$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft File: 6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft (raw, json) Hash identifier: Nbt7oug+tp8DIYJol1M1+ZTGTBrY3LhMjArJXwBqoQw= Subject key identifier: 65:33:FB:EE:9C:2D:02:AA:88:46:BC:46:1A:DE:37:69:A8:0F:E9:BD Authority key identifier: 6F:1B:DE:E7:52:DB:E3:5C:77:30:8D:3A:9B:77:5A:C4:97:B5:0C:04 Certificate issuer: /CN=6F1BDEE752DBE35C77308D3A9B775AC497B50C04 Certificate serial: 028E603D2E7FAD1CE2B1B0922B9570F0AEF552D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft Manifest number: 47 Signing time: Thu 12 Mar 2026 10:03:39 +0000 Manifest this update: Thu 12 Mar 2026 09:58:39 +0000 Manifest next update: Fri 13 Mar 2026 12:17:39 +0000 Files and hashes: 1: 6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl (hash: 6ccQFQnFNHsCoH/Z78g5yLxpN7CXIU80qVAPWfSg1mU=) 2: 3136372e3232302e3234342e302f32322d3233203d3e203538383632.roa (hash: S6YeUv7/1SNKdqeM0QDgAM+ogiwASSDMjBMWQQAcs0I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 08:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:8e:60:3d:2e:7f:ad:1c:e2:b1:b0:92:2b:95:70:f0:ae:f5:52:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F1BDEE752DBE35C77308D3A9B775AC497B50C04 Validity Not Before: Mar 12 09:58:39 2026 GMT Not After : Mar 13 12:17:39 2026 GMT Subject: CN=6533FBEE9C2D02AA8846BC461ADE3769A80FE9BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cb:ca:f6:a1:59:fb:2c:9f:a5:4c:03:7c:cb: fd:a5:28:83:8a:ad:b0:a3:4d:7f:6e:d6:61:83:2c: f4:26:cd:f8:f3:b5:0a:07:06:ee:bc:8a:e2:fd:e1: 0e:a7:a9:86:29:25:36:ed:51:ab:7c:5d:22:97:40: 3c:ec:0b:8f:f9:b6:6b:ad:d1:9a:b0:bc:ff:a5:ba: 85:aa:14:80:fd:e7:31:43:6e:73:43:58:ae:15:e7: d4:6d:7d:4b:f1:55:e0:e9:18:de:f3:2a:b4:e3:62: 99:2c:b4:12:1b:2f:1b:f8:c8:6c:c1:ac:cf:cd:08: cf:00:a9:8c:5f:b8:50:8e:d1:be:dc:42:c9:af:f9: 1f:c8:b4:04:7f:35:8c:2a:e3:85:7f:1b:0c:64:b3: fe:33:4f:5c:50:05:b3:7f:72:df:bb:2d:65:e1:03: 65:a3:64:c7:31:01:b0:26:45:61:32:d1:fe:3f:36: 5a:b6:85:78:b4:4d:fb:e5:2b:27:38:3e:be:5b:b9: 97:ea:7d:58:3f:26:55:2b:36:33:65:ce:90:da:98: fe:f5:a7:ca:12:33:38:8f:67:fd:70:28:e6:be:80: 00:1e:59:66:55:12:73:4f:65:a3:2b:ca:a4:3c:72: fe:64:fc:4f:90:44:9c:48:5e:18:15:0a:2f:7a:39: af:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:33:FB:EE:9C:2D:02:AA:88:46:BC:46:1A:DE:37:69:A8:0F:E9:BD X509v3 Authority Key Identifier: keyid:6F:1B:DE:E7:52:DB:E3:5C:77:30:8D:3A:9B:77:5A:C4:97:B5:0C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:38:16:b0:b0:5d:b4:23:15:ef:7e:17:c5:33:bc:78:b3:4c: c0:8e:bc:cc:30:57:90:0d:2e:57:50:fd:a9:5f:2d:dc:18:52: f3:14:f2:a8:8f:27:79:a0:e7:cc:1c:72:d6:40:c1:a4:bd:0f: ae:8f:3b:2c:46:7e:0f:49:37:d0:c4:e9:ff:46:7f:40:bb:d2: 86:15:e5:7d:b3:57:24:39:a2:5b:95:54:33:67:b9:25:43:7a: 3d:dd:5b:cf:4f:7c:e8:67:3a:43:73:f6:78:ae:3f:04:a0:0d: 67:78:86:89:ee:c1:db:79:d8:e7:f6:c7:ac:2a:5a:be:d8:8b: 08:b8:10:8b:0b:91:e3:75:f0:36:44:b6:36:60:7f:7f:e8:f4: 27:9f:a8:11:1b:15:e4:3b:fe:dc:95:9b:77:8d:4d:bf:3b:6b: 20:95:bb:de:a3:86:e7:4e:36:74:6d:55:79:bf:2d:a1:d9:00: a6:f8:a1:2c:53:e5:91:7e:5d:af:28:fb:48:a1:2c:88:5e:b2: f8:7b:2b:1b:26:f7:0f:da:4e:15:52:67:23:f6:52:4e:8c:85: 42:d3:61:43:98:02:69:d4:ce:b7:e4:66:ca:e4:e7:3b:81:e3: d6:8e:76:7a:79:ee:00:2f:2f:6e:7b:9b:d2:8e:99:c9:0b:7c: 63:ee:b2:3d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAo5gPS5/rRzisbCSK5Vw8K71UtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYxQkRFRTc1MkRCRTM1Qzc3MzA4RDNBOUI3NzVBQzQ5 N0I1MEMwNDAeFw0yNjAzMTIwOTU4MzlaFw0yNjAzMTMxMjE3MzlaMDMxMTAvBgNV BAMTKDY1MzNGQkVFOUMyRDAyQUE4ODQ2QkM0NjFBREUzNzY5QTgwRkU5QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRy8r2oVn7LJ+lTAN8y/2lKIOK rbCjTX9u1mGDLPQmzfjztQoHBu68iuL94Q6nqYYpJTbtUat8XSKXQDzsC4/5tmut 0ZqwvP+luoWqFID95zFDbnNDWK4V59RtfUvxVeDpGN7zKrTjYpkstBIbLxv4yGzB rM/NCM8AqYxfuFCO0b7cQsmv+R/ItAR/NYwq44V/Gwxks/4zT1xQBbN/ct+7LWXh A2WjZMcxAbAmRWEy0f4/Nlq2hXi0TfvlKyc4Pr5buZfqfVg/JlUrNjNlzpDamP71 p8oSMziPZ/1wKOa+gAAeWWZVEnNPZaMryqQ8cv5k/E+QRJxIXhgVCi96Oa8/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZTP77pwtAqqIRrxGGt43aagP6b0wHwYDVR0j BBgwFoAUbxve51Lb41x3MI06m3daxJe1DAQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDM5MjU3OS8xLzZGMUJERUU3NTJEQkUzNUM3NzMwOEQzQTlCNzc1 QUM0OTdCNTBDMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNkYxQkRFRTc1MkRCRTM1Qzc3MzA4RDNBOUI3NzVBQzQ5N0I1MEMwNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMS82RjFCREVFNzUyREJF MzVDNzczMDhEM0E5Qjc3NUFDNDk3QjUwQzA0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzgWsLBdtCMV 734XxTO8eLNMwI68zDBXkA0uV1D9qV8t3BhS8xTyqI8neaDnzBxy1kDBpL0Pro87 LEZ+D0k30MTp/0Z/QLvShhXlfbNXJDmiW5VUM2e5JUN6Pd1bz0986Gc6Q3P2eK4/ BKANZ3iGie7B23nY5/bHrCpavtiLCLgQiwuR43XwNkS2NmB/f+j0J5+oERsV5Dv+ 3JWbd41NvztrIJW73qOG5042dG1Veb8todkApvihLFPlkX5dryj7SKEsiF6y+Hsr Gyb3D9pOFVJnI/ZSToyFQtNhQ5gCadTOt+RmyuTnO4Hj1o52ennuAC8vbnub0o6Z yQt8Y+6yPQ== -----END CERTIFICATE-----Generated at Thu Mar 12 22:14:11 2026 by rpki-client