$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft File: 6F899B29F801AD1C8A8515E6EF9709910311F668.mft (raw, json) Hash identifier: roOxPLJ18gwUa+wd+wJz9RCcrVV0TeQvrx4sbIvqrmw= Subject key identifier: 93:FB:64:65:09:43:34:B3:96:87:C3:D5:ED:A7:08:92:E6:E2:95:13 Authority key identifier: 6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 Certificate issuer: /CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Certificate serial: 75B06A017FBC97443D730823558FEC0124018C8A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft Manifest number: A0 Signing time: Tue 19 May 2026 05:14:38 +0000 Manifest this update: Tue 19 May 2026 05:09:38 +0000 Manifest next update: Wed 20 May 2026 08:15:38 +0000 Files and hashes: 1: 3130332e3134322e38322e302f32332d3332203d3e20313531393531.roa (hash: mVq0tp8huRh6SC0n7rhOLpZu0QlXgV/WIGpxjqgh/TE=) 2: 3130332e3134322e38332e302f32342d3234203d3e20313439353133.roa (hash: YsRlvfghH9rCCKNTUVL7cagdvzH0kbY4Bz95ToSRwi8=) 3: 3130332e3134322e38322e302f32342d3234203d3e20313439353133.roa (hash: YBLpKWnBY74NDcGKe6t2+bdDnzFkBiAsPzbxJySwzDk=) 4: 3130332e3134322e38322e302f32332d3332203d3e20313439353133.roa (hash: gNbCXYLZTSZSDGKA8vf0miL9zRhPVc7YJOnU420lxlM=) 5: 6F899B29F801AD1C8A8515E6EF9709910311F668.crl (hash: OzEFn3I+GCCdA9hByVwMcbkMgE2LLwBWqLuftTruu/E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 08:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:b0:6a:01:7f:bc:97:44:3d:73:08:23:55:8f:ec:01:24:01:8c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Validity Not Before: May 19 05:09:38 2026 GMT Not After : May 20 08:15:38 2026 GMT Subject: CN=93FB6465094334B39687C3D5EDA70892E6E29513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1d:41:06:f9:d4:ed:ea:9e:84:ed:ae:e7:ba: 7c:7e:26:05:5a:e0:87:82:10:b6:94:e4:e1:21:13: 6d:46:e9:8a:f9:fb:4b:ca:f9:b6:12:28:50:c2:4c: cc:63:d3:01:d3:c9:ab:26:47:7e:ee:fd:85:34:b5: 0e:65:ef:9b:2a:ba:d2:29:8b:00:ad:d5:9e:61:b1: c0:b7:3e:54:ee:44:76:69:3b:00:bd:bf:8b:0a:f7: e2:95:26:93:37:b1:fc:0e:a0:36:58:26:42:87:6b: ed:e5:3a:b7:51:3e:b7:b8:4b:76:3b:02:d4:5e:74: 41:fb:3c:68:01:50:fa:78:2b:57:75:8c:7b:0a:4c: 38:f0:ab:a1:55:1e:0c:8f:1e:64:12:3f:b4:88:05: bb:ba:06:01:49:a7:6b:f5:65:bb:f4:96:56:13:49: 1c:14:df:13:b8:e1:43:cd:af:f2:1a:f4:f0:6f:33: 49:4c:3b:43:e4:28:22:64:d2:4b:50:b5:0b:fb:84: 36:18:15:b2:2e:71:22:0e:74:68:e8:a3:0f:91:d9: 80:cd:bb:54:fc:2c:6c:64:fc:e6:39:be:61:f4:e1: 57:d2:f8:34:3b:27:b0:fd:8c:df:b4:c3:9c:cf:fc: b9:04:57:86:3a:39:22:43:c1:c0:da:dc:e6:4f:98: 1c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FB:64:65:09:43:34:B3:96:87:C3:D5:ED:A7:08:92:E6:E2:95:13 X509v3 Authority Key Identifier: keyid:6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:b4:e7:ea:dd:27:d1:22:14:ed:ee:ea:69:51:24:c8:c0:a3: ca:b1:2f:36:f6:7e:73:35:f9:58:86:b4:19:93:c7:96:3b:01: e5:38:bb:a6:3b:d3:00:c2:74:6a:07:b6:0b:bc:44:69:77:3a: 6c:09:2f:11:f7:71:1c:73:f9:a1:5b:98:de:b0:bc:39:63:d0: 3b:1d:3a:98:9a:c2:9d:92:42:97:b4:f6:af:70:dd:0e:60:3e: 08:ea:74:0a:45:fc:f7:eb:2e:cd:32:c7:29:73:f5:06:62:de: 4e:8b:a8:8b:8e:81:f8:53:6d:4b:05:87:05:7c:e8:94:de:09: ab:c8:2f:d2:ad:b9:db:56:b3:d7:66:21:e5:fc:61:58:a7:d7: b7:44:ae:33:b2:60:0f:33:0a:17:8c:f4:aa:d8:8b:8e:f5:cf: f8:69:42:38:f8:7d:da:fb:f6:fb:18:e3:4d:f6:c3:ae:71:4a: 14:40:16:85:84:d8:4e:bc:c6:ce:69:13:3b:04:be:79:15:a7: e6:3e:ca:e9:58:e2:76:24:f0:db:fc:3f:0f:4c:79:ce:aa:64: 46:7c:94:b1:74:3c:ac:77:ec:96:b7:61:56:d2:2a:5b:f1:e4: 51:a4:b7:61:29:8a:4c:6a:d2:eb:86:09:4b:81:cc:4c:90:c9: f6:1e:cc:3a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdbBqAX+8l0Q9cwgjVY/sASQBjIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEw MzExRjY2ODAeFw0yNjA1MTkwNTA5MzhaFw0yNjA1MjAwODE1MzhaMDMxMTAvBgNV BAMTKDkzRkI2NDY1MDk0MzM0QjM5Njg3QzNENUVEQTcwODkyRTZFMjk1MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiHUEG+dTt6p6E7a7nunx+JgVa 4IeCELaU5OEhE21G6Yr5+0vK+bYSKFDCTMxj0wHTyasmR37u/YU0tQ5l75squtIp iwCt1Z5hscC3PlTuRHZpOwC9v4sK9+KVJpM3sfwOoDZYJkKHa+3lOrdRPre4S3Y7 AtRedEH7PGgBUPp4K1d1jHsKTDjwq6FVHgyPHmQSP7SIBbu6BgFJp2v1Zbv0llYT SRwU3xO44UPNr/Ia9PBvM0lMO0PkKCJk0ktQtQv7hDYYFbIucSIOdGjoow+R2YDN u1T8LGxk/OY5vmH04VfS+DQ7J7D9jN+0w5zP/LkEV4Y6OSJDwcDa3OZPmBzvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUk/tkZQlDNLOWh8PV7acIkubilRMwHwYDVR0j BBgwFoAUb4mbKfgBrRyKhRXm75cJkQMR9mgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzY3NzU3MS8wLzZGODk5QjI5RjgwMUFEMUM4QTg1MTVFNkVGOTcw OTkxMDMxMUY2NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEwMzExRjY2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2Nzc1NzEvMC82Rjg5OUIyOUY4MDFB RDFDOEE4NTE1RTZFRjk3MDk5MTAzMTFGNjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLTn6t0n0SIU 7e7qaVEkyMCjyrEvNvZ+czX5WIa0GZPHljsB5Ti7pjvTAMJ0age2C7xEaXc6bAkv EfdxHHP5oVuY3rC8OWPQOx06mJrCnZJCl7T2r3DdDmA+COp0CkX89+suzTLHKXP1 BmLeTouoi46B+FNtSwWHBXzolN4Jq8gv0q2521az12Yh5fxhWKfXt0SuM7JgDzMK F4z0qtiLjvXP+GlCOPh92vv2+xjjTfbDrnFKFEAWhYTYTrzGzmkTOwS+eRWn5j7K 6VjidiTw2/w/D0x5zqpkRnyUsXQ8rHfslrdhVtIqW/HkUaS3YSmKTGrS64YJS4HM TJDJ9h7MOg== -----END CERTIFICATE-----Generated at Tue May 19 10:22:11 2026 by rpki-client