$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft File: 6E171695D3EF09F7A49B6AF0022DA63420988631.mft (raw, json) Hash identifier: DYRcH61H2KPRrUMCe8el5A0KWHU05YzZOSnLaROcLxw= Subject key identifier: B9:86:15:CF:AD:FF:8C:2C:9D:DA:99:DC:69:EA:7C:E2:3E:E1:DA:92 Authority key identifier: 6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31 Certificate issuer: /CN=6E171695D3EF09F7A49B6AF0022DA63420988631 Certificate serial: 37187084791EE5542DEB75F2A203391A5FCE03FB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft Manifest number: 71 Signing time: Sun 12 Apr 2026 23:09:17 +0000 Manifest this update: Sun 12 Apr 2026 23:04:17 +0000 Manifest next update: Tue 14 Apr 2026 01:44:17 +0000 Files and hashes: 1: 3130332e3232372e3232382e302f32322d3232203d3e20313331353236.roa (hash: nYDYkZddHjE9LpPNDCfoTzhw2hIepJ22IneS6IcaytI=) 2: 323430323a356534303a3a2f33322d3332203d3e20313331353236.roa (hash: 1h4OrgL9zEqJdmEkth2dOBjhiLKByYppiMUDngFpF44=) 3: 6E171695D3EF09F7A49B6AF0022DA63420988631.crl (hash: KB4z4H+CXt5YHuB1D0rOtMwU3VR2+vTDWoTEki3gSwg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 01:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:18:70:84:79:1e:e5:54:2d:eb:75:f2:a2:03:39:1a:5f:ce:03:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E171695D3EF09F7A49B6AF0022DA63420988631 Validity Not Before: Apr 12 23:04:17 2026 GMT Not After : Apr 14 01:44:17 2026 GMT Subject: CN=B98615CFADFF8C2C9DDA99DC69EA7CE23EE1DA92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:8b:a2:aa:4a:39:bc:db:bb:57:6c:88:64:ae: 43:af:4b:86:59:73:0b:11:3f:8d:b8:09:3b:bd:30: 09:07:74:b7:85:db:4d:1f:b7:56:a8:32:61:79:d4: 17:80:b6:d4:4b:b5:f1:c0:84:b4:57:1f:02:0a:bc: e2:8b:25:48:3c:c4:3b:dc:57:8b:c2:92:9e:53:9f: 10:4e:76:3c:0b:91:90:71:aa:f0:9e:17:2f:25:b6: f7:12:a8:d7:8a:da:c8:91:89:6d:aa:10:04:67:67: c9:e1:91:6e:c6:7a:fa:48:49:2c:3c:4e:2e:82:b6: bb:92:f1:a3:9f:6c:f4:4f:f0:fe:a8:66:84:df:24: 6d:87:46:1b:a3:6d:e1:df:e6:e2:c4:54:75:d3:69: 48:8a:e2:a8:9f:5e:97:1f:5d:4d:3b:58:39:40:21: a7:de:96:5a:75:15:7b:14:6d:48:59:03:cc:98:9c: 7a:2d:38:c7:78:8a:13:10:3b:e8:c7:a3:5a:9b:c5: 1f:7b:74:cb:2b:22:92:21:e9:15:47:e2:ee:ea:6d: 47:e2:e3:41:05:35:15:b5:2e:24:a1:db:c6:19:93: 8d:49:0e:38:7f:88:a4:eb:2c:bd:44:a5:ed:d5:48: 4c:d1:2e:c5:ed:1d:f4:f3:dd:d6:61:0a:74:9a:46: 2f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:86:15:CF:AD:FF:8C:2C:9D:DA:99:DC:69:EA:7C:E2:3E:E1:DA:92 X509v3 Authority Key Identifier: keyid:6E:17:16:95:D3:EF:09:F7:A4:9B:6A:F0:02:2D:A6:34:20:98:86:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E171695D3EF09F7A49B6AF0022DA63420988631.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121494018/0/6E171695D3EF09F7A49B6AF0022DA63420988631.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f7:13:6e:8a:b9:f7:05:87:d2:a2:82:2e:4c:c3:11:96:24: c4:91:83:9e:9c:86:6c:6b:94:d0:20:9f:57:93:ce:8e:ba:28: 7b:34:df:24:f4:37:1c:bb:7a:9d:d7:6f:55:22:63:c0:fa:93: 0c:0d:38:c4:54:59:02:4f:15:b4:ac:c2:e9:13:b4:bf:74:b8: ce:9e:86:53:c9:5c:f9:ed:d5:e9:0a:18:06:b8:83:51:4c:0a: 06:4e:bc:88:73:22:23:66:7f:37:df:54:a9:e1:2f:82:21:e3: f4:08:cb:6e:dc:e7:ce:7c:d6:39:30:cb:c2:44:59:08:00:e4: 38:44:4e:83:b0:70:2f:83:34:b8:c2:79:c0:17:6f:bc:ab:43: 31:cd:58:5a:50:eb:2b:9e:10:f6:24:85:d4:05:ed:8b:75:0a: c4:f5:32:a9:d0:6a:6a:52:44:8e:42:14:0a:be:17:e1:b8:6e: 72:cc:b1:8f:36:89:63:cc:25:2b:2a:36:2c:1a:f2:3f:f6:11: a9:db:40:66:78:67:f1:c4:61:a7:5c:ae:77:d3:d4:31:70:ba: 92:95:8e:65:05:76:98:51:2f:b0:d6:ad:8e:48:42:c7:57:a5: 8e:1c:2b:22:af:de:12:97:0a:26:1e:c3:8c:3f:17:57:5d:77: 84:35:aa:93 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNxhwhHke5VQt63XyogM5Gl/OA/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkUxNzE2OTVEM0VGMDlGN0E0OUI2QUYwMDIyREE2MzQy MDk4ODYzMTAeFw0yNjA0MTIyMzA0MTdaFw0yNjA0MTQwMTQ0MTdaMDMxMTAvBgNV BAMTKEI5ODYxNUNGQURGRjhDMkM5RERBOTlEQzY5RUE3Q0UyM0VFMURBOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1i6KqSjm827tXbIhkrkOvS4ZZ cwsRP424CTu9MAkHdLeF200ft1aoMmF51BeAttRLtfHAhLRXHwIKvOKLJUg8xDvc V4vCkp5TnxBOdjwLkZBxqvCeFy8ltvcSqNeK2siRiW2qEARnZ8nhkW7GevpISSw8 Ti6CtruS8aOfbPRP8P6oZoTfJG2HRhujbeHf5uLEVHXTaUiK4qifXpcfXU07WDlA Iafellp1FXsUbUhZA8yYnHotOMd4ihMQO+jHo1qbxR97dMsrIpIh6RVH4u7qbUfi 40EFNRW1LiSh28YZk41JDjh/iKTrLL1Epe3VSEzRLsXtHfTz3dZhCnSaRi+PAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuYYVz63/jCyd2pncaep84j7h2pIwHwYDVR0j BBgwFoAUbhcWldPvCfekm2rwAi2mNCCYhjEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTQ5NDAxOC8wLzZFMTcxNjk1RDNFRjA5RjdBNDlCNkFGMDAyMkRB NjM0MjA5ODg2MzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkUxNzE2OTVEM0VGMDlGN0E0OUI2QUYwMDIyREE2MzQyMDk4ODYzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE0OTQwMTgvMC82RTE3MTY5NUQzRUYw OUY3QTQ5QjZBRjAwMjJEQTYzNDIwOTg4NjMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvcTboq59wWH 0qKCLkzDEZYkxJGDnpyGbGuU0CCfV5POjrooezTfJPQ3HLt6nddvVSJjwPqTDA04 xFRZAk8VtKzC6RO0v3S4zp6GU8lc+e3V6QoYBriDUUwKBk68iHMiI2Z/N99UqeEv giHj9AjLbtznznzWOTDLwkRZCADkOEROg7BwL4M0uMJ5wBdvvKtDMc1YWlDrK54Q 9iSF1AXti3UKxPUyqdBqalJEjkIUCr4X4bhucsyxjzaJY8wlKyo2LBryP/YRqdtA Znhn8cRhp1yud9PUMXC6kpWOZQV2mFEvsNatjkhCx1eljhwrIq/eEpcKJh7DjD8X V113hDWqkw== -----END CERTIFICATE-----Generated at Mon Apr 13 11:04:51 2026 by rpki-client