$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft File: 6F899B29F801AD1C8A8515E6EF9709910311F668.mft (raw, json) Hash identifier: yVEhTFnOJztDLbcZbgniVzOSmxTeWXxFmDvIjUdb7ZY= Subject key identifier: B2:46:2E:4B:3B:BB:56:56:87:0C:15:2F:10:CD:B5:08:7D:B8:56:3E Authority key identifier: 6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 Certificate issuer: /CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Certificate serial: 6460E14C3F08337BBCE0FB193C0464E650EFD92C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft Manifest number: 62 Signing time: Thu 02 Apr 2026 18:53:55 +0000 Manifest this update: Thu 02 Apr 2026 18:48:55 +0000 Manifest next update: Fri 03 Apr 2026 20:24:55 +0000 Files and hashes: 1: 3130332e3134322e38322e302f32342d3234203d3e20313439353133.roa (hash: YBLpKWnBY74NDcGKe6t2+bdDnzFkBiAsPzbxJySwzDk=) 2: 6F899B29F801AD1C8A8515E6EF9709910311F668.crl (hash: VYvfCgJ89pwmVw1VPfwYTfFLraKM/hIiksUfZQhp0sc=) 3: 3130332e3134322e38322e302f32332d3332203d3e20313439353133.roa (hash: gNbCXYLZTSZSDGKA8vf0miL9zRhPVc7YJOnU420lxlM=) 4: 3130332e3134322e38332e302f32342d3234203d3e20313439353133.roa (hash: YsRlvfghH9rCCKNTUVL7cagdvzH0kbY4Bz95ToSRwi8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 20:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:60:e1:4c:3f:08:33:7b:bc:e0:fb:19:3c:04:64:e6:50:ef:d9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Validity Not Before: Apr 2 18:48:55 2026 GMT Not After : Apr 3 20:24:55 2026 GMT Subject: CN=B2462E4B3BBB5656870C152F10CDB5087DB8563E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:94:bd:87:3c:ba:cf:46:c0:88:0c:e9:b7:04: 04:5e:86:7f:ad:ee:64:26:bb:b3:fb:e4:37:1d:24: 8b:42:cb:df:a0:78:bf:04:63:65:ca:81:00:02:ae: b6:b9:2f:32:09:7c:d4:e8:2f:50:e8:d0:06:74:46: 18:0b:67:2c:25:b7:d8:a4:28:56:f0:78:f3:8b:9a: 9b:88:19:4c:df:a1:75:12:f3:d2:d2:d0:fc:83:af: ac:9a:05:99:b6:10:34:e2:8b:c3:36:a0:6a:e0:d4: 21:c0:23:96:ee:1e:dd:81:fe:d3:2b:e3:9a:3c:a1: 75:15:bb:82:e1:11:a7:51:11:dc:d1:7c:5e:37:ca: 66:ec:0a:fc:3b:ca:46:40:89:f5:28:9e:82:3b:bd: 1c:0b:d9:c9:cc:5f:20:d1:b7:69:5f:64:5b:69:ef: e8:8e:51:27:6f:0c:86:ac:9b:5b:22:5a:c5:64:74: 34:db:8e:1b:1b:b7:0b:21:5e:d4:7d:62:b9:cc:e9: a6:29:64:7e:01:4f:e5:44:55:a2:9d:30:7b:bf:f6: ec:0f:9a:23:d3:d1:b1:d6:5e:50:2e:a6:e9:a0:f5: 53:74:fb:7e:7e:c1:bc:5b:47:47:16:9b:cd:ba:1a: 5f:04:cb:22:bd:e4:28:b6:e0:5e:47:5b:d7:ce:70: 2f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:46:2E:4B:3B:BB:56:56:87:0C:15:2F:10:CD:B5:08:7D:B8:56:3E X509v3 Authority Key Identifier: keyid:6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:62:e3:c3:17:c9:21:51:3b:a9:75:b7:34:0e:c7:41:98:41: 7a:3e:90:3b:1d:25:6a:89:b9:45:7e:43:81:39:17:73:ef:de: 97:36:e4:51:8f:5d:18:8f:26:cb:89:97:41:08:16:8b:49:fa: 92:7e:7f:e8:67:72:2d:c4:82:ed:d1:ec:b0:8a:8a:c7:55:9e: b1:b8:15:6c:ac:60:80:33:36:b5:30:7b:c2:57:be:37:7e:c4: 3c:ec:eb:fa:be:ab:1b:7f:9e:d8:b6:7e:0e:b8:db:6d:5f:ee: 5b:07:1d:12:7d:7e:d5:2b:3e:24:b4:53:41:16:6a:bd:14:c8: 97:e2:05:a1:2a:f1:75:39:3f:ca:08:72:e2:6e:6a:65:69:9c: 9d:82:f5:75:b8:04:e8:7e:cc:8f:84:16:09:95:ec:23:e8:3c: 42:71:9d:97:ab:f2:9b:cf:ab:e9:dc:0b:b9:fb:a3:4c:1f:a1: fb:a4:9f:76:eb:9d:1a:a9:46:4d:d7:20:65:57:94:87:60:90: 5e:1c:b1:78:d5:40:5a:18:cd:d0:93:64:a9:55:ff:59:31:ee: a4:a2:99:12:86:96:28:61:0a:f2:ab:cc:b4:f8:02:8b:53:8d: 5e:e3:15:76:f6:f2:9d:14:de:a6:9e:a2:20:0b:d0:25:0a:f7: 2f:b9:4f:d3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZGDhTD8IM3u84PsZPARk5lDv2SwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEw MzExRjY2ODAeFw0yNjA0MDIxODQ4NTVaFw0yNjA0MDMyMDI0NTVaMDMxMTAvBgNV BAMTKEIyNDYyRTRCM0JCQjU2NTY4NzBDMTUyRjEwQ0RCNTA4N0RCODU2M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVlL2HPLrPRsCIDOm3BARehn+t 7mQmu7P75DcdJItCy9+geL8EY2XKgQACrra5LzIJfNToL1Do0AZ0RhgLZywlt9ik KFbwePOLmpuIGUzfoXUS89LS0PyDr6yaBZm2EDTii8M2oGrg1CHAI5buHt2B/tMr 45o8oXUVu4LhEadREdzRfF43ymbsCvw7ykZAifUonoI7vRwL2cnMXyDRt2lfZFtp 7+iOUSdvDIasm1siWsVkdDTbjhsbtwshXtR9YrnM6aYpZH4BT+VEVaKdMHu/9uwP miPT0bHWXlAupumg9VN0+35+wbxbR0cWm826Gl8EyyK95Ci24F5HW9fOcC81AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUskYuSzu7VlaHDBUvEM21CH24Vj4wHwYDVR0j BBgwFoAUb4mbKfgBrRyKhRXm75cJkQMR9mgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzY3NzU3MS8wLzZGODk5QjI5RjgwMUFEMUM4QTg1MTVFNkVGOTcw OTkxMDMxMUY2NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEwMzExRjY2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2Nzc1NzEvMC82Rjg5OUIyOUY4MDFB RDFDOEE4NTE1RTZFRjk3MDk5MTAzMTFGNjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmLjwxfJIVE7 qXW3NA7HQZhBej6QOx0laom5RX5DgTkXc+/elzbkUY9dGI8my4mXQQgWi0n6kn5/ 6GdyLcSC7dHssIqKx1WesbgVbKxggDM2tTB7wle+N37EPOzr+r6rG3+e2LZ+Drjb bV/uWwcdEn1+1Ss+JLRTQRZqvRTIl+IFoSrxdTk/yghy4m5qZWmcnYL1dbgE6H7M j4QWCZXsI+g8QnGdl6vym8+r6dwLufujTB+h+6SfduudGqlGTdcgZVeUh2CQXhyx eNVAWhjN0JNkqVX/WTHupKKZEoaWKGEK8qvMtPgCi1ONXuMVdvbynRTepp6iIAvQ JQr3L7lP0w== -----END CERTIFICATE-----Generated at Fri Apr 3 13:11:44 2026 by rpki-client