$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft File: 6F899B29F801AD1C8A8515E6EF9709910311F668.mft (raw, json) Hash identifier: gTkb869YCnIQRdsUOWJFZv1oYtQ1p+vSJF4o2M54vGk= Subject key identifier: 7A:42:0E:68:34:53:E7:3E:B5:06:E0:6C:E5:E1:6A:74:B4:93:58:0F Authority key identifier: 6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 Certificate issuer: /CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Certificate serial: 665DC60136ADE395546F91ADDC13073B21EB004D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft Manifest number: F8 Signing time: Fri 24 Jul 2026 03:55:19 +0000 Manifest this update: Fri 24 Jul 2026 03:50:19 +0000 Manifest next update: Sat 25 Jul 2026 04:40:19 +0000 Files and hashes: 1: 6F899B29F801AD1C8A8515E6EF9709910311F668.crl (hash: qsgKi0Oo0i1iL3IlAEH14CliA5FvUeVo0KgODqDfAnw=) 2: 3130332e3134322e38322e302f32342d3234203d3e20313531393531.roa (hash: NBrKkaX/GBDhP2RLztQmFEQ01TUbwHomfuOqxwCWC7w=) 3: 3130332e3134322e38332e302f32342d3234203d3e20313531393531.roa (hash: 79Z+OEgq58IFIFUr3XZSZV6jT+sIs4BTv39+/fzGp6A=) 4: 3130332e3134322e38322e302f32332d3332203d3e20313531393531.roa (hash: mVq0tp8huRh6SC0n7rhOLpZu0QlXgV/WIGpxjqgh/TE=) 5: 3130332e3134322e38332e302f32342d3234203d3e20313439353133.roa (hash: YsRlvfghH9rCCKNTUVL7cagdvzH0kbY4Bz95ToSRwi8=) 6: 3130332e3134322e38322e302f32332d3332203d3e20313439353133.roa (hash: gNbCXYLZTSZSDGKA8vf0miL9zRhPVc7YJOnU420lxlM=) 7: 3130332e3134322e38322e302f32342d3234203d3e20313439353133.roa (hash: YBLpKWnBY74NDcGKe6t2+bdDnzFkBiAsPzbxJySwzDk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:5d:c6:01:36:ad:e3:95:54:6f:91:ad:dc:13:07:3b:21:eb:00:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F899B29F801AD1C8A8515E6EF9709910311F668 Validity Not Before: Jul 24 03:50:19 2026 GMT Not After : Jul 25 04:40:19 2026 GMT Subject: CN=7A420E683453E73EB506E06CE5E16A74B493580F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:4f:ed:94:dc:cd:64:a3:69:84:ec:ed:35: e2:65:08:c8:1a:ec:22:e7:cb:2f:51:c2:27:9a:b8: 65:94:1b:85:52:fb:6e:9f:35:3e:8b:00:44:0f:8e: 60:dd:ae:88:9f:f9:c7:c2:bf:ee:67:68:c1:cd:96: 18:d0:c6:03:34:30:4e:80:30:e0:bb:9c:de:0e:b1: 78:f6:49:e8:52:97:56:9e:e9:dd:d1:61:aa:d6:eb: 71:d0:c0:5d:7d:9d:eb:53:b9:83:71:bd:27:7b:33: 8a:a4:6c:f0:c2:50:f6:21:80:41:37:e2:2d:64:d2: 26:05:fd:06:f0:3e:ed:86:7b:51:6d:a5:5b:66:b7: dd:03:b7:d8:a0:cc:98:12:26:36:5b:07:cc:83:26: 75:14:8b:22:da:19:d4:8f:33:11:c2:e4:c7:11:4f: ae:a3:ec:74:be:74:80:00:a5:17:c1:91:48:89:1c: 23:78:ec:c9:95:94:a8:1b:34:52:67:ff:77:33:ac: 39:c1:02:32:3b:3e:fb:fd:b7:1b:0a:46:84:88:87: 1a:d7:d4:65:76:cf:18:ab:17:2b:87:a1:59:73:9d: d1:2f:2b:1a:4b:14:da:61:20:1e:90:9d:2b:66:b3: 8f:00:0a:86:89:f4:51:a3:06:0c:86:c3:38:05:3b: a3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:42:0E:68:34:53:E7:3E:B5:06:E0:6C:E5:E1:6A:74:B4:93:58:0F X509v3 Authority Key Identifier: keyid:6F:89:9B:29:F8:01:AD:1C:8A:85:15:E6:EF:97:09:91:03:11:F6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F899B29F801AD1C8A8515E6EF9709910311F668.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757677571/0/6F899B29F801AD1C8A8515E6EF9709910311F668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:4f:ac:30:4e:ec:e7:92:82:94:f0:18:bd:9d:a4:8c:a1:34: 5f:d8:3c:fd:54:5f:5f:73:db:22:18:d8:ce:98:ae:27:fe:75: c2:d5:29:5c:99:22:80:4b:4c:53:ea:5e:e5:f9:8c:e1:ef:e1: cc:4b:1b:9f:88:c9:38:8b:5b:82:ef:5c:19:eb:42:f0:36:3a: 81:1b:b9:5a:d8:eb:f9:29:11:bc:4a:1d:7b:ac:c1:38:75:e3: 4f:24:81:e8:73:b1:b9:7d:a2:ef:8f:82:2e:1b:b8:17:f1:ec: f6:65:47:d1:47:dc:5e:56:4e:b8:86:39:53:35:07:e1:34:1d: df:13:f7:df:e1:3e:c8:52:95:af:cc:68:1f:db:bf:2e:ba:5a: c9:d2:e3:e3:87:c3:92:49:f7:d3:01:85:61:2d:ce:7d:05:6d: c3:51:b7:7c:dd:42:4e:6a:89:55:ea:3a:fe:08:71:24:35:79: 7d:8b:2f:7d:1d:31:70:84:e5:57:45:35:27:1a:61:e4:b8:26: 98:92:8c:2d:58:1c:15:c6:24:83:f5:28:79:7c:67:ba:1f:52: 56:73:27:00:b1:fd:6e:01:e9:2f:98:ea:28:56:78:9f:2d:85: fb:9a:f0:59:d9:40:de:b4:f8:e8:75:d7:ef:b4:26:e4:0a:96: fe:e1:41:d6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZl3GATat45VUb5Gt3BMHOyHrAE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEw MzExRjY2ODAeFw0yNjA3MjQwMzUwMTlaFw0yNjA3MjUwNDQwMTlaMDMxMTAvBgNV BAMTKDdBNDIwRTY4MzQ1M0U3M0VCNTA2RTA2Q0U1RTE2QTc0QjQ5MzU4MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFak/tlNzNZKNphOztNeJlCMga 7CLnyy9RwieauGWUG4VS+26fNT6LAEQPjmDdroif+cfCv+5naMHNlhjQxgM0ME6A MOC7nN4OsXj2SehSl1ae6d3RYarW63HQwF19netTuYNxvSd7M4qkbPDCUPYhgEE3 4i1k0iYF/QbwPu2Ge1FtpVtmt90Dt9igzJgSJjZbB8yDJnUUiyLaGdSPMxHC5McR T66j7HS+dIAApRfBkUiJHCN47MmVlKgbNFJn/3czrDnBAjI7Pvv9txsKRoSIhxrX 1GV2zxirFyuHoVlzndEvKxpLFNphIB6QnStms48ACoaJ9FGjBgyGwzgFO6MTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUekIOaDRT5z61BuBs5eFqdLSTWA8wHwYDVR0j BBgwFoAUb4mbKfgBrRyKhRXm75cJkQMR9mgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzY3NzU3MS8wLzZGODk5QjI5RjgwMUFEMUM4QTg1MTVFNkVGOTcw OTkxMDMxMUY2NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY4OTlCMjlGODAxQUQxQzhBODUxNUU2RUY5NzA5OTEwMzExRjY2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2Nzc1NzEvMC82Rjg5OUIyOUY4MDFB RDFDOEE4NTE1RTZFRjk3MDk5MTAzMTFGNjY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0+sME7s55KC lPAYvZ2kjKE0X9g8/VRfX3PbIhjYzpiuJ/51wtUpXJkigEtMU+pe5fmM4e/hzEsb n4jJOItbgu9cGetC8DY6gRu5Wtjr+SkRvEode6zBOHXjTySB6HOxuX2i74+CLhu4 F/Hs9mVH0UfcXlZOuIY5UzUH4TQd3xP33+E+yFKVr8xoH9u/LrpaydLj44fDkkn3 0wGFYS3OfQVtw1G3fN1CTmqJVeo6/ghxJDV5fYsvfR0xcITlV0U1Jxph5LgmmJKM LVgcFcYkg/UoeXxnuh9SVnMnALH9bgHpL5jqKFZ4ny2F+5rwWdlA3rT46HXX77Qm 5AqW/uFB1g== -----END CERTIFICATE-----Generated at Fri Jul 24 15:57:38 2026 by rpki-client