$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft File: C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft (raw, json) Hash identifier: s7H8r9SEJ65F/nLKCFsxyYn2O+Rrm4CqMKlNbifVziw= Subject key identifier: CE:66:2F:7D:2D:D1:AF:56:09:F6:A5:A7:8D:D3:6E:9B:44:CD:81:C5 Authority key identifier: C6:FD:EF:6C:A2:BD:7C:82:F8:94:4A:88:D7:13:8B:63:E4:0C:2E:AF Certificate issuer: /CN=C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF Certificate serial: 342675880B402186DC3AB4D8D38842562EF8F6D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft Manifest number: 85 Signing time: Tue 27 Oct 2026 03:49:19 +0000 Manifest this update: Tue 27 Oct 2026 03:44:19 +0000 Manifest next update: Fri 30 Oct 2026 07:28:19 +0000 Files and hashes: 1: C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.crl (hash: s1vwn0WamjHjXnPhQ9XINPUm5MZABFHwS56RgJaFedU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.crl rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 07:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:26:75:88:0b:40:21:86:dc:3a:b4:d8:d3:88:42:56:2e:f8:f6:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF Validity Not Before: Oct 27 03:44:19 2026 GMT Not After : Oct 30 07:28:19 2026 GMT Subject: CN=CE662F7D2DD1AF5609F6A5A78DD36E9B44CD81C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a4:f3:b7:63:0b:57:77:03:63:4e:c1:0a:e1: 3f:b3:fb:c6:4d:f2:56:d3:b3:e6:9d:bf:68:2d:25: 62:58:4a:d0:2a:3c:f5:d7:09:1a:f7:ca:61:e2:ac: 13:8b:2e:aa:05:39:55:ec:ee:ff:2f:0e:b3:8d:83: 30:3f:e4:6c:9b:48:c6:1f:4b:af:cb:15:6b:9a:47: 34:e3:17:b4:39:f9:fb:b5:50:34:34:bf:65:95:b7: 92:a0:c5:65:a9:78:7f:1e:6e:7d:c5:b7:f1:6a:32: a1:52:eb:1a:98:80:79:d2:bf:81:18:4b:59:a9:8e: 2c:bf:c3:19:1f:52:56:1c:99:78:ce:c8:2b:0b:c2: c4:4b:84:c6:c7:fc:16:e6:f6:8f:e4:02:f7:94:0b: 9d:74:1d:1c:44:09:3b:8a:30:79:e7:ce:d9:bb:31: 7e:45:71:cf:f9:0e:6b:d3:1f:e8:5d:4b:ff:d2:20: e2:5a:07:8b:e0:47:6a:ea:12:f1:a4:e7:03:6c:a4: 4f:9c:be:f2:ff:ed:e4:4d:8d:94:a7:6b:21:a8:33: 47:b1:59:b1:e4:ca:7f:7b:a1:5c:8b:61:27:6e:3d: 03:98:af:69:b6:16:37:ba:12:15:cc:86:d3:28:93: 35:9f:07:f6:cc:4e:c6:99:33:ed:97:e2:dd:c0:70: 51:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:66:2F:7D:2D:D1:AF:56:09:F6:A5:A7:8D:D3:6E:9B:44:CD:81:C5 X509v3 Authority Key Identifier: keyid:C6:FD:EF:6C:A2:BD:7C:82:F8:94:4A:88:D7:13:8B:63:E4:0C:2E:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c2:16:fa:02:78:2d:0b:40:e7:20:8f:e4:9f:30:e2:a1:34: 13:ba:67:24:6a:d2:4a:e6:86:12:73:16:3c:13:22:8f:b2:b4: f9:27:b9:c6:5d:bb:a0:ca:ee:a1:00:9a:9e:3c:e6:41:b3:e1: 7c:5a:15:a1:bf:0f:0c:16:03:a3:ba:1f:da:95:ef:c7:97:20: aa:19:73:22:89:41:89:cd:f8:f4:77:15:91:ce:71:45:51:83: 0f:ad:cd:5f:60:2a:8f:0e:71:25:3d:c1:3d:81:9a:49:f3:d2: 0d:5e:b6:e5:99:45:0e:c2:23:ce:fc:d7:b8:80:fc:f1:a2:5c: 4b:a8:26:4a:d6:a6:dc:a3:88:42:38:a4:ce:b2:41:37:3a:55: df:47:e2:d9:f4:cf:3c:6c:56:2b:66:10:bf:a5:42:33:3e:b3: a3:fe:0f:b4:20:1e:c2:f7:73:67:c4:cc:ff:c0:37:27:ea:0d: 25:7f:56:be:56:b4:17:c3:36:08:e2:68:f1:bc:8b:8d:1b:57: 93:18:6c:6b:b5:de:14:87:fe:b0:c4:8e:a4:93:e9:47:75:5b: 80:47:e4:08:9f:13:d1:c2:cc:23:8b:68:4f:69:0c:f2:22:34: 79:86:fe:19:8a:e2:85:68:3d:7d:8d:c7:6a:8b:dc:5e:8d:f9: f7:7f:59:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNCZ1iAtAIYbcOrTY04hCVi749tQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZGREVGNkNBMkJEN0M4MkY4OTQ0QTg4RDcxMzhCNjNF NDBDMkVBRjAeFw0yNjEwMjcwMzQ0MTlaFw0yNjEwMzAwNzI4MTlaMDMxMTAvBgNV BAMTKENFNjYyRjdEMkREMUFGNTYwOUY2QTVBNzhERDM2RTlCNDRDRDgxQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDypPO3YwtXdwNjTsEK4T+z+8ZN 8lbTs+adv2gtJWJYStAqPPXXCRr3ymHirBOLLqoFOVXs7v8vDrONgzA/5GybSMYf S6/LFWuaRzTjF7Q5+fu1UDQ0v2WVt5KgxWWpeH8ebn3Ft/FqMqFS6xqYgHnSv4EY S1mpjiy/wxkfUlYcmXjOyCsLwsRLhMbH/Bbm9o/kAveUC510HRxECTuKMHnnztm7 MX5Fcc/5DmvTH+hdS//SIOJaB4vgR2rqEvGk5wNspE+cvvL/7eRNjZSnayGoM0ex WbHkyn97oVyLYSduPQOYr2m2Fje6EhXMhtMokzWfB/bMTsaZM+2X4t3AcFFPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzmYvfS3Rr1YJ9qWnjdNum0TNgcUwHwYDVR0j BBgwFoAUxv3vbKK9fIL4lEqI1xOLY+QMLq8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzI4NzAzMDQ2MDUxNDMzMS8wL0M2RkRFRjZDQTJCRDdDODJGODk0NEE4OEQ3MTM4 QjYzRTQwQzJFQUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzZGREVGNkNBMkJEN0M4MkY4OTQ0QTg4RDcxMzhCNjNFNDBDMkVBRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcyODcwMzA0NjA1MTQzMzEvMC9DNkZERUY2Q0EyQkQ3 QzgyRjg5NDRBODhENzEzOEI2M0U0MEMyRUFGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsIW+gJ4LQtA 5yCP5J8w4qE0E7pnJGrSSuaGEnMWPBMij7K0+Se5xl27oMruoQCanjzmQbPhfFoV ob8PDBYDo7of2pXvx5cgqhlzIolBic349HcVkc5xRVGDD63NX2Aqjw5xJT3BPYGa SfPSDV625ZlFDsIjzvzXuID88aJcS6gmStam3KOIQjikzrJBNzpV30fi2fTPPGxW K2YQv6VCMz6zo/4PtCAewvdzZ8TM/8A3J+oNJX9Wvla0F8M2COJo8byLjRtXkxhs a7XeFIf+sMSOpJPpR3VbgEfkCJ8T0cLMI4toT2kM8iI0eYb+GYrihWg9fY3Haovc Xo35939Z5w== -----END CERTIFICATE-----Generated at Wed Oct 28 00:51:22 2026 by rpki-client