$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft File: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft (raw, json) Hash identifier: zFtYE6/7L4qrlCjMa27YaMWdsVM6/Ai7/ux2T9b69dM= Subject key identifier: 02:33:D0:DF:1C:C9:57:5A:7C:5F:8C:9A:82:C2:09:3C:49:4A:48:45 Authority key identifier: 6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72 Certificate issuer: /CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72 Certificate serial: 12B0525D0390DCA97C4350DC2C0CD27DE6564815 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft Manifest number: 0B Signing time: Mon 13 Apr 2026 06:14:17 +0000 Manifest this update: Mon 13 Apr 2026 06:09:17 +0000 Manifest next update: Tue 14 Apr 2026 08:23:17 +0000 Files and hashes: 1: 323430333a356563303a3a2f33322d3332203d3e2030.roa (hash: pn5P8/momGxXTFfknwO8tuClvccGh1zTNEWhwlA2qwo=) 2: 3130332e3133392e3231322e302f32332d3233203d3e2034383437.roa (hash: e6GCsFVGGlp6eECqnRxZdqJUWd+iVzHNj1jhEWNEqCA=) 3: 3130332e3130352e3230302e302f32322d3232203d3e20313337373634.roa (hash: 9HqYd5QMLVVaCAE62rtliSynNO+9vRjsbXyw6XlrJ7M=) 4: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl (hash: 53Y2uBS6PFA5VDqBhNvfIFrbbXDvK2n/EzbfcB2lsCo=) 5: 3130332e39382e34302e302f32322d3232203d3e2030.roa (hash: e8iEGGHTv4+FgS9wkri7Y69nnBMxrR4pBM+NO8acXaE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:b0:52:5d:03:90:dc:a9:7c:43:50:dc:2c:0c:d2:7d:e6:56:48:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72 Validity Not Before: Apr 13 06:09:17 2026 GMT Not After : Apr 14 08:23:17 2026 GMT Subject: CN=0233D0DF1CC9575A7C5F8C9A82C2093C494A4845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:90:e2:37:b8:0e:81:2f:f4:b2:dd:99:9d:44: 92:07:35:fc:34:c2:64:c8:e2:d0:26:07:b0:f9:6c: fa:84:51:c2:45:96:4e:ce:e8:5c:9b:fe:33:92:22: 18:bd:84:05:34:85:e6:cd:05:86:a9:9b:e3:cd:3e: 56:9c:54:a5:92:37:ce:f4:31:98:9a:e7:8a:28:7a: ee:f0:43:00:8c:cb:98:58:4e:00:8f:f8:4b:d2:c0: d5:bc:85:8b:cc:e8:32:6d:35:50:97:40:d2:78:9f: 06:d9:dd:ed:1e:53:f9:e9:1c:75:b5:c9:cc:f1:55: 05:64:f4:9c:c9:4b:c3:b2:da:35:15:30:8b:57:93: ff:8f:8a:61:b5:b9:4a:b1:c7:c7:01:fc:94:a3:37: 8a:67:00:09:cd:e0:e2:18:b1:3a:4a:2d:14:fe:8b: ff:f6:62:47:f1:16:d0:09:4c:26:74:a2:ae:32:80: dd:e5:45:51:ba:84:a2:0c:1f:a6:0c:5c:52:b3:99: 38:ee:8f:ca:a7:6f:65:2d:df:9c:6d:ea:8d:75:17: d3:73:25:6f:bb:8b:32:13:4c:e3:57:9c:02:c4:5e: 10:66:a8:e8:4b:d2:7c:4c:02:21:a2:cb:78:4c:06: bf:1b:17:28:60:77:b9:b7:2b:db:83:da:3f:b4:44: be:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:33:D0:DF:1C:C9:57:5A:7C:5F:8C:9A:82:C2:09:3C:49:4A:48:45 X509v3 Authority Key Identifier: keyid:6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:65:42:30:fd:39:f8:46:b5:c7:b7:ad:0f:06:af:42:7f:5f: 98:93:ad:b4:50:4f:38:f6:1c:ba:b5:7b:80:02:34:b5:30:6b: 8d:5f:a4:77:60:6b:7e:46:9f:ab:41:42:24:90:9a:be:35:0d: d5:49:92:ea:00:9c:5f:32:0b:01:f5:bb:6d:16:99:92:f2:6b: 20:68:6a:b2:a8:3f:8f:7c:98:25:ea:50:4d:38:07:99:fe:9f: d2:ea:22:31:04:60:32:55:65:9b:62:58:e8:cc:2e:24:5a:e3: cc:51:db:3e:36:86:d9:7e:4a:cf:1f:cd:77:15:50:2a:fb:85: dd:8d:c5:ab:1b:77:21:dd:fd:24:45:ed:f6:6d:fc:04:2d:cc: 59:68:e2:d9:af:96:7f:cb:38:5c:36:36:c3:c1:5a:b0:fc:f0: 5c:5e:c7:d5:74:bb:46:b5:1f:02:ec:af:b9:66:e5:ce:a1:9c: 5d:ec:82:89:22:34:be:dc:82:16:02:7a:f7:63:37:a7:40:03: 2f:9e:9f:e8:9f:77:45:90:82:7a:e7:9a:16:d8:11:da:a0:48: 51:52:c4:7d:21:0f:ce:e2:a7:e7:f3:b5:c0:9a:ea:3c:fe:ad: 53:c4:bf:18:a2:89:2d:f0:b4:b6:6a:5a:0b:af:de:ea:af:a4: 87:b7:a0:99 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUErBSXQOQ3Kl8Q1DcLAzSfeZWSBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYz NjUzNkU3MjAeFw0yNjA0MTMwNjA5MTdaFw0yNjA0MTQwODIzMTdaMDMxMTAvBgNV BAMTKDAyMzNEMERGMUNDOTU3NUE3QzVGOEM5QTgyQzIwOTNDNDk0QTQ4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJkOI3uA6BL/Sy3ZmdRJIHNfw0 wmTI4tAmB7D5bPqEUcJFlk7O6Fyb/jOSIhi9hAU0hebNBYapm+PNPlacVKWSN870 MZia54ooeu7wQwCMy5hYTgCP+EvSwNW8hYvM6DJtNVCXQNJ4nwbZ3e0eU/npHHW1 yczxVQVk9JzJS8Oy2jUVMItXk/+PimG1uUqxx8cB/JSjN4pnAAnN4OIYsTpKLRT+ i//2YkfxFtAJTCZ0oq4ygN3lRVG6hKIMH6YMXFKzmTjuj8qnb2Ut35xt6o11F9Nz JW+7izITTONXnALEXhBmqOhL0nxMAiGiy3hMBr8bFyhgd7m3K9uD2j+0RL7pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAjPQ3xzJV1p8X4yagsIJPElKSEUwHwYDVR0j BBgwFoAUa4a9P6D7Cze6xk1sjS2fZjZTbnIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1MTY3MDg1Mjk0Mzg3My8wLzZCODZCRDNGQTBGQjBCMzdCQUM2NEQ2QzhEMkQ5 RjY2MzY1MzZFNzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYzNjUzNkU3Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTE2NzA4NTI5NDM4NzMvMC82Qjg2QkQzRkEwRkIw QjM3QkFDNjRENkM4RDJEOUY2NjM2NTM2RTcyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2VCMP05+Ea1 x7etDwavQn9fmJOttFBPOPYcurV7gAI0tTBrjV+kd2Brfkafq0FCJJCavjUN1UmS 6gCcXzILAfW7bRaZkvJrIGhqsqg/j3yYJepQTTgHmf6f0uoiMQRgMlVlm2JY6Mwu JFrjzFHbPjaG2X5Kzx/NdxVQKvuF3Y3Fqxt3Id39JEXt9m38BC3MWWji2a+Wf8s4 XDY2w8FasPzwXF7H1XS7RrUfAuyvuWblzqGcXeyCiSI0vtyCFgJ692M3p0ADL56f 6J93RZCCeueaFtgR2qBIUVLEfSEPzuKn5/O1wJrqPP6tU8S/GKKJLfC0tmpaC6/e 6q+kh7egmQ== -----END CERTIFICATE-----Generated at Mon Apr 13 11:05:09 2026 by rpki-client