$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft File: 6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft (raw, json) Hash identifier: DT3JOvmSWYnwGZn5guETD9R/u+1ZIT0xfuc7BGDycq8= Subject key identifier: 6C:6A:5F:55:C1:C6:2A:D6:A2:7B:D4:AE:AA:11:C1:5E:38:31:1A:12 Authority key identifier: 6F:1B:DE:E7:52:DB:E3:5C:77:30:8D:3A:9B:77:5A:C4:97:B5:0C:04 Certificate issuer: /CN=6F1BDEE752DBE35C77308D3A9B775AC497B50C04 Certificate serial: 22D7FAAFCD117848D208C302E20DC1D3519A5769 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft Manifest number: 0143 Signing time: Wed 28 Oct 2026 18:01:16 +0000 Manifest this update: Wed 28 Oct 2026 17:56:16 +0000 Manifest next update: Sat 31 Oct 2026 20:26:16 +0000 Files and hashes: 1: 3136372e3232302e3234342e302f32322d3233203d3e203538383632.roa (hash: S6YeUv7/1SNKdqeM0QDgAM+ogiwASSDMjBMWQQAcs0I=) 2: 6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl (hash: JxA0T5usGbXCCSxX/hGbqUkQMLpaeTiMp02e4g5s/E0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 20:26:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d7:fa:af:cd:11:78:48:d2:08:c3:02:e2:0d:c1:d3:51:9a:57:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F1BDEE752DBE35C77308D3A9B775AC497B50C04 Validity Not Before: Oct 28 17:56:16 2026 GMT Not After : Oct 31 20:26:16 2026 GMT Subject: CN=6C6A5F55C1C62AD6A27BD4AEAA11C15E38311A12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:8e:f4:e0:c5:be:68:89:fe:6c:56:02:e6: c1:f0:89:8b:80:bf:9a:cd:be:ca:71:f0:6b:46:8c: d9:db:f5:c8:cf:0f:ae:71:70:c5:ba:22:a5:46:76: f1:85:fe:48:52:bc:ea:34:be:fd:06:88:9c:34:bb: 68:b9:ab:0a:bc:48:fa:23:fb:5c:f6:8b:4d:82:76: 89:5b:ec:45:54:34:32:d7:31:a6:27:5c:a2:2b:27: 6b:61:cb:fe:b7:3c:08:40:f8:cd:d0:a9:d4:ab:47: 8c:d7:a1:5e:36:aa:6a:c5:63:30:00:36:0e:47:ea: 76:5d:6f:ea:d1:13:b4:f7:f4:ff:27:9e:f5:3a:bc: 5c:73:f5:f6:9e:25:b9:ca:a2:80:7a:ec:04:96:d4: 2e:ed:21:c1:0f:9f:78:bb:75:5b:3f:11:71:f0:17: f4:67:99:c2:4c:9c:b2:91:b2:ec:0a:29:bb:a3:77: 03:10:4c:bb:fb:24:a7:88:37:3d:a6:a6:b4:a5:5e: 49:8a:22:4e:7b:e7:4f:46:36:08:8f:c4:9a:08:d8: 71:15:21:66:2a:36:f5:13:33:4f:f3:2e:02:3e:8f: 4e:88:1b:52:cb:04:ad:5c:6b:d9:78:5a:5b:a7:fa: 11:06:08:61:cd:90:57:2e:04:30:f9:f9:a8:45:cd: c6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6A:5F:55:C1:C6:2A:D6:A2:7B:D4:AE:AA:11:C1:5E:38:31:1A:12 X509v3 Authority Key Identifier: keyid:6F:1B:DE:E7:52:DB:E3:5C:77:30:8D:3A:9B:77:5A:C4:97:B5:0C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/1/6F1BDEE752DBE35C77308D3A9B775AC497B50C04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:fc:76:ec:ab:02:ba:f0:40:f7:ed:f8:76:b0:b0:88:00:0c: 95:73:38:ae:86:69:eb:c1:1b:da:c7:38:6c:e9:03:94:58:e2: 59:33:67:9e:59:df:a5:51:5f:a7:c0:df:10:2c:33:b2:45:52: 21:b4:63:ad:0b:a0:a2:49:e4:9a:83:34:9b:5e:8b:e0:a4:c7: 63:50:93:63:e2:cd:87:c1:e9:c3:00:6f:f5:e7:8a:a4:1d:cf: 7c:7a:b6:ae:7e:b2:cf:9e:c3:e1:82:d2:e3:6c:b7:cf:4d:a2: 2e:28:0a:74:c4:61:62:a8:2e:de:d2:21:0a:8b:50:53:5d:0c: 97:e3:9f:3f:25:ab:90:15:6f:a7:6d:39:88:f4:9b:bd:fe:47: 6f:a5:55:e7:4b:b9:7e:41:e4:7b:3b:0a:b4:5d:25:0d:17:b1: 66:e3:f0:fd:50:63:a4:b6:d3:a0:55:84:52:ee:f6:9b:23:31: 4c:f5:1c:c2:5b:0c:0e:39:cd:c1:a1:9d:91:96:4c:07:a5:e1: ea:16:74:69:76:21:d7:06:6d:cc:bb:7e:0a:ee:d9:bc:c2:16: a6:4d:c8:16:60:17:17:13:48:46:66:0b:61:17:ba:68:42:c9: 01:15:73:09:e3:79:e9:49:9e:c9:f3:9b:00:3c:70:6d:ca:5f: 2c:4c:c7:d9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUItf6r80ReEjSCMMC4g3B01GaV2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkYxQkRFRTc1MkRCRTM1Qzc3MzA4RDNBOUI3NzVBQzQ5 N0I1MEMwNDAeFw0yNjEwMjgxNzU2MTZaFw0yNjEwMzEyMDI2MTZaMDMxMTAvBgNV BAMTKDZDNkE1RjU1QzFDNjJBRDZBMjdCRDRBRUFBMTFDMTVFMzgzMTFBMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZqI704MW+aIn+bFYC5sHwiYuA v5rNvspx8GtGjNnb9cjPD65xcMW6IqVGdvGF/khSvOo0vv0GiJw0u2i5qwq8SPoj +1z2i02Cdolb7EVUNDLXMaYnXKIrJ2thy/63PAhA+M3QqdSrR4zXoV42qmrFYzAA Ng5H6nZdb+rRE7T39P8nnvU6vFxz9faeJbnKooB67ASW1C7tIcEPn3i7dVs/EXHw F/RnmcJMnLKRsuwKKbujdwMQTLv7JKeINz2mprSlXkmKIk57509GNgiPxJoI2HEV IWYqNvUTM0/zLgI+j06IG1LLBK1ca9l4Wlun+hEGCGHNkFcuBDD5+ahFzcYBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbGpfVcHGKtaie9SuqhHBXjgxGhIwHwYDVR0j BBgwFoAUbxve51Lb41x3MI06m3daxJe1DAQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDM5MjU3OS8xLzZGMUJERUU3NTJEQkUzNUM3NzMwOEQzQTlCNzc1 QUM0OTdCNTBDMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNkYxQkRFRTc1MkRCRTM1Qzc3MzA4RDNBOUI3NzVBQzQ5N0I1MEMwNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQzOTI1NzkvMS82RjFCREVFNzUyREJF MzVDNzczMDhEM0E5Qjc3NUFDNDk3QjUwQzA0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/x27KsCuvBA 9+34drCwiAAMlXM4roZp68Eb2sc4bOkDlFjiWTNnnlnfpVFfp8DfECwzskVSIbRj rQugoknkmoM0m16L4KTHY1CTY+LNh8HpwwBv9eeKpB3PfHq2rn6yz57D4YLS42y3 z02iLigKdMRhYqgu3tIhCotQU10Ml+OfPyWrkBVvp205iPSbvf5Hb6VV50u5fkHk ezsKtF0lDRexZuPw/VBjpLbToFWEUu72myMxTPUcwlsMDjnNwaGdkZZMB6Xh6hZ0 aXYh1wZtzLt+Cu7ZvMIWpk3IFmAXFxNIRmYLYRe6aELJARVzCeN56UmeyfObADxw bcpfLEzH2Q== -----END CERTIFICATE-----Generated at Thu Oct 29 11:00:21 2026 by rpki-client