$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft File: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft (raw, json) Hash identifier: JYilEXn3F1QsjFi8LUvzS4HQMQb9tcCWVbejYSP3U3U= Subject key identifier: 3E:D7:1D:0E:E8:02:93:FE:D4:4B:68:EF:7D:94:63:49:39:94:86:82 Authority key identifier: 6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E Certificate issuer: /CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E Certificate serial: 25454A01F23B9BAEB2433A7E4878D5A08939D112 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft Manifest number: 013D Signing time: Mon 12 Oct 2026 23:07:32 +0000 Manifest this update: Mon 12 Oct 2026 23:02:32 +0000 Manifest next update: Fri 16 Oct 2026 09:46:32 +0000 Files and hashes: 1: 3231302e38372e37322e302f32342d3234203d3e20323131333932.roa (hash: mVbRhcTcLyvsAMfZJUY6i4bpMObDpb0oEicxlAT8TpY=) 2: 3231302e38372e37332e302f32342d3234203d3e20323131333932.roa (hash: B103GkhAbfnBvb3weWZMCaWZpcf/6CwQGFLjnuopNmY=) 3: 3231302e38372e37322e302f32332d3233203d3e20323131333932.roa (hash: Za6CTmgreoWhCuNZjZaegQ9ZSyzYL/pUPt044AAI5Rg=) 4: 6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl (hash: qj94QDFG+RwFCbLkMN83dUrfRlJOXPsx4pq3el/fEOs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 09:46:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:45:4a:01:f2:3b:9b:ae:b2:43:3a:7e:48:78:d5:a0:89:39:d1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6EC1E34EADEA227095D578E784C85C8FAB3B907E Validity Not Before: Oct 12 23:02:32 2026 GMT Not After : Oct 16 09:46:32 2026 GMT Subject: CN=3ED71D0EE80293FED44B68EF7D94634939948682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:0f:af:0d:ac:92:95:3c:2c:92:55:de:93: 37:c5:be:86:53:c1:fd:f1:40:62:e7:c8:9a:97:5b: 98:d0:8a:75:f3:80:39:52:62:37:b1:69:27:9f:81: 8d:9a:58:7c:46:b8:f1:7b:47:b0:36:b9:ef:cc:5e: b4:4e:3f:b0:a8:6e:71:00:97:5a:db:ba:fb:b5:e1: 3e:20:c6:c1:5c:91:15:c7:d2:8e:aa:a9:79:1b:f0: b2:5d:ef:64:3f:09:7f:8a:a7:81:e8:8a:eb:ae:98: fa:bb:52:8f:be:4d:38:47:bc:76:57:41:1a:25:21: b7:f8:e2:2c:9d:bf:f1:f2:bd:85:af:83:26:a7:32: 17:65:8d:5a:ee:30:40:d2:08:3e:9f:80:f6:dd:39: ce:e4:e7:d5:bb:e0:50:84:dd:a9:2c:95:4d:86:73: 17:8f:60:f0:d7:39:08:22:e8:cd:0e:d5:ec:23:57: d3:19:8a:06:5c:e6:ab:7f:a1:05:47:06:69:bf:67: 73:86:a4:8c:c8:0b:72:58:4b:61:76:f6:6c:8f:55: cf:88:43:b2:b8:e1:d1:f1:b7:41:3f:01:07:b2:34: fa:6c:71:37:71:4d:30:b0:a9:da:d1:c8:21:09:65: 01:61:9b:ef:09:1d:49:94:41:1a:83:1d:0f:6e:cb: b0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D7:1D:0E:E8:02:93:FE:D4:4B:68:EF:7D:94:63:49:39:94:86:82 X509v3 Authority Key Identifier: keyid:6E:C1:E3:4E:AD:EA:22:70:95:D5:78:E7:84:C8:5C:8F:AB:3B:90:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6EC1E34EADEA227095D578E784C85C8FAB3B907E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061907458/0/6EC1E34EADEA227095D578E784C85C8FAB3B907E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:09:38:ea:84:84:3b:86:3b:de:d8:c4:57:b7:56:26:52:ae: 1e:3e:16:c7:dd:34:a6:f0:ae:95:17:18:bb:21:1b:1a:f3:fe: 23:44:98:67:e7:f7:fe:d5:b0:b9:fe:67:89:cc:e4:59:51:89: 3c:46:3c:25:51:f3:cf:10:65:df:95:ec:a5:7b:e6:00:73:39: 7d:9a:86:fc:c6:bd:df:9b:3f:d4:e7:10:0f:69:83:39:51:fb: 56:3e:0a:c7:d2:40:77:c6:ab:a4:f5:c1:e8:c8:38:74:5b:36: dd:c6:7b:bf:47:ab:84:ec:05:96:18:d8:59:07:8c:09:eb:52: 89:ee:4c:04:1f:47:0f:47:1c:2f:58:9f:f4:b6:ee:44:9d:2d: fc:cc:de:32:d0:b8:63:a8:83:27:f2:40:b5:10:10:8b:72:4d: d8:9a:38:3d:7f:2e:07:97:27:1d:b7:82:86:09:32:a6:5b:ef: fc:ab:30:22:a4:06:aa:f5:ea:0e:bb:15:94:e0:5e:f1:d1:27: 6e:35:fc:d5:e8:13:5d:ae:00:61:b8:37:a6:4c:89:07:cc:0a: b8:19:23:24:06:b6:e0:6e:b0:95:e7:39:9d:68:e1:05:44:7a: 7f:15:a8:e6:ec:c2:d9:18:b3:24:d7:1d:0f:99:3e:04:4f:28: 72:86:98:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJUVKAfI7m66yQzp+SHjVoIk50RIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZB QjNCOTA3RTAeFw0yNjEwMTIyMzAyMzJaFw0yNjEwMTYwOTQ2MzJaMDMxMTAvBgNV BAMTKDNFRDcxRDBFRTgwMjkzRkVENDRCNjhFRjdEOTQ2MzQ5Mzk5NDg2ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCovA+vDaySlTwsklXekzfFvoZT wf3xQGLnyJqXW5jQinXzgDlSYjexaSefgY2aWHxGuPF7R7A2ue/MXrROP7CobnEA l1rbuvu14T4gxsFckRXH0o6qqXkb8LJd72Q/CX+Kp4HoiuuumPq7Uo++TThHvHZX QRolIbf44iydv/HyvYWvgyanMhdljVruMEDSCD6fgPbdOc7k59W74FCE3akslU2G cxePYPDXOQgi6M0O1ewjV9MZigZc5qt/oQVHBmm/Z3OGpIzIC3JYS2F29myPVc+I Q7K44dHxt0E/AQeyNPpscTdxTTCwqdrRyCEJZQFhm+8JHUmUQRqDHQ9uy7DzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPtcdDugCk/7US2jvfZRjSTmUhoIwHwYDVR0j BBgwFoAUbsHjTq3qInCV1XjnhMhcj6s7kH4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTkwNzQ1OC8wLzZFQzFFMzRFQURFQTIyNzA5NUQ1NzhFNzg0Qzg1 QzhGQUIzQjkwN0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkVDMUUzNEVBREVBMjI3MDk1RDU3OEU3ODRDODVDOEZBQjNCOTA3RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE5MDc0NTgvMC82RUMxRTM0RUFERUEy MjcwOTVENTc4RTc4NEM4NUM4RkFCM0I5MDdFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAk46oSEO4Y7 3tjEV7dWJlKuHj4Wx900pvCulRcYuyEbGvP+I0SYZ+f3/tWwuf5niczkWVGJPEY8 JVHzzxBl35XspXvmAHM5fZqG/Ma935s/1OcQD2mDOVH7Vj4Kx9JAd8arpPXB6Mg4 dFs23cZ7v0erhOwFlhjYWQeMCetSie5MBB9HD0ccL1if9LbuRJ0t/MzeMtC4Y6iD J/JAtRAQi3JN2Jo4PX8uB5cnHbeChgkyplvv/KswIqQGqvXqDrsVlOBe8dEnbjX8 1egTXa4AYbg3pkyJB8wKuBkjJAa24G6wlec5nWjhBUR6fxWo5uzC2RizJNcdD5k+ BE8ocoaYWw== -----END CERTIFICATE-----Generated at Thu Oct 15 02:12:14 2026 by rpki-client