$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft File: 6F998E710C20D2A9D256034668026243E86F9239.mft (raw, json) Hash identifier: /ALSM8HusWHydny+L74ulI95IrqN3l782rovG2V6Znc= Subject key identifier: A0:01:0E:18:2C:EE:64:0E:B7:FD:0B:09:64:2C:2F:CD:31:49:CC:5E Authority key identifier: 6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 Certificate issuer: /CN=6F998E710C20D2A9D256034668026243E86F9239 Certificate serial: 565B3957F62C843BB12680B0C56F02295F34495B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft Manifest number: 07 Signing time: Sun 12 Apr 2026 22:34:17 +0000 Manifest this update: Sun 12 Apr 2026 22:29:17 +0000 Manifest next update: Mon 13 Apr 2026 23:38:17 +0000 Files and hashes: 1: 323430313a36303a3a2f33322d3332203d3e2030.roa (hash: 71m86gm6yxnGiaqfSvrzEvHzssQUJiLPa3d4KKP4Eyw=) 2: 6F998E710C20D2A9D256034668026243E86F9239.crl (hash: ukJwQnde0EVItEmCMT1nK99jAjXaIyQkax0JpJobyjU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 23:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:5b:39:57:f6:2c:84:3b:b1:26:80:b0:c5:6f:02:29:5f:34:49:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F998E710C20D2A9D256034668026243E86F9239 Validity Not Before: Apr 12 22:29:17 2026 GMT Not After : Apr 13 23:38:17 2026 GMT Subject: CN=A0010E182CEE640EB7FD0B09642C2FCD3149CC5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:4f:5c:35:01:72:d9:e7:a0:ec:30:6f:1a: 4c:57:ae:0f:78:ff:01:1c:02:a0:60:30:78:36:2d: c8:d6:29:dc:6a:d2:4b:a4:8e:09:f3:37:bb:9f:47: 6c:dd:fd:b8:dc:aa:85:77:f7:db:a7:1e:d9:0e:37: 93:d0:15:40:6f:24:eb:3b:c4:3a:e5:d0:d0:a4:89: 64:8a:15:82:43:b9:9a:0e:58:0c:99:f3:57:26:42: c9:c9:2f:b5:fe:14:be:2d:d8:2b:a1:0c:a1:35:61: a9:c7:ea:ef:30:f9:42:ba:01:ea:95:d1:64:45:2f: 68:f7:c3:da:51:4a:d6:d0:8e:91:7e:2a:61:ed:ff: eb:c5:41:60:86:b5:38:ca:08:dc:c7:50:f6:10:99: a0:52:75:1e:f3:09:1f:46:ba:78:1e:99:b2:4d:da: 75:72:f4:70:ec:6e:52:1c:53:d9:2b:77:72:09:88: e6:ea:54:08:52:94:d1:74:1c:8d:4c:41:3b:df:e6: df:4c:c5:c7:7d:ac:f9:8a:a2:87:b9:18:7b:1f:df: fe:bc:83:13:65:8e:ee:b4:5b:f6:a2:b7:79:2c:c6: 50:bb:72:c2:f7:57:c8:9d:9d:75:34:a2:b7:d5:47: 9c:b1:25:6e:31:01:14:18:bc:60:b1:a9:d6:13:d2: 39:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:01:0E:18:2C:EE:64:0E:B7:FD:0B:09:64:2C:2F:CD:31:49:CC:5E X509v3 Authority Key Identifier: keyid:6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e5:29:48:13:1e:2c:1e:6b:95:04:d8:d3:de:3d:e2:36:2d: 48:e9:47:19:c3:2a:63:1d:9e:fc:73:4f:bd:3c:de:0d:7c:18: 57:e1:eb:56:ce:fa:02:4c:3d:b8:5b:61:11:c1:f6:6f:cf:6d: 41:05:c8:09:77:91:94:05:37:84:ba:97:df:73:16:fa:00:2b: 1f:a1:cf:bf:42:3c:91:ae:95:85:9f:55:b9:6f:f3:a2:60:fb: 5f:91:18:cd:0e:f3:6c:57:cd:e6:34:05:5b:8d:47:94:f5:ed: 19:9e:d1:c8:5a:35:d5:52:fb:be:b6:11:b0:81:0e:dd:bb:f6: 2c:6f:54:7f:85:5f:4b:0b:cc:0a:9b:ee:03:34:7e:c4:da:15: 27:04:c4:5d:4b:90:7a:ee:1e:cd:58:b9:1e:4f:59:5f:62:31: a8:6f:58:16:57:29:d9:cc:97:64:d9:91:48:9e:15:50:f0:74: 35:25:93:63:b3:6a:48:9d:53:20:66:64:1f:cd:ee:14:a9:46: b0:90:cd:ff:2d:d4:1d:a6:1f:13:96:2c:ff:14:79:7b:69:e7: b1:46:9f:01:86:42:47:40:8b:fb:af:5c:fe:12:08:ce:bc:95: 4c:ea:ef:77:ee:3f:a5:5f:e3:a0:44:51:d5:df:75:22:be:e9: 89:c2:d7:c8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVls5V/YshDuxJoCwxW8CKV80SVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNF ODZGOTIzOTAeFw0yNjA0MTIyMjI5MTdaFw0yNjA0MTMyMzM4MTdaMDMxMTAvBgNV BAMTKEEwMDEwRTE4MkNFRTY0MEVCN0ZEMEIwOTY0MkMyRkNEMzE0OUNDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCPU9cNQFy2eeg7DBvGkxXrg94 /wEcAqBgMHg2LcjWKdxq0kukjgnzN7ufR2zd/bjcqoV399unHtkON5PQFUBvJOs7 xDrl0NCkiWSKFYJDuZoOWAyZ81cmQsnJL7X+FL4t2CuhDKE1YanH6u8w+UK6AeqV 0WRFL2j3w9pRStbQjpF+KmHt/+vFQWCGtTjKCNzHUPYQmaBSdR7zCR9GungembJN 2nVy9HDsblIcU9krd3IJiObqVAhSlNF0HI1MQTvf5t9Mxcd9rPmKooe5GHsf3/68 gxNlju60W/ait3ksxlC7csL3V8idnXU0orfVR5yxJW4xARQYvGCxqdYT0jn1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoAEOGCzuZA63/QsJZCwvzTFJzF4wHwYDVR0j BBgwFoAUb5mOcQwg0qnSVgNGaAJiQ+hvkjkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU0NzY1NTk1NjEwMzE2OS8wLzZGOTk4RTcxMEMyMEQyQTlEMjU2MDM0NjY4MDI2 MjQzRTg2RjkyMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNFODZGOTIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NDc2NTU5NTYxMDMxNjkvMC82Rjk5OEU3MTBDMjBE MkE5RDI1NjAzNDY2ODAyNjI0M0U4NkY5MjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieUpSBMeLB5r lQTY09494jYtSOlHGcMqYx2e/HNPvTzeDXwYV+HrVs76Akw9uFthEcH2b89tQQXI CXeRlAU3hLqX33MW+gArH6HPv0I8ka6VhZ9VuW/zomD7X5EYzQ7zbFfN5jQFW41H lPXtGZ7RyFo11VL7vrYRsIEO3bv2LG9Uf4VfSwvMCpvuAzR+xNoVJwTEXUuQeu4e zVi5Hk9ZX2IxqG9YFlcp2cyXZNmRSJ4VUPB0NSWTY7NqSJ1TIGZkH83uFKlGsJDN /y3UHaYfE5Ys/xR5e2nnsUafAYZCR0CL+69c/hIIzryVTOrvd+4/pV/joERR1d91 Ir7picLXyA== -----END CERTIFICATE-----Generated at Mon Apr 13 11:01:40 2026 by rpki-client