$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft File: 6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft (raw, json) Hash identifier: 5tWON/JwxDXMnrLgUDRW1IliEQ16ymssugNItwfMZVA= Subject key identifier: CF:F5:A2:31:FD:F6:99:68:25:19:20:BD:68:BF:5D:78:FF:16:69:9C Authority key identifier: 6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3 Certificate issuer: /CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3 Certificate serial: 790C61DBE8D49651C7A490CFB086B9533DDF4B98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft Manifest number: B6 Signing time: Fri 28 Aug 2026 08:38:39 +0000 Manifest this update: Fri 28 Aug 2026 08:33:39 +0000 Manifest next update: Mon 31 Aug 2026 09:40:39 +0000 Files and hashes: 1: 3130332e3137302e3231322e302f32342d3234203d3e20313436383432.roa (hash: oIVYiH99ns+ZO8k2snXu2q5AtM9u9S/dgbN/MlAUrrI=) 2: 3130332e3137302e3231332e302f32342d3234203d3e20313436383432.roa (hash: xHB51GTEu6E4O2uPU5Q+PFtFl9kWbp78dTmrzsJmvSE=) 3: 6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl (hash: r/XvZs8PojVFKp0vaTMOmZq0dMh/3oYDJpXxzEDa5UI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:40:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0c:61:db:e8:d4:96:51:c7:a4:90:cf:b0:86:b9:53:3d:df:4b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3 Validity Not Before: Aug 28 08:33:39 2026 GMT Not After : Aug 31 09:40:39 2026 GMT Subject: CN=CFF5A231FDF69968251920BD68BF5D78FF16699C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:52:76:ce:e6:c1:a3:03:cf:9e:e9:ba:4b:3c: e9:ef:aa:d6:f6:f4:79:61:7d:4f:56:12:d9:11:c0: 58:8c:20:07:9d:6f:a4:0f:9b:49:ca:1f:b3:d7:5f: ce:36:55:6c:69:9f:89:d4:32:53:59:a5:84:4b:56: 50:c6:83:e5:bf:c4:33:4b:33:50:e2:01:fc:d1:07: e3:32:47:01:0a:a5:66:61:b4:29:60:0a:ca:9b:b4: 7a:97:e3:68:3a:5a:3b:38:e5:3b:68:4c:0d:16:79: 43:cc:be:f2:89:d6:2f:1c:ff:c2:75:a7:b6:02:b5: 85:53:a0:85:cd:db:df:e0:85:a5:ff:a1:a3:04:6d: 2b:8d:a8:bb:06:14:6f:f2:82:e3:61:46:86:ac:43: 93:cd:85:c0:9c:81:e7:65:d9:98:4a:b5:bc:42:79: 67:a9:78:e8:76:b6:58:a5:64:8f:1a:d7:f4:c0:cb: 95:9b:92:c3:98:19:a8:11:19:01:c9:5e:1e:26:49: d1:cc:82:36:45:c1:fc:f2:ba:d1:b6:b4:a2:07:16: 09:39:38:d7:5d:6d:cf:89:50:3a:9c:8e:d6:4e:1e: 5e:72:a9:1e:f9:63:b0:06:05:21:7c:c7:ae:d9:b2: d7:b0:d6:f3:51:ec:b2:ff:86:a8:8e:cb:19:02:bc: 3c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F5:A2:31:FD:F6:99:68:25:19:20:BD:68:BF:5D:78:FF:16:69:9C X509v3 Authority Key Identifier: keyid:6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:48:5d:ec:99:a9:bd:fb:11:17:fe:0c:46:dd:aa:62:4c:fd: 9a:fc:2b:95:17:8e:73:bd:c2:44:e4:79:5a:70:89:1e:40:ae: a5:8a:ef:37:57:0e:22:ab:78:b7:44:b8:4e:3e:6d:04:b1:b9: 80:68:d3:e3:79:0b:c7:a3:ac:81:57:38:2e:12:f2:f3:a8:a2: 65:11:c4:be:f1:24:eb:a9:7d:9a:87:9a:35:ff:0d:f7:ac:2c: 53:d0:d3:65:7e:10:b1:a1:cb:fe:e2:6c:c2:89:d8:52:10:5f: 5f:1a:f7:a4:89:90:27:cf:02:a7:1b:ad:9a:2c:75:f4:21:03: f9:34:09:ba:67:bc:03:a5:c8:18:f4:4f:ed:21:d2:bb:e4:70: bb:cc:21:a7:af:34:40:58:81:47:c8:da:3e:b0:8d:b6:e0:4a: bf:38:b2:a7:5a:75:2c:cb:54:1b:bb:05:51:9d:43:77:7a:f0: f3:b5:53:01:e4:eb:e7:c1:14:a4:e6:bd:7b:63:17:df:b0:66: ce:fa:87:81:2b:2d:d8:5c:59:f1:ea:d9:03:71:f1:3f:89:e5: d6:33:32:b5:77:2f:29:7f:d2:f3:db:64:da:f5:b7:b1:39:2c: 7a:4d:e5:0b:9d:11:48:ec:c8:98:8a:3f:c0:2c:bd:af:50:5e: 6e:ce:a5:b5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeQxh2+jUllHHpJDPsIa5Uz3fS5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU0N0ZGNThBMUM1QUE4NTg0RDI5NTNDMUVBRDRERTg2 MTU3RUJEMzAeFw0yNjA4MjgwODMzMzlaFw0yNjA4MzEwOTQwMzlaMDMxMTAvBgNV BAMTKENGRjVBMjMxRkRGNjk5NjgyNTE5MjBCRDY4QkY1RDc4RkYxNjY5OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBUnbO5sGjA8+e6bpLPOnvqtb2 9HlhfU9WEtkRwFiMIAedb6QPm0nKH7PXX842VWxpn4nUMlNZpYRLVlDGg+W/xDNL M1DiAfzRB+MyRwEKpWZhtClgCsqbtHqX42g6Wjs45TtoTA0WeUPMvvKJ1i8c/8J1 p7YCtYVToIXN29/ghaX/oaMEbSuNqLsGFG/yguNhRoasQ5PNhcCcgedl2ZhKtbxC eWepeOh2tlilZI8a1/TAy5WbksOYGagRGQHJXh4mSdHMgjZFwfzyutG2tKIHFgk5 ONddbc+JUDqcjtZOHl5yqR75Y7AGBSF8x67Zstew1vNR7LL/hqiOyxkCvDznAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUz/WiMf32mWglGSC9aL9deP8WaZwwHwYDVR0j BBgwFoAUbkf/WKHFqoWE0pU8Hq1N6GFX69MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3NzM0NjQ1MzY4NDIyNS8wLzZFNDdGRjU4QTFDNUFBODU4NEQyOTUzQzFFQUQ0 REU4NjE1N0VCRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkU0N0ZGNThBMUM1QUE4NTg0RDI5NTNDMUVBRDRERTg2MTU3RUJEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzczNDY0NTM2ODQyMjUvMC82RTQ3RkY1OEExQzVB QTg1ODREMjk1M0MxRUFENERFODYxNTdFQkQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUhd7JmpvfsR F/4MRt2qYkz9mvwrlReOc73CROR5WnCJHkCupYrvN1cOIqt4t0S4Tj5tBLG5gGjT 43kLx6OsgVc4LhLy86iiZRHEvvEk66l9moeaNf8N96wsU9DTZX4QsaHL/uJswonY UhBfXxr3pImQJ88Cpxutmix19CED+TQJume8A6XIGPRP7SHSu+Rwu8whp680QFiB R8jaPrCNtuBKvziyp1p1LMtUG7sFUZ1Dd3rw87VTAeTr58EUpOa9e2MX37BmzvqH gSst2FxZ8erZA3HxP4nl1jMytXcvKX/S89tk2vW3sTksek3lC50RSOzImIo/wCy9 r1Bebs6ltQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:57 2026 by rpki-client