$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097052342001336322/0/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.mft File: 6ABD7F185CF85906D0796D3C7AA359D61F5C6847.mft (raw, json) Hash identifier: umKm1Yy41j0OSknh0HgBJhMG3h3PC4s86xGe+iYXHHU= Subject key identifier: 39:93:E7:B1:6A:D5:C4:FA:55:75:F9:F5:75:6C:9D:38:A2:FA:31:85 Authority key identifier: 6A:BD:7F:18:5C:F8:59:06:D0:79:6D:3C:7A:A3:59:D6:1F:5C:68:47 Certificate issuer: /CN=6ABD7F185CF85906D0796D3C7AA359D61F5C6847 Certificate serial: 65FAAD0BE750D0D07F9487BE449DB122C90C75A6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097052342001336322/0/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.mft Manifest number: 02 Signing time: Thu 16 Apr 2026 06:55:20 +0000 Manifest this update: Thu 16 Apr 2026 06:50:20 +0000 Manifest next update: Fri 17 Apr 2026 08:45:20 +0000 Files and hashes: 1: 323430373a656338303a3a2f33322d3332203d3e2030.roa (hash: I2H6S+PDHCuYueVmdvA596FpUYTeqGn4cwFc/hTD/Qs=) 2: 6ABD7F185CF85906D0796D3C7AA359D61F5C6847.crl (hash: QPbhswBVZrshPC+4+rNlzsas+D6Y5OP2pYJ2FSHVwXg=) 3: 3130332e37382e3137362e302f32322d3232203d3e2030.roa (hash: A6X6rG9OoHxKXkNcU4tMI7qaAFW0uyVupFi/ayK18Ek=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097052342001336322/0/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.crl rsync://rpki-rps.cnnic.cn/repo/A1097052342001336322/0/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 08:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:fa:ad:0b:e7:50:d0:d0:7f:94:87:be:44:9d:b1:22:c9:0c:75:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ABD7F185CF85906D0796D3C7AA359D61F5C6847 Validity Not Before: Apr 16 06:50:20 2026 GMT Not After : Apr 17 08:45:20 2026 GMT Subject: CN=3993E7B16AD5C4FA5575F9F5756C9D38A2FA3185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:be:0f:12:86:07:9e:d2:c1:99:ed:8b:91:dd: 9b:f8:b8:9d:6a:0c:31:d5:9b:e1:2e:9c:e3:ff:f4: ea:4f:f5:b0:a7:4d:de:77:a4:e4:34:c4:56:fd:e6: 24:51:b2:40:12:d5:a8:d6:35:45:d0:df:64:4c:00: 04:30:82:2b:b6:a3:55:7b:c2:2f:57:3f:6a:26:38: 24:17:96:af:e8:5c:28:b6:15:fc:d8:5b:83:f8:59: d4:e6:d8:90:22:89:e4:8f:e8:10:01:9e:ec:8e:66: f6:c7:0d:84:35:0c:5f:46:b9:d8:e4:2e:46:d9:b5: 11:f0:6e:88:80:c4:0d:3c:53:83:8e:67:97:1e:ca: 5b:12:26:2d:34:73:30:07:01:ca:cf:0e:fc:9d:d6: f3:9e:74:dd:9e:5c:1c:95:6f:b7:bc:c3:a5:cf:f5: 27:4f:e7:a6:4b:01:57:fe:35:74:73:cf:31:94:87: 89:81:7d:d2:bc:4c:72:1a:db:91:e5:aa:83:07:9d: 59:a2:f9:64:21:3b:ce:af:57:32:90:2c:f6:08:88: 9e:e3:a8:2d:a0:a0:fe:58:13:8a:c8:b2:da:b2:94: e7:ae:f7:d5:b0:8a:c6:e6:b7:7a:12:10:1b:98:65: 83:39:91:a4:ed:35:10:8a:34:ce:2d:80:6f:62:da: a6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:93:E7:B1:6A:D5:C4:FA:55:75:F9:F5:75:6C:9D:38:A2:FA:31:85 X509v3 Authority Key Identifier: keyid:6A:BD:7F:18:5C:F8:59:06:D0:79:6D:3C:7A:A3:59:D6:1F:5C:68:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097052342001336322/0/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097052342001336322/0/6ABD7F185CF85906D0796D3C7AA359D61F5C6847.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:86:34:71:eb:78:47:45:da:cd:62:c2:9d:41:1b:b7:57:c8: 40:c9:a8:22:e7:5f:1d:4a:5e:04:06:58:cc:ba:7d:6f:8f:e1: 9e:23:45:52:8f:53:87:84:0f:19:54:a8:66:bb:78:90:e2:d5: 4b:6f:f8:c5:95:ef:ef:6c:4a:e5:63:ef:42:4a:2e:46:9e:cd: 46:2e:f2:92:67:81:29:4a:4a:d7:d8:b7:3e:55:3b:63:bc:5a: 22:5b:3d:7b:de:fd:84:66:c2:8a:f8:76:db:08:54:87:9e:14: a5:9a:ef:fb:0d:29:22:ab:a5:ef:7b:49:dc:0c:95:3a:df:08: 1e:0a:1d:40:45:40:cb:fb:be:1a:9a:9d:fe:3e:1a:36:74:36: 3b:70:9e:b1:09:f9:c6:d5:40:68:d0:e3:d6:a9:e4:1d:60:12: 16:44:1c:c9:eb:0c:68:f8:e8:38:9e:27:77:82:fc:ae:b5:75: cf:9f:03:cf:3f:4b:91:dc:26:58:24:ce:5a:22:a3:0f:73:32: 03:d3:a7:f6:0d:7d:5a:a3:60:e0:8f:ee:02:d4:94:de:05:fd: f4:62:e6:a3:dd:7f:d6:94:57:ef:ec:d6:05:ca:82:c2:f3:97: 23:b5:45:2e:d4:88:80:d4:4b:a7:0a:f7:a5:ee:24:5b:3a:a2: 48:67:35:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZfqtC+dQ0NB/lIe+RJ2xIskMdaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkFCRDdGMTg1Q0Y4NTkwNkQwNzk2RDNDN0FBMzU5RDYx RjVDNjg0NzAeFw0yNjA0MTYwNjUwMjBaFw0yNjA0MTcwODQ1MjBaMDMxMTAvBgNV BAMTKDM5OTNFN0IxNkFENUM0RkE1NTc1RjlGNTc1NkM5RDM4QTJGQTMxODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vg8Shgee0sGZ7YuR3Zv4uJ1q DDHVm+EunOP/9OpP9bCnTd53pOQ0xFb95iRRskAS1ajWNUXQ32RMAAQwgiu2o1V7 wi9XP2omOCQXlq/oXCi2FfzYW4P4WdTm2JAiieSP6BABnuyOZvbHDYQ1DF9Gudjk LkbZtRHwboiAxA08U4OOZ5ceylsSJi00czAHAcrPDvyd1vOedN2eXByVb7e8w6XP 9SdP56ZLAVf+NXRzzzGUh4mBfdK8THIa25HlqoMHnVmi+WQhO86vVzKQLPYIiJ7j qC2goP5YE4rIstqylOeu99Wwisbmt3oSEBuYZYM5kaTtNRCKNM4tgG9i2qaDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOZPnsWrVxPpVdfn1dWydOKL6MYUwHwYDVR0j BBgwFoAUar1/GFz4WQbQeW08eqNZ1h9caEcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA1MjM0MjAwMTMzNjMyMi8wLzZBQkQ3RjE4NUNGODU5MDZEMDc5NkQzQzdBQTM1 OUQ2MUY1QzY4NDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkFCRDdGMTg1Q0Y4NTkwNkQwNzk2RDNDN0FBMzU5RDYxRjVDNjg0Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNTIzNDIwMDEzMzYzMjIvMC82QUJEN0YxODVDRjg1 OTA2RDA3OTZEM0M3QUEzNTlENjFGNUM2ODQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIY0cet4R0Xa zWLCnUEbt1fIQMmoIudfHUpeBAZYzLp9b4/hniNFUo9Th4QPGVSoZrt4kOLVS2/4 xZXv72xK5WPvQkouRp7NRi7ykmeBKUpK19i3PlU7Y7xaIls9e979hGbCivh22whU h54UpZrv+w0pIqul73tJ3AyVOt8IHgodQEVAy/u+Gpqd/j4aNnQ2O3CesQn5xtVA aNDj1qnkHWASFkQcyesMaPjoOJ4nd4L8rrV1z58Dzz9LkdwmWCTOWiKjD3MyA9On 9g19WqNg4I/uAtSU3gX99GLmo91/1pRX7+zWBcqCwvOXI7VFLtSIgNRLpwr3pe4k WzqiSGc1FA== -----END CERTIFICATE-----Generated at Thu Apr 16 23:53:00 2026 by rpki-client