$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft File: 6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft (raw, json) Hash identifier: eevUs6BdZvRqsfb80XWryjjIRWpTWlHupdbuGxdi58M= Subject key identifier: 33:8E:28:44:FA:B2:7B:B1:E8:57:80:52:70:60:7A:14:84:DA:C6:52 Authority key identifier: 6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1 Certificate issuer: /CN=6B3CB0044466142CEF0429B4E232A5AD2D38AAA1 Certificate serial: 1012E04B878E793B7298BD03EF457411AFAE96EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft Manifest number: 8B Signing time: Wed 29 Jul 2026 10:14:06 +0000 Manifest this update: Wed 29 Jul 2026 10:09:06 +0000 Manifest next update: Thu 30 Jul 2026 13:56:06 +0000 Files and hashes: 1: 6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl (hash: CCkZZfVgbnG42WXun+04yT5UY4tnMIZIjFmrKghd/D0=) 2: 3130332e3138392e3135342e302f32332d3233203d3e20313436383134.roa (hash: 4nDwr0x7auXaCdia53bmpvYSCG62VhpDsLJImLDcVGo=) 3: 323430303a383665303a3a2f33322d3332203d3e20313436383134.roa (hash: DLyf9Hka8LSknSJVSIf6Mgywzzt8gkawHdcew74fo+c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 13:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:12:e0:4b:87:8e:79:3b:72:98:bd:03:ef:45:74:11:af:ae:96:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B3CB0044466142CEF0429B4E232A5AD2D38AAA1 Validity Not Before: Jul 29 10:09:06 2026 GMT Not After : Jul 30 13:56:06 2026 GMT Subject: CN=338E2844FAB27BB1E857805270607A1484DAC652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:47:3d:94:46:38:4a:ed:bb:17:fd:5e:27:81: 46:99:09:25:f6:89:16:ea:1d:a8:6b:81:84:98:8e: 80:24:12:91:0e:cf:21:3d:54:20:7a:9a:cb:1a:19: 4d:3a:23:8f:ce:12:92:f7:f1:be:ce:56:6e:a7:69: 2a:ba:e8:07:f0:35:b4:c0:d6:22:33:27:38:85:d3: 27:45:fb:75:76:c4:db:7a:02:e9:98:a7:dd:1d:83: ee:e9:c1:c1:14:9a:7d:06:b2:7a:ec:64:bd:f4:ac: 29:ad:72:c3:74:8c:cf:89:64:1b:a6:fc:4a:fb:01: e8:13:e2:6f:b3:11:f5:5c:b9:9e:5f:89:24:51:26: 36:f9:8e:fa:14:61:fc:f9:25:f2:97:da:59:f2:c4: 1f:c4:69:e2:54:1a:69:f1:8d:06:3c:30:aa:5e:2e: 22:8f:34:85:2a:25:de:b1:b6:5a:6f:c0:ef:98:7b: 50:96:93:2b:02:7a:bb:70:77:dc:25:a6:43:d3:ff: b0:e5:fb:42:56:cf:31:b5:3d:64:01:61:03:cf:a1: 23:d5:60:49:cb:59:ff:f0:a7:d4:99:d0:81:57:88: 05:95:4e:64:c6:5d:41:13:b8:75:c2:3a:7d:b8:80: 90:46:a4:8a:b8:32:90:f2:29:4a:5d:28:81:c0:4e: f0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8E:28:44:FA:B2:7B:B1:E8:57:80:52:70:60:7A:14:84:DA:C6:52 X509v3 Authority Key Identifier: keyid:6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:3c:b1:68:54:d9:20:a7:38:e6:e4:71:c7:ed:a7:d9:ac:3b: 74:d3:e2:d9:d7:2b:5e:96:fd:fe:07:12:a9:f7:19:74:ad:e2: ab:36:af:1a:4e:a8:0b:79:f9:88:36:94:48:48:11:e4:ba:ce: 1e:42:82:f3:d7:5d:d5:35:73:fd:51:01:d9:a4:5a:72:38:a7: 83:a7:3c:76:7f:bb:be:cc:bb:19:f8:1c:e8:9c:23:08:84:84: c6:7c:7e:fd:94:91:52:0a:6a:5a:a4:c3:38:6e:02:57:21:c0: ca:17:9d:a5:33:90:80:42:1b:a1:72:7a:b1:db:02:d6:c1:2c: 43:e3:61:e9:46:73:3c:be:b4:72:b5:2e:52:5b:3e:bc:cd:e7: 2b:1b:63:b2:ad:86:35:d9:86:c1:20:ea:5f:24:d6:3b:c5:8f: e0:13:39:d0:29:7e:5e:44:73:74:96:b0:ca:a6:0b:5f:70:0b: db:da:48:52:40:0c:8e:50:bd:21:69:de:f9:53:a4:90:16:6e: ca:c6:73:7b:ed:8d:69:47:d2:8b:07:11:6c:88:0e:d1:84:51: 0d:e9:10:09:66:b3:b8:7c:83:30:27:6e:fc:2b:2f:ad:a9:80: 09:83:a5:0c:73:49:51:53:bb:4d:ff:40:b8:41:56:b4:72:45: 55:a9:52:f3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEBLgS4eOeTtymL0D70V0Ea+uluswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzQ0IwMDQ0NDY2MTQyQ0VGMDQyOUI0RTIzMkE1QUQy RDM4QUFBMTAeFw0yNjA3MjkxMDA5MDZaFw0yNjA3MzAxMzU2MDZaMDMxMTAvBgNV BAMTKDMzOEUyODQ0RkFCMjdCQjFFODU3ODA1MjcwNjA3QTE0ODREQUM2NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDERz2URjhK7bsX/V4ngUaZCSX2 iRbqHahrgYSYjoAkEpEOzyE9VCB6mssaGU06I4/OEpL38b7OVm6naSq66AfwNbTA 1iIzJziF0ydF+3V2xNt6AumYp90dg+7pwcEUmn0GsnrsZL30rCmtcsN0jM+JZBum /Er7AegT4m+zEfVcuZ5fiSRRJjb5jvoUYfz5JfKX2lnyxB/EaeJUGmnxjQY8MKpe LiKPNIUqJd6xtlpvwO+Ye1CWkysCertwd9wlpkPT/7Dl+0JWzzG1PWQBYQPPoSPV YEnLWf/wp9SZ0IFXiAWVTmTGXUETuHXCOn24gJBGpIq4MpDyKUpdKIHATvC9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUM44oRPqye7HoV4BScGB6FITaxlIwHwYDVR0j BBgwFoAUazywBERmFCzvBCm04jKlrS04qqEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQwNDMzNzcxOTYwNzI5OC8wLzZCM0NCMDA0NDQ2NjE0MkNFRjA0MjlCNEUyMzJB NUFEMkQzOEFBQTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkIzQ0IwMDQ0NDY2MTQyQ0VGMDQyOUI0RTIzMkE1QUQyRDM4QUFBMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MDQzMzc3MTk2MDcyOTgvMC82QjNDQjAwNDQ0NjYx NDJDRUYwNDI5QjRFMjMyQTVBRDJEMzhBQUExLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzyxaFTZIKc4 5uRxx+2n2aw7dNPi2dcrXpb9/gcSqfcZdK3iqzavGk6oC3n5iDaUSEgR5LrOHkKC 89dd1TVz/VEB2aRacjing6c8dn+7vsy7Gfgc6JwjCISExnx+/ZSRUgpqWqTDOG4C VyHAyhedpTOQgEIboXJ6sdsC1sEsQ+Nh6UZzPL60crUuUls+vM3nKxtjsq2GNdmG wSDqXyTWO8WP4BM50Cl+XkRzdJawyqYLX3AL29pIUkAMjlC9IWne+VOkkBZuysZz e+2NaUfSiwcRbIgO0YRRDekQCWazuHyDMCdu/CsvramACYOlDHNJUVO7Tf9AuEFW tHJFValS8w== -----END CERTIFICATE-----Generated at Wed Jul 29 23:02:22 2026 by rpki-client