$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft File: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft (raw, json) Hash identifier: +1FP0gp1WIq7y0ZfcBE0at/kXdAhLkbYc17Re2omeBc= Subject key identifier: CE:10:F5:EF:B5:CF:24:E4:C7:AF:41:05:26:CA:4A:E4:FD:21:79:57 Authority key identifier: 6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C Certificate issuer: /CN=A91EFAA20000/serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C Certificate serial: 1A4DBE59CBDE286EBB00E9CB8BE079A81183AD24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft Manifest number: 58 Signing time: Wed 24 Jun 2026 14:14:39 +0000 Manifest this update: Wed 24 Jun 2026 14:09:39 +0000 Manifest next update: Thu 25 Jun 2026 14:26:39 +0000 Files and hashes: 1: 3230332e39342e302e302f31392d3139203d3e203137373339.roa (hash: +m3tQEFjHE7EvQqZt5ZFMX5uxgUV2P9Xu/hnIBd3mN4=) 2: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl (hash: JmjGz6I35f9dA7eo+opBqUbnyZOhsrTKYRyIBZ+5ibA=) 3: 323430373a343838303a3a2f33322d3332203d3e2030.roa (hash: ijCaVomoD4Gp49iRFc8q+IjUsH7ACZllQmvyC2Sz9cQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 14:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:4d:be:59:cb:de:28:6e:bb:00:e9:cb:8b:e0:79:a8:11:83:ad:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAA20000, serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C Validity Not Before: Jun 24 14:09:39 2026 GMT Not After : Jun 25 14:26:39 2026 GMT Subject: CN=CE10F5EFB5CF24E4C7AF410526CA4AE4FD217957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ef:bf:6a:60:21:24:c9:0d:6b:94:70:a9:1f: 5f:34:5c:ca:4a:9f:3d:f7:73:a3:56:f0:71:e3:bb: 43:5d:9e:24:40:d0:d1:fa:34:cf:c7:ec:fa:2c:f4: ec:ed:0c:4d:89:60:b6:96:a6:44:d4:e2:ed:6b:dd: e4:53:3a:ad:86:10:15:a4:a9:a8:b6:1b:aa:73:c7: f1:e2:08:ef:7d:66:0c:c3:e8:68:36:69:11:fc:23: 12:14:18:e2:7f:54:19:f7:51:10:0d:77:44:3a:be: 66:7e:6c:86:45:e2:de:e2:48:f8:cd:1c:87:9c:e5: b7:61:d2:90:8b:90:5e:98:6c:7e:f0:52:ce:8d:b3: 07:a0:07:72:c3:61:d5:52:91:c0:7d:d8:c3:7c:fe: 67:e9:3e:4e:9d:f1:20:d9:3d:63:e6:df:6b:28:4d: f1:19:d3:c7:4d:83:b9:da:1e:d1:12:fa:b7:9c:a8: 66:24:5c:da:91:56:53:92:47:6d:b2:6a:98:6b:76: 8e:3e:60:e0:74:6e:4e:4b:e5:e3:16:74:ba:1c:a9: 29:58:48:4c:60:05:49:2e:05:61:2e:d9:e0:eb:95: 21:0d:64:40:f0:d5:82:e7:4b:7c:20:a3:4e:a1:9b: d2:63:2b:0a:41:0b:ad:a9:1f:3f:af:0f:40:ab:d2: 16:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:10:F5:EF:B5:CF:24:E4:C7:AF:41:05:26:CA:4A:E4:FD:21:79:57 X509v3 Authority Key Identifier: keyid:6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:6c:1f:0e:b3:e7:77:04:34:02:cb:28:ba:89:93:a5:f9:58: 3c:b3:4c:15:9a:80:a0:bd:3f:df:07:2e:e9:2e:88:a0:8d:7b: 18:e2:33:1f:d3:6f:d3:b3:13:86:63:c7:29:62:52:0e:7d:23: b7:3d:49:02:82:b8:42:ff:b1:15:1a:67:99:f4:d5:79:e6:2e: 29:6a:ac:5c:19:eb:61:be:25:cc:80:3c:85:df:51:bb:8d:f3: 8e:fa:cd:e6:06:fa:30:cf:b2:1d:b9:ea:08:36:77:25:21:78: 8e:04:20:42:9a:e6:09:04:5c:01:9a:fa:69:7e:9e:35:73:3a: 24:1b:61:93:7e:e7:e5:fd:1d:67:cd:4d:ea:51:7b:24:70:40: 11:27:ef:82:63:a6:2e:a7:e3:03:be:51:34:4c:66:3b:4d:e6: 17:1f:31:4f:b3:93:6c:da:1a:54:73:43:7d:6d:28:c5:ce:e9: a7:5c:bc:73:ee:15:cf:7c:71:b4:22:40:21:31:94:a4:4a:cd: a8:45:df:de:5e:0d:dc:40:4e:09:5f:be:aa:41:92:17:02:b0: 34:ba:e3:18:19:0c:ec:16:84:d6:0e:22:fd:2f:a3:73:bd:06: 86:bf:dc:2c:fe:70:7e:28:94:52:b5:ca:00:50:62:3f:0f:e7: 94:05:54:52 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUGk2+WcveKG67AOnLi+B5qBGDrSQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRUZBQTIwMDAwMTEwLwYDVQQFEyg2QTM4Nzk5RTdG RDIxOTg1RUQ4ODJFODhGRkMwREFGRUZGODdGNTRDMB4XDTI2MDYyNDE0MDkzOVoX DTI2MDYyNTE0MjYzOVowMzExMC8GA1UEAxMoQ0UxMEY1RUZCNUNGMjRFNEM3QUY0 MTA1MjZDQTRBRTRGRDIxNzk1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKLvv2pgISTJDWuUcKkfXzRcykqfPfdzo1bwceO7Q12eJEDQ0fo0z8fs+iz0 7O0MTYlgtpamRNTi7Wvd5FM6rYYQFaSpqLYbqnPH8eII731mDMPoaDZpEfwjEhQY 4n9UGfdREA13RDq+Zn5shkXi3uJI+M0ch5zlt2HSkIuQXphsfvBSzo2zB6AHcsNh 1VKRwH3Yw3z+Z+k+Tp3xINk9Y+bfayhN8RnTx02Dudoe0RL6t5yoZiRc2pFWU5JH bbJqmGt2jj5g4HRuTkvl4xZ0uhypKVhITGAFSS4FYS7Z4OuVIQ1kQPDVgudLfCCj TqGb0mMrCkELrakfP68PQKvSFg8CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBTOEPXv tc8k5MevQQUmykrk/SF5VzAfBgNVHSMEGDAWgBRqOHmef9IZhe2ILoj/wNr+/4f1 TDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk5OTYzODExNTAwMTMwMzA3LzAvNkEzODc5 OUU3RkQyMTk4NUVEODgyRTg4RkZDMERBRkVGRjg3RjU0Qy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvYWpoNW5uX1NH WVh0aUM2SV84RGFfdi1IOVV3LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5OTk2MzgxMTUw MDEzMDMwNy8wLzZBMzg3OTlFN0ZEMjE5ODVFRDg4MkU4OEZGQzBEQUZFRkY4N0Y1 NEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQB5bB8Os+d3BDQCyyi6iZOl+Vg8s0wVmoCgvT/fBy7pLoig jXsY4jMf02/TsxOGY8cpYlIOfSO3PUkCgrhC/7EVGmeZ9NV55i4paqxcGethviXM gDyF31G7jfOO+s3mBvowz7IdueoINnclIXiOBCBCmuYJBFwBmvppfp41czokG2GT fufl/R1nzU3qUXskcEARJ++CY6Yup+MDvlE0TGY7TeYXHzFPs5Ns2hpUc0N9bSjF zumnXLxz7hXPfHG0IkAhMZSkSs2oRd/eXg3cQE4JX76qQZIXArA0uuMYGQzsFoTW DiL9L6NzvQaGv9ws/nB+KJRStcoAUGI/D+eUBVRS -----END CERTIFICATE-----Generated at Wed Jun 24 17:10:03 2026 by rpki-client