$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft File: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft (raw, json) Hash identifier: x5bs/7LdV/4o4euqHOBnZ9mwIGkuN7YJXfIakfrkOr4= Subject key identifier: BA:CC:93:EB:2F:D6:80:79:6A:74:14:43:AF:09:B3:9C:DC:FC:A0:CA Authority key identifier: 2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85 Certificate issuer: /CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85 Certificate serial: 1A1236DF8ED9D0C21DB7EB0AE7174BA2A0B052D1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft Manifest number: 0139 Signing time: Mon 05 Oct 2026 22:49:37 +0000 Manifest this update: Mon 05 Oct 2026 22:44:37 +0000 Manifest next update: Thu 08 Oct 2026 23:52:37 +0000 Files and hashes: 1: 3130332e3132302e35322e302f32322d3232203d3e2030.roa (hash: z33o4OymdWUBIy78ttDROdjMR5QblNN+hfrm6DQnxik=) 2: 2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl (hash: cCzna1hkMwH0uHHLmTDRjwmos6JvGVLMZbOyHEs3ro0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 23:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:12:36:df:8e:d9:d0:c2:1d:b7:eb:0a:e7:17:4b:a2:a0:b0:52:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E6BE7EE043A01D3CD483F302C345E46581A5C85 Validity Not Before: Oct 5 22:44:37 2026 GMT Not After : Oct 8 23:52:37 2026 GMT Subject: CN=BACC93EB2FD680796A741443AF09B39CDCFCA0CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ba:a8:96:d6:8e:aa:39:67:e5:4f:2b:38:50: 9c:77:8b:87:01:0c:eb:5e:23:65:d0:49:9c:08:5e: 40:0b:a5:5f:f9:99:5b:c5:26:a9:ee:34:0a:20:6d: e5:74:b5:34:ee:dc:9e:7e:6f:f0:3b:38:dc:5c:a7: e7:aa:c6:e2:15:f9:6d:2e:9e:2b:85:c7:7c:46:e1: 12:64:00:69:ae:69:5b:cb:91:ae:72:c2:fb:fd:09: cd:a5:ce:91:3e:30:33:4d:72:e8:18:ce:49:7a:4b: 82:fe:4b:32:f0:cb:38:69:9f:7c:56:b0:73:94:d5: d1:c5:05:d0:2d:73:e3:14:d7:14:e6:29:5d:d4:b1: cc:73:a2:47:4d:de:19:0f:7d:3c:25:8d:f3:ab:b7: 7f:03:2d:ab:b6:57:f7:ef:55:04:e9:a1:3d:2f:f7: fe:38:88:c9:bb:73:78:da:64:13:07:69:42:1f:0f: c1:aa:ef:e0:89:d5:03:e7:24:a8:73:ec:3b:20:d7: 50:5f:35:fa:39:37:39:bc:23:62:4c:80:f9:79:47: 67:0a:20:dd:98:0c:36:9c:4d:48:19:f7:e1:69:b8: d4:3e:80:23:dc:28:6b:89:a8:30:83:b2:bb:eb:b2: 43:da:ee:65:8e:58:b9:c8:4c:48:c6:fc:48:82:25: e2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CC:93:EB:2F:D6:80:79:6A:74:14:43:AF:09:B3:9C:DC:FC:A0:CA X509v3 Authority Key Identifier: keyid:2E:6B:E7:EE:04:3A:01:D3:CD:48:3F:30:2C:34:5E:46:58:1A:5C:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2E6BE7EE043A01D3CD483F302C345E46581A5C85.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757546499/0/2E6BE7EE043A01D3CD483F302C345E46581A5C85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:99:e4:7a:ea:4a:79:61:c9:c7:8a:d2:c2:54:23:38:d2:6e: ae:34:bb:47:fe:4a:92:fe:09:52:46:d4:23:f6:37:6f:bb:4c: 37:78:6a:12:5c:e0:24:6b:29:ce:91:f7:e1:fe:6a:79:2c:2e: 20:16:be:93:d0:54:af:2d:c1:03:c0:55:5b:ee:25:28:0d:b1: f8:4d:40:17:0d:c6:7b:4b:f2:31:d8:71:91:a0:22:a3:26:83: 7d:df:ab:aa:dc:f1:c8:c6:be:58:87:8e:d9:5d:e6:01:e3:9c: ab:a8:5a:c0:53:99:5d:81:b8:f5:ae:28:6f:09:1d:51:a0:ff: c8:42:7f:37:da:3f:36:f1:f7:c8:8c:c3:79:d0:2e:c1:bc:dc: 1c:15:5b:95:30:72:8d:96:3e:34:e7:1e:a5:40:6a:74:ed:79: 83:93:1b:e3:e9:46:83:84:59:28:85:e5:c7:09:3f:70:64:99: 81:39:7c:46:51:11:ea:87:e7:3a:94:4a:3b:80:e2:4f:e6:59: 76:78:36:c0:5d:9c:a4:c6:ad:8d:55:19:bc:00:11:c6:ac:ba: e8:f6:e4:dd:79:01:0d:8d:ae:9f:49:d9:07:04:53:3c:64:67: ee:f0:a1:ad:26:36:67:4a:14:b6:54:26:ff:ba:ab:ec:85:b8: a9:67:c6:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGhI2347Z0MIdt+sK5xdLoqCwUtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU2QkU3RUUwNDNBMDFEM0NENDgzRjMwMkMzNDVFNDY1 ODFBNUM4NTAeFw0yNjEwMDUyMjQ0MzdaFw0yNjEwMDgyMzUyMzdaMDMxMTAvBgNV BAMTKEJBQ0M5M0VCMkZENjgwNzk2QTc0MTQ0M0FGMDlCMzlDRENGQ0EwQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRuqiW1o6qOWflTys4UJx3i4cB DOteI2XQSZwIXkALpV/5mVvFJqnuNAogbeV0tTTu3J5+b/A7ONxcp+eqxuIV+W0u niuFx3xG4RJkAGmuaVvLka5ywvv9Cc2lzpE+MDNNcugYzkl6S4L+SzLwyzhpn3xW sHOU1dHFBdAtc+MU1xTmKV3UscxzokdN3hkPfTwljfOrt38DLau2V/fvVQTpoT0v 9/44iMm7c3jaZBMHaUIfD8Gq7+CJ1QPnJKhz7Dsg11BfNfo5Nzm8I2JMgPl5R2cK IN2YDDacTUgZ9+FpuNQ+gCPcKGuJqDCDsrvrskPa7mWOWLnITEjG/EiCJeLrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUusyT6y/WgHlqdBRDrwmznNz8oMowHwYDVR0j BBgwFoAULmvn7gQ6AdPNSD8wLDReRlgaXIUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzU0NjQ5OS8wLzJFNkJFN0VFMDQzQTAxRDNDRDQ4M0YzMDJDMzQ1 RTQ2NTgxQTVDODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkU2QkU3RUUwNDNBMDFEM0NENDgzRjMwMkMzNDVFNDY1ODFBNUM4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc1NDY0OTkvMC8yRTZCRTdFRTA0M0Ew MUQzQ0Q0ODNGMzAyQzM0NUU0NjU4MUE1Qzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpnkeupKeWHJ x4rSwlQjONJurjS7R/5Kkv4JUkbUI/Y3b7tMN3hqElzgJGspzpH34f5qeSwuIBa+ k9BUry3BA8BVW+4lKA2x+E1AFw3Ge0vyMdhxkaAioyaDfd+rqtzxyMa+WIeO2V3m AeOcq6hawFOZXYG49a4obwkdUaD/yEJ/N9o/NvH3yIzDedAuwbzcHBVblTByjZY+ NOcepUBqdO15g5Mb4+lGg4RZKIXlxwk/cGSZgTl8RlER6ofnOpRKO4DiT+ZZdng2 wF2cpMatjVUZvAARxqy66Pbk3XkBDY2un0nZBwRTPGRn7vChrSY2Z0oUtlQm/7qr 7IW4qWfGBw== -----END CERTIFICATE-----Generated at Wed Oct 7 20:52:53 2026 by rpki-client