$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft File: 601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft (raw, json) Hash identifier: CFbf4BB7WoT/W0QpqC/6jgGCKV2Yamis9I8UoKoHLKk= Subject key identifier: A7:93:EB:8E:F2:57:D4:02:E7:95:20:90:AC:7C:BC:A4:F8:6F:A3:60 Authority key identifier: 60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E Certificate issuer: /CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E Certificate serial: 3B6DE09D407EC96E279078C88A2E6D0DCC00D876 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft Manifest number: 06 Signing time: Mon 13 Apr 2026 00:49:17 +0000 Manifest this update: Mon 13 Apr 2026 00:44:17 +0000 Manifest next update: Tue 14 Apr 2026 01:46:17 +0000 Files and hashes: 1: 601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl (hash: TI8vhyPXWRaobyIrTMvuXP1itRXBPYby28QLm+3YjA8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 01:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6d:e0:9d:40:7e:c9:6e:27:90:78:c8:8a:2e:6d:0d:cc:00:d8:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E Validity Not Before: Apr 13 00:44:17 2026 GMT Not After : Apr 14 01:46:17 2026 GMT Subject: CN=A793EB8EF257D402E7952090AC7CBCA4F86FA360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d8:cf:33:59:df:45:8b:77:ee:07:1e:d5:54: f9:38:a9:9b:9f:6c:f5:b6:dc:dc:90:5f:16:40:c3: b4:5d:35:7d:9a:32:34:ab:05:aa:2f:bf:dd:03:04: 9d:a5:91:7a:59:7c:ee:0b:ed:87:a3:62:54:69:b9: a6:a6:48:b3:eb:fe:fc:ec:f0:a2:89:2e:c2:55:1b: 5a:e0:7d:38:d9:00:23:68:ee:0e:a9:d5:11:9c:27: 19:3d:7f:7f:bc:b1:3d:8a:7f:5a:d4:b9:be:1f:91: bc:b6:31:7f:72:22:27:9c:39:e0:b2:6b:ab:c1:ed: b1:dc:9c:85:80:30:ff:0d:0b:1e:ee:21:6e:a7:d4: cb:54:d0:33:92:3a:07:b9:94:45:f3:dc:e3:37:ae: f0:8f:94:75:7e:9a:51:59:4a:15:da:f5:44:ad:77: 20:61:5c:ac:c9:78:b3:c3:eb:29:96:92:e4:95:fa: 4b:95:2e:73:a0:30:5b:d4:6e:1e:e1:ab:f1:e6:23: 27:f6:50:56:5a:80:d1:f0:f2:31:91:f6:9b:8c:db: 90:9e:be:67:44:6d:33:f0:4e:5e:48:b0:73:7b:03: c9:a9:96:ba:d6:36:41:65:bf:2e:0f:f6:99:12:9c: 27:fe:7a:ea:eb:c0:a4:c0:06:b3:59:22:25:9f:00: 31:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:93:EB:8E:F2:57:D4:02:E7:95:20:90:AC:7C:BC:A4:F8:6F:A3:60 X509v3 Authority Key Identifier: keyid:60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7f:35:69:6b:48:94:f2:af:fc:89:25:2f:57:a8:e3:21:42: 36:a4:43:69:ad:2e:b0:63:46:ca:dc:3c:a8:b6:80:83:22:54: d2:80:40:37:ff:2c:bc:45:2b:ad:ed:9b:d5:02:51:7c:a6:91: a9:76:d5:d3:70:3c:cf:83:09:5c:12:bb:c9:a0:75:5d:12:15: cc:b3:93:5a:41:85:db:ca:d2:9f:fb:f6:f2:00:09:26:1b:bb: e1:50:4d:60:6f:07:f1:0a:cc:8a:ce:8d:81:3f:f9:87:72:d2: 2b:90:18:f2:2b:be:17:21:46:b6:dc:8f:e8:a7:ba:e6:3c:ea: 6c:97:d8:e3:2f:47:d5:3d:e2:de:b5:af:1c:8d:76:60:7b:4e: 71:43:6a:82:d0:b8:cc:cf:45:d1:c3:4e:bb:29:e7:af:89:cc: e1:90:21:e3:27:4f:ab:a5:62:d9:0b:43:ec:c9:35:5a:91:42: 92:36:92:a1:9c:e9:5e:03:f4:69:4f:0d:ac:72:62:85:f6:1a: 1b:44:a3:55:10:a4:27:d2:2f:66:4a:a1:b8:b4:f2:7b:86:d3: c4:34:44:4f:4d:f2:82:db:20:2b:a9:b6:cf:6b:8e:4f:35:36: bc:a7:94:7d:40:fb:73:f9:b9:68:72:2f:4e:3d:ff:9b:b2:00: 84:90:f7:7a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO23gnUB+yW4nkHjIii5tDcwA2HYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxQTlBOEEzQjUwNUE1RUUyMjgzMjQzRjdBQkU3QTZG NTRFREM0RTAeFw0yNjA0MTMwMDQ0MTdaFw0yNjA0MTQwMTQ2MTdaMDMxMTAvBgNV BAMTKEE3OTNFQjhFRjI1N0Q0MDJFNzk1MjA5MEFDN0NCQ0E0Rjg2RkEzNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2M8zWd9Fi3fuBx7VVPk4qZuf bPW23NyQXxZAw7RdNX2aMjSrBaovv90DBJ2lkXpZfO4L7YejYlRpuaamSLPr/vzs 8KKJLsJVG1rgfTjZACNo7g6p1RGcJxk9f3+8sT2Kf1rUub4fkby2MX9yIiecOeCy a6vB7bHcnIWAMP8NCx7uIW6n1MtU0DOSOge5lEXz3OM3rvCPlHV+mlFZShXa9USt dyBhXKzJeLPD6ymWkuSV+kuVLnOgMFvUbh7hq/HmIyf2UFZagNHw8jGR9puM25Ce vmdEbTPwTl5IsHN7A8mplrrWNkFlvy4P9pkSnCf+eurrwKTABrNZIiWfADFzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUp5PrjvJX1ALnlSCQrHy8pPhvo2AwHwYDVR0j BBgwFoAUYBqaijtQWl7iKDJD96vnpvVO3E4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ5ODg2MzYwMDg5Mzk1NC8wLzYwMUE5QThBM0I1MDVBNUVFMjI4MzI0M0Y3QUJF N0E2RjU0RURDNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjAxQTlBOEEzQjUwNUE1RUUyMjgzMjQzRjdBQkU3QTZGNTRFREM0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0OTg4NjM2MDA4OTM5NTQvMC82MDFBOUE4QTNCNTA1 QTVFRTIyODMyNDNGN0FCRTdBNkY1NEVEQzRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjH81aWtIlPKv /IklL1eo4yFCNqRDaa0usGNGytw8qLaAgyJU0oBAN/8svEUrre2b1QJRfKaRqXbV 03A8z4MJXBK7yaB1XRIVzLOTWkGF28rSn/v28gAJJhu74VBNYG8H8QrMis6NgT/5 h3LSK5AY8iu+FyFGttyP6Ke65jzqbJfY4y9H1T3i3rWvHI12YHtOcUNqgtC4zM9F 0cNOuynnr4nM4ZAh4ydPq6Vi2QtD7Mk1WpFCkjaSoZzpXgP0aU8NrHJihfYaG0Sj VRCkJ9IvZkqhuLTye4bTxDRET03ygtsgK6m2z2uOTzU2vKeUfUD7c/m5aHIvTj3/ m7IAhJD3eg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:00:42 2026 by rpki-client