$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft File: 6F998E710C20D2A9D256034668026243E86F9239.mft (raw, json) Hash identifier: 0CU5KInVivoBX5Ob7ggJ9cidXl/8BKU1u33TC6NEg7I= Subject key identifier: 0C:D5:21:13:C1:2F:55:3B:FE:C6:93:CF:5A:1D:04:D2:DF:CD:F9:4B Authority key identifier: 6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 Certificate issuer: /CN=6F998E710C20D2A9D256034668026243E86F9239 Certificate serial: 1ECE479C02275976F68D679F5FAF91C073710DED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft Manifest number: BD Signing time: Fri 28 Aug 2026 06:47:40 +0000 Manifest this update: Fri 28 Aug 2026 06:42:40 +0000 Manifest next update: Mon 31 Aug 2026 11:03:40 +0000 Files and hashes: 1: 6F998E710C20D2A9D256034668026243E86F9239.crl (hash: Qtc8EKOlODsN5lDXeybl83Jr7+GP/OBsL/FWeFrEGTY=) 2: 323430313a36303a3a2f33322d3332203d3e2030.roa (hash: 71m86gm6yxnGiaqfSvrzEvHzssQUJiLPa3d4KKP4Eyw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ce:47:9c:02:27:59:76:f6:8d:67:9f:5f:af:91:c0:73:71:0d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F998E710C20D2A9D256034668026243E86F9239 Validity Not Before: Aug 28 06:42:40 2026 GMT Not After : Aug 31 11:03:40 2026 GMT Subject: CN=0CD52113C12F553BFEC693CF5A1D04D2DFCDF94B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7c:cc:69:57:85:56:2c:0d:cb:ad:8d:e5:43: 9f:3f:5a:98:06:ff:34:b2:e4:43:32:1d:3a:de:41: 53:14:b9:93:db:30:0e:43:9b:40:a8:c1:39:06:de: 10:37:a3:94:e6:27:73:62:8a:51:3f:cd:dc:ec:0d: 06:16:cc:6f:60:08:78:aa:62:26:a5:72:26:1a:fb: 84:82:e1:09:d7:5f:12:17:30:1c:d5:49:6e:3c:f7: 99:96:e7:58:54:2f:2c:ae:a6:02:c6:62:59:a5:85: e5:3a:0e:b4:bd:04:61:ef:85:12:36:a9:65:f0:96: a3:b3:82:4f:68:1e:5e:68:33:2c:89:79:22:9c:cb: 30:d5:98:87:a8:75:4c:5b:79:e9:1d:b1:27:0d:bd: b8:a5:2e:db:cf:fc:4f:f8:99:b7:52:bf:fc:43:c6: b3:1f:07:80:b9:77:1b:2c:b6:42:7d:46:22:a1:f0: a6:47:03:ce:a0:b8:59:56:5a:65:03:05:e6:6b:61: 70:f3:06:4e:4b:90:25:2a:6b:81:56:f9:85:e9:aa: a7:bb:c2:24:9f:67:88:07:a8:ce:2f:89:6a:57:b3: 06:35:b2:8d:09:23:44:10:c8:21:86:73:fa:97:23: cc:93:a7:54:6c:dd:93:54:c6:50:24:2b:4b:74:af: 25:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D5:21:13:C1:2F:55:3B:FE:C6:93:CF:5A:1D:04:D2:DF:CD:F9:4B X509v3 Authority Key Identifier: keyid:6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b9:ac:61:55:e9:72:01:42:5d:9c:76:57:21:83:8e:43:de: 09:6f:65:8e:1f:88:f6:23:44:8e:32:1d:73:40:5a:ae:4c:5b: ff:74:66:61:e5:9b:79:c9:2c:e1:2d:4d:01:63:0d:6e:b6:cc: 32:f7:1a:41:65:50:1c:ba:6e:4b:ee:88:5c:3c:4a:a0:94:c9: 5e:93:a3:ad:5d:6d:1d:59:a7:8b:0c:aa:93:08:5b:41:17:69: 1a:79:c3:24:76:e5:b2:2a:90:b1:b4:c6:fd:e6:ba:24:0b:6f: 98:9f:24:b8:95:15:f6:0d:1c:7f:d5:db:64:0f:6f:36:05:36: d7:f1:3a:ab:7c:a1:8d:6d:2c:48:d7:29:67:93:be:91:37:b2: 58:49:73:8a:72:fa:cb:aa:b0:93:7a:5c:c4:be:b3:86:67:e0: 74:a0:1a:66:dc:7e:18:71:f0:3b:04:12:f0:6b:f4:38:a8:48: 25:d2:53:db:98:1e:6f:23:12:4d:cd:be:07:7b:d5:56:7c:b4: 20:04:a5:c2:2b:5f:3f:bc:f2:9e:b3:bf:06:d7:54:e5:d4:b3: 2b:53:19:4d:93:04:96:2b:bf:66:c0:cd:44:a6:bc:a0:87:97: bb:f6:a5:a9:67:ff:c3:5b:4a:e6:c8:1a:0e:24:b0:b5:d7:c9: 06:07:17:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHs5HnAInWXb2jWefX6+RwHNxDe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNF ODZGOTIzOTAeFw0yNjA4MjgwNjQyNDBaFw0yNjA4MzExMTAzNDBaMDMxMTAvBgNV BAMTKDBDRDUyMTEzQzEyRjU1M0JGRUM2OTNDRjVBMUQwNEQyREZDREY5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSfMxpV4VWLA3LrY3lQ58/WpgG /zSy5EMyHTreQVMUuZPbMA5Dm0CowTkG3hA3o5TmJ3NiilE/zdzsDQYWzG9gCHiq YialciYa+4SC4QnXXxIXMBzVSW4895mW51hULyyupgLGYlmlheU6DrS9BGHvhRI2 qWXwlqOzgk9oHl5oMyyJeSKcyzDVmIeodUxbeekdsScNvbilLtvP/E/4mbdSv/xD xrMfB4C5dxsstkJ9RiKh8KZHA86guFlWWmUDBeZrYXDzBk5LkCUqa4FW+YXpqqe7 wiSfZ4gHqM4viWpXswY1so0JI0QQyCGGc/qXI8yTp1Rs3ZNUxlAkK0t0ryXTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDNUhE8EvVTv+xpPPWh0E0t/N+UswHwYDVR0j BBgwFoAUb5mOcQwg0qnSVgNGaAJiQ+hvkjkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU0NzY1NTk1NjEwMzE2OS8wLzZGOTk4RTcxMEMyMEQyQTlEMjU2MDM0NjY4MDI2 MjQzRTg2RjkyMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNFODZGOTIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NDc2NTU5NTYxMDMxNjkvMC82Rjk5OEU3MTBDMjBE MkE5RDI1NjAzNDY2ODAyNjI0M0U4NkY5MjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrmsYVXpcgFC XZx2VyGDjkPeCW9ljh+I9iNEjjIdc0Barkxb/3RmYeWbecks4S1NAWMNbrbMMvca QWVQHLpuS+6IXDxKoJTJXpOjrV1tHVmniwyqkwhbQRdpGnnDJHblsiqQsbTG/ea6 JAtvmJ8kuJUV9g0cf9XbZA9vNgU21/E6q3yhjW0sSNcpZ5O+kTeyWElzinL6y6qw k3pcxL6zhmfgdKAaZtx+GHHwOwQS8Gv0OKhIJdJT25gebyMSTc2+B3vVVny0IASl witfP7zynrO/BtdU5dSzK1MZTZMEliu/ZsDNRKa8oIeXu/alqWf/w1tK5sgaDiSw tdfJBgcXMQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:59:33 2026 by rpki-client