$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft File: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft (raw, json) Hash identifier: dMu/c/bZypjNpfLZW21H25UeEsEX3oIHt6eZ0m/68sY= Subject key identifier: 1D:47:D5:13:DC:20:44:D3:75:83:D3:20:CF:EC:92:72:4E:3A:24:D5 Authority key identifier: 6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E Certificate issuer: /CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E Certificate serial: 77E29A551F44817C1BD40A160F130D8F92366DDE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft Manifest number: 0129 Signing time: Fri 28 Aug 2026 07:43:34 +0000 Manifest this update: Fri 28 Aug 2026 07:38:34 +0000 Manifest next update: Mon 31 Aug 2026 14:14:34 +0000 Files and hashes: 1: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl (hash: dSvPxss84ytnPOIcthuEBKm6g5dWkHID3QMQjUR5598=) 2: 3231302e38372e37332e302f32342d3234203d3e20323131333932.roa (hash: B103GkhAbfnBvb3weWZMCaWZpcf/6CwQGFLjnuopNmY=) 3: 3231302e38372e37322e302f32332d3233203d3e20323131333932.roa (hash: Za6CTmgreoWhCuNZjZaegQ9ZSyzYL/pUPt044AAI5Rg=) 4: 3231302e38372e37322e302f32342d3234203d3e20323131333932.roa (hash: mVbRhcTcLyvsAMfZJUY6i4bpMObDpb0oEicxlAT8TpY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 14:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:e2:9a:55:1f:44:81:7c:1b:d4:0a:16:0f:13:0d:8f:92:36:6d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E Validity Not Before: Aug 28 07:38:34 2026 GMT Not After : Aug 31 14:14:34 2026 GMT Subject: CN=1D47D513DC2044D37583D320CFEC92724E3A24D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:a5:dc:6e:79:d9:79:d8:09:bd:18:17:a9: 0c:ad:a2:f9:f1:76:63:05:89:29:e0:da:99:2c:c9: 52:3a:79:87:ed:d5:cb:62:3c:ef:11:a9:82:59:4c: f6:dd:a9:8f:92:c8:47:07:03:10:fb:ab:6e:25:08: 4c:89:d2:e1:0a:66:42:df:d2:d3:dd:43:75:2b:f9: 8d:94:4a:67:be:75:0f:8f:80:40:3a:d3:2a:70:9c: 1f:fa:71:50:62:65:05:4f:43:3f:37:e5:ea:e1:93: 20:2e:27:59:c7:9c:f6:b1:37:b0:28:68:22:38:bd: 2a:89:8c:e4:cc:6a:3f:4e:65:95:52:df:4a:a5:e2: 24:e7:a2:fc:b3:af:68:be:dc:63:dd:04:2c:42:c3: e1:f6:0c:7a:d2:cd:4b:c6:ba:53:37:50:0c:e6:1c: a2:3a:dd:a5:8c:a9:0c:63:47:16:ce:e8:5e:8a:1d: b1:9f:1c:b0:62:61:0f:78:0a:75:17:1f:e1:26:d3: 3f:98:e1:93:54:f5:61:75:14:7b:c6:65:cd:7d:61: c8:b8:84:ba:a0:3a:dc:f0:92:62:f6:a9:49:56:70: 50:f1:de:b7:d2:a0:15:79:01:af:bb:8c:ea:d2:e3: 4b:f7:ac:58:89:65:19:06:fa:0c:b9:5d:f7:7d:4a: 19:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:47:D5:13:DC:20:44:D3:75:83:D3:20:CF:EC:92:72:4E:3A:24:D5 X509v3 Authority Key Identifier: keyid:6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:2d:aa:0d:83:6d:cc:0f:bb:44:ce:93:95:0e:bc:aa:25:e9: 21:66:c8:ba:6c:5b:de:e9:b4:59:37:cd:c5:f6:0e:6c:28:31: 7b:ac:48:04:84:35:58:34:82:ab:ef:19:97:4e:b2:47:7d:81: 39:b6:41:70:a7:aa:5f:c0:2b:c3:3f:9e:ae:07:bf:f4:6d:99: 14:33:b0:d8:59:5c:93:31:43:fa:c2:cf:20:89:bd:ef:64:b7: b9:9d:42:c3:a5:f5:99:fa:4c:56:99:24:87:08:31:0e:40:d1: 9f:b9:3b:0f:c9:d3:12:a3:32:63:8b:d7:46:d8:5f:5c:ef:e5: 6f:ff:93:8d:df:4e:6e:89:5a:b1:e8:17:e9:d8:d8:e1:a8:69: 87:51:4f:be:9a:7d:7e:3f:d2:21:da:b6:79:ba:12:ab:0e:f8: ad:14:a1:7a:b5:bd:4d:3f:80:8f:06:08:79:9c:c1:47:25:89: cd:85:e8:ca:72:b2:29:53:05:14:1d:0e:0d:a5:5f:a6:46:ff: a1:cf:22:af:85:8c:17:d4:83:42:88:e7:9f:2a:e7:ca:1b:19: 13:48:a9:de:40:35:0e:5c:ab:d9:40:b7:bd:ae:4c:79:88:11: c6:03:56:53:21:29:43:a4:63:d1:7e:19:c3:3c:2f:ef:d2:f9: f8:01:59:9b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd+KaVR9EgXwb1AoWDxMNj5I2bd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZB QjNCOTA3RTAeFw0yNjA4MjgwNzM4MzRaFw0yNjA4MzExNDE0MzRaMDMxMTAvBgNV BAMTKDFENDdENTEzREMyMDQ0RDM3NTgzRDMyMENGRUM5MjcyNEUzQTI0RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCa6XcbnnZedgJvRgXqQytovnx dmMFiSng2pksyVI6eYft1ctiPO8RqYJZTPbdqY+SyEcHAxD7q24lCEyJ0uEKZkLf 0tPdQ3Ur+Y2USme+dQ+PgEA60ypwnB/6cVBiZQVPQz835erhkyAuJ1nHnPaxN7Ao aCI4vSqJjOTMaj9OZZVS30ql4iTnovyzr2i+3GPdBCxCw+H2DHrSzUvGulM3UAzm HKI63aWMqQxjRxbO6F6KHbGfHLBiYQ94CnUXH+Em0z+Y4ZNU9WF1FHvGZc19Yci4 hLqgOtzwkmL2qUlWcFDx3rfSoBV5Aa+7jOrS40v3rFiJZRkG+gy5Xfd9ShmvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHUfVE9wgRNN1g9Mgz+ySck46JNUwHwYDVR0j BBgwFoAUbsHjTq3qInCV1XjnhMhcj6s7kH4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTkwNzQ1OC8wLzZFQzFFMzRFQURFQTIyNzA5NUQ1NzhFNzg0Qzg1 QzhGQUIzQjkwN0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZBQjNCOTA3RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE5MDc0NTgvMC82RUMxRTM0RUFERUEy MjcwOTVENTc4RTc4NEM4NUM4RkFCM0I5MDdFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIy2qDYNtzA+7 RM6TlQ68qiXpIWbIumxb3um0WTfNxfYObCgxe6xIBIQ1WDSCq+8Zl06yR32BObZB cKeqX8Arwz+erge/9G2ZFDOw2FlckzFD+sLPIIm972S3uZ1Cw6X1mfpMVpkkhwgx DkDRn7k7D8nTEqMyY4vXRthfXO/lb/+Tjd9ObolasegX6djY4ahph1FPvpp9fj/S Idq2eboSqw74rRSherW9TT+AjwYIeZzBRyWJzYXoynKyKVMFFB0ODaVfpkb/oc8i r4WMF9SDQojnnyrnyhsZE0ip3kA1Dlyr2UC3va5MeYgRxgNWUyEpQ6Rj0X4Zwzwv 79L5+AFZmw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:49:18 2026 by rpki-client