$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft File: 6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft (raw, json) Hash identifier: yElZlluht+7skwVKju9hDffcfV8UiyAlYrzblffUUVU= Subject key identifier: DA:80:77:1E:F5:D0:A5:E3:9D:07:4A:07:91:F0:FA:52:7C:B2:1C:06 Authority key identifier: 6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3 Certificate issuer: /CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3 Certificate serial: 66FB557ED400B4461F58351B9C63CA7E7966B3CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft Manifest number: 03 Signing time: Fri 17 Apr 2026 03:09:39 +0000 Manifest this update: Fri 17 Apr 2026 03:04:39 +0000 Manifest next update: Sat 18 Apr 2026 05:54:39 +0000 Files and hashes: 1: 6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl (hash: 5QTpuYJEAU2uNfbfu5W7d8SwFOWFuByOfbqmDberih0=) 2: 3130332e3137302e3231332e302f32342d3234203d3e20313436383432.roa (hash: xHB51GTEu6E4O2uPU5Q+PFtFl9kWbp78dTmrzsJmvSE=) 3: 3130332e3137302e3231322e302f32342d3234203d3e20313436383432.roa (hash: oIVYiH99ns+ZO8k2snXu2q5AtM9u9S/dgbN/MlAUrrI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:fb:55:7e:d4:00:b4:46:1f:58:35:1b:9c:63:ca:7e:79:66:b3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3 Validity Not Before: Apr 17 03:04:39 2026 GMT Not After : Apr 18 05:54:39 2026 GMT Subject: CN=DA80771EF5D0A5E39D074A0791F0FA527CB21C06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ab:27:52:dc:ba:fb:08:50:66:98:0e:d5:98: 4b:d4:02:d5:b2:8a:d9:f5:57:aa:4e:45:b9:5d:a5: 18:c2:60:c4:46:f9:e0:0d:c7:de:a6:46:1a:64:d6: 2f:25:98:4b:76:f1:fe:fa:c7:30:f6:dc:cb:76:1d: e9:b1:56:38:bd:6d:fc:8d:08:e8:fa:d1:7f:33:76: 6c:0e:2f:e1:50:98:0b:89:b5:b0:64:3c:11:81:52: 30:c7:10:a5:46:1d:83:b0:80:a2:15:5e:bb:54:3c: 2a:63:6d:8b:f5:d0:1e:a6:a3:95:42:b7:a7:f0:a8: 1d:2e:24:93:e6:4b:cc:7e:c5:6c:2a:66:2b:c3:c7: e1:d6:fb:99:01:c6:f4:64:fa:cf:1c:ae:a7:51:df: d1:c4:78:1f:4a:5d:e6:09:1f:43:6f:9b:46:0e:0d: 40:77:bb:21:14:85:59:ff:95:3b:60:5d:f9:0a:a2: 36:98:39:88:2e:1f:c2:5d:98:95:c9:d9:a3:9d:f8: 16:f8:19:7a:66:17:e7:d0:0a:ea:f3:d1:ae:75:a4: 5d:25:be:ff:6a:d7:2e:c0:f9:c2:5e:ea:30:aa:ad: a9:32:c0:de:1e:43:a5:3a:34:15:a5:39:f0:44:38: 5b:c1:06:c7:18:bf:5a:66:cf:2b:aa:d1:78:7f:18: ff:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:80:77:1E:F5:D0:A5:E3:9D:07:4A:07:91:F0:FA:52:7C:B2:1C:06 X509v3 Authority Key Identifier: keyid:6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:48:f4:26:a5:ee:2f:2d:78:60:52:f5:5a:89:b2:ff:99:0e: 9c:93:29:51:2f:69:32:d9:53:82:9c:6c:de:1e:e2:f2:63:13: 9d:e1:41:5a:09:a8:a5:22:42:e6:b5:fb:a5:fa:76:fc:11:77: 8d:d2:4e:a1:dd:b1:1f:b2:63:ce:17:cb:ca:61:90:8f:62:3e: 76:c5:8a:d0:df:bd:21:64:c4:ad:d8:83:3c:22:d4:f2:c6:97: 93:48:c9:0c:b1:6e:c2:18:d5:07:20:fe:a7:5d:e7:8e:86:a5: 96:4b:e3:a8:72:e4:77:93:bf:f4:61:14:9d:60:62:4b:db:a9: 1c:fb:31:03:12:f7:45:e3:4d:ad:b1:6c:8a:ca:48:65:e0:7e: 79:40:af:1a:37:86:50:b6:64:ef:e0:f1:fe:c2:79:c3:6b:00: bb:a8:89:b0:dd:82:b6:cb:b9:95:1a:81:d4:8d:b5:4c:95:fa: 4e:06:1c:7b:47:ad:6d:39:2f:5d:0d:bd:54:29:b3:fc:72:c5: e3:f3:a2:ac:67:3a:85:ae:a5:14:d2:d7:fb:9c:2b:d7:9d:19: 51:8f:76:03:3f:bd:7b:42:29:62:73:cb:52:80:d6:fd:ac:88: a2:6f:38:3d:0c:2d:55:b7:c2:c5:db:f1:5e:71:55:29:36:51: 15:c5:b3:ea -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZvtVftQAtEYfWDUbnGPKfnlms8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU0N0ZGNThBMUM1QUE4NTg0RDI5NTNDMUVBRDRERTg2 MTU3RUJEMzAeFw0yNjA0MTcwMzA0MzlaFw0yNjA0MTgwNTU0MzlaMDMxMTAvBgNV BAMTKERBODA3NzFFRjVEMEE1RTM5RDA3NEEwNzkxRjBGQTUyN0NCMjFDMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyqydS3Lr7CFBmmA7VmEvUAtWy itn1V6pORbldpRjCYMRG+eANx96mRhpk1i8lmEt28f76xzD23Mt2HemxVji9bfyN COj60X8zdmwOL+FQmAuJtbBkPBGBUjDHEKVGHYOwgKIVXrtUPCpjbYv10B6mo5VC t6fwqB0uJJPmS8x+xWwqZivDx+HW+5kBxvRk+s8crqdR39HEeB9KXeYJH0Nvm0YO DUB3uyEUhVn/lTtgXfkKojaYOYguH8JdmJXJ2aOd+Bb4GXpmF+fQCurz0a51pF0l vv9q1y7A+cJe6jCqrakywN4eQ6U6NBWlOfBEOFvBBscYv1pmzyuq0Xh/GP/pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2oB3HvXQpeOdB0oHkfD6UnyyHAYwHwYDVR0j BBgwFoAUbkf/WKHFqoWE0pU8Hq1N6GFX69MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3NzM0NjQ1MzY4NDIyNS8wLzZFNDdGRjU4QTFDNUFBODU4NEQyOTUzQzFFQUQ0 REU4NjE1N0VCRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkU0N0ZGNThBMUM1QUE4NTg0RDI5NTNDMUVBRDRERTg2MTU3RUJEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzczNDY0NTM2ODQyMjUvMC82RTQ3RkY1OEExQzVB QTg1ODREMjk1M0MxRUFENERFODYxNTdFQkQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwEj0JqXuLy14 YFL1Womy/5kOnJMpUS9pMtlTgpxs3h7i8mMTneFBWgmopSJC5rX7pfp2/BF3jdJO od2xH7JjzhfLymGQj2I+dsWK0N+9IWTErdiDPCLU8saXk0jJDLFuwhjVByD+p13n joallkvjqHLkd5O/9GEUnWBiS9upHPsxAxL3ReNNrbFsispIZeB+eUCvGjeGULZk 7+Dx/sJ5w2sAu6iJsN2Ctsu5lRqB1I21TJX6TgYce0etbTkvXQ29VCmz/HLF4/Oi rGc6ha6lFNLX+5wr150ZUY92Az+9e0IpYnPLUoDW/ayIom84PQwtVbfCxdvxXnFV KTZRFcWz6g== -----END CERTIFICATE-----Generated at Fri Apr 17 23:30:33 2026 by rpki-client