$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft File: 6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft (raw, json) Hash identifier: HQmA5p/jI9s3/RGbiyRdSjoom8vmH3OujbdxzBeaoXM= Subject key identifier: F9:77:A0:78:B3:CD:4C:0E:0F:ED:83:67:AA:51:D3:77:2A:F9:C1:1F Authority key identifier: 6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1 Certificate issuer: /CN=6B3CB0044466142CEF0429B4E232A5AD2D38AAA1 Certificate serial: 11A1853410C1F7EFB384B0416D2A67B5F307BD26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft Manifest number: 02 Signing time: Fri 17 Apr 2026 06:15:11 +0000 Manifest this update: Fri 17 Apr 2026 06:10:11 +0000 Manifest next update: Sat 18 Apr 2026 08:52:11 +0000 Files and hashes: 1: 323430303a383665303a3a2f33322d3332203d3e20313436383134.roa (hash: DLyf9Hka8LSknSJVSIf6Mgywzzt8gkawHdcew74fo+c=) 2: 6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl (hash: dM165J/L8QqFgoiqkVu7WlLkeUZIBhyI8gdOJ0aQ+CU=) 3: 3130332e3138392e3135342e302f32332d3233203d3e20313436383134.roa (hash: 4nDwr0x7auXaCdia53bmpvYSCG62VhpDsLJImLDcVGo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a1:85:34:10:c1:f7:ef:b3:84:b0:41:6d:2a:67:b5:f3:07:bd:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B3CB0044466142CEF0429B4E232A5AD2D38AAA1 Validity Not Before: Apr 17 06:10:11 2026 GMT Not After : Apr 18 08:52:11 2026 GMT Subject: CN=F977A078B3CD4C0E0FED8367AA51D3772AF9C11F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:8d:60:c9:3a:05:ee:cb:a4:a5:5c:ac:e3: 80:4f:62:35:d0:ba:e5:1f:31:a0:43:6c:65:d4:5a: 87:f0:36:78:3b:cc:4f:0f:20:88:fa:42:cc:99:ad: 41:b7:7f:c9:01:59:30:52:4c:f4:3b:64:65:f3:1b: 62:24:86:14:b1:7c:7a:d7:77:b2:00:57:8e:46:5d: 08:48:45:8e:f7:a5:7c:69:fe:71:eb:bc:65:ed:fb: 3a:da:ba:90:9e:da:a8:ab:c4:c9:8b:25:05:9d:ff: 41:33:8b:90:d4:f1:2e:a7:2d:1e:26:45:be:3c:7f: 61:d8:42:a3:6d:45:60:79:7a:1f:8a:59:33:1d:89: d3:f4:f3:77:f5:dc:5c:84:7c:ee:3c:9b:55:7f:3c: 41:d7:af:93:ea:13:5e:81:0f:53:3d:d7:ac:ab:56: 74:69:fc:a7:c0:d4:e2:93:a9:dc:fe:92:84:5b:2c: 76:be:00:8c:91:8a:d6:b0:23:dd:b3:17:14:57:fa: 27:64:ca:6f:4f:27:ff:a1:ea:46:df:87:61:e2:85: 6c:96:fe:44:8c:7b:41:fa:4e:d5:4f:3a:95:3d:0f: 44:60:67:70:09:4e:dd:b4:ea:14:a7:00:90:bf:80: 2f:5e:5a:fd:ee:7a:62:08:9e:e2:42:4e:ef:55:b3: 0b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:77:A0:78:B3:CD:4C:0E:0F:ED:83:67:AA:51:D3:77:2A:F9:C1:1F X509v3 Authority Key Identifier: keyid:6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ff:26:83:6e:3d:bd:cc:3a:47:54:9c:2f:79:10:ac:01:e6: 98:97:92:f4:3e:33:48:2a:07:7e:d1:3f:c0:bd:7b:7a:fd:26: e7:f7:3c:4f:c4:0f:34:36:c6:c9:5f:cd:e9:85:d6:05:c3:0a: 78:f3:c1:31:01:55:5d:ef:0e:f0:fe:88:0b:ca:0c:ae:de:83: 4c:6b:b2:38:f5:f6:79:fa:e9:fb:a5:af:a0:bc:2c:8d:83:56: 76:4c:0e:3b:e5:e8:0e:8d:3f:8e:0d:d6:3f:e3:5b:5d:67:a7: c5:74:96:d3:8d:86:af:24:97:fc:b3:74:35:1b:ce:08:81:76: b2:0b:12:ef:f7:92:8b:aa:c6:02:18:c0:d5:70:70:e5:87:27: 72:8e:08:04:3f:a9:82:a7:92:c5:0f:91:6f:ff:5b:30:75:63: 2c:5a:e2:3e:f4:85:14:65:9d:03:b9:ee:08:23:38:bb:71:3c: 26:b4:c7:77:2a:21:f2:9b:86:f3:55:e4:10:13:cc:a0:11:f8: 9d:79:a6:99:31:a4:25:e3:1f:11:33:bd:80:cb:75:04:8e:9e: d0:12:84:85:27:59:f5:2c:79:94:2f:11:70:52:ab:5c:2e:29: 7f:db:19:00:93:22:b1:75:e8:1d:86:75:c6:10:60:ff:29:af: 15:ee:35:69 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEaGFNBDB9++zhLBBbSpntfMHvSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzQ0IwMDQ0NDY2MTQyQ0VGMDQyOUI0RTIzMkE1QUQy RDM4QUFBMTAeFw0yNjA0MTcwNjEwMTFaFw0yNjA0MTgwODUyMTFaMDMxMTAvBgNV BAMTKEY5NzdBMDc4QjNDRDRDMEUwRkVEODM2N0FBNTFEMzc3MkFGOUMxMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvGI1gyToF7sukpVys44BPYjXQ uuUfMaBDbGXUWofwNng7zE8PIIj6QsyZrUG3f8kBWTBSTPQ7ZGXzG2IkhhSxfHrX d7IAV45GXQhIRY73pXxp/nHrvGXt+zraupCe2qirxMmLJQWd/0Ezi5DU8S6nLR4m Rb48f2HYQqNtRWB5eh+KWTMdidP083f13FyEfO48m1V/PEHXr5PqE16BD1M916yr VnRp/KfA1OKTqdz+koRbLHa+AIyRitawI92zFxRX+idkym9PJ/+h6kbfh2HihWyW /kSMe0H6TtVPOpU9D0RgZ3AJTt206hSnAJC/gC9eWv3uemIInuJCTu9VswvLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+XegeLPNTA4P7YNnqlHTdyr5wR8wHwYDVR0j BBgwFoAUazywBERmFCzvBCm04jKlrS04qqEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQwNDMzNzcxOTYwNzI5OC8wLzZCM0NCMDA0NDQ2NjE0MkNFRjA0MjlCNEUyMzJB NUFEMkQzOEFBQTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkIzQ0IwMDQ0NDY2MTQyQ0VGMDQyOUI0RTIzMkE1QUQyRDM4QUFBMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MDQzMzc3MTk2MDcyOTgvMC82QjNDQjAwNDQ0NjYx NDJDRUYwNDI5QjRFMjMyQTVBRDJEMzhBQUExLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/8mg249vcw6 R1ScL3kQrAHmmJeS9D4zSCoHftE/wL17ev0m5/c8T8QPNDbGyV/N6YXWBcMKePPB MQFVXe8O8P6IC8oMrt6DTGuyOPX2efrp+6WvoLwsjYNWdkwOO+XoDo0/jg3WP+Nb XWenxXSW042GrySX/LN0NRvOCIF2sgsS7/eSi6rGAhjA1XBw5Ycnco4IBD+pgqeS xQ+Rb/9bMHVjLFriPvSFFGWdA7nuCCM4u3E8JrTHdyoh8puG81XkEBPMoBH4nXmm mTGkJeMfETO9gMt1BI6e0BKEhSdZ9Sx5lC8RcFKrXC4pf9sZAJMisXXoHYZ1xhBg /ymvFe41aQ== -----END CERTIFICATE-----Generated at Sat Apr 18 01:19:17 2026 by rpki-client