$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft File: 6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft (raw, json) Hash identifier: 2ddb3V8MduOmcbovHhldj3KmhB3u1ts5xjeHxCS43sE= Subject key identifier: 42:A5:BC:90:A2:6A:2E:E0:11:FF:2B:A8:70:FA:57:A0:0D:2D:78:7E Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Certificate serial: 4849AF6625E5DC36F4F97B4853380AA1DD550151 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft Manifest number: 45 Signing time: Thu 12 Mar 2026 09:28:39 +0000 Manifest this update: Thu 12 Mar 2026 09:23:39 +0000 Manifest next update: Fri 13 Mar 2026 12:08:39 +0000 Files and hashes: 1: 3132302e34372e302e302f31362d3136203d3e203138313138.roa (hash: Ft5CLZw9t2CRUNmavoaGZC/hKN+eHg2+xR6CvXnjcRI=) 2: 3231392e37322e3136302e302f32342d3234203d3e203138313138.roa (hash: 8dtxM9VRFS14jXgTL0jlExD+rRZPerBYVc3WFemUOQQ=) 3: 3231392e37322e3136302e302f32342d3234203d3e20333938373034.roa (hash: d/cQSMYNBX/wZD+QYHNeyKRe0x+03uT3D/Oy6lO4iy8=) 4: 3231392e37322e302e302f31362d3136203d3e203138313138.roa (hash: 3fGts9fS3mm4peYPa5y25NpoXBF5DOH88ZO6sDHG1lc=) 5: 3132302e34352e302e302f31362d3136203d3e203138313138.roa (hash: C4rcAlSgZV7754y5uPyyWtQVibM3t4nZdIrXFXZoZ7Q=) 6: 3132302e34372e302e302f31362d3136203d3e2034383437.roa (hash: lv7hLgB4DhaCLKjg4xf3dfIw4sVemT9lRXa3jqlxqXA=) 7: 6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl (hash: TujaahduH2hQ2xeftzal1XNt9VGO3tsSr7I3AB9F8gk=) 8: 3231392e37322e302e302f31362d3136203d3e2034383437.roa (hash: E35Ak8kryIUI2zOXyOabRVR/vhDEn+uGa0zCN0KdzcM=) 9: 3132302e34352e302e302f31362d3136203d3e2034383437.roa (hash: e3k7Iz2AbcrOnzEC7lCU4UO8ip/XOhRamxgrg+OBUAg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 12:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:49:af:66:25:e5:dc:36:f4:f9:7b:48:53:38:0a:a1:dd:55:01:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Validity Not Before: Mar 12 09:23:39 2026 GMT Not After : Mar 13 12:08:39 2026 GMT Subject: CN=42A5BC90A26A2EE011FF2BA870FA57A00D2D787E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:37:46:3b:47:e9:13:e0:d3:43:c9:cb:d7:10: 77:46:1b:fe:fc:24:37:6a:a1:ae:ea:db:10:28:3b: 1d:49:ad:83:0b:eb:45:3a:d2:27:50:db:fd:fa:c4: b3:f6:a8:50:14:21:51:e5:f7:b0:b4:bb:e1:bd:12: ee:af:16:94:74:61:85:a1:ae:d4:37:13:a8:6a:56: c1:60:ea:1b:b8:8e:10:84:1c:47:05:7d:df:6d:61: b3:80:ed:ce:c0:92:fb:08:b4:5c:eb:75:85:27:df: 9b:12:69:fa:d9:98:89:d8:d4:8f:36:1f:70:31:e0: 8c:c4:3d:e2:eb:3c:c9:56:8e:f2:79:2c:3e:86:37: d9:48:a7:35:3e:27:fc:3e:87:78:f4:ff:50:07:5a: 21:1e:7b:a6:1e:93:fe:8a:5e:a0:a7:43:e3:66:04: 4f:a7:57:0c:5f:1c:8a:5e:af:68:76:50:59:e7:bd: 9a:ad:f1:b0:b7:80:8c:ee:c3:54:34:a6:20:04:12: ac:0a:57:f5:c5:87:ff:6b:b0:a3:55:ae:03:8b:1a: d1:f0:d8:c5:d6:6a:46:ab:b7:54:98:bf:6c:33:03: 53:b9:3e:47:9a:6d:33:df:43:85:3e:b6:85:f8:cd: 2b:34:be:38:84:d0:ea:c9:32:8d:0a:b0:bb:2a:c5: 6b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A5:BC:90:A2:6A:2E:E0:11:FF:2B:A8:70:FA:57:A0:0D:2D:78:7E X509v3 Authority Key Identifier: keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:45:e0:8f:7f:de:7f:2c:4c:08:03:a1:90:91:fb:6e:5e:24: 3c:b4:11:2a:75:bc:d8:88:a4:7c:d9:8d:0a:01:5e:5e:d6:92: 91:0c:38:96:ef:58:14:38:94:9c:67:bb:73:e2:a1:06:5f:2a: 5d:82:26:56:58:16:4f:29:4e:c2:07:0b:0d:dd:e1:30:68:5f: c8:78:5d:e0:d9:06:c2:be:ae:0c:da:d8:ed:98:d9:df:82:9f: 84:7d:7d:7e:34:46:e6:52:70:f6:08:ea:16:f1:4e:1b:9f:fe: a4:58:2f:5b:03:8d:e7:25:ab:91:4a:38:a4:7f:4c:f9:6a:41: ad:9e:1b:66:8f:e3:c1:5e:43:f9:7c:f3:27:f8:dc:6e:70:16: eb:c5:2a:c1:99:5c:c1:1a:ba:40:54:5e:80:24:85:d9:70:08: e4:13:b7:b5:9b:e2:0d:02:cf:d1:a5:e9:06:6d:1e:d8:c4:ea: 12:be:d4:f8:dc:06:9d:bb:19:3c:8f:e0:a0:1c:4e:61:e7:b6: 09:45:86:70:26:fe:d2:4b:3a:13:5e:ce:88:a6:ef:8b:6d:e4: 0b:56:ff:5a:82:71:4e:7b:e8:21:e0:be:72:fe:63:c1:fa:e3: dd:fa:d2:09:aa:bb:cd:3e:99:b7:f1:5d:51:99:d0:46:99:0b: 15:2e:91:4e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSEmvZiXl3Db0+XtIUzgKod1VAVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE MTQxRjVENTAeFw0yNjAzMTIwOTIzMzlaFw0yNjAzMTMxMjA4MzlaMDMxMTAvBgNV BAMTKDQyQTVCQzkwQTI2QTJFRTAxMUZGMkJBODcwRkE1N0EwMEQyRDc4N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTN0Y7R+kT4NNDycvXEHdGG/78 JDdqoa7q2xAoOx1JrYML60U60idQ2/36xLP2qFAUIVHl97C0u+G9Eu6vFpR0YYWh rtQ3E6hqVsFg6hu4jhCEHEcFfd9tYbOA7c7AkvsItFzrdYUn35sSafrZmInY1I82 H3Ax4IzEPeLrPMlWjvJ5LD6GN9lIpzU+J/w+h3j0/1AHWiEee6Yek/6KXqCnQ+Nm BE+nVwxfHIper2h2UFnnvZqt8bC3gIzuw1Q0piAEEqwKV/XFh/9rsKNVrgOLGtHw 2MXWakart1SYv2wzA1O5PkeabTPfQ4U+toX4zSs0vjiE0OrJMo0KsLsqxWslAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQqW8kKJqLuAR/yuocPpXoA0teH4wHwYDVR0j BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyMDk3MjkvMC82QjU3RUFEN0IzODMx OTI2OUFFOTNBM0UyNkZCMzk2N0QxNDFGNUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEXgj3/efyxM CAOhkJH7bl4kPLQRKnW82IikfNmNCgFeXtaSkQw4lu9YFDiUnGe7c+KhBl8qXYIm VlgWTylOwgcLDd3hMGhfyHhd4NkGwr6uDNrY7ZjZ34KfhH19fjRG5lJw9gjqFvFO G5/+pFgvWwON5yWrkUo4pH9M+WpBrZ4bZo/jwV5D+XzzJ/jcbnAW68UqwZlcwRq6 QFRegCSF2XAI5BO3tZviDQLP0aXpBm0e2MTqEr7U+NwGnbsZPI/goBxOYee2CUWG cCb+0ks6E17OiKbvi23kC1b/WoJxTnvoIeC+cv5jwfrj3frSCaq7zT6Zt/FdUZnQ RpkLFS6RTg== -----END CERTIFICATE-----Generated at Fri Mar 13 02:30:20 2026 by rpki-client