$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft File: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft (raw, json) Hash identifier: U+iRfnZRKxufndNkCVueVa6XdE3bn7ke4VNHcNZ6rIo= Subject key identifier: 44:71:4A:78:19:AB:33:75:B0:C0:2E:1F:99:3D:92:25:0B:98:DD:DB Authority key identifier: 6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D Certificate issuer: /CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D Certificate serial: 6395D9DCF0F295A453F49E855AC6DC3990C84A72 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft Manifest number: 02 Signing time: Mon 13 Apr 2026 06:22:29 +0000 Manifest this update: Mon 13 Apr 2026 06:17:29 +0000 Manifest next update: Tue 14 Apr 2026 07:49:29 +0000 Files and hashes: 1: 3130332e34342e3139382e302f32342d3234203d3e2034383030.roa (hash: 6dqpVUqXBgLgk1fCILtRSZoIidor7YhnbVbc5fHfQhk=) 2: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl (hash: v17CHvYQaYF9DB52HTnzRjqdUDYgcBdiWpzT69dA8Qg=) 3: 3130332e34342e3137362e302f32332d3233203d3e2034383437.roa (hash: ae7SUgq9OA/NLExuOxlNbHZGMMv09rTQmfolmacGeB4=) 4: 3130332e34342e3137382e302f32332d3233203d3e2034383437.roa (hash: lSEivQpgfyTwattyz5XGR7SBQ4DIJ5haeZxfSmZXjnc=) 5: 34332e3232352e3231362e302f32322d3232203d3e2034383437.roa (hash: j/eV+lOtMaJE7zLazg78nWoyQGsOhGQyTahosxccrn8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:95:d9:dc:f0:f2:95:a4:53:f4:9e:85:5a:c6:dc:39:90:c8:4a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D Validity Not Before: Apr 13 06:17:29 2026 GMT Not After : Apr 14 07:49:29 2026 GMT Subject: CN=44714A7819AB3375B0C02E1F993D92250B98DDDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:7b:d9:33:14:5f:45:98:7a:54:e4:f8:28: 0d:fd:8d:f2:60:ac:a9:05:50:c4:e5:bd:ed:6f:eb: 5f:86:c1:09:28:18:1d:dd:28:3a:20:e4:08:32:15: 58:ff:13:da:e4:0a:ab:21:f4:1a:fa:6e:09:b5:2e: 27:91:15:87:0c:09:00:07:7d:e7:a4:dd:4b:26:a6: b1:00:ab:10:6a:5a:9c:b6:41:81:bf:c7:e3:d4:4a: 1b:cc:26:4a:d8:39:59:1b:fb:83:78:c6:db:b3:0e: ee:ca:e8:d1:55:43:2e:55:d1:c6:f8:4e:30:8e:80: 9c:4c:eb:a3:e2:6d:84:07:15:c0:06:90:1e:79:4c: 6d:65:c9:7f:f5:2d:36:a6:ae:c5:8f:87:e7:d2:0c: 14:94:01:a5:7a:29:36:4b:6c:52:ab:16:3c:10:20: ec:36:ca:56:1a:db:a2:13:af:6e:18:81:0f:bf:91: 11:8c:af:be:06:49:4f:41:7b:19:e8:99:23:1a:3f: fe:8e:6b:c8:df:c6:58:38:68:68:8a:80:96:fa:7e: 4a:eb:e8:04:c9:99:72:7e:77:27:13:9e:f9:c1:f9: 03:24:8d:3b:4b:b6:94:18:33:38:f3:f7:d4:14:d4: eb:b8:70:34:9e:e7:be:6a:3b:62:bd:b5:cb:7a:a0: 40:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:71:4A:78:19:AB:33:75:B0:C0:2E:1F:99:3D:92:25:0B:98:DD:DB X509v3 Authority Key Identifier: keyid:6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:98:1a:80:eb:3c:a0:49:bf:21:5e:44:f7:f0:f9:81:50:08: 49:2c:51:b6:cd:cd:9f:ec:9f:1a:a5:ec:2f:18:fb:41:ca:f3: 83:60:4f:88:12:29:72:b0:0f:c8:d5:74:39:3e:e6:df:17:e6: 48:e8:75:56:f1:bc:61:b3:e0:48:90:90:23:cb:9d:8a:a0:86: b4:f0:12:42:20:0e:57:c5:1d:a9:61:15:2e:36:48:01:d2:7e: 7f:0a:56:ac:9c:08:cb:23:05:39:a9:dd:30:9a:f2:d6:a0:69: 65:11:06:30:68:a2:de:f7:4f:f0:17:d9:f4:b3:63:dd:0c:f4: a3:24:6f:01:6a:f5:b6:b1:90:9b:14:f5:2a:49:15:d3:12:37: 3c:5a:4a:8e:b0:b6:58:e0:a3:04:ee:de:ce:29:23:1a:d5:6f: 86:05:a4:81:46:a2:92:76:d4:37:38:99:83:17:e6:89:72:8a: 81:9f:c5:01:13:bf:fe:c5:19:6c:89:a7:d2:dd:cf:d3:d6:18: da:32:ad:16:28:61:b8:3e:3b:77:1c:48:50:14:99:46:65:cd: e1:db:e2:04:db:be:b5:ca:1c:bb:b7:7c:e5:5c:9d:b9:87:a2: a9:b9:98:04:bb:46:e1:c3:56:22:cb:92:e3:9e:b7:34:86:fc: 8a:b2:54:1b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUY5XZ3PDylaRT9J6FWsbcOZDISnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCN0JFQzJGMjUxQjIwOUY1NzBERDE1NkZFMTU3NEI2 RDAzMEIzRDAeFw0yNjA0MTMwNjE3MjlaFw0yNjA0MTQwNzQ5MjlaMDMxMTAvBgNV BAMTKDQ0NzE0QTc4MTlBQjMzNzVCMEMwMkUxRjk5M0Q5MjI1MEI5OEREREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCitXvZMxRfRZh6VOT4KA39jfJg rKkFUMTlve1v61+GwQkoGB3dKDog5AgyFVj/E9rkCqsh9Br6bgm1LieRFYcMCQAH feek3UsmprEAqxBqWpy2QYG/x+PUShvMJkrYOVkb+4N4xtuzDu7K6NFVQy5V0cb4 TjCOgJxM66PibYQHFcAGkB55TG1lyX/1LTamrsWPh+fSDBSUAaV6KTZLbFKrFjwQ IOw2ylYa26ITr24YgQ+/kRGMr74GSU9BexnomSMaP/6Oa8jfxlg4aGiKgJb6fkrr 6ATJmXJ+dycTnvnB+QMkjTtLtpQYMzjz99QU1Ou4cDSe575qO2K9tct6oEAvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURHFKeBmrM3WwwC4fmT2SJQuY3dswHwYDVR0j BBgwFoAUbbe+wvJRsgn1cN0Vb+FXS20DCz0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk1NTc4NTc1MTQ2MTg5MS8wLzZEQjdCRUMyRjI1MUIyMDlGNTcwREQxNTZGRTE1 NzRCNkQwMzBCM0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkRCN0JFQzJGMjUxQjIwOUY1NzBERDE1NkZFMTU3NEI2RDAzMEIzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NTU3ODU3NTE0NjE4OTEvMC82REI3QkVDMkYyNTFC MjA5RjU3MEREMTU2RkUxNTc0QjZEMDMwQjNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpgagOs8oEm/ IV5E9/D5gVAISSxRts3Nn+yfGqXsLxj7Qcrzg2BPiBIpcrAPyNV0OT7m3xfmSOh1 VvG8YbPgSJCQI8udiqCGtPASQiAOV8UdqWEVLjZIAdJ+fwpWrJwIyyMFOandMJry 1qBpZREGMGii3vdP8BfZ9LNj3Qz0oyRvAWr1trGQmxT1KkkV0xI3PFpKjrC2WOCj BO7ezikjGtVvhgWkgUaiknbUNziZgxfmiXKKgZ/FARO//sUZbImn0t3P09YY2jKt FihhuD47dxxIUBSZRmXN4dviBNu+tcocu7d85VyduYeiqbmYBLtG4cNWIsuS4563 NIb8irJUGw== -----END CERTIFICATE-----Generated at Mon Apr 13 11:05:53 2026 by rpki-client