$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft File: 6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft (raw, json) Hash identifier: 83ffm32Z6OTMkgL1jMlhnFyw9nIdBoOIS777nf/FxYs= Subject key identifier: FB:05:62:B8:02:59:A9:37:FA:17:08:23:CB:06:14:E2:C0:C9:CC:49 Authority key identifier: 6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1 Certificate issuer: /CN=6B3CB0044466142CEF0429B4E232A5AD2D38AAA1 Certificate serial: 688AF1982A90768BECA5B1959F0722651643561C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft Manifest number: B3 Signing time: Fri 28 Aug 2026 06:48:04 +0000 Manifest this update: Fri 28 Aug 2026 06:43:04 +0000 Manifest next update: Mon 31 Aug 2026 18:01:04 +0000 Files and hashes: 1: 6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl (hash: 7HlH44u4utLDVqjY/b2Ys/9ESIwSH23jWcrsLbbboew=) 2: 3130332e3138392e3135342e302f32332d3233203d3e20313436383134.roa (hash: 4nDwr0x7auXaCdia53bmpvYSCG62VhpDsLJImLDcVGo=) 3: 323430303a383665303a3a2f33322d3332203d3e20313436383134.roa (hash: DLyf9Hka8LSknSJVSIf6Mgywzzt8gkawHdcew74fo+c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:8a:f1:98:2a:90:76:8b:ec:a5:b1:95:9f:07:22:65:16:43:56:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B3CB0044466142CEF0429B4E232A5AD2D38AAA1 Validity Not Before: Aug 28 06:43:04 2026 GMT Not After : Aug 31 18:01:04 2026 GMT Subject: CN=FB0562B80259A937FA170823CB0614E2C0C9CC49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a8:a7:e9:bc:ec:85:fb:27:bf:fa:32:83:0a: ab:af:9d:86:50:fd:0c:73:4b:56:70:d6:64:aa:97: 01:41:38:2e:57:8e:5b:3a:28:23:3d:e1:be:01:f1: 60:54:80:62:2d:93:04:72:a4:e5:29:f6:ba:c7:30: 48:bd:90:0c:fa:81:af:dd:de:6a:0a:d4:ff:84:a1: 1c:9d:f4:80:4c:e1:48:d7:01:d4:bb:5f:03:ef:20: bc:09:c7:8f:00:2a:e8:98:a4:df:7d:44:69:fc:45: 53:d6:9e:50:02:c2:c7:63:77:36:05:ac:7b:4c:77: 4c:d7:6e:87:18:33:5d:b8:a2:23:79:66:47:59:e6: d2:62:f6:bb:e3:11:08:b4:59:a2:b8:b1:f8:f4:11: 06:e1:e0:ae:e1:2b:0e:42:f4:71:58:3d:62:7c:54: b4:d3:e2:40:a6:72:8b:a0:b8:4f:cb:70:af:1a:96: 61:64:32:14:89:7c:c9:c7:00:16:11:35:8f:eb:bb: 7f:4e:50:5c:72:13:35:a6:9b:e7:dc:ff:c4:be:a2: 1f:1d:f9:d3:69:29:6e:36:69:fd:bc:58:ee:8b:d3: 7c:2b:fb:9d:ce:36:4a:f5:ec:7d:a0:eb:17:4d:62: ce:7c:57:1a:1f:07:cf:5a:07:26:77:cd:e2:37:eb: cc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:05:62:B8:02:59:A9:37:FA:17:08:23:CB:06:14:E2:C0:C9:CC:49 X509v3 Authority Key Identifier: keyid:6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:15:a7:c4:ef:11:25:9a:73:54:b4:ba:98:a4:f2:74:ae:06: d4:be:47:a0:21:9a:82:0d:4b:c4:e0:18:86:56:3b:df:49:cd: 64:80:93:7d:b6:f7:8c:42:8a:46:29:61:1c:ff:f1:cb:27:88: 52:3f:06:b3:32:e5:3c:0c:fa:0d:ac:22:30:42:5c:f5:88:73: 6c:34:c2:ab:08:89:8f:08:42:22:fa:64:7e:47:52:2d:da:62: a7:23:d8:e2:8d:4e:c2:24:96:07:41:e6:89:c4:a8:62:6e:aa: aa:88:f4:81:7b:3c:54:bc:8d:10:cd:bf:24:b2:41:c7:26:9f: f9:8c:c0:b5:2f:88:72:15:46:94:db:54:6d:d6:66:3c:a3:28: 77:cb:1e:2b:70:74:c7:ba:7b:66:41:8a:88:32:ab:ef:50:7b: bb:6d:13:4b:cf:ec:be:95:99:a6:a7:1a:cc:41:7a:e8:f0:b9: ab:a8:f4:0f:4b:22:e3:bc:69:c9:fb:41:24:a3:59:28:e9:b7: f7:b9:b6:7b:19:37:c3:cc:2e:d1:27:55:01:9a:ef:2f:20:69: ca:ba:d4:37:c5:70:e8:4e:4a:8b:62:1d:d4:78:45:85:ce:44: d3:89:78:a0:36:bd:9b:cd:34:df:65:7a:45:32:76:91:f7:eb: f9:9a:6d:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaIrxmCqQdovspbGVnwciZRZDVhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzQ0IwMDQ0NDY2MTQyQ0VGMDQyOUI0RTIzMkE1QUQy RDM4QUFBMTAeFw0yNjA4MjgwNjQzMDRaFw0yNjA4MzExODAxMDRaMDMxMTAvBgNV BAMTKEZCMDU2MkI4MDI1OUE5MzdGQTE3MDgyM0NCMDYxNEUyQzBDOUNDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQqKfpvOyF+ye/+jKDCquvnYZQ /QxzS1Zw1mSqlwFBOC5Xjls6KCM94b4B8WBUgGItkwRypOUp9rrHMEi9kAz6ga/d 3moK1P+EoRyd9IBM4UjXAdS7XwPvILwJx48AKuiYpN99RGn8RVPWnlACwsdjdzYF rHtMd0zXbocYM124oiN5ZkdZ5tJi9rvjEQi0WaK4sfj0EQbh4K7hKw5C9HFYPWJ8 VLTT4kCmcouguE/LcK8almFkMhSJfMnHABYRNY/ru39OUFxyEzWmm+fc/8S+oh8d +dNpKW42af28WO6L03wr+53ONkr17H2g6xdNYs58VxofB89aByZ3zeI368whAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+wViuAJZqTf6FwgjywYU4sDJzEkwHwYDVR0j BBgwFoAUazywBERmFCzvBCm04jKlrS04qqEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQwNDMzNzcxOTYwNzI5OC8wLzZCM0NCMDA0NDQ2NjE0MkNFRjA0MjlCNEUyMzJB NUFEMkQzOEFBQTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkIzQ0IwMDQ0NDY2MTQyQ0VGMDQyOUI0RTIzMkE1QUQyRDM4QUFBMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MDQzMzc3MTk2MDcyOTgvMC82QjNDQjAwNDQ0NjYx NDJDRUYwNDI5QjRFMjMyQTVBRDJEMzhBQUExLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRWnxO8RJZpz VLS6mKTydK4G1L5HoCGagg1LxOAYhlY730nNZICTfbb3jEKKRilhHP/xyyeIUj8G szLlPAz6DawiMEJc9YhzbDTCqwiJjwhCIvpkfkdSLdpipyPY4o1OwiSWB0HmicSo Ym6qqoj0gXs8VLyNEM2/JLJBxyaf+YzAtS+IchVGlNtUbdZmPKMod8seK3B0x7p7 ZkGKiDKr71B7u20TS8/svpWZpqcazEF66PC5q6j0D0si47xpyftBJKNZKOm397m2 exk3w8wu0SdVAZrvLyBpyrrUN8Vw6E5Ki2Id1HhFhc5E04l4oDa9m80032V6RTJ2 kffr+ZptEg== -----END CERTIFICATE-----Generated at Sat Aug 29 07:02:38 2026 by rpki-client