$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft File: EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft (raw, json) Hash identifier: RCjVLi1HytBLmb2rvbh4Qd5Faug3MIPtyTkEYVyM9bc= Subject key identifier: 7B:DF:B5:88:51:7E:67:F0:5D:C8:BD:BC:4A:E3:96:F6:50:D3:3E:E7 Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3 Certificate issuer: /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3 Certificate serial: 114E5987B0776445B2D6A16977FF20EB3E897842 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft Manifest number: 0100 Signing time: Mon 12 Oct 2026 22:52:30 +0000 Manifest this update: Mon 12 Oct 2026 22:47:30 +0000 Manifest next update: Fri 16 Oct 2026 08:03:30 +0000 Files and hashes: 1: 3230322e39312e3234302e302f32312d3231203d3e2034313334.roa (hash: CWEsWS7kVZnOx4xmuuzCp2O7YiyRi0F8CeFze20KTfc=) 2: EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl (hash: 5F/CDjVxZ6Z5NQVQ0fzY7LKxXxKQkhuBVy+SFUeILzQ=) 3: 3131392e33382e302e302f32312d3231203d3e2034383337.roa (hash: pA2/RGRRpBfwcFBcWiRU0WJWtKVONwrnIQLFDf59omk=) 4: 3230322e37352e3231322e302f32322d3232203d3e2034383337.roa (hash: Zr+kvL8bc+D1IaoykZ6zx12qtblZNjfd5Wctf7SrgAY=) 5: 3131392e33382e36342e302f31382d3138203d3e2030.roa (hash: uz2FQNnsIWHuEwBoUJV4yxycmEcUkz6eCVglpWRUo2k=) 6: 3230322e37352e3231362e302f32322d3232203d3e2034313334.roa (hash: zHhMiD48K6uJfrzAak9pIOBtn/nJ4uu96wZ1uk2WLXA=) 7: 3131392e33382e382e302f32312d3231203d3e2030.roa (hash: TSfANWG1UodRq6WAepOAW+1UUDbGV5JDrXlpD0fMcuY=) 8: 3231312e3135352e3233372e302f32342d3234203d3e2030.roa (hash: 0EzglXpArwUVhyolEnsV0yKJ1qVFbYV874R7xNgVBTc=) 9: 3230322e39312e3235312e302f32342d3234203d3e203538343631.roa (hash: OUFddwv/4qfbON2T0W/62QzD3hTAfqsiHysLN9usO/Y=) 10: 3230322e37352e3232302e302f32322d3232203d3e2034313334.roa (hash: p0NZI0GINU6BeTB+UXx+csuFUdajJF3eGRHj1Z702oc=) 11: 3231312e3135352e3233362e302f32342d3234203d3e203536303431.roa (hash: cYxkEhvTjTBflxplIZ++9fBOpk0/LaPF0Nyaq6qy26E=) 12: 3131392e33382e31362e302f32302d3230203d3e2030.roa (hash: w81RRX4LIyDkc88O+qWY5anF3EghwxjfNcXNulV4zjQ=) 13: 3131392e33372e3230302e302f32312d3231203d3e2030.roa (hash: zdBC+EHpW4XQvPuhARTt0tW6lKLHfCnmfuZt8cM9pMY=) 14: 3131392e33372e3139322e302f32312d3231203d3e2034313334.roa (hash: gBxlUjgY/51Y/F/tZl5uKKjyZi8xCCeFB073k6/hjoo=) 15: 3230322e37352e3230382e302f32312d3231203d3e2034383337.roa (hash: fVtoi9N8EkzxSN8PyalA7AX/4ARK7wWPJvCj6KyoyjU=) 16: 3231312e3135352e3232342e302f32312d3231203d3e2034313334.roa (hash: L5ghtiuZZHocfAsh6/BljEIarx+57jviXMV8Dwamu28=) 17: 3230322e39312e3232342e302f32312d3231203d3e2034383337.roa (hash: N2b5cUhww8rOn3wOwOuZHsJB9P53zX7cQfx7Y1gfs3I=) 18: 3131392e33382e33322e302f31392d3139203d3e2030.roa (hash: pll4icFO4h01ZMkqbPFVtyMz7qEmYEJXCQzrFMaJrDc=) 19: 3230322e39312e3234382e302f32322d3232203d3e2034313334.roa (hash: acecX4+DX3uhPhsPJCGqi9GLyz23PjxFgOQWsBgruG4=) 20: 3131392e33372e3230382e302f32302d3230203d3e2030.roa (hash: 3WH8vjroGAXVdp67gRfFvlvjY+hfEu0tNIyL0YTTqZY=) 21: 3231312e3135352e3233382e302f32332d3233203d3e2030.roa (hash: eLkwRpmTQ5phlkLILCwKyS1r8DYPePQxhxRfIWk9W68=) 22: 3131392e33372e3232342e302f31392d3139203d3e2030.roa (hash: 9YlS0caQ64evF/SqDrfWNuAlfr7HMIYGm6heJ8QB4LE=) 23: 3231312e3135352e3232372e302f32342d3234203d3e203538343631.roa (hash: 4K1OPvFpU+HrVehb8ctO5wRAhutS8zJ+/2BHd0aa/wY=) 24: 3230322e37352e3230382e302f32322d3232203d3e2034383337.roa (hash: 5SbTQ7N2K2ugCxDvUZndo/X8nBSovYBq782ujruWMtI=) 25: 3230322e39312e3233322e302f32312d3231203d3e2034383337.roa (hash: JnpaOA7xi+2AAdljJgxT5MIjkAw9H+FTZnv0biVZNyc=) 26: 3230322e39312e3235322e302f32322d3232203d3e2030.roa (hash: 6uUlNdPQp+J76BtKkcmZSkcVGqbjn0KGhdyN+vTY/gw=) 27: 3231312e3135352e3233322e302f32322d3232203d3e2034383337.roa (hash: qbIlGZuLW4EfB4pWvgRtnCiCxbiOFoJlF2Xs1LMwnwA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 08:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:4e:59:87:b0:77:64:45:b2:d6:a1:69:77:ff:20:eb:3e:89:78:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3 Validity Not Before: Oct 12 22:47:30 2026 GMT Not After : Oct 16 08:03:30 2026 GMT Subject: CN=7BDFB588517E67F05DC8BDBC4AE396F650D33EE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:6d:ba:93:a9:91:91:fb:11:95:95:19:8d: e7:9c:84:4e:1e:50:9f:9d:bc:78:d4:5e:ce:3f:fa: 6f:5d:d2:46:c4:4d:ce:10:ec:9b:23:32:ac:d9:8c: d3:40:c1:bf:a1:8c:ec:8a:f7:96:40:00:d5:04:e3: 19:03:59:30:6a:d3:e6:57:1b:bd:b0:60:fb:81:36: 3c:0f:21:81:34:5c:7f:28:73:aa:ca:1c:d0:9d:be: 8a:f0:8d:a8:65:03:70:51:dc:26:36:24:bc:8b:ce: f6:8d:6b:c4:56:0d:b6:ff:e4:c9:47:57:88:92:07: 6b:af:c7:00:b5:61:fc:c3:33:48:ab:8f:01:51:fb: a5:58:fd:42:cd:12:87:8d:02:07:68:1c:3a:4f:e7: 93:53:99:bd:af:3f:7c:86:1f:47:50:57:db:c2:3c: 84:61:96:fe:e8:a5:b6:f1:78:f3:39:7b:72:91:a8: a0:04:71:4b:c2:e0:51:39:58:54:8e:e6:4e:74:80: 8e:84:35:ac:dd:6c:bd:c2:53:c4:ef:a7:4c:b5:b3: d8:16:cd:3b:a1:e5:71:89:28:8c:08:c1:a5:a0:c6: e8:a1:ad:a4:53:cf:43:44:6d:dc:ae:d9:5e:9a:99: c9:c4:5f:43:05:f5:4e:ad:16:96:07:b1:39:cd:fd: 88:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DF:B5:88:51:7E:67:F0:5D:C8:BD:BC:4A:E3:96:F6:50:D3:3E:E7 X509v3 Authority Key Identifier: keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d4:09:4f:b6:ac:88:7b:9d:a8:1f:82:89:10:b8:96:5c:88: 00:fe:40:a6:8b:bf:56:4c:5c:50:63:18:4e:f7:de:50:67:f4: 82:0c:6a:08:2d:f7:88:f5:2e:d6:d5:92:a5:21:71:ae:a9:4d: 9a:7e:6f:9e:96:d3:0d:74:90:86:69:15:0c:48:9d:fd:3d:c1: 7b:a2:c7:f1:dd:fe:0e:df:bf:c8:9b:8f:64:94:d0:52:50:7c: 72:72:45:7b:ac:23:43:fe:05:bc:cb:23:b2:5a:21:d3:b8:d6: cb:4c:0e:cb:0e:8c:6e:3a:f4:fd:7c:1e:90:3c:5a:13:04:87: e5:63:ea:a1:87:7c:92:39:60:b3:28:00:74:f8:4a:e2:fe:b3: be:6f:50:05:dc:f6:a3:99:01:d5:9a:80:2a:15:c2:f9:b4:08: ff:cd:f8:df:a0:d5:c6:22:d1:4d:8d:46:e1:d4:c2:88:a9:c7: 9e:cc:6e:f8:b0:bd:d6:fc:db:5b:a3:1e:1e:e8:f8:98:7d:d4: fc:2a:25:54:27:ad:6d:60:c8:4f:1f:46:3d:8f:71:fe:b8:29: df:c5:87:6b:e3:65:55:2f:92:e5:fb:10:60:6c:42:de:d5:9f: 50:db:4e:93:f3:a0:d5:70:0d:06:0b:89:cb:3c:66:18:cd:9e: 89:72:7c:08 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEU5Zh7B3ZEWy1qFpd/8g6z6JeEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM2RkIxNDI1QjJFQ0Q4OTZBODFEN0E0RTFDQUJCRDhF RTU4QkJEMzAeFw0yNjEwMTIyMjQ3MzBaFw0yNjEwMTYwODAzMzBaMDMxMTAvBgNV BAMTKDdCREZCNTg4NTE3RTY3RjA1REM4QkRCQzRBRTM5NkY2NTBEMzNFRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCNG26k6mRkfsRlZUZjeechE4e UJ+dvHjUXs4/+m9d0kbETc4Q7JsjMqzZjNNAwb+hjOyK95ZAANUE4xkDWTBq0+ZX G72wYPuBNjwPIYE0XH8oc6rKHNCdvorwjahlA3BR3CY2JLyLzvaNa8RWDbb/5MlH V4iSB2uvxwC1YfzDM0irjwFR+6VY/ULNEoeNAgdoHDpP55NTmb2vP3yGH0dQV9vC PIRhlv7opbbxePM5e3KRqKAEcUvC4FE5WFSO5k50gI6ENazdbL3CU8Tvp0y1s9gW zTuh5XGJKIwIwaWgxuihraRTz0NEbdyu2V6amcnEX0MF9U6tFpYHsTnN/YhfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUe9+1iFF+Z/BdyL28SuOW9lDTPucwHwYDVR0j BBgwFoAU7G+xQlsuzYlqgdek4cq72O5Yu9MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYyNjkzNDcyNjUyNDkzMC8wL0VDNkZCMTQyNUIyRUNEODk2QTgxRDdBNEUxQ0FC QkQ4RUU1OEJCRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM2RkIxNDI1QjJFQ0Q4OTZBODFEN0E0RTFDQUJCRDhFRTU4QkJEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MjY5MzQ3MjY1MjQ5MzAvMC9FQzZGQjE0MjVCMkVD RDg5NkE4MUQ3QTRFMUNBQkJEOEVFNThCQkQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdQJT7asiHud qB+CiRC4llyIAP5Apou/VkxcUGMYTvfeUGf0ggxqCC33iPUu1tWSpSFxrqlNmn5v npbTDXSQhmkVDEid/T3Be6LH8d3+Dt+/yJuPZJTQUlB8cnJFe6wjQ/4FvMsjsloh 07jWy0wOyw6Mbjr0/XwekDxaEwSH5WPqoYd8kjlgsygAdPhK4v6zvm9QBdz2o5kB 1ZqAKhXC+bQI/83436DVxiLRTY1G4dTCiKnHnsxu+LC91vzbW6MeHuj4mH3U/Col VCetbWDITx9GPY9x/rgp38WHa+NlVS+S5fsQYGxC3tWfUNtOk/Og1XANBguJyzxm GM2eiXJ8CA== -----END CERTIFICATE-----Generated at Wed Oct 14 13:09:14 2026 by rpki-client