$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft File: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft (raw, json) Hash identifier: D5vyv0sWDfgEdvvm9hxnSRvSpe+7lcuWwvzgUrCJCBU= Subject key identifier: AB:56:35:3E:56:5D:32:03:E8:92:BB:95:14:EF:A3:20:F6:E9:3D:6E Authority key identifier: 6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C Certificate issuer: /CN=A91EFAA20000/serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C Certificate serial: 44D81504E870819B3AFEBF8A619A101E46F875D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft Manifest number: 85 Signing time: Tue 28 Jul 2026 04:26:29 +0000 Manifest this update: Tue 28 Jul 2026 04:21:29 +0000 Manifest next update: Wed 29 Jul 2026 05:46:29 +0000 Files and hashes: 1: 3230332e39342e302e302f31392d3139203d3e203137373339.roa (hash: +m3tQEFjHE7EvQqZt5ZFMX5uxgUV2P9Xu/hnIBd3mN4=) 2: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl (hash: oaGMmr2jTxd3VTvFbjuX+d2lCEBGAJTj4JjqfetJvZk=) 3: 323430373a343838303a3a2f33322d3332203d3e2030.roa (hash: ijCaVomoD4Gp49iRFc8q+IjUsH7ACZllQmvyC2Sz9cQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 05:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d8:15:04:e8:70:81:9b:3a:fe:bf:8a:61:9a:10:1e:46:f8:75:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAA20000, serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C Validity Not Before: Jul 28 04:21:29 2026 GMT Not After : Jul 29 05:46:29 2026 GMT Subject: CN=AB56353E565D3203E892BB9514EFA320F6E93D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:46:8b:ef:44:e3:ce:0e:53:0a:23:aa:b0:3d: 84:5d:5c:b7:0c:84:8b:e1:ee:25:9d:7f:e1:f2:40: ac:df:16:21:1c:19:fc:56:59:8e:26:de:07:61:c0: 6a:6d:72:53:48:4e:ca:af:ca:71:54:62:9a:cc:d0: 44:b0:c2:a5:5e:7b:26:d1:ae:cb:20:a5:15:87:28: f4:11:33:70:e7:94:1d:90:db:66:9b:5e:cf:82:91: 5c:cc:a2:d4:9a:5b:91:b6:e9:97:bb:4c:9e:19:cc: dc:cd:c2:9d:cb:4c:90:53:28:04:52:27:64:12:39: db:32:3a:01:e0:4b:f7:ff:5a:90:6c:c0:79:e5:93: a6:ec:24:b5:e0:6c:20:06:6b:d1:98:0e:b8:17:fe: 77:13:6d:f6:61:a7:ac:67:3a:0d:a1:b6:62:b7:12: a0:50:92:44:d2:86:c7:76:be:b7:2f:97:85:bb:fe: 8d:eb:04:41:1f:0a:2f:c6:f3:00:c4:a6:a4:9a:fa: 4d:d8:b9:5e:1a:37:d0:8d:e6:cc:d1:38:4a:f3:dc: 2c:ba:6f:51:e1:cb:39:53:84:ee:02:32:28:b6:12: 54:6b:c1:44:06:86:53:20:e0:9a:10:2a:39:5c:88: 20:a6:28:6c:9f:68:6e:21:13:86:11:3d:cd:a0:99: a9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:56:35:3E:56:5D:32:03:E8:92:BB:95:14:EF:A3:20:F6:E9:3D:6E X509v3 Authority Key Identifier: keyid:6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:86:5f:39:85:fe:95:5a:39:eb:2c:52:a3:96:b5:71:01:33: 6c:7b:99:79:d8:7a:a1:33:61:20:ee:98:30:03:c8:c7:c1:30: 9e:0a:40:70:64:c7:02:32:c7:0c:75:81:f7:12:d0:03:76:10: f0:69:b8:05:75:41:6a:04:15:35:59:67:58:12:b8:e2:2d:57: 47:91:8d:87:55:40:ce:92:4a:ed:4c:ee:9e:39:a1:f6:da:35: d5:15:e2:0b:d1:0f:bb:79:62:ff:f2:34:ce:a4:13:68:b3:08: 5f:a5:a0:c7:99:23:9e:ed:49:4d:74:5f:5e:48:f8:f0:66:9b: dd:73:85:b7:ee:69:93:e2:62:c3:28:84:22:0c:37:19:0c:98: e0:94:90:11:77:76:46:6f:18:e0:59:23:a8:37:6e:b6:49:0c: 17:58:26:54:6b:90:c8:4c:67:04:c5:54:52:f9:50:32:f4:6b: fb:8c:9b:aa:47:0b:a3:98:29:56:53:bc:d9:28:e7:81:94:d2: a6:a5:4a:f8:8a:d9:11:0e:c6:02:fd:fc:c4:40:5d:71:5d:6d: a1:47:ca:c2:53:5d:87:30:5a:f3:a2:ac:a6:bb:ba:6e:73:c1: 03:ae:cf:9b:c8:52:8c:f9:8a:fd:98:7b:c3:6c:0f:b4:4e:6d: df:4a:8e:4a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURNgVBOhwgZs6/r+KYZoQHkb4ddEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRUZBQTIwMDAwMTEwLwYDVQQFEyg2QTM4Nzk5RTdG RDIxOTg1RUQ4ODJFODhGRkMwREFGRUZGODdGNTRDMB4XDTI2MDcyODA0MjEyOVoX DTI2MDcyOTA1NDYyOVowMzExMC8GA1UEAxMoQUI1NjM1M0U1NjVEMzIwM0U4OTJC Qjk1MTRFRkEzMjBGNkU5M0Q2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKpGi+9E484OUwojqrA9hF1ctwyEi+HuJZ1/4fJArN8WIRwZ/FZZjibeB2HA am1yU0hOyq/KcVRimszQRLDCpV57JtGuyyClFYco9BEzcOeUHZDbZptez4KRXMyi 1Jpbkbbpl7tMnhnM3M3CnctMkFMoBFInZBI52zI6AeBL9/9akGzAeeWTpuwkteBs IAZr0ZgOuBf+dxNt9mGnrGc6DaG2YrcSoFCSRNKGx3a+ty+Xhbv+jesEQR8KL8bz AMSmpJr6Tdi5Xho30I3mzNE4SvPcLLpvUeHLOVOE7gIyKLYSVGvBRAaGUyDgmhAq OVyIIKYobJ9obiEThhE9zaCZqfUCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBSrVjU+ Vl0yA+iSu5UU76Mg9uk9bjAfBgNVHSMEGDAWgBRqOHmef9IZhe2ILoj/wNr+/4f1 TDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk5OTYzODExNTAwMTMwMzA3LzAvNkEzODc5 OUU3RkQyMTk4NUVEODgyRTg4RkZDMERBRkVGRjg3RjU0Qy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvYWpoNW5uX1NH WVh0aUM2SV84RGFfdi1IOVV3LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5OTk2MzgxMTUw MDEzMDMwNy8wLzZBMzg3OTlFN0ZEMjE5ODVFRDg4MkU4OEZGQzBEQUZFRkY4N0Y1 NEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAehl85hf6VWjnrLFKjlrVxATNse5l52HqhM2Eg7pgwA8jH wTCeCkBwZMcCMscMdYH3EtADdhDwabgFdUFqBBU1WWdYErjiLVdHkY2HVUDOkkrt TO6eOaH22jXVFeIL0Q+7eWL/8jTOpBNoswhfpaDHmSOe7UlNdF9eSPjwZpvdc4W3 7mmT4mLDKIQiDDcZDJjglJARd3ZGbxjgWSOoN262SQwXWCZUa5DITGcExVRS+VAy 9Gv7jJuqRwujmClWU7zZKOeBlNKmpUr4itkRDsYC/fzEQF1xXW2hR8rCU12HMFrz oqymu7puc8EDrs+byFKM+Yr9mHvDbA+0Tm3fSo5K -----END CERTIFICATE-----Generated at Tue Jul 28 18:30:55 2026 by rpki-client