egCZcB5ihBGH AON3s9ENwoWeGG0Clv1eaxMhiXr4afqTirkQaZFaHLcGznERFsruAqZVf22A4Qr9 nlChQVIRnsQq4c4OV6QS3AvkmFoleLx0ApQjQDd2W9caC3N4lhW7WpzNA5YPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUU3jeu/v5MiWGc31+uAtn/mNObmIwHwYDVR0j BBgwFoAUbxHL2q1jp7vJhu/HDdXJm+MjAdUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk4NTA3NTgwNDc5ODk3OS8wLzZGMTFDQkRBQUQ2M0E3QkJDOTg2RUZDNzBERDVD OTlCRTMyMzAxRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkYxMUNCREFBRDYzQTdCQkM5ODZFRkM3MERENUM5OUJFMzIzMDFENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5ODUwNzU4MDQ3OTg5NzkvMC82RjExQ0JEQUFENjNB N0JCQzk4NkVGQzcwREQ1Qzk5QkUzMjMwMUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAdjlUKo4yOK Uch6UV284lEWEUS5IOTdh/Fbd/ty+653UyM4DebqietX8D9jz+MOuapt52/Qw5KK s45D/43WKlpzcvySX01lf4K8qKwwiv01fORCQQVt0AHSm32fGjbeTmiY/B6qef5u fl7DST6F4YE+2Nb5egCcPUFSkCArnQLekMpRucpTq6wLOiAX2nq/qhUjltx6NnTR Zstlk8K4VzpgxWgBgrpKAhML9BhbKGcW6NgYCpFm9LWBH9LXpW/8Qxx3DojfFT6X IP9cpmfLcxv/vvv4PBMKl3O5S+tbmBDVwZJfeTyU8VRjMCl1uv8tMC63UvnozHaL k+1PT72ekQ== -----END CERTIFICATE-----Generated at Thu Apr 16 23:52:10 2026 by rpki-client