$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft File: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft (raw, json) Hash identifier: 72XyGXmv9PySh1OgvnpmZdH0p9dF8F55ZUnTxdYOq6M= Subject key identifier: AC:37:5F:1D:A8:F9:72:F1:4C:6A:6B:2E:34:A5:F9:76:0B:12:D9:59 Authority key identifier: 6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D Certificate issuer: /CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D Certificate serial: 0AE0644915C00C03D45CE0DBA1EAB0503DBB1CA3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft Manifest number: 3F Signing time: Fri 29 May 2026 11:07:48 +0000 Manifest this update: Fri 29 May 2026 11:02:48 +0000 Manifest next update: Sat 30 May 2026 11:32:48 +0000 Files and hashes: 1: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl (hash: 1GqJ6DOrLF5M+mi7PCYa72P2zyDzPK2MUVKViulCpWg=) 2: 3130332e34342e3137362e302f32332d3233203d3e2034383437.roa (hash: ae7SUgq9OA/NLExuOxlNbHZGMMv09rTQmfolmacGeB4=) 3: 3130332e34342e3137382e302f32332d3233203d3e2034383437.roa (hash: lSEivQpgfyTwattyz5XGR7SBQ4DIJ5haeZxfSmZXjnc=) 4: 3130332e34342e3139382e302f32342d3234203d3e2034383030.roa (hash: 6dqpVUqXBgLgk1fCILtRSZoIidor7YhnbVbc5fHfQhk=) 5: 34332e3232352e3231362e302f32322d3232203d3e2034383437.roa (hash: j/eV+lOtMaJE7zLazg78nWoyQGsOhGQyTahosxccrn8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 11:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e0:64:49:15:c0:0c:03:d4:5c:e0:db:a1:ea:b0:50:3d:bb:1c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D Validity Not Before: May 29 11:02:48 2026 GMT Not After : May 30 11:32:48 2026 GMT Subject: CN=AC375F1DA8F972F14C6A6B2E34A5F9760B12D959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:5a:da:34:7c:bf:1d:fd:fd:32:2f:a6:70: 43:12:a4:48:c2:d6:fb:ce:64:89:ca:40:9f:ca:de: 64:a1:ee:ea:90:a4:69:ee:88:ac:bb:bd:d3:65:d1: 5e:99:d9:bc:9a:65:c3:d3:d9:4c:40:ad:19:a6:33: c2:fb:7a:bf:21:e9:44:6d:49:26:6a:f6:10:08:4f: c6:42:a9:35:96:07:e7:f4:d5:9a:e9:20:8b:83:dc: 8e:5e:4b:3f:ed:b5:7c:81:5b:2e:03:49:d2:49:ac: 54:59:04:39:a4:27:7c:8a:85:75:f1:00:ef:9f:8f: 39:f1:4a:21:7b:07:65:6b:cb:61:c3:eb:e7:f1:37: 28:dc:9e:5f:9f:4c:dc:07:39:1e:83:db:25:fa:d3: 04:11:74:08:a7:a1:9b:26:d4:4f:f9:35:22:e7:84: cf:10:e6:a1:c9:98:9f:83:e9:8f:e9:3b:8b:ee:ce: cc:a5:96:f6:32:87:be:10:09:ad:61:6d:d5:2b:b6: 0a:3d:0a:eb:8d:64:6b:17:bc:7b:d2:93:66:b4:56: 12:62:f8:67:66:0a:1e:32:33:9e:b9:6c:32:7e:e0: f4:e9:de:27:f8:d4:62:e4:5f:f0:bf:29:fc:fc:66: 4e:35:ed:aa:80:52:61:f6:c3:49:4c:84:56:d3:88: 5a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:37:5F:1D:A8:F9:72:F1:4C:6A:6B:2E:34:A5:F9:76:0B:12:D9:59 X509v3 Authority Key Identifier: keyid:6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a6:c9:f1:d3:c4:b7:12:93:4a:95:00:b9:4c:46:26:ba:12: 66:15:6a:34:49:7d:4f:18:b3:9e:37:10:3b:a8:0c:e3:16:90: a0:48:ba:31:fd:b9:44:c6:b8:bc:18:2a:c8:e5:19:55:7c:6f: 2d:81:34:40:bd:d1:68:9d:7a:7d:cf:33:e0:28:15:93:a1:37: 34:6a:75:b3:90:82:50:21:10:16:cc:d5:53:24:15:4b:5a:b2: 01:f8:5b:6f:2a:7d:7d:9c:d6:aa:9b:fe:b6:e4:d5:d0:68:80: e3:fa:e4:eb:c6:83:63:c7:6b:75:4b:77:89:ed:cf:3a:68:81: d6:cf:3d:47:35:08:03:a5:e0:d6:0e:00:71:62:51:4f:58:1e: 2b:89:85:22:32:52:e0:46:9d:b4:f7:04:18:cb:c5:82:67:5f: 07:f5:f8:c2:b5:26:31:c7:16:7b:d8:b9:d9:ca:05:84:47:4a: 51:3e:e5:6f:0c:7c:05:df:db:c5:08:9c:48:98:44:37:2a:5b: 22:36:82:3c:de:44:72:05:63:c4:ab:d6:83:55:f1:ba:06:37: 58:05:19:16:49:22:55:85:e3:66:d1:2b:00:2c:c6:07:22:29: f2:a5:21:61:6e:10:47:41:ce:a5:10:5f:a3:c7:1c:07:02:ac: e7:9a:82:00 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCuBkSRXADAPUXODboeqwUD27HKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCN0JFQzJGMjUxQjIwOUY1NzBERDE1NkZFMTU3NEI2 RDAzMEIzRDAeFw0yNjA1MjkxMTAyNDhaFw0yNjA1MzAxMTMyNDhaMDMxMTAvBgNV BAMTKEFDMzc1RjFEQThGOTcyRjE0QzZBNkIyRTM0QTVGOTc2MEIxMkQ5NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ElraNHy/Hf39Mi+mcEMSpEjC 1vvOZInKQJ/K3mSh7uqQpGnuiKy7vdNl0V6Z2byaZcPT2UxArRmmM8L7er8h6URt SSZq9hAIT8ZCqTWWB+f01ZrpIIuD3I5eSz/ttXyBWy4DSdJJrFRZBDmkJ3yKhXXx AO+fjznxSiF7B2Vry2HD6+fxNyjcnl+fTNwHOR6D2yX60wQRdAinoZsm1E/5NSLn hM8Q5qHJmJ+D6Y/pO4vuzsyllvYyh74QCa1hbdUrtgo9CuuNZGsXvHvSk2a0VhJi +GdmCh4yM565bDJ+4PTp3if41GLkX/C/Kfz8Zk417aqAUmH2w0lMhFbTiFpVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrDdfHaj5cvFMamsuNKX5dgsS2VkwHwYDVR0j BBgwFoAUbbe+wvJRsgn1cN0Vb+FXS20DCz0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk1NTc4NTc1MTQ2MTg5MS8wLzZEQjdCRUMyRjI1MUIyMDlGNTcwREQxNTZGRTE1 NzRCNkQwMzBCM0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkRCN0JFQzJGMjUxQjIwOUY1NzBERDE1NkZFMTU3NEI2RDAzMEIzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NTU3ODU3NTE0NjE4OTEvMC82REI3QkVDMkYyNTFC MjA5RjU3MEREMTU2RkUxNTc0QjZEMDMwQjNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6bJ8dPEtxKT SpUAuUxGJroSZhVqNEl9TxiznjcQO6gM4xaQoEi6Mf25RMa4vBgqyOUZVXxvLYE0 QL3RaJ16fc8z4CgVk6E3NGp1s5CCUCEQFszVUyQVS1qyAfhbbyp9fZzWqpv+tuTV 0GiA4/rk68aDY8drdUt3ie3POmiB1s89RzUIA6Xg1g4AcWJRT1geK4mFIjJS4Ead tPcEGMvFgmdfB/X4wrUmMccWe9i52coFhEdKUT7lbwx8Bd/bxQicSJhENypbIjaC PN5EcgVjxKvWg1XxugY3WAUZFkkiVYXjZtErACzGByIp8qUhYW4QR0HOpRBfo8cc BwKs55qCAA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:26 2026 by rpki-client