$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft File: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft (raw, json) Hash identifier: 0Kr6viGvJg/u9X+MZiAgSrAtR7MauRLbAA5WXbo+uRM= Subject key identifier: AD:87:91:04:52:23:F1:96:8B:61:29:5E:08:3E:D5:F7:7C:2C:93:C5 Authority key identifier: 6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D Certificate issuer: /CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D Certificate serial: 07AACBE6481DC12462B39347427AF53FB497B0E9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft Manifest number: B8 Signing time: Fri 28 Aug 2026 06:48:05 +0000 Manifest this update: Fri 28 Aug 2026 06:43:05 +0000 Manifest next update: Mon 31 Aug 2026 14:18:05 +0000 Files and hashes: 1: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl (hash: FuAzDRbSe5+r4OsC/Z9XUGJOyL5sjX6hAOUIEM9YADM=) 2: 34332e3232352e3231362e302f32322d3232203d3e2034383437.roa (hash: j/eV+lOtMaJE7zLazg78nWoyQGsOhGQyTahosxccrn8=) 3: 3130332e34342e3137382e302f32332d3233203d3e2034383437.roa (hash: lSEivQpgfyTwattyz5XGR7SBQ4DIJ5haeZxfSmZXjnc=) 4: 3130332e34342e3139382e302f32342d3234203d3e2034383030.roa (hash: 6dqpVUqXBgLgk1fCILtRSZoIidor7YhnbVbc5fHfQhk=) 5: 3130332e34342e3137362e302f32332d3233203d3e2034383437.roa (hash: ae7SUgq9OA/NLExuOxlNbHZGMMv09rTQmfolmacGeB4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 14:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:aa:cb:e6:48:1d:c1:24:62:b3:93:47:42:7a:f5:3f:b4:97:b0:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D Validity Not Before: Aug 28 06:43:05 2026 GMT Not After : Aug 31 14:18:05 2026 GMT Subject: CN=AD8791045223F1968B61295E083ED5F77C2C93C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:01:6b:71:1a:80:1d:1a:2a:14:53:05:0c:c8: 92:fb:42:ba:1b:2b:fe:92:ec:4d:14:f9:76:82:7e: 8b:fd:71:47:66:df:a4:49:f3:cd:33:be:a1:75:a9: 62:09:f6:ad:1e:12:39:b7:81:24:5c:f2:65:47:4d: 09:4e:6a:4f:4b:03:6e:03:d6:97:d5:72:cb:a8:0c: 44:4d:db:69:c0:f2:ac:db:86:09:14:e5:a4:8b:fe: d5:9c:12:ef:e3:50:8e:b7:29:e9:a9:55:4b:0a:58: e6:d1:ac:3b:51:e0:52:f9:41:2c:57:06:4e:f9:2c: 35:92:9d:1f:0a:45:46:cc:c9:d6:35:9a:b6:9c:cc: 4b:2b:14:09:04:a0:1c:8a:32:12:1b:8b:c7:e1:fc: ba:a0:f5:e1:0b:39:2e:30:f7:e3:1a:f8:22:1e:5f: 37:a6:b3:f5:f1:7c:d4:43:0a:64:84:93:63:4f:d7: f5:68:f3:cc:93:09:4c:a6:2d:f6:f8:a4:f8:f2:95: 2f:4c:98:3b:71:40:8b:61:6f:8b:6d:0a:0a:de:98: 22:ad:71:1a:d8:2f:2f:56:44:c4:c6:d6:7f:78:bc: d2:e1:ef:0a:eb:7e:c8:57:33:30:ed:42:91:8e:06: 1c:74:16:f7:71:39:21:1c:30:53:d8:c9:c8:37:bc: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:87:91:04:52:23:F1:96:8B:61:29:5E:08:3E:D5:F7:7C:2C:93:C5 X509v3 Authority Key Identifier: keyid:6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:23:b4:f1:a8:69:85:5d:82:98:75:db:d0:af:f0:d6:01:a2: 0a:1a:f1:c8:66:88:ad:30:46:e0:10:57:a5:a5:48:17:11:2e: bd:e5:ee:01:38:85:1d:9c:cc:0b:dc:a9:ee:16:a0:0e:40:ce: b0:a6:71:6e:94:fc:3c:95:c4:9e:65:c9:1b:c7:2d:0c:6e:ed: c3:d0:cf:6d:5c:0e:a2:c1:8c:7d:83:6e:61:6b:02:dc:0e:98: 17:25:a7:89:32:46:66:ae:77:d7:c8:5a:cc:a1:61:98:57:94: c6:da:7d:d6:62:b2:88:8b:4d:0f:68:26:f8:b5:65:1e:d9:4e: ab:c5:fb:ba:72:66:fa:b6:db:15:ce:24:41:6d:62:63:07:6f: bd:35:fa:c8:be:03:e5:bd:29:2b:b7:59:b8:64:55:9e:1b:c0: f9:ad:8e:24:06:c2:71:55:70:e9:89:47:0c:0a:c4:de:16:4d: cc:96:2c:5d:68:98:2d:7d:7d:d7:f6:83:b0:16:7c:f4:8a:70: 90:20:f2:54:27:81:0a:f8:4a:46:76:6f:e6:6d:cd:6a:2d:6f: f8:35:76:46:27:e1:a7:ef:fb:08:74:c6:95:06:52:52:4a:bd: f2:04:8a:53:c2:9f:40:d5:61:d2:16:65:e1:37:cc:97:1c:3c: 8f:59:ea:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUB6rL5kgdwSRis5NHQnr1P7SXsOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCN0JFQzJGMjUxQjIwOUY1NzBERDE1NkZFMTU3NEI2 RDAzMEIzRDAeFw0yNjA4MjgwNjQzMDVaFw0yNjA4MzExNDE4MDVaMDMxMTAvBgNV BAMTKEFEODc5MTA0NTIyM0YxOTY4QjYxMjk1RTA4M0VENUY3N0MyQzkzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFAWtxGoAdGioUUwUMyJL7Qrob K/6S7E0U+XaCfov9cUdm36RJ880zvqF1qWIJ9q0eEjm3gSRc8mVHTQlOak9LA24D 1pfVcsuoDERN22nA8qzbhgkU5aSL/tWcEu/jUI63KempVUsKWObRrDtR4FL5QSxX Bk75LDWSnR8KRUbMydY1mraczEsrFAkEoByKMhIbi8fh/Lqg9eELOS4w9+Ma+CIe Xzems/XxfNRDCmSEk2NP1/Vo88yTCUymLfb4pPjylS9MmDtxQIthb4ttCgremCKt cRrYLy9WRMTG1n94vNLh7wrrfshXMzDtQpGOBhx0FvdxOSEcMFPYycg3vNONAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrYeRBFIj8ZaLYSleCD7V93wsk8UwHwYDVR0j BBgwFoAUbbe+wvJRsgn1cN0Vb+FXS20DCz0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk1NTc4NTc1MTQ2MTg5MS8wLzZEQjdCRUMyRjI1MUIyMDlGNTcwREQxNTZGRTE1 NzRCNkQwMzBCM0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkRCN0JFQzJGMjUxQjIwOUY1NzBERDE1NkZFMTU3NEI2RDAzMEIzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NTU3ODU3NTE0NjE4OTEvMC82REI3QkVDMkYyNTFC MjA5RjU3MEREMTU2RkUxNTc0QjZEMDMwQjNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSO08ahphV2C mHXb0K/w1gGiChrxyGaIrTBG4BBXpaVIFxEuveXuATiFHZzMC9yp7hagDkDOsKZx bpT8PJXEnmXJG8ctDG7tw9DPbVwOosGMfYNuYWsC3A6YFyWniTJGZq5318hazKFh mFeUxtp91mKyiItND2gm+LVlHtlOq8X7unJm+rbbFc4kQW1iYwdvvTX6yL4D5b0p K7dZuGRVnhvA+a2OJAbCcVVw6YlHDArE3hZNzJYsXWiYLX191/aDsBZ89IpwkCDy VCeBCvhKRnZv5m3Nai1v+DV2Rifhp+/7CHTGlQZSUkq98gSKU8KfQNVh0hZl4TfM lxw8j1nqWw== -----END CERTIFICATE-----Generated at Sat Aug 29 07:06:07 2026 by rpki-client