$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft File: 6F899B29F801AD1C8A8515E6EF9709910311F668.mft (raw, json) Hash identifier: 7mX1Yv6U0CJcB27A9bw3MeXsNhu5clgFYZjymz7+1Lc= Subject key identifier: 4A:02:2C:A9:BB:F4:02:C5:E2:2C:41:54:05:FA:E3:D6:81:BD:1E:2C Authority key identifier: 6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 Certificate issuer: /CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Certificate serial: 0C9B7D6A34E3FBE08A971E6DEB1472A263D296A4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft Manifest number: 011A Signing time: Tue 18 Aug 2026 20:17:40 +0000 Manifest this update: Tue 18 Aug 2026 20:12:40 +0000 Manifest next update: Thu 20 Aug 2026 00:16:40 +0000 Files and hashes: 1: 3130332e3134322e38332e302f32342d3234203d3e20313439353133.roa (hash: YsRlvfghH9rCCKNTUVL7cagdvzH0kbY4Bz95ToSRwi8=) 2: 3130332e3134322e38332e302f32342d3234203d3e20313531393531.roa (hash: 79Z+OEgq58IFIFUr3XZSZV6jT+sIs4BTv39+/fzGp6A=) 3: 3130332e3134322e38322e302f32332d3332203d3e20313439353133.roa (hash: gNbCXYLZTSZSDGKA8vf0miL9zRhPVc7YJOnU420lxlM=) 4: 3130332e3134322e38322e302f32342d3234203d3e20313439353133.roa (hash: YBLpKWnBY74NDcGKe6t2+bdDnzFkBiAsPzbxJySwzDk=) 5: 3130332e3134322e38322e302f32332d3332203d3e20313531393531.roa (hash: mVq0tp8huRh6SC0n7rhOLpZu0QlXgV/WIGpxjqgh/TE=) 6: 3130332e3134322e38322e302f32342d3234203d3e20313531393531.roa (hash: NBrKkaX/GBDhP2RLztQmFEQ01TUbwHomfuOqxwCWC7w=) 7: 6F899B29F801AD1C8A8515E6EF9709910311F668.crl (hash: JGgtnIsyipIicUgQB5m3Dut/sAqWtVw//r4Sr3jjpeM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 00:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:9b:7d:6a:34:e3:fb:e0:8a:97:1e:6d:eb:14:72:a2:63:d2:96:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Validity Not Before: Aug 18 20:12:40 2026 GMT Not After : Aug 20 00:16:40 2026 GMT Subject: CN=4A022CA9BBF402C5E22C415405FAE3D681BD1E2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:71:df:c1:5d:e5:5d:2f:e1:89:51:c0:aa:c7: ad:4f:cc:f2:0c:00:02:ed:d3:43:75:5e:f8:98:eb: ad:ad:00:a4:1c:34:f8:65:0d:35:91:de:b2:1d:50: 9c:7a:12:14:bd:5b:b2:a4:d4:6c:5c:c7:f1:4a:d4: 72:bb:5e:8e:12:3e:d0:e7:8e:85:49:88:85:dc:91: 42:bb:ac:0f:10:87:c9:6f:ee:89:9c:c8:fe:d2:da: e6:ee:a8:7e:cc:3a:07:a4:55:36:f8:e3:32:f4:e0: 42:44:bf:9d:8a:cf:fa:7b:4a:95:f0:7c:c9:fa:a7: df:e7:bd:d7:e8:35:be:ef:63:71:79:6a:41:b2:a8: a2:a4:cb:67:8a:41:fd:f4:34:cd:03:15:97:d6:23: 1a:63:7d:f3:da:4e:d3:4a:66:c3:42:dc:3b:ba:98: 5f:b9:70:18:fb:c4:d4:e3:4b:43:8c:08:f9:61:45: 2c:41:9b:30:36:6f:0c:f0:67:c5:76:f5:0a:a6:f3: b7:a7:3f:70:37:9e:b2:28:bc:a3:71:e6:4c:1d:c3: 0d:2d:70:af:a1:63:d5:34:f9:4a:35:cf:95:1f:e1: a9:fb:47:e1:86:3d:25:64:c8:cd:2c:f4:4a:c9:b1: 6f:5b:33:83:f1:fd:73:a2:5a:66:0c:6f:3e:28:99: 70:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:02:2C:A9:BB:F4:02:C5:E2:2C:41:54:05:FA:E3:D6:81:BD:1E:2C X509v3 Authority Key Identifier: keyid:6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e5:91:f4:4a:a1:9e:09:f8:4a:2f:82:3d:a0:c9:d4:ac:87: ad:5f:e3:6d:14:c7:ce:dc:28:a9:43:34:f6:19:25:5c:87:a5: 33:b4:a2:f4:39:29:f8:63:63:f9:11:37:51:dd:dc:40:cf:35: 22:23:14:80:61:26:3b:54:ff:9c:e1:7c:28:9d:bb:27:7a:75: de:b0:ed:65:d6:3d:ab:6f:0d:c9:a6:0d:bb:4b:bb:3f:26:0f: 23:fc:dd:05:93:85:9e:c7:e9:4e:98:4d:ff:5d:7a:e3:67:7e: 1c:a1:6c:17:3f:7a:6b:95:2b:b0:fb:55:16:21:23:fa:b8:ce: ea:c7:ba:2c:dc:7e:70:76:e5:72:93:be:8e:73:bd:62:16:56: 42:be:a5:50:7f:1c:e0:a5:36:72:f2:c7:7c:8a:5e:1d:5b:f4: 81:61:55:9c:b6:21:21:73:59:b7:92:95:3d:28:3c:b5:aa:d0: 8b:76:36:93:51:8f:9d:76:b1:a4:c9:7c:a6:a9:4e:e3:60:8a: 2c:ba:24:b6:8e:dc:91:99:de:fa:e1:b9:50:01:b7:8f:38:83: 5d:92:b4:80:22:33:b6:6e:26:d3:ec:37:e1:6f:59:8e:4f:49: 68:db:cb:35:7f:70:cb:74:6f:da:30:30:e2:d4:7f:52:6f:0c: 69:2c:c3:48 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDJt9ajTj++CKlx5t6xRyomPSlqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEw MzExRjY2ODAeFw0yNjA4MTgyMDEyNDBaFw0yNjA4MjAwMDE2NDBaMDMxMTAvBgNV BAMTKDRBMDIyQ0E5QkJGNDAyQzVFMjJDNDE1NDA1RkFFM0Q2ODFCRDFFMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUcd/BXeVdL+GJUcCqx61PzPIM AALt00N1XviY662tAKQcNPhlDTWR3rIdUJx6EhS9W7Kk1Gxcx/FK1HK7Xo4SPtDn joVJiIXckUK7rA8Qh8lv7omcyP7S2ubuqH7MOgekVTb44zL04EJEv52Kz/p7SpXw fMn6p9/nvdfoNb7vY3F5akGyqKKky2eKQf30NM0DFZfWIxpjffPaTtNKZsNC3Du6 mF+5cBj7xNTjS0OMCPlhRSxBmzA2bwzwZ8V29Qqm87enP3A3nrIovKNx5kwdww0t cK+hY9U0+Uo1z5Uf4an7R+GGPSVkyM0s9ErJsW9bM4Px/XOiWmYMbz4omXDTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSgIsqbv0AsXiLEFUBfrj1oG9HiwwHwYDVR0j BBgwFoAUb4mbKfgBrRyKhRXm75cJkQMR9mgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzY3NzU3MS8wLzZGODk5QjI5RjgwMUFEMUM4QTg1MTVFNkVGOTcw OTkxMDMxMUY2NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEwMzExRjY2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2Nzc1NzEvMC82Rjg5OUIyOUY4MDFB RDFDOEE4NTE1RTZFRjk3MDk5MTAzMTFGNjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALOWR9Eqhngn4 Si+CPaDJ1KyHrV/jbRTHztwoqUM09hklXIelM7Si9Dkp+GNj+RE3Ud3cQM81IiMU gGEmO1T/nOF8KJ27J3p13rDtZdY9q28NyaYNu0u7PyYPI/zdBZOFnsfpTphN/116 42d+HKFsFz96a5UrsPtVFiEj+rjO6se6LNx+cHblcpO+jnO9YhZWQr6lUH8c4KU2 cvLHfIpeHVv0gWFVnLYhIXNZt5KVPSg8tarQi3Y2k1GPnXaxpMl8pqlO42CKLLok to7ckZne+uG5UAG3jziDXZK0gCIztm4m0+w34W9Zjk9JaNvLNX9wy3Rv2jAw4tR/ Um8MaSzDSA== -----END CERTIFICATE-----Generated at Wed Aug 19 17:54:17 2026 by rpki-client