$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft File: 6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft (raw, json) Hash identifier: AgZpuoypYCbWicYWmd/V+eOxCEo6KC/XFqxsuYB+mAo= Subject key identifier: 6F:DA:40:EE:7F:0D:27:94:A2:6A:80:EA:6F:63:F6:17:9D:57:7F:64 Authority key identifier: 6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1 Certificate issuer: /CN=6B3CB0044466142CEF0429B4E232A5AD2D38AAA1 Certificate serial: 762EE5DAB23400F69ABF3A8A85F3CAB4182533F2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft Manifest number: 3A Signing time: Fri 29 May 2026 10:32:46 +0000 Manifest this update: Fri 29 May 2026 10:27:46 +0000 Manifest next update: Sat 30 May 2026 11:04:46 +0000 Files and hashes: 1: 6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl (hash: kQgCIs6UjaVABykSN9OH5eY55HB1LqLDORVknBJjd5E=) 2: 323430303a383665303a3a2f33322d3332203d3e20313436383134.roa (hash: DLyf9Hka8LSknSJVSIf6Mgywzzt8gkawHdcew74fo+c=) 3: 3130332e3138392e3135342e302f32332d3233203d3e20313436383134.roa (hash: 4nDwr0x7auXaCdia53bmpvYSCG62VhpDsLJImLDcVGo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 11:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:2e:e5:da:b2:34:00:f6:9a:bf:3a:8a:85:f3:ca:b4:18:25:33:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B3CB0044466142CEF0429B4E232A5AD2D38AAA1 Validity Not Before: May 29 10:27:46 2026 GMT Not After : May 30 11:04:46 2026 GMT Subject: CN=6FDA40EE7F0D2794A26A80EA6F63F6179D577F64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:02:ff:fe:08:b4:f2:f6:ac:f7:62:41:b1:14: 08:5f:84:6d:10:26:32:a4:8d:f4:67:bc:4c:21:fe: 3a:df:da:c3:0b:fb:97:b2:94:f1:fc:ef:3f:da:22: a0:74:21:a1:bb:2f:31:03:28:a7:7e:74:72:73:a3: c0:1e:a5:7e:7a:14:ec:4a:a9:77:e9:36:96:a4:c6: c4:5c:87:50:b0:41:da:30:4d:42:4d:fb:f5:e5:f5: f9:7a:b0:34:a7:c7:78:af:8b:74:f2:12:82:7d:86: de:57:cb:c0:dc:40:b2:6e:a5:fc:49:e3:71:d2:78: 3d:ea:db:b2:a1:4c:d3:d5:9e:cf:d5:d8:79:d0:1d: e4:f3:7b:38:c9:44:b4:44:6b:0d:4e:b2:e8:5a:f0: 40:24:d5:e0:61:21:8b:28:47:18:ea:95:41:b0:96: c6:68:82:48:13:ce:70:8b:21:6a:ef:97:da:1e:7c: 5c:83:6f:22:58:32:65:19:25:bc:25:41:61:d8:ec: 65:e7:72:0e:c6:01:86:fa:cc:52:0e:79:12:bc:9a: a2:1a:55:13:8a:e8:12:55:4c:1d:6a:53:9b:2d:45: 5d:d3:73:71:b9:f8:cf:88:33:80:0b:12:ba:2f:dc: 9b:2b:2a:27:6d:ac:a2:8b:20:df:21:cb:d6:86:53: c2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DA:40:EE:7F:0D:27:94:A2:6A:80:EA:6F:63:F6:17:9D:57:7F:64 X509v3 Authority Key Identifier: keyid:6B:3C:B0:04:44:66:14:2C:EF:04:29:B4:E2:32:A5:AD:2D:38:AA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097404337719607298/0/6B3CB0044466142CEF0429B4E232A5AD2D38AAA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:86:af:2f:5c:db:f8:01:eb:57:dd:a5:5b:5f:45:67:8c:57: 5c:cf:f3:c8:64:62:b5:15:00:2a:6d:8b:36:00:2b:dc:d8:6a: ed:d1:a3:59:a1:3b:b9:12:0f:30:d2:af:31:75:65:3d:9b:cf: a8:03:e2:24:9c:de:67:36:f9:c5:a8:e1:56:0b:25:5b:66:b5: ab:92:48:2b:30:4a:d7:51:3d:0f:29:f5:d4:4d:3d:8e:d3:ab: 92:2c:4a:08:50:e2:72:87:a1:ab:28:a3:94:96:a5:99:d6:08: a9:ec:fe:6c:9a:82:5b:6a:39:41:62:e6:c3:88:e2:0e:ab:08: 6a:a7:76:02:65:d7:53:4d:3f:d1:73:3d:c0:ca:57:21:ad:c8: 85:33:02:72:45:c6:71:16:6a:90:77:55:35:9f:e1:4e:e4:65: fa:46:7c:72:57:0e:06:16:c1:d0:1e:0d:17:6e:1a:7a:57:7e: 8c:57:29:3a:ec:89:29:c3:7b:6c:a6:6b:f6:98:3f:3d:7c:c9: 14:51:c0:e0:31:e0:ca:73:72:07:9c:6e:db:05:a0:de:21:9f: e6:b1:bd:c1:93:3b:bd:01:6f:9c:a7:4b:b5:85:61:e5:bc:48: af:b5:9d:09:eb:c0:fb:f9:eb:c1:89:25:81:f6:bd:94:d0:89: 47:db:8f:b2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdi7l2rI0APaavzqKhfPKtBglM/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIzQ0IwMDQ0NDY2MTQyQ0VGMDQyOUI0RTIzMkE1QUQy RDM4QUFBMTAeFw0yNjA1MjkxMDI3NDZaFw0yNjA1MzAxMTA0NDZaMDMxMTAvBgNV BAMTKDZGREE0MEVFN0YwRDI3OTRBMjZBODBFQTZGNjNGNjE3OUQ1NzdGNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZAv/+CLTy9qz3YkGxFAhfhG0Q JjKkjfRnvEwh/jrf2sML+5eylPH87z/aIqB0IaG7LzEDKKd+dHJzo8AepX56FOxK qXfpNpakxsRch1CwQdowTUJN+/Xl9fl6sDSnx3ivi3TyEoJ9ht5Xy8DcQLJupfxJ 43HSeD3q27KhTNPVns/V2HnQHeTzezjJRLREaw1Osuha8EAk1eBhIYsoRxjqlUGw lsZogkgTznCLIWrvl9oefFyDbyJYMmUZJbwlQWHY7GXncg7GAYb6zFIOeRK8mqIa VROK6BJVTB1qU5stRV3Tc3G5+M+IM4ALErov3JsrKidtrKKLIN8hy9aGU8IrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUb9pA7n8NJ5SiaoDqb2P2F51Xf2QwHwYDVR0j BBgwFoAUazywBERmFCzvBCm04jKlrS04qqEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQwNDMzNzcxOTYwNzI5OC8wLzZCM0NCMDA0NDQ2NjE0MkNFRjA0MjlCNEUyMzJB NUFEMkQzOEFBQTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkIzQ0IwMDQ0NDY2MTQyQ0VGMDQyOUI0RTIzMkE1QUQyRDM4QUFBMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MDQzMzc3MTk2MDcyOTgvMC82QjNDQjAwNDQ0NjYx NDJDRUYwNDI5QjRFMjMyQTVBRDJEMzhBQUExLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIavL1zb+AHr V92lW19FZ4xXXM/zyGRitRUAKm2LNgAr3Nhq7dGjWaE7uRIPMNKvMXVlPZvPqAPi JJzeZzb5xajhVgslW2a1q5JIKzBK11E9Dyn11E09jtOrkixKCFDicoehqyijlJal mdYIqez+bJqCW2o5QWLmw4jiDqsIaqd2AmXXU00/0XM9wMpXIa3IhTMCckXGcRZq kHdVNZ/hTuRl+kZ8clcOBhbB0B4NF24aeld+jFcpOuyJKcN7bKZr9pg/PXzJFFHA 4DHgynNyB5xu2wWg3iGf5rG9wZM7vQFvnKdLtYVh5bxIr7WdCevA+/nrwYklgfa9 lNCJR9uPsg== -----END CERTIFICATE-----Generated at Fri May 29 22:02:45 2026 by rpki-client