$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft File: 6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft (raw, json) Hash identifier: +qDLTfRRlUoQgccKC0k+BHvF6FCkP1nHMVfgPQi3IJ0= Subject key identifier: CD:DD:9D:1D:FB:F1:2A:B4:19:22:03:D0:60:84:84:62:21:6E:A7:54 Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94 Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94 Certificate serial: 2D29A02249D254C578188EE8534B90D4A38E6D45 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft Manifest number: 02 Signing time: Fri 17 Apr 2026 06:20:11 +0000 Manifest this update: Fri 17 Apr 2026 06:15:11 +0000 Manifest next update: Sat 18 Apr 2026 10:08:11 +0000 Files and hashes: 1: 3130332e3139322e3235322e302f32322d3232203d3e2034383132.roa (hash: zY7BeZ54qOlA5fmxZp3uwnE81EWFDJk9pWozMKFYWaI=) 2: 6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl (hash: gUqDLQic3F3hEOksoY0F7eZCH61265HevLWnh7yzpNg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 10:08:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:29:a0:22:49:d2:54:c5:78:18:8e:e8:53:4b:90:d4:a3:8e:6d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94 Validity Not Before: Apr 17 06:15:11 2026 GMT Not After : Apr 18 10:08:11 2026 GMT Subject: CN=CDDD9D1DFBF12AB4192203D060848462216EA754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:92:73:e9:b3:39:4b:de:fe:6e:ff:fa:dd:3f: aa:15:5d:c8:aa:4d:a2:97:73:47:71:d8:e6:5f:b4: 86:b4:c6:1a:4e:3c:2d:22:d5:32:a5:12:b5:8e:af: d8:80:de:01:ac:4f:19:7a:b5:be:d7:1a:35:cd:30: 9c:34:24:fc:25:e1:6b:1e:2a:8c:37:50:d8:83:2e: ff:02:32:a1:b0:42:0e:e4:fe:eb:75:c5:09:46:6f: 25:a9:95:a9:e6:83:9f:81:f5:02:0a:20:ab:cd:04: 4a:e3:82:e3:af:21:1d:5d:d6:27:50:88:25:73:58: 21:2d:42:c9:c0:b1:4f:c2:1e:8f:57:d0:6d:73:8f: 42:ed:0e:7f:cb:fd:32:4d:44:0a:ed:40:56:8d:4b: 2c:64:ed:78:1f:40:48:0d:03:dc:c9:ef:96:ba:84: fb:3e:3a:41:11:e1:c5:30:52:34:d1:09:7c:e3:8d: 82:d3:56:94:32:60:a5:78:a6:fd:30:ed:32:69:68: 33:47:98:a1:6b:a2:9b:5a:83:05:c8:3f:9e:77:ab: fd:27:81:11:04:10:4c:7f:52:f1:a4:f3:2d:e5:53: 14:98:7b:0d:8e:f8:f1:7a:07:e9:9f:ee:27:42:20: fe:2e:02:4c:f5:18:07:1b:a1:d5:95:76:bf:ed:c0: 66:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DD:9D:1D:FB:F1:2A:B4:19:22:03:D0:60:84:84:62:21:6E:A7:54 X509v3 Authority Key Identifier: keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a3:ce:ff:75:15:9a:31:b3:03:b0:3a:f4:f3:69:65:1c:47: f3:bf:82:11:c5:42:89:9f:7e:e6:12:a9:2c:07:27:bf:2e:43: 87:2b:c5:64:43:26:03:3c:c8:1f:e2:ff:2e:90:3a:53:5d:59: 2f:c8:cd:c3:ff:17:9e:85:48:b0:5b:8d:47:f3:3a:9b:5c:04: 54:d4:a2:cf:d8:ff:9a:27:a7:d3:27:9d:4a:75:63:53:c8:bb: c5:64:c0:9d:05:b0:3d:dd:2b:9a:df:93:2d:e0:45:97:ea:f0: 5d:73:e0:48:cd:81:dd:7d:36:48:c6:61:3c:06:04:d4:aa:81: 8e:7b:52:43:cd:ba:d1:7d:c8:17:13:09:da:f1:d4:0d:f9:60: 0a:6e:67:58:58:c6:63:7a:5d:1d:cb:0d:d4:f4:73:00:39:b2: 63:a9:f2:e0:55:20:71:f3:49:93:5c:05:9e:d7:5d:e2:59:af: bf:f8:b6:cc:42:b3:dd:a7:07:ba:da:f7:9d:45:03:fb:10:93: bf:df:20:cd:97:0c:1e:ea:4b:69:38:fb:22:55:f8:d6:47:82: c3:6a:6d:91:73:82:d5:1c:e6:36:d5:e2:20:ba:27:89:f8:e7: c1:e0:81:ce:57:87:bf:2e:30:67:02:55:88:ad:ee:e6:3d:cd: 97:a2:41:94 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULSmgIknSVMV4GI7oU0uQ1KOObUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1 MDVBREQ5NDAeFw0yNjA0MTcwNjE1MTFaFw0yNjA0MTgxMDA4MTFaMDMxMTAvBgNV BAMTKENEREQ5RDFERkJGMTJBQjQxOTIyMDNEMDYwODQ4NDYyMjE2RUE3NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiknPpszlL3v5u//rdP6oVXciq TaKXc0dx2OZftIa0xhpOPC0i1TKlErWOr9iA3gGsTxl6tb7XGjXNMJw0JPwl4Wse Kow3UNiDLv8CMqGwQg7k/ut1xQlGbyWplanmg5+B9QIKIKvNBErjguOvIR1d1idQ iCVzWCEtQsnAsU/CHo9X0G1zj0LtDn/L/TJNRArtQFaNSyxk7XgfQEgNA9zJ75a6 hPs+OkER4cUwUjTRCXzjjYLTVpQyYKV4pv0w7TJpaDNHmKFroptagwXIP553q/0n gREEEEx/UvGk8y3lUxSYew2O+PF6B+mf7idCIP4uAkz1GAcbodWVdr/twGY3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzd2dHfvxKrQZIgPQYISEYiFup1QwHwYDVR0j BBgwFoAUaomLPk67TFd/drvX8NdR+FBa3ZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQwNTExNTI2ODA3MTQyNy8wLzZBODk4QjNFNEVCQjRDNTc3Rjc2QkJEN0YwRDc1 MUY4NTA1QUREOTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkE4OThCM0U0RUJCNEM1NzdGNzZCQkQ3RjBENzUxRjg1MDVBREQ5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MDUxMTUyNjgwNzE0MjcvMC82QTg5OEIzRTRFQkI0 QzU3N0Y3NkJCRDdGMEQ3NTFGODUwNUFERDk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIqPO/3UVmjGz A7A69PNpZRxH87+CEcVCiZ9+5hKpLAcnvy5DhyvFZEMmAzzIH+L/LpA6U11ZL8jN w/8XnoVIsFuNR/M6m1wEVNSiz9j/mien0yedSnVjU8i7xWTAnQWwPd0rmt+TLeBF l+rwXXPgSM2B3X02SMZhPAYE1KqBjntSQ8260X3IFxMJ2vHUDflgCm5nWFjGY3pd HcsN1PRzADmyY6ny4FUgcfNJk1wFntdd4lmvv/i2zEKz3acHutr3nUUD+xCTv98g zZcMHupLaTj7IlX41keCw2ptkXOC1RzmNtXiILonifjnweCBzleHvy4wZwJViK3u 5j3Nl6JBlA== -----END CERTIFICATE-----Generated at Sat Apr 18 01:20:46 2026 by rpki-client