$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.mft File: 6741F95ED93FC3D5B5930C845F43187AE27BCF32.mft (raw, json) Hash identifier: 7pR7YCh4/irOEFIkfkTHiTaIF4NlteL0m/+8djbpCss= Subject key identifier: 59:78:1A:BB:D6:70:3C:EA:57:09:97:89:EB:4F:0A:4B:5E:10:F7:10 Authority key identifier: 67:41:F9:5E:D9:3F:C3:D5:B5:93:0C:84:5F:43:18:7A:E2:7B:CF:32 Certificate issuer: /CN=6741F95ED93FC3D5B5930C845F43187AE27BCF32 Certificate serial: 3A5E868DA415F9F4ED222C09174708A834C9CEEF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6741F95ED93FC3D5B5930C845F43187AE27BCF32.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.mft Manifest number: 09 Signing time: Mon 13 Apr 2026 07:24:17 +0000 Manifest this update: Mon 13 Apr 2026 07:19:17 +0000 Manifest next update: Tue 14 Apr 2026 10:01:17 +0000 Files and hashes: 1: 6741F95ED93FC3D5B5930C845F43187AE27BCF32.crl (hash: J+8ZFxukvKPgPi28tTYSr++ch8Aje3zZiFlj5HNzE38=) 2: 323430333a633938303a3a2f33322d3332203d3e203633353631.roa (hash: LnEW+MqErgFvFR2MVyYR/WeWy4hulmeFDFQj7VfGAzM=) 3: 323430333a633938303a3a2f33322d3332203d3e203338323833.roa (hash: 9/c2HzbjtacCy3np4XyohJgt2y8iOEqczikxy/gpCKY=) 4: 3130332e3230332e3231362e302f32322d3232203d3e203633353631.roa (hash: 09DSZA+1bEtxsfBALT2vanyOFeWgc0ng9NXKOzy5OqU=) 5: 3230322e36312e38382e302f32322d3232203d3e203633353631.roa (hash: 8kvjgfrcYJstXTBLPLOOxWgIOcKY0Jy8j6+rKlr++00=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.crl rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6741F95ED93FC3D5B5930C845F43187AE27BCF32.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5e:86:8d:a4:15:f9:f4:ed:22:2c:09:17:47:08:a8:34:c9:ce:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6741F95ED93FC3D5B5930C845F43187AE27BCF32 Validity Not Before: Apr 13 07:19:17 2026 GMT Not After : Apr 14 10:01:17 2026 GMT Subject: CN=59781ABBD6703CEA57099789EB4F0A4B5E10F710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:5e:c4:6e:cb:b4:b3:cf:76:2a:00:29:ef: 99:c8:6b:e1:9f:da:e9:1a:0d:05:c6:5b:7c:c1:12: 17:a9:50:ad:d3:4b:aa:26:63:ee:f7:9a:db:1f:a9: 2b:73:29:9e:bc:c8:44:67:1b:03:84:aa:94:78:b1: fc:fd:be:bb:fa:0d:c1:7d:70:13:24:98:b5:a9:d1: 86:0a:8a:52:5b:87:9f:50:ea:b9:58:14:b4:b7:d6: c0:af:60:c4:cf:bd:66:52:02:bf:be:76:d7:f2:9f: dd:d7:b3:5c:fc:0f:a8:0c:3a:87:64:b0:a9:ef:d7: 40:ea:25:20:cc:eb:91:e5:67:ca:b5:ff:bc:55:4a: 1d:56:d9:d8:e1:7d:c1:ed:1c:ce:3a:af:0a:21:00: 29:f5:d1:ab:30:e0:51:ca:31:de:42:86:e9:fb:de: b7:91:af:22:9c:4a:31:ba:8b:81:68:6f:36:ef:0c: 40:eb:d9:66:9b:af:41:58:70:92:eb:68:40:18:99: cd:05:73:85:10:e0:6f:a0:ee:60:9d:11:18:2d:4b: 89:c9:00:9c:92:41:4d:67:66:48:9b:fe:b4:1a:fd: ae:93:7f:b8:b5:e4:84:82:06:4d:d1:67:eb:42:f1: 76:a6:83:d6:48:83:d3:b8:8f:e0:6d:56:13:d8:64: 35:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:78:1A:BB:D6:70:3C:EA:57:09:97:89:EB:4F:0A:4B:5E:10:F7:10 X509v3 Authority Key Identifier: keyid:67:41:F9:5E:D9:3F:C3:D5:B5:93:0C:84:5F:43:18:7A:E2:7B:CF:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6741F95ED93FC3D5B5930C845F43187AE27BCF32.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094151769384026113/0/6741F95ED93FC3D5B5930C845F43187AE27BCF32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:e4:0f:df:4d:3b:8b:1d:14:68:cd:80:88:01:7b:73:cc:3b: 07:58:6e:79:84:73:7a:e8:bb:2d:c3:15:5e:f9:e9:78:3d:9d: 92:ca:df:b2:aa:9f:f9:60:7a:8d:05:34:2d:93:23:b2:5d:83: 64:c4:58:12:c2:b6:43:ea:b6:ea:f6:44:74:56:52:43:f0:b6: 19:71:13:42:5f:c0:6c:a5:e7:e2:22:74:3a:19:94:c1:51:ba: 23:85:5c:cc:1d:a9:67:7c:e2:07:d6:dd:e0:dc:3e:07:6a:3f: ba:65:bb:0e:17:21:eb:1a:70:3a:2d:49:64:66:3f:59:46:ec: e4:1e:82:d2:61:04:50:bf:9b:bd:ea:a0:70:5c:a4:84:b3:c0: d5:2d:97:37:28:e2:cb:82:00:a4:43:7d:c3:37:0b:6a:10:96: d7:4e:54:4f:4c:1c:22:6f:2b:1d:70:43:b1:15:83:d6:7f:a5: e2:2b:2a:78:95:ac:98:d8:67:b1:e1:04:94:3f:5d:ba:76:d4: 63:5a:99:23:9c:6e:eb:9d:30:b1:d0:37:c2:6c:61:d1:cf:ef: 6c:cd:58:e0:94:e2:49:d7:4f:95:43:bb:ee:35:47:fe:95:2d: ce:ef:c5:49:28:16:f9:43:c5:53:ee:ce:5d:69:3d:b5:b0:e1: 07:9b:ed:8e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOl6GjaQV+fTtIiwJF0cIqDTJzu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc0MUY5NUVEOTNGQzNENUI1OTMwQzg0NUY0MzE4N0FF MjdCQ0YzMjAeFw0yNjA0MTMwNzE5MTdaFw0yNjA0MTQxMDAxMTdaMDMxMTAvBgNV BAMTKDU5NzgxQUJCRDY3MDNDRUE1NzA5OTc4OUVCNEYwQTRCNUUxMEY3MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1nl7Ebsu0s892KgAp75nIa+Gf 2ukaDQXGW3zBEhepUK3TS6omY+73mtsfqStzKZ68yERnGwOEqpR4sfz9vrv6DcF9 cBMkmLWp0YYKilJbh59Q6rlYFLS31sCvYMTPvWZSAr++dtfyn93Xs1z8D6gMOodk sKnv10DqJSDM65HlZ8q1/7xVSh1W2djhfcHtHM46rwohACn10asw4FHKMd5Chun7 3reRryKcSjG6i4FobzbvDEDr2Wabr0FYcJLraEAYmc0Fc4UQ4G+g7mCdERgtS4nJ AJySQU1nZkib/rQa/a6Tf7i15ISCBk3RZ+tC8Xamg9ZIg9O4j+BtVhPYZDXfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWXgau9ZwPOpXCZeJ608KS14Q9xAwHwYDVR0j BBgwFoAUZ0H5Xtk/w9W1kwyEX0MYeuJ7zzIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDE1MTc2OTM4NDAyNjExMy8wLzY3NDFGOTVFRDkzRkMzRDVCNTkzMEM4NDVGNDMx ODdBRTI3QkNGMzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjc0MUY5NUVEOTNGQzNENUI1OTMwQzg0NUY0MzE4N0FFMjdCQ0YzMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQxNTE3NjkzODQwMjYxMTMvMC82NzQxRjk1RUQ5M0ZD M0Q1QjU5MzBDODQ1RjQzMTg3QUUyN0JDRjMyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApeQP3007ix0U aM2AiAF7c8w7B1hueYRzeui7LcMVXvnpeD2dksrfsqqf+WB6jQU0LZMjsl2DZMRY EsK2Q+q26vZEdFZSQ/C2GXETQl/AbKXn4iJ0OhmUwVG6I4VczB2pZ3ziB9bd4Nw+ B2o/umW7Dhch6xpwOi1JZGY/WUbs5B6C0mEEUL+bveqgcFykhLPA1S2XNyjiy4IA pEN9wzcLahCW105UT0wcIm8rHXBDsRWD1n+l4isqeJWsmNhnseEElD9dunbUY1qZ I5xu650wsdA3wmxh0c/vbM1Y4JTiSddPlUO77jVH/pUtzu/FSSgW+UPFU+7OXWk9 tbDhB5vtjg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:00:12 2026 by rpki-client