$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft File: 060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft (raw, json) Hash identifier: mh0T15Bl2I11dGbjrYpzXLiTXlkjxIyNEss2BjuxDH0= Subject key identifier: F8:19:B9:D7:41:5F:1D:AA:DB:80:EA:50:00:6B:25:95:E0:B8:2B:23 Authority key identifier: 06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD Certificate issuer: /CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD Certificate serial: 26579B19A96ACD4CF36A5132DB7F3B086C163BCE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft Manifest number: 03 Signing time: Mon 27 Apr 2026 03:51:53 +0000 Manifest this update: Mon 27 Apr 2026 03:46:53 +0000 Manifest next update: Tue 28 Apr 2026 04:39:53 +0000 Files and hashes: 1: 060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl (hash: aSsqrpl9Y1X/Gex7XrPIfLxAOtuK1YSNZUIkmm344kE=) 2: 3130332e3231362e34302e302f32322d3232203d3e2030.roa (hash: CJGUWXnox0zuB6o/j+gb69TVgAVyeUqTs1YSv3rOyk4=) 3: 3130312e34392e3132382e302f31382d3138203d3e2030.roa (hash: EQ/aHDyPfGrqHqi7zcwJ4BpwFk8LfHUqOf3EobqjPg4=) 4: 3135372e3131392e3137322e302f32322d3232203d3e2034383437.roa (hash: nfHPWryodoQGAWIQEwiQs1RdM4fk6gLb4mCgk+4BsD4=) 5: 3130312e34392e3134382e302f32332d3233203d3e2034383437.roa (hash: hD8pipimoNbXJuFtKR22JqYH5vAkWdps2g2kY8PbheI=) 6: 323430343a653738303a3a2f33322d3332203d3e2030.roa (hash: jDt2YO5IfWb4E+JvZ4HL3Mb4PviL245jOkb90zp1nDg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:57:9b:19:a9:6a:cd:4c:f3:6a:51:32:db:7f:3b:08:6c:16:3b:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD Validity Not Before: Apr 27 03:46:53 2026 GMT Not After : Apr 28 04:39:53 2026 GMT Subject: CN=F819B9D7415F1DAADB80EA50006B2595E0B82B23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:5a:81:f4:e6:15:3b:be:78:5c:40:7e:6b: 30:c4:96:b2:17:b5:5d:13:04:11:56:b3:46:e2:9c: 56:54:8f:4e:72:6d:e5:62:1f:42:56:be:f2:9b:23: 4e:6f:0a:10:00:0f:de:95:24:f6:b7:10:e4:bc:4c: e9:3e:ce:f7:b9:bf:97:cd:75:f0:d6:b4:14:97:5c: 8b:de:3c:6d:91:f4:ec:f2:0a:16:a6:1e:b4:d7:a5: 30:ae:04:bd:1a:09:60:2f:d0:c1:07:12:8d:4a:18: 0a:99:76:76:86:2f:81:75:da:4c:06:44:d1:3d:32: 08:eb:c4:02:5e:15:1e:d5:9a:5f:0a:54:05:68:54: e3:45:f9:55:0b:b9:2e:f7:da:28:7a:fb:b7:b0:8b: c5:9a:46:96:33:54:cd:e4:89:bf:e9:38:95:56:df: 5e:d6:ce:ca:74:1b:b4:53:f6:89:0c:bd:67:6b:f3: 0f:52:65:07:7d:92:51:c2:12:8a:5f:25:e0:4d:61: fa:84:38:06:99:13:28:68:3f:6a:87:f3:de:c6:6d: 04:29:3a:16:99:52:e7:39:8e:e5:1d:0c:7f:7f:2d: 9f:45:56:ca:88:36:f7:44:a6:91:79:c5:e6:ec:2c: d1:95:0e:59:da:ab:a4:96:94:98:20:c4:10:07:e4: 0a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:19:B9:D7:41:5F:1D:AA:DB:80:EA:50:00:6B:25:95:E0:B8:2B:23 X509v3 Authority Key Identifier: keyid:06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:0f:76:69:38:2d:d7:a9:57:f2:32:3f:b6:e2:f3:cd:ae:74: 2a:38:61:c8:00:a9:11:1d:65:80:75:60:a5:02:a9:90:70:e6: e2:b9:82:75:ec:c0:78:56:42:94:9f:5d:b8:3d:2d:85:90:b6: 3c:28:98:43:22:8b:a1:b4:5a:bf:5b:f3:4a:15:71:8c:4a:5f: da:59:72:ad:bb:4b:d3:a5:9a:0d:c3:f0:c3:d9:b0:15:72:6a: 4a:b6:d1:e4:66:63:77:ad:6e:56:60:94:1f:b6:60:13:bb:d3: 5c:63:fc:49:11:16:a1:1e:8e:da:8d:c6:5c:f1:cd:d7:6d:12: e6:f3:e1:3b:8c:7e:55:95:fe:5b:4c:ec:3f:55:e2:c7:ed:9a: 16:6d:12:b6:72:6e:6a:ae:66:7a:ac:f8:bf:77:e6:ce:fd:1f: 82:ee:14:98:23:2f:bf:f3:7a:be:f8:c6:be:62:63:b1:eb:69: 6d:09:cf:f3:54:1a:9c:75:a7:48:2e:c0:e7:68:f3:89:78:c9: 13:b8:40:f2:8c:ff:20:fd:0a:5a:5b:09:3b:a7:65:1f:46:2d: c7:b9:cc:8c:3c:c6:ad:db:09:a8:31:a3:01:35:9f:2e:c1:5e: 5a:db:76:f9:2a:b0:e2:03:68:9d:2c:9e:d9:4f:5e:74:b0:90: 92:4b:de:af -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJlebGalqzUzzalEy2387CGwWO84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYwNjc3RkZEQjhGQTNDNkM2REMyRjE4RURGN0JFREEw NjVGQjhBRDAeFw0yNjA0MjcwMzQ2NTNaFw0yNjA0MjgwNDM5NTNaMDMxMTAvBgNV BAMTKEY4MTlCOUQ3NDE1RjFEQUFEQjgwRUE1MDAwNkIyNTk1RTBCODJCMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7AFqB9OYVO754XEB+azDElrIX tV0TBBFWs0binFZUj05ybeViH0JWvvKbI05vChAAD96VJPa3EOS8TOk+zve5v5fN dfDWtBSXXIvePG2R9OzyChamHrTXpTCuBL0aCWAv0MEHEo1KGAqZdnaGL4F12kwG RNE9MgjrxAJeFR7Vml8KVAVoVONF+VULuS732ih6+7ewi8WaRpYzVM3kib/pOJVW 317Wzsp0G7RT9okMvWdr8w9SZQd9klHCEopfJeBNYfqEOAaZEyhoP2qH897GbQQp OhaZUuc5juUdDH9/LZ9FVsqINvdEppF5xebsLNGVDlnaq6SWlJggxBAH5AqHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+Bm510FfHarbgOpQAGslleC4KyMwHwYDVR0j BBgwFoAUBgZ3/9uPo8bG3C8Y7fe+2gZfuK0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk5MTg4MDU0OTYyOTk1NS8wLzA2MDY3N0ZGREI4RkEzQzZDNkRDMkYxOEVERjdC RURBMDY1RkI4QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDYwNjc3RkZEQjhGQTNDNkM2REMyRjE4RURGN0JFREEwNjVGQjhBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5OTE4ODA1NDk2Mjk5NTUvMC8wNjA2NzdGRkRCOEZB M0M2QzZEQzJGMThFREY3QkVEQTA2NUZCOEFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuQ92aTgt16lX 8jI/tuLzza50KjhhyACpER1lgHVgpQKpkHDm4rmCdezAeFZClJ9duD0thZC2PCiY QyKLobRav1vzShVxjEpf2llyrbtL06WaDcPww9mwFXJqSrbR5GZjd61uVmCUH7Zg E7vTXGP8SREWoR6O2o3GXPHN120S5vPhO4x+VZX+W0zsP1Xix+2aFm0StnJuaq5m eqz4v3fmzv0fgu4UmCMvv/N6vvjGvmJjsetpbQnP81QanHWnSC7A52jziXjJE7hA 8oz/IP0KWlsJO6dlH0Ytx7nMjDzGrdsJqDGjATWfLsFeWtt2+Sqw4gNonSye2U9e dLCQkkverw== -----END CERTIFICATE-----Generated at Mon Apr 27 15:09:26 2026 by rpki-client