$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft File: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft (raw, json) Hash identifier: UZUGpiymj3iqoSlCoPM5x7nEJrtF8c6pyypMZl3RjLI= Subject key identifier: 0E:57:55:91:18:86:D1:CE:AE:A8:D3:38:9C:B4:1D:8C:16:EA:95:89 Authority key identifier: 6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72 Certificate issuer: /CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72 Certificate serial: 45B6C9240E0D3459EB902F1F98050601F22412D6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft Manifest number: CA Signing time: Fri 28 Aug 2026 06:47:54 +0000 Manifest this update: Fri 28 Aug 2026 06:42:54 +0000 Manifest next update: Mon 31 Aug 2026 09:36:54 +0000 Files and hashes: 1: 3130332e3133392e3231332e302f32342d3234203d3e2034383437.roa (hash: k1rAJlK3nl+RMukZCZAOyW2Ztrz5xzJsS+9Jm+UCWLI=) 2: 3130332e3130352e3230302e302f32342d3234203d3e20313337373634.roa (hash: wAWydnytWwQ6KDrEdMo8gC5yClAHE5G7egoVtj8VJEQ=) 3: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl (hash: tawHz41SIGOk/FdNft39bfs8GD1mVxhwwv/nQx7fMYY=) 4: 3130332e3130352e3230322e302f32342d3234203d3e20313337373634.roa (hash: yVxOUCxwSQgdQ2Vm2tB9MZclhRZA4b88sSbFOq2CQHY=) 5: 3130332e3130352e3230312e302f32342d3234203d3e20313337373634.roa (hash: NVUII80DwSw0zpMxLmgIHiGlPbICMvueravTJ8IQZ6Y=) 6: 3130332e3133392e3231322e302f32342d3234203d3e2034383437.roa (hash: fgedEchRrP66KqqHCaA1a1U1d7AKMe+NspTQhBPC/H4=) 7: 3130332e39382e34302e302f32322d3232203d3e2030.roa (hash: e8iEGGHTv4+FgS9wkri7Y69nnBMxrR4pBM+NO8acXaE=) 8: 3130332e3130352e3230332e302f32342d3234203d3e20313337373634.roa (hash: njPdr9nkl5PqUnxF8eOxJG8abgbqDS3nA0LWdpX0NDQ=) 9: 323430333a356563303a3a2f33322d3332203d3e2030.roa (hash: pn5P8/momGxXTFfknwO8tuClvccGh1zTNEWhwlA2qwo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b6:c9:24:0e:0d:34:59:eb:90:2f:1f:98:05:06:01:f2:24:12:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72 Validity Not Before: Aug 28 06:42:54 2026 GMT Not After : Aug 31 09:36:54 2026 GMT Subject: CN=0E5755911886D1CEAEA8D3389CB41D8C16EA9589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:76:79:28:9d:79:ce:15:fe:c4:7c:8d:4e:0f: 1f:04:e6:2d:c0:38:2a:b0:a9:80:f7:d7:64:70:16: c7:d3:90:ea:fb:e9:93:a5:4d:44:ce:52:53:71:63: a2:36:79:92:5c:08:64:60:3c:ee:2a:57:fa:64:10: c9:20:4a:1b:24:28:0b:6c:9d:d3:d8:f8:28:7e:c8: a2:84:b1:04:bb:82:2d:ef:eb:fb:7c:bc:86:6e:06: f1:1b:ca:58:58:95:56:85:6f:d3:2c:73:50:c9:b2: 5b:28:5e:06:27:01:a8:80:d0:98:ad:89:47:29:b2: 29:ba:85:55:6c:25:73:1d:97:ab:fa:59:bf:52:96: aa:78:b8:57:27:4d:6d:94:2c:91:81:ce:3e:36:12: f9:a2:69:ad:28:89:26:15:a0:a3:6c:8d:29:2a:0d: e9:f2:86:62:9f:5c:55:27:20:7c:02:14:96:6b:cb: 97:18:91:e1:fd:9a:fe:fc:13:fc:34:0f:8d:99:94: 40:73:20:b8:d1:3b:dd:40:18:25:05:41:74:2b:b7: 82:a7:2c:d0:0b:1a:ad:d4:be:39:c1:63:1e:1b:7f: 9d:6a:70:ba:2c:13:8b:e6:21:ee:0d:b8:a9:73:02: 35:54:bd:bc:75:30:25:94:d2:d6:8d:23:ff:bf:84: fe:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:57:55:91:18:86:D1:CE:AE:A8:D3:38:9C:B4:1D:8C:16:EA:95:89 X509v3 Authority Key Identifier: keyid:6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a9:15:d6:ce:09:70:b7:df:ba:3c:1c:38:6d:37:0d:ef:81: bd:28:38:65:55:d7:c8:55:d8:3f:25:3f:35:1d:2f:49:04:ab: 7b:de:56:b3:05:4e:26:7c:dc:b9:8c:0e:b6:c8:5f:c8:79:c7: 2d:aa:6a:a2:58:21:ab:eb:78:bc:44:80:5c:ba:35:9f:4e:47: 04:3e:e8:40:d9:00:dd:b0:cd:f5:73:7a:ec:2c:a8:22:78:bf: 66:2b:43:47:23:6a:c8:3c:1d:0f:cb:d2:f4:c3:a6:19:4b:4f: 68:2c:69:be:81:3e:e5:cb:e9:38:1d:00:95:7e:29:41:b6:38: 95:33:47:25:1e:87:6f:37:92:a5:db:68:82:73:41:dd:b5:4c: a0:6e:f8:b5:3d:2d:b9:5c:2a:dc:0c:ea:7d:85:5b:f9:e0:bb: 53:5e:f1:8b:ce:be:69:00:cb:b5:86:95:67:af:ed:c3:8f:71: 55:12:6c:89:bf:d0:c3:af:5c:d2:ee:a4:fc:fc:8f:fe:20:58: ea:14:de:14:76:c7:84:05:97:a0:f0:14:22:af:78:b7:d8:6a: d9:98:48:8d:2a:5c:e3:d6:70:75:ab:e7:a6:cc:2f:6c:8f:ec: 16:37:ce:bd:7b:ed:f0:57:dc:00:2f:9e:07:36:56:c8:6a:e0: cd:5a:df:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURbbJJA4NNFnrkC8fmAUGAfIkEtYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYz NjUzNkU3MjAeFw0yNjA4MjgwNjQyNTRaFw0yNjA4MzEwOTM2NTRaMDMxMTAvBgNV BAMTKDBFNTc1NTkxMTg4NkQxQ0VBRUE4RDMzODlDQjQxRDhDMTZFQTk1ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGdnkonXnOFf7EfI1ODx8E5i3A OCqwqYD312RwFsfTkOr76ZOlTUTOUlNxY6I2eZJcCGRgPO4qV/pkEMkgShskKAts ndPY+Ch+yKKEsQS7gi3v6/t8vIZuBvEbylhYlVaFb9Msc1DJslsoXgYnAaiA0Jit iUcpsim6hVVsJXMdl6v6Wb9Slqp4uFcnTW2ULJGBzj42Evmiaa0oiSYVoKNsjSkq DenyhmKfXFUnIHwCFJZry5cYkeH9mv78E/w0D42ZlEBzILjRO91AGCUFQXQrt4Kn LNALGq3UvjnBYx4bf51qcLosE4vmIe4NuKlzAjVUvbx1MCWU0taNI/+/hP4XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDldVkRiG0c6uqNM4nLQdjBbqlYkwHwYDVR0j BBgwFoAUa4a9P6D7Cze6xk1sjS2fZjZTbnIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1MTY3MDg1Mjk0Mzg3My8wLzZCODZCRDNGQTBGQjBCMzdCQUM2NEQ2QzhEMkQ5 RjY2MzY1MzZFNzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYzNjUzNkU3Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTE2NzA4NTI5NDM4NzMvMC82Qjg2QkQzRkEwRkIw QjM3QkFDNjRENkM4RDJEOUY2NjM2NTM2RTcyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqkV1s4JcLff ujwcOG03De+BvSg4ZVXXyFXYPyU/NR0vSQSre95WswVOJnzcuYwOtshfyHnHLapq olghq+t4vESAXLo1n05HBD7oQNkA3bDN9XN67CyoIni/ZitDRyNqyDwdD8vS9MOm GUtPaCxpvoE+5cvpOB0AlX4pQbY4lTNHJR6HbzeSpdtognNB3bVMoG74tT0tuVwq 3AzqfYVb+eC7U17xi86+aQDLtYaVZ6/tw49xVRJsib/Qw69c0u6k/PyP/iBY6hTe FHbHhAWXoPAUIq94t9hq2ZhIjSpc49ZwdavnpswvbI/sFjfOvXvt8FfcAC+eBzZW yGrgzVrfVQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:23:11 2026 by rpki-client