$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft File: 6F899B29F801AD1C8A8515E6EF9709910311F668.mft (raw, json) Hash identifier: ezLJl9qnwrzVs5BDsb3IvnuDkTCoPKTpyJS3FNi6toU= Subject key identifier: 50:00:E6:C9:68:ED:5A:A5:24:4D:0F:AA:C1:CD:B8:B4:B9:6B:66:3D Authority key identifier: 6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 Certificate issuer: /CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Certificate serial: 020ED2DC030CFA37767955E72EC8C9430032E6AF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft Manifest number: 0139 Signing time: Thu 08 Oct 2026 06:22:20 +0000 Manifest this update: Thu 08 Oct 2026 06:17:20 +0000 Manifest next update: Sun 11 Oct 2026 13:33:20 +0000 Files and hashes: 1: 3130332e3134322e38332e302f32342d3234203d3e20313531393531.roa (hash: 79Z+OEgq58IFIFUr3XZSZV6jT+sIs4BTv39+/fzGp6A=) 2: 3130332e3134322e38322e302f32332d3332203d3e20313439353133.roa (hash: gNbCXYLZTSZSDGKA8vf0miL9zRhPVc7YJOnU420lxlM=) 3: 3130332e3134322e38322e302f32342d3234203d3e20313531393531.roa (hash: NBrKkaX/GBDhP2RLztQmFEQ01TUbwHomfuOqxwCWC7w=) 4: 3130332e3134322e38322e302f32342d3234203d3e20313439353133.roa (hash: YBLpKWnBY74NDcGKe6t2+bdDnzFkBiAsPzbxJySwzDk=) 5: 3130332e3134322e38332e302f32342d3234203d3e20313439353133.roa (hash: YsRlvfghH9rCCKNTUVL7cagdvzH0kbY4Bz95ToSRwi8=) 6: 6F899B29F801AD1C8A8515E6EF9709910311F668.crl (hash: dlMLhQ/25fxtMjydxc4bLrf7cgmbVpc99ibISbW47K8=) 7: 3130332e3134322e38322e302f32332d3332203d3e20313531393531.roa (hash: mVq0tp8huRh6SC0n7rhOLpZu0QlXgV/WIGpxjqgh/TE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 13:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:0e:d2:dc:03:0c:fa:37:76:79:55:e7:2e:c8:c9:43:00:32:e6:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Validity Not Before: Oct 8 06:17:20 2026 GMT Not After : Oct 11 13:33:20 2026 GMT Subject: CN=5000E6C968ED5AA5244D0FAAC1CDB8B4B96B663D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b5:6a:e7:97:92:49:60:25:44:87:76:ec:92: 35:68:39:78:1a:d3:c9:00:89:50:7d:f4:82:35:ea: 0a:2c:bc:35:6c:0c:6b:40:60:95:6c:d1:5c:ee:4e: f9:6c:ca:2f:3a:e5:82:b4:a7:b0:0c:ca:aa:56:cf: 74:70:bd:34:5f:a2:6a:20:6b:dd:cd:a3:a2:d8:68: fa:2b:01:33:3a:68:c0:3a:f7:40:f1:30:ce:47:d2: af:33:d5:fe:58:c4:40:48:30:8e:fd:e2:77:de:f4: d8:86:10:fd:03:2c:34:20:a2:e7:05:3b:9a:09:c5: 81:8a:b5:0d:a0:6b:91:d2:c2:82:99:6c:dc:da:38: ba:48:5c:b4:97:52:87:22:61:a4:71:46:ae:f3:ab: f0:d8:7a:31:a0:69:f1:3c:2c:7c:20:33:50:3b:d6: 8b:68:63:0a:90:13:ff:14:50:b3:cd:a7:ff:26:1f: 0a:49:da:0b:d1:8d:d8:cf:e1:98:10:e3:1c:50:58: 0a:88:5b:19:3c:db:7d:f5:ca:b4:33:18:f7:92:63: df:ec:d8:36:a8:3f:24:cc:5d:cc:37:28:85:8c:b8: 7c:07:c4:d0:80:1e:ef:63:d8:f4:df:ab:e3:0d:0c: 70:66:72:56:aa:a2:22:50:90:61:07:6d:5b:76:77: 22:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:00:E6:C9:68:ED:5A:A5:24:4D:0F:AA:C1:CD:B8:B4:B9:6B:66:3D X509v3 Authority Key Identifier: keyid:6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:40:9c:d7:45:e6:c7:3e:54:89:14:92:f6:d2:c0:71:f6:a4: 29:bf:23:c9:ed:d5:44:39:3f:c8:82:f0:13:fe:65:58:e1:f0: 3a:ba:b0:04:e6:7d:c8:2c:2c:2f:bc:8e:21:3d:0a:71:62:ed: d9:81:1e:b1:53:17:6a:f4:9d:12:ad:14:92:84:24:8b:38:c9: e6:fc:99:f7:c0:67:ef:ea:9a:b1:82:d1:b3:f5:8e:d7:2e:91: 5b:b4:70:fa:3f:99:3d:55:45:d7:c1:27:e5:37:64:cf:5c:0a: d7:ff:44:ba:16:62:d5:07:97:d7:9f:fb:7c:e1:25:80:9c:c7: dd:be:5a:29:17:2a:65:0b:e4:11:e7:91:d7:7a:f9:9b:ed:83: 15:dc:e7:0e:44:67:e7:a4:20:bf:c3:3a:74:50:8e:d4:fe:0f: af:e8:2d:fe:ae:57:26:02:17:39:bd:18:a5:0c:46:d7:6e:17: a1:55:8c:6c:bc:32:45:7e:47:06:d5:21:c5:f8:d1:d9:bf:64: 13:5a:5e:4d:94:aa:55:e7:51:0c:66:14:8d:d1:31:ce:89:cf: f6:0e:1b:0d:6c:25:f1:aa:ed:6a:3d:6e:83:6f:2c:33:da:12: a3:28:f0:68:d1:95:ef:c3:f4:f7:63:16:18:80:e0:35:37:39: 6b:cb:f7:a5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAg7S3AMM+jd2eVXnLsjJQwAy5q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEw MzExRjY2ODAeFw0yNjEwMDgwNjE3MjBaFw0yNjEwMTExMzMzMjBaMDMxMTAvBgNV BAMTKDUwMDBFNkM5NjhFRDVBQTUyNDREMEZBQUMxQ0RCOEI0Qjk2QjY2M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKtWrnl5JJYCVEh3bskjVoOXga 08kAiVB99II16gosvDVsDGtAYJVs0VzuTvlsyi865YK0p7AMyqpWz3RwvTRfomog a93No6LYaPorATM6aMA690DxMM5H0q8z1f5YxEBIMI794nfe9NiGEP0DLDQgoucF O5oJxYGKtQ2ga5HSwoKZbNzaOLpIXLSXUociYaRxRq7zq/DYejGgafE8LHwgM1A7 1otoYwqQE/8UULPNp/8mHwpJ2gvRjdjP4ZgQ4xxQWAqIWxk82331yrQzGPeSY9/s 2DaoPyTMXcw3KIWMuHwHxNCAHu9j2PTfq+MNDHBmclaqoiJQkGEHbVt2dyL7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUADmyWjtWqUkTQ+qwc24tLlrZj0wHwYDVR0j BBgwFoAUb4mbKfgBrRyKhRXm75cJkQMR9mgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzY3NzU3MS8wLzZGODk5QjI5RjgwMUFEMUM4QTg1MTVFNkVGOTcw OTkxMDMxMUY2NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEwMzExRjY2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2Nzc1NzEvMC82Rjg5OUIyOUY4MDFB RDFDOEE4NTE1RTZFRjk3MDk5MTAzMTFGNjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUCc10Xmxz5U iRSS9tLAcfakKb8jye3VRDk/yILwE/5lWOHwOrqwBOZ9yCwsL7yOIT0KcWLt2YEe sVMXavSdEq0UkoQkizjJ5vyZ98Bn7+qasYLRs/WO1y6RW7Rw+j+ZPVVF18En5Tdk z1wK1/9EuhZi1QeX15/7fOElgJzH3b5aKRcqZQvkEeeR13r5m+2DFdznDkRn56Qg v8M6dFCO1P4Pr+gt/q5XJgIXOb0YpQxG124XoVWMbLwyRX5HBtUhxfjR2b9kE1pe TZSqVedRDGYUjdExzonP9g4bDWwl8artaj1ug28sM9oSoyjwaNGV78P092MWGIDg NTc5a8v3pQ== -----END CERTIFICATE-----Generated at Fri Oct 9 11:02:57 2026 by rpki-client