$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft File: 6F899B29F801AD1C8A8515E6EF9709910311F668.mft (raw, json) Hash identifier: 8OcHhvGP0M8BJ6Fm+hQQsbxhMhscoyf1kIM3ZzI9TAs= Subject key identifier: 07:40:8D:F4:63:6C:B9:79:3F:84:07:DF:A5:8A:0B:A8:22:C4:40:FD Authority key identifier: 6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 Certificate issuer: /CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Certificate serial: 20AE84FC91236BD68CAF0BA7DC980E7E98588ECB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft Manifest number: DF Signing time: Sun 05 Jul 2026 08:28:47 +0000 Manifest this update: Sun 05 Jul 2026 08:23:47 +0000 Manifest next update: Mon 06 Jul 2026 10:44:47 +0000 Files and hashes: 1: 3130332e3134322e38332e302f32342d3234203d3e20313439353133.roa (hash: YsRlvfghH9rCCKNTUVL7cagdvzH0kbY4Bz95ToSRwi8=) 2: 3130332e3134322e38322e302f32342d3234203d3e20313439353133.roa (hash: YBLpKWnBY74NDcGKe6t2+bdDnzFkBiAsPzbxJySwzDk=) 3: 3130332e3134322e38322e302f32332d3332203d3e20313439353133.roa (hash: gNbCXYLZTSZSDGKA8vf0miL9zRhPVc7YJOnU420lxlM=) 4: 3130332e3134322e38322e302f32342d3234203d3e20313531393531.roa (hash: NBrKkaX/GBDhP2RLztQmFEQ01TUbwHomfuOqxwCWC7w=) 5: 6F899B29F801AD1C8A8515E6EF9709910311F668.crl (hash: ciNxsqn2bGgLhhnvgxlYT+zculJr6AALNxXOFSFe+eQ=) 6: 3130332e3134322e38322e302f32332d3332203d3e20313531393531.roa (hash: mVq0tp8huRh6SC0n7rhOLpZu0QlXgV/WIGpxjqgh/TE=) 7: 3130332e3134322e38332e302f32342d3234203d3e20313531393531.roa (hash: 79Z+OEgq58IFIFUr3XZSZV6jT+sIs4BTv39+/fzGp6A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Jul 2026 22:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:ae:84:fc:91:23:6b:d6:8c:af:0b:a7:dc:98:0e:7e:98:58:8e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Validity Not Before: Jul 5 08:23:47 2026 GMT Not After : Jul 6 10:44:47 2026 GMT Subject: CN=07408DF4636CB9793F8407DFA58A0BA822C440FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fa:3b:21:25:88:e3:d3:fe:ac:04:5b:46:fb: 8f:55:dd:28:72:d9:f4:98:55:55:18:2f:2b:74:40: 9e:32:97:1f:3c:53:2c:22:8f:cf:d1:4e:8d:50:96: 61:12:3e:82:11:0f:09:c6:b0:ec:aa:fd:d2:bf:18: 75:41:28:03:df:e0:e0:d7:2c:77:47:b0:04:2e:f4: 58:a4:c9:7f:1e:c6:25:c3:94:1b:b2:ca:5f:50:76: 6a:6e:63:17:41:3b:89:33:e2:4b:a0:6b:92:c9:44: ab:c9:e6:48:d1:30:73:a1:29:05:f0:0e:82:fb:1c: 4f:20:08:4a:e4:b1:f1:af:ab:bc:f6:20:8e:2e:c3: 79:f4:f4:06:55:7b:7b:e0:77:dd:b5:21:5b:bd:b2: 7b:42:b4:70:a9:7a:15:82:6c:32:29:98:fd:ca:b6: a9:89:d5:4b:9e:48:45:75:3a:32:39:63:92:22:21: 19:ee:79:03:95:68:b4:99:c7:b0:1c:fc:7c:f2:fd: 1b:73:ec:af:5e:63:66:00:71:96:04:03:6f:9c:6f: fd:6d:73:09:b7:2c:35:73:cd:df:4b:4c:3a:93:5b: f0:9e:09:f2:ad:c4:b2:0e:62:8f:a4:52:69:fd:e4: bb:31:b7:06:e2:66:db:1a:5f:e8:08:25:28:43:1f: 3c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:40:8D:F4:63:6C:B9:79:3F:84:07:DF:A5:8A:0B:A8:22:C4:40:FD X509v3 Authority Key Identifier: keyid:6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:93:d1:6d:ee:c0:fc:bf:55:bc:70:6d:1d:1f:5e:d5:3d:57: a6:dd:97:fc:25:bb:a0:c8:ae:58:04:35:aa:31:d5:68:0b:0c: 92:8b:67:1e:ce:54:0b:b5:29:1b:c7:3d:d1:fc:e7:4e:61:eb: 37:f9:8b:d2:d9:c4:53:80:66:e1:af:cc:47:79:27:4d:22:38: 68:15:f7:f8:f8:40:35:8a:5d:43:f7:5f:f4:9d:a9:93:bb:d2: ae:45:1b:27:b4:51:b0:0b:3d:c0:4d:11:be:10:ca:f7:f7:8e: 13:a9:3d:5b:6e:7a:33:61:ee:68:86:08:41:9e:2f:6b:01:8a: 1e:93:90:80:cd:cd:3e:11:53:c0:91:c8:b3:82:a0:22:00:77: e5:42:24:0c:51:e2:76:1f:4b:47:ba:04:d4:b4:42:8c:21:b6: 1b:0a:25:ce:2f:22:c3:41:bf:2e:06:7d:f0:18:18:5b:77:83: 76:5a:78:67:be:3a:27:bb:cc:78:f2:34:32:6d:89:fd:e7:61: e0:f5:33:bd:19:f7:b2:73:7d:52:18:bd:a6:49:91:c6:5e:f9: 39:2f:b5:fe:04:1c:a0:b8:d3:92:8c:de:03:19:9f:0f:83:95: 7a:c1:a6:d6:32:95:b5:b8:58:e6:b0:41:cd:02:a8:a0:20:e8: 09:e5:95:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIK6E/JEja9aMrwun3JgOfphYjsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEw MzExRjY2ODAeFw0yNjA3MDUwODIzNDdaFw0yNjA3MDYxMDQ0NDdaMDMxMTAvBgNV BAMTKDA3NDA4REY0NjM2Q0I5NzkzRjg0MDdERkE1OEEwQkE4MjJDNDQwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd+jshJYjj0/6sBFtG+49V3Shy 2fSYVVUYLyt0QJ4ylx88Uywij8/RTo1QlmESPoIRDwnGsOyq/dK/GHVBKAPf4ODX LHdHsAQu9FikyX8exiXDlBuyyl9QdmpuYxdBO4kz4kuga5LJRKvJ5kjRMHOhKQXw DoL7HE8gCErksfGvq7z2II4uw3n09AZVe3vgd921IVu9sntCtHCpehWCbDIpmP3K tqmJ1UueSEV1OjI5Y5IiIRnueQOVaLSZx7Ac/Hzy/Rtz7K9eY2YAcZYEA2+cb/1t cwm3LDVzzd9LTDqTW/CeCfKtxLIOYo+kUmn95LsxtwbiZtsaX+gIJShDHzzlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUB0CN9GNsuXk/hAffpYoLqCLEQP0wHwYDVR0j BBgwFoAUb4mbKfgBrRyKhRXm75cJkQMR9mgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzY3NzU3MS8wLzZGODk5QjI5RjgwMUFEMUM4QTg1MTVFNkVGOTcw OTkxMDMxMUY2NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEwMzExRjY2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2Nzc1NzEvMC82Rjg5OUIyOUY4MDFB RDFDOEE4NTE1RTZFRjk3MDk5MTAzMTFGNjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5PRbe7A/L9V vHBtHR9e1T1Xpt2X/CW7oMiuWAQ1qjHVaAsMkotnHs5UC7UpG8c90fznTmHrN/mL 0tnEU4Bm4a/MR3knTSI4aBX3+PhANYpdQ/df9J2pk7vSrkUbJ7RRsAs9wE0RvhDK 9/eOE6k9W256M2HuaIYIQZ4vawGKHpOQgM3NPhFTwJHIs4KgIgB35UIkDFHidh9L R7oE1LRCjCG2Gwolzi8iw0G/LgZ98BgYW3eDdlp4Z746J7vMePI0Mm2J/edh4PUz vRn3snN9Uhi9pkmRxl75OS+1/gQcoLjTkozeAxmfD4OVesGm1jKVtbhY5rBBzQKo oCDoCeWVBw== -----END CERTIFICATE-----Generated at Sun Jul 5 11:19:08 2026 by rpki-client