$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft File: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft (raw, json) Hash identifier: 8mU6Lg/iMoYDQNFR0lZcjeTUMr0f+mnWLMsAQUM1TVw= Subject key identifier: 28:2B:6D:51:4A:51:A7:63:EC:BC:24:0F:28:14:0A:F2:28:67:4C:40 Authority key identifier: 6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C Certificate issuer: /CN=A91EFAA20000/serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C Certificate serial: 4F2A74428148C29F3F0D128A5BBBFE128AA1D2AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft Manifest number: 07 Signing time: Sun 26 Apr 2026 15:03:56 +0000 Manifest this update: Sun 26 Apr 2026 14:58:56 +0000 Manifest next update: Mon 27 Apr 2026 18:04:56 +0000 Files and hashes: 1: 323430373a343838303a3a2f33322d3332203d3e2030.roa (hash: ijCaVomoD4Gp49iRFc8q+IjUsH7ACZllQmvyC2Sz9cQ=) 2: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl (hash: pfp+twu6kYZM28gSNVZhlsuvIBc4BEJLaocDwlSNUz4=) 3: 3230332e39342e302e302f31392d3139203d3e2034383132.roa (hash: MX+Z2eKv6zZsuTu/XMVsYTMYIX19UvhWGwXM6wwzLmw=) 4: 3230332e39342e302e302f31392d3139203d3e203137363231.roa (hash: d61RRL7ms+mNt35LeEG4qYV/N/0Nb2HsA+1qiC4F53s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 18:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2a:74:42:81:48:c2:9f:3f:0d:12:8a:5b:bb:fe:12:8a:a1:d2:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAA20000, serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C Validity Not Before: Apr 26 14:58:56 2026 GMT Not After : Apr 27 18:04:56 2026 GMT Subject: CN=282B6D514A51A763ECBC240F28140AF228674C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f5:35:a1:4e:40:ac:ed:52:ab:6b:0c:a0:a3: d7:72:c6:b5:ad:19:63:9f:90:80:22:a2:f4:a5:b1: 0d:75:44:76:a6:79:a9:73:3a:33:68:3e:5b:96:1f: eb:e3:9f:8e:63:26:a1:3e:4f:14:0c:05:e4:41:ac: f5:c3:60:b2:98:48:45:5a:ca:d3:5e:61:7e:2e:28: b6:c4:11:7f:61:03:e3:30:8d:d5:e4:90:29:89:04: b7:83:99:85:86:0e:f5:60:8a:7c:35:34:16:ca:83: bd:b3:91:65:c6:d7:09:68:4f:94:0d:f5:fe:9b:5b: 17:e0:60:df:ab:fa:ee:76:c5:df:4a:6b:b6:fc:00: dc:94:0c:6a:db:13:b9:47:92:52:3d:a4:0f:22:26: 68:3a:2c:f1:3c:fe:c3:ba:9e:be:b1:99:ae:5e:1c: fc:0c:e2:08:cc:4e:9a:a3:32:f4:4f:e2:13:f1:97: 6a:5f:f1:2c:0e:8a:0a:aa:a5:53:c1:53:48:b9:32: 4b:e0:74:fd:8a:9c:a1:29:71:f6:97:87:2e:a8:3f: 36:9e:0a:47:99:bd:15:7a:9d:82:2c:f8:8f:69:ad: 3a:74:3c:6e:6f:e7:0c:67:72:53:98:56:35:f7:1a: 1d:bc:b2:83:d5:86:3a:2b:b8:15:f6:b7:eb:09:c1: 2c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2B:6D:51:4A:51:A7:63:EC:BC:24:0F:28:14:0A:F2:28:67:4C:40 X509v3 Authority Key Identifier: keyid:6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:c7:f0:fd:07:56:4c:b7:72:ad:f5:1a:ad:83:d8:2d:ec:7b: 69:8c:db:33:2e:11:c3:b0:ae:2d:70:29:0a:a6:e9:52:bc:1f: 29:5d:f2:bc:38:58:c9:0f:0e:ce:44:fa:1e:91:05:12:49:26: 99:c0:4d:0c:84:07:44:de:76:40:57:99:da:47:fa:0a:7c:5a: 36:41:f1:29:ea:d0:98:7e:49:1c:9a:05:2a:cc:d9:ee:ca:82: 13:b8:d3:8c:b4:6e:db:15:8f:be:1c:df:0f:5d:18:59:e4:94: 44:57:5a:9a:3a:4d:44:bb:d2:96:56:5f:c7:df:c7:22:a0:e6: 58:69:69:4b:0f:41:ab:e6:34:10:35:c5:51:72:b2:02:bf:dc: 51:ee:39:c0:9d:4b:ba:36:01:a7:e4:1d:6f:fe:db:08:06:61: fc:63:cf:ff:6c:67:77:d0:cb:cf:b2:1c:6e:94:3b:1a:33:3f: 06:01:70:d8:20:a6:4d:0b:5e:dd:02:cc:64:ff:dd:92:6e:39: cc:34:ee:6b:18:35:37:72:74:ee:b3:23:d8:aa:3e:0a:cb:21: b2:c2:77:87:5a:8c:ac:17:8d:3b:45:38:30:22:8e:44:7b:e7: 7c:9a:66:b1:e8:a6:e2:d7:6f:05:d7:c3:b0:58:75:39:51:5e: 2c:7a:7b:c9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUTyp0QoFIwp8/DRKKW7v+Eoqh0qwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRUZBQTIwMDAwMTEwLwYDVQQFEyg2QTM4Nzk5RTdG RDIxOTg1RUQ4ODJFODhGRkMwREFGRUZGODdGNTRDMB4XDTI2MDQyNjE0NTg1NloX DTI2MDQyNzE4MDQ1NlowMzExMC8GA1UEAxMoMjgyQjZENTE0QTUxQTc2M0VDQkMy NDBGMjgxNDBBRjIyODY3NEM0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIn1NaFOQKztUqtrDKCj13LGta0ZY5+QgCKi9KWxDXVEdqZ5qXM6M2g+W5Yf 6+OfjmMmoT5PFAwF5EGs9cNgsphIRVrK015hfi4otsQRf2ED4zCN1eSQKYkEt4OZ hYYO9WCKfDU0FsqDvbORZcbXCWhPlA31/ptbF+Bg36v67nbF30prtvwA3JQMatsT uUeSUj2kDyImaDos8Tz+w7qevrGZrl4c/AziCMxOmqMy9E/iE/GXal/xLA6KCqql U8FTSLkyS+B0/YqcoSlx9peHLqg/Np4KR5m9FXqdgiz4j2mtOnQ8bm/nDGdyU5hW NfcaHbyyg9WGOiu4Ffa36wnBLM0CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQoK21R SlGnY+y8JA8oFAryKGdMQDAfBgNVHSMEGDAWgBRqOHmef9IZhe2ILoj/wNr+/4f1 TDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk5OTYzODExNTAwMTMwMzA3LzAvNkEzODc5 OUU3RkQyMTk4NUVEODgyRTg4RkZDMERBRkVGRjg3RjU0Qy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvYWpoNW5uX1NH WVh0aUM2SV84RGFfdi1IOVV3LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5OTk2MzgxMTUw MDEzMDMwNy8wLzZBMzg3OTlFN0ZEMjE5ODVFRDg4MkU4OEZGQzBEQUZFRkY4N0Y1 NEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAKx/D9B1ZMt3Kt9Rqtg9gt7HtpjNszLhHDsK4tcCkKpulS vB8pXfK8OFjJDw7ORPoekQUSSSaZwE0MhAdE3nZAV5naR/oKfFo2QfEp6tCYfkkc mgUqzNnuyoITuNOMtG7bFY++HN8PXRhZ5JREV1qaOk1Eu9KWVl/H38cioOZYaWlL D0Gr5jQQNcVRcrICv9xR7jnAnUu6NgGn5B1v/tsIBmH8Y8//bGd30MvPshxulDsa Mz8GAXDYIKZNC17dAsxk/92SbjnMNO5rGDU3cnTusyPYqj4KyyGywneHWoysF407 RTgwIo5Ee+d8mmax6Kbi128F18OwWHU5UV4senvJ -----END CERTIFICATE-----Generated at Mon Apr 27 09:37:05 2026 by rpki-client