$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft File: 6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft (raw, json) Hash identifier: MV8Ei6Tr82yTbrjeJPfFJrvQKUhUAbc3mOMg8jq8nJc= Subject key identifier: 90:BC:49:EE:10:29:15:47:87:67:9B:98:23:42:41:4A:3E:9D:5B:43 Authority key identifier: 6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86 Certificate issuer: /CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86 Certificate serial: 1096D7AD1986C955970C50965C018A88FD8500C3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft Manifest number: 0135 Signing time: Mon 28 Sep 2026 14:55:52 +0000 Manifest this update: Mon 28 Sep 2026 14:50:52 +0000 Manifest next update: Thu 01 Oct 2026 19:59:52 +0000 Files and hashes: 1: 3130332e39392e37362e302f32322d3234203d3e203231383539.roa (hash: 5zg34dumFUNcisZgSXdG450ByL+s68I7tPcsYSA0NWQ=) 2: 3130332e39392e37382e302f32342d3234203d3e203138313836.roa (hash: GIBohAOkxLqo2MHKZRQCGgmHtKZNvH2jRL/WqCCQFx0=) 3: 3130332e39392e37362e302f32342d3234203d3e20343031393232.roa (hash: CGfD08+TmI17n0MyXF3V8T9GaHZ26XvTL68LzNKieJM=) 4: 3130332e39392e37372e302f32342d3234203d3e203138313836.roa (hash: U1pk2JYrPJWQy2GlF6yYf8rAkEzfLuV6UU23voN4CTI=) 5: 3130332e39392e37372e302f32342d3234203d3e20313430323234.roa (hash: bVb3KiMqsznd+G3SqnVOmFkclLvpl6SNYgdpTEfv5lI=) 6: 6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl (hash: l7vHCDPlLjova+WXnGlEG550CvjZg9lAkqOtl0Gg40s=) 7: 3130332e39392e37382e302f32342d3234203d3e20313430323234.roa (hash: qjnV38DKUxCDOv1ngp1bgr3h6x3YSxbbfA2LfRTQ2t8=) 8: 3130332e39392e37362e302f32342d3234203d3e203138313836.roa (hash: g+Ab7n0f/mZdUvMILjA1TIaDuAHPK3a9RuID0hCykiY=) 9: 3130332e39392e37392e302f32342d3332203d3e20343031393232.roa (hash: HAeePLzRX+6qLvq1+IHZUIym7QAn8SM1pu3viW7OA+s=) 10: 3130332e39392e37362e302f32342d3234203d3e20313430323234.roa (hash: avpij/pS5mE9f/XwTicGimYUM1iHh67c23vbQ/abVIo=) 11: 3130332e39392e37362e302f32322d3234203d3e203431373137.roa (hash: G2sXYiJAI2aLi9eNohjqzjqFcTpdmhkGOYXS2jdYuxA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:96:d7:ad:19:86:c9:55:97:0c:50:96:5c:01:8a:88:fd:85:00:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E6551DDF15FCB648500A7080FA37D8EE8602A86 Validity Not Before: Sep 28 14:50:52 2026 GMT Not After : Oct 1 19:59:52 2026 GMT Subject: CN=90BC49EE1029154787679B982342414A3E9D5B43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:3d:a0:90:61:ec:95:13:85:0b:cc:de:8b:c6: 9f:66:bc:09:ea:0d:a2:ab:5c:77:24:d5:02:67:94: aa:c3:0d:48:bc:f5:99:fc:cd:a6:02:70:89:ff:7d: 6f:8a:7d:f5:e1:1a:12:65:75:7b:e7:cc:1f:8d:11: a8:34:01:bc:89:06:5f:b4:f0:d7:98:cc:d6:a9:0f: 0f:e4:1c:d8:79:6b:7f:aa:68:21:54:bb:c4:db:f6: f8:e5:7b:19:a1:03:c8:33:13:b6:71:fe:8b:50:3d: f9:f6:15:67:6d:ce:6e:a0:51:86:70:89:07:60:06: ea:db:a5:1a:ed:1f:b8:43:74:20:ad:fe:55:3e:f7: 45:fc:98:ed:98:8f:8d:9e:e6:92:3f:2e:5d:4c:ae: 2e:36:b0:a6:02:78:74:9d:91:a4:d8:ac:00:d4:66: f0:bd:62:ca:bf:82:c0:91:07:34:8f:3b:78:df:e1: 3a:7a:43:09:4b:98:e0:88:e6:ef:e3:01:a0:90:4b: 50:e7:e0:84:fa:4e:e5:7d:d1:d8:bc:56:6d:0a:bc: df:b7:52:8f:3e:41:e7:3a:2f:e8:ac:26:c5:8e:5a: 3c:95:aa:83:b3:89:da:95:37:47:a4:d8:5b:8d:6f: 21:0e:fa:13:6e:a7:b7:eb:be:59:ca:50:50:ee:42: c2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:BC:49:EE:10:29:15:47:87:67:9B:98:23:42:41:4A:3E:9D:5B:43 X509v3 Authority Key Identifier: keyid:6E:65:51:DD:F1:5F:CB:64:85:00:A7:08:0F:A3:7D:8E:E8:60:2A:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E6551DDF15FCB648500A7080FA37D8EE8602A86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335525232641/0/6E6551DDF15FCB648500A7080FA37D8EE8602A86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:2e:0c:ce:ee:e8:17:3f:37:ad:97:a6:b5:7d:eb:58:49:83: 2a:3d:9b:43:ef:32:75:a2:28:51:ce:5f:5c:ff:a2:85:38:de: f7:10:e2:b8:ef:80:2d:0b:06:70:86:3c:e5:58:ab:0a:57:6b: eb:dc:12:4f:80:ef:ac:1e:2d:b5:34:d4:aa:59:c3:bc:60:20: 09:94:99:eb:7f:0d:bd:c2:6a:44:19:a9:80:79:21:25:04:5f: b2:aa:80:2e:60:8f:36:9b:db:b9:76:57:a5:c2:a8:61:eb:0a: 2a:8f:f9:90:2b:e8:4b:15:bf:0d:13:25:0c:13:f0:c9:1a:a5: 4f:d1:2b:bc:f8:9c:57:94:7f:1d:26:d4:96:d3:c2:d5:08:8b: 1b:a1:52:0a:a9:5c:40:32:e1:f8:c9:f1:c6:36:83:85:9c:17: 85:6b:df:86:a1:45:35:e7:9d:18:d7:81:43:02:a2:ba:b6:fd: ae:fc:64:aa:4b:f0:3b:ac:27:2f:57:af:97:63:43:c2:b6:e8: b8:76:a9:93:8b:4d:21:e4:18:52:da:d8:97:4a:40:2f:18:b8: 2e:bb:fa:ed:e5:7b:fb:50:4c:4e:d0:fa:81:27:f9:d0:0e:02: 4d:db:8e:11:38:52:e4:e7:fa:74:cf:35:1c:78:0a:cd:35:9e: 71:a5:52:7a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEJbXrRmGyVWXDFCWXAGKiP2FAMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU2NTUxRERGMTVGQ0I2NDg1MDBBNzA4MEZBMzdEOEVF ODYwMkE4NjAeFw0yNjA5MjgxNDUwNTJaFw0yNjEwMDExOTU5NTJaMDMxMTAvBgNV BAMTKDkwQkM0OUVFMTAyOTE1NDc4NzY3OUI5ODIzNDI0MTRBM0U5RDVCNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5PaCQYeyVE4ULzN6Lxp9mvAnq DaKrXHck1QJnlKrDDUi89Zn8zaYCcIn/fW+KffXhGhJldXvnzB+NEag0AbyJBl+0 8NeYzNapDw/kHNh5a3+qaCFUu8Tb9vjlexmhA8gzE7Zx/otQPfn2FWdtzm6gUYZw iQdgBurbpRrtH7hDdCCt/lU+90X8mO2Yj42e5pI/Ll1Mri42sKYCeHSdkaTYrADU ZvC9Ysq/gsCRBzSPO3jf4Tp6QwlLmOCI5u/jAaCQS1Dn4IT6TuV90di8Vm0KvN+3 Uo8+Qec6L+isJsWOWjyVqoOzidqVN0ek2FuNbyEO+hNup7frvlnKUFDuQsJvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkLxJ7hApFUeHZ5uYI0JBSj6dW0MwHwYDVR0j BBgwFoAUbmVR3fFfy2SFAKcID6N9juhgKoYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNTIzMjY0MS8wLzZFNjU1MURERjE1RkNCNjQ4NTAwQTcwODBGQTM3 RDhFRTg2MDJBODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkU2NTUxRERGMTVGQ0I2NDg1MDBBNzA4MEZBMzdEOEVFODYwMkE4Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjUyMzI2NDEvMC82RTY1NTFEREYxNUZD QjY0ODUwMEE3MDgwRkEzN0Q4RUU4NjAyQTg2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzS4Mzu7oFz83 rZemtX3rWEmDKj2bQ+8ydaIoUc5fXP+ihTje9xDiuO+ALQsGcIY85VirCldr69wS T4DvrB4ttTTUqlnDvGAgCZSZ638NvcJqRBmpgHkhJQRfsqqALmCPNpvbuXZXpcKo YesKKo/5kCvoSxW/DRMlDBPwyRqlT9ErvPicV5R/HSbUltPC1QiLG6FSCqlcQDLh +MnxxjaDhZwXhWvfhqFFNeedGNeBQwKiurb9rvxkqkvwO6wnL1evl2NDwrbouHap k4tNIeQYUtrYl0pALxi4Lrv67eV7+1BMTtD6gSf50A4CTduOEThS5Of6dM81HHgK zTWecaVSeg== -----END CERTIFICATE-----Generated at Tue Sep 29 10:50:48 2026 by rpki-client