$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft File: 060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft (raw, json) Hash identifier: KFoZVWFt9RcjSA6ffWFLQUpx7x31B1XIF0vOhNmPSiE= Subject key identifier: EF:4D:42:A6:E8:B2:52:46:F9:4F:E7:9F:7F:A3:53:F0:14:CB:30:FB Authority key identifier: 06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD Certificate issuer: /CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD Certificate serial: 6006F931FFC1E829175C5ECADD7989BECEF2379D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft Manifest number: 40 Signing time: Thu 11 Jun 2026 21:59:27 +0000 Manifest this update: Thu 11 Jun 2026 21:54:27 +0000 Manifest next update: Fri 12 Jun 2026 23:14:27 +0000 Files and hashes: 1: 3130332e3231362e34302e302f32322d3232203d3e2030.roa (hash: CJGUWXnox0zuB6o/j+gb69TVgAVyeUqTs1YSv3rOyk4=) 2: 3130312e34392e3134382e302f32332d3233203d3e2034383437.roa (hash: hD8pipimoNbXJuFtKR22JqYH5vAkWdps2g2kY8PbheI=) 3: 3130312e34392e3132382e302f31382d3138203d3e2030.roa (hash: EQ/aHDyPfGrqHqi7zcwJ4BpwFk8LfHUqOf3EobqjPg4=) 4: 323430343a653738303a3a2f33322d3332203d3e2030.roa (hash: jDt2YO5IfWb4E+JvZ4HL3Mb4PviL245jOkb90zp1nDg=) 5: 060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl (hash: i3hwpX4e2hSHqamKEU8nmyG1VVUX44PZ1D+nw7O2GAw=) 6: 3135372e3131392e3137322e302f32322d3232203d3e2034383437.roa (hash: nfHPWryodoQGAWIQEwiQs1RdM4fk6gLb4mCgk+4BsD4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 23:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:06:f9:31:ff:c1:e8:29:17:5c:5e:ca:dd:79:89:be:ce:f2:37:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD Validity Not Before: Jun 11 21:54:27 2026 GMT Not After : Jun 12 23:14:27 2026 GMT Subject: CN=EF4D42A6E8B25246F94FE79F7FA353F014CB30FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7d:5e:eb:34:a6:07:1c:f8:e5:2f:54:d8:b1: 54:b3:e0:3b:2f:d5:76:04:52:6f:12:74:e9:5d:77: 44:ee:59:1b:d2:67:a2:50:04:56:90:65:06:de:1b: e9:e8:3c:e2:85:1e:e8:db:35:a6:00:c0:ff:86:f3: 7e:5a:d1:7d:51:d9:eb:36:0f:f1:1e:8c:76:71:cb: e7:f6:ca:e3:c8:93:f3:a4:c6:8d:76:da:e4:be:a9: 28:22:f6:2c:f9:0f:21:08:fd:f4:01:3b:fe:0e:52: 44:f4:72:e4:7b:1e:56:79:81:22:14:ac:76:37:06: 3d:1f:59:96:ca:e7:fc:ff:56:a9:24:f5:8e:25:1f: d6:ee:d0:85:e5:38:53:ab:df:f8:87:79:43:6a:ab: 72:35:2e:7a:9b:fd:50:ca:b6:b1:62:94:3f:0e:68: 35:ac:26:da:cd:c4:04:d2:d4:d4:7b:fb:af:5b:1b: f4:fc:aa:2b:e4:9d:e1:61:dd:6b:6e:10:e5:fe:d3: e3:0b:40:f1:08:82:ff:75:54:1d:8d:60:8e:7e:eb: 8d:38:e6:34:dc:5e:47:c7:ca:ad:b0:ba:74:f2:fb: c7:95:8e:2a:20:ef:1b:88:f6:b6:f8:fb:62:f2:c8: 2d:55:c0:72:e8:ec:39:65:a1:08:a0:8b:06:f8:9b: c7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4D:42:A6:E8:B2:52:46:F9:4F:E7:9F:7F:A3:53:F0:14:CB:30:FB X509v3 Authority Key Identifier: keyid:06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5f:cd:f6:32:8f:27:b4:b2:cc:39:e4:55:c4:d4:35:83:16: 32:27:6d:5c:c7:2c:1b:f3:56:72:02:a4:6e:d3:e7:92:4d:14: 7c:59:94:7b:c5:65:8e:b3:fd:ba:f7:5c:67:87:75:30:1f:8c: f7:a8:1d:87:91:a0:e7:73:82:3c:4d:2f:f7:dc:a4:a1:6d:3d: ad:2e:90:a6:63:6a:db:0a:86:d4:ca:27:d2:23:c6:0c:35:ef: a4:86:79:d5:77:73:0e:35:26:eb:78:08:6e:92:12:e8:e2:ef: f6:3b:e2:4c:70:90:d3:1a:ca:b0:11:c2:27:da:ab:24:8f:a6: fd:26:17:e7:62:4f:ef:10:2f:97:bc:a1:a7:44:f2:c9:ee:31: e4:8c:ea:6e:ad:ee:1a:04:bd:28:95:b7:24:11:ae:c6:2f:31: 49:65:b2:1f:b2:ef:d5:87:8a:52:bd:05:d6:9f:aa:a3:8b:eb: f5:8a:3b:d7:1c:03:be:36:8b:39:b1:36:97:ad:80:1f:81:17: 55:bd:ca:f7:35:27:a7:c3:16:0e:a8:29:4f:fd:c2:97:b7:1e: 21:48:68:87:64:49:4f:b5:55:d0:5e:8e:96:cf:b2:42:2b:ed: 98:4d:6c:46:ca:b4:5a:53:f8:0d:88:02:46:49:3f:81:ab:0f: 90:07:b9:6e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYAb5Mf/B6CkXXF7K3XmJvs7yN50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYwNjc3RkZEQjhGQTNDNkM2REMyRjE4RURGN0JFREEw NjVGQjhBRDAeFw0yNjA2MTEyMTU0MjdaFw0yNjA2MTIyMzE0MjdaMDMxMTAvBgNV BAMTKEVGNEQ0MkE2RThCMjUyNDZGOTRGRTc5RjdGQTM1M0YwMTRDQjMwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfV7rNKYHHPjlL1TYsVSz4Dsv 1XYEUm8SdOldd0TuWRvSZ6JQBFaQZQbeG+noPOKFHujbNaYAwP+G835a0X1R2es2 D/EejHZxy+f2yuPIk/Okxo122uS+qSgi9iz5DyEI/fQBO/4OUkT0cuR7HlZ5gSIU rHY3Bj0fWZbK5/z/Vqkk9Y4lH9bu0IXlOFOr3/iHeUNqq3I1Lnqb/VDKtrFilD8O aDWsJtrNxATS1NR7+69bG/T8qivkneFh3WtuEOX+0+MLQPEIgv91VB2NYI5+6404 5jTcXkfHyq2wunTy+8eVjiog7xuI9rb4+2LyyC1VwHLo7DlloQigiwb4m8eHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU701CpuiyUkb5T+eff6NT8BTLMPswHwYDVR0j BBgwFoAUBgZ3/9uPo8bG3C8Y7fe+2gZfuK0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk5MTg4MDU0OTYyOTk1NS8wLzA2MDY3N0ZGREI4RkEzQzZDNkRDMkYxOEVERjdC RURBMDY1RkI4QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDYwNjc3RkZEQjhGQTNDNkM2REMyRjE4RURGN0JFREEwNjVGQjhBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDA5OTE4ODA1NDk2Mjk5NTUvMC8wNjA2NzdGRkRCOEZB M0M2QzZEQzJGMThFREY3QkVEQTA2NUZCOEFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOl/N9jKPJ7Sy zDnkVcTUNYMWMidtXMcsG/NWcgKkbtPnkk0UfFmUe8VljrP9uvdcZ4d1MB+M96gd h5Gg53OCPE0v99ykoW09rS6QpmNq2wqG1Mon0iPGDDXvpIZ51XdzDjUm63gIbpIS 6OLv9jviTHCQ0xrKsBHCJ9qrJI+m/SYX52JP7xAvl7yhp0Tyye4x5Izqbq3uGgS9 KJW3JBGuxi8xSWWyH7Lv1YeKUr0F1p+qo4vr9Yo71xwDvjaLObE2l62AH4EXVb3K 9zUnp8MWDqgpT/3Cl7ceIUhoh2RJT7VV0F6Ols+yQivtmE1sRsq0WlP4DYgCRkk/ gasPkAe5bg== -----END CERTIFICATE-----Generated at Fri Jun 12 03:53:26 2026 by rpki-client