$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft File: 6F998E710C20D2A9D256034668026243E86F9239.mft (raw, json) Hash identifier: VUrYed9JiWVXymFGuFZn97giqGOXhSTksiD+hYCsGIQ= Subject key identifier: 3E:B5:69:62:30:63:65:C2:E1:05:B0:A3:B8:2C:9D:E9:E6:84:2F:26 Authority key identifier: 6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 Certificate issuer: /CN=6F998E710C20D2A9D256034668026243E86F9239 Certificate serial: 4D48A0D756322B73AAF4AD4616F67248220F2F33 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft Manifest number: 8E Signing time: Fri 24 Jul 2026 09:05:50 +0000 Manifest this update: Fri 24 Jul 2026 09:00:50 +0000 Manifest next update: Sat 25 Jul 2026 10:48:50 +0000 Files and hashes: 1: 323430313a36303a3a2f33322d3332203d3e2030.roa (hash: 71m86gm6yxnGiaqfSvrzEvHzssQUJiLPa3d4KKP4Eyw=) 2: 6F998E710C20D2A9D256034668026243E86F9239.crl (hash: T67mZir2zEWTxygqA6L7xRlpu4eNsp7jEeJCs6o3IZE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:48:a0:d7:56:32:2b:73:aa:f4:ad:46:16:f6:72:48:22:0f:2f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F998E710C20D2A9D256034668026243E86F9239 Validity Not Before: Jul 24 09:00:50 2026 GMT Not After : Jul 25 10:48:50 2026 GMT Subject: CN=3EB56962306365C2E105B0A3B82C9DE9E6842F26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:eb:63:b9:e6:15:b2:6c:df:2e:2a:00:3b:9d: 8d:93:49:b3:fc:51:4d:22:6a:e8:49:76:07:1a:2a: 5b:01:2c:83:5c:0e:37:7e:6f:38:16:c7:76:4f:db: 99:89:fe:9f:30:6b:3c:d7:82:3b:f6:ce:d5:15:8d: 79:38:94:93:96:ff:61:06:68:ed:8b:ca:ae:84:c7: ec:7d:2e:42:e4:38:26:ad:13:53:26:4c:06:fb:8d: 69:dc:a1:04:93:cd:88:40:2c:86:4d:14:9a:33:e8: be:40:87:7c:3a:ab:8a:22:47:68:58:7a:6c:72:24: 10:93:c7:fa:07:11:8a:2f:5d:af:7e:d2:b6:57:21: bd:7d:f3:d4:da:d6:b7:fd:5b:43:c4:0c:50:69:ab: 66:f9:55:19:0d:58:68:3e:41:8d:78:5a:96:7d:1f: 6b:d9:b1:8a:e1:37:0a:06:85:8e:e1:f6:6d:80:9a: 3f:32:62:f8:99:99:32:cd:62:e6:74:f0:86:c2:44: 72:cd:cb:f7:a7:1c:da:fc:dc:e0:31:ea:d1:b8:55: 4e:14:ae:c2:da:a6:ea:96:ee:8d:07:22:61:59:db: 74:99:f6:8b:3f:60:4e:a9:e0:8b:ee:5a:52:e2:3f: b9:33:dc:ef:f7:22:08:1a:2e:71:fa:27:7d:ee:f3: 59:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B5:69:62:30:63:65:C2:E1:05:B0:A3:B8:2C:9D:E9:E6:84:2F:26 X509v3 Authority Key Identifier: keyid:6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:b5:cd:c8:17:78:f5:55:47:4f:94:fc:e4:73:4b:5e:8b:45: 3a:d1:92:39:50:b0:3e:4d:79:3f:f9:d8:d8:3c:98:c4:ec:98: 56:ea:e4:79:6e:ca:e1:9a:d6:70:0b:eb:e5:ab:b3:a1:61:50: 44:18:6b:a6:80:c4:32:e5:06:70:30:9c:80:16:4e:d4:16:dc: b1:da:f0:e8:82:40:72:a1:e0:10:6a:8a:90:34:d3:82:0a:b9: fa:61:d9:07:b1:37:32:e0:9a:6a:20:b2:1d:5b:b2:fe:bf:8d: 91:16:d8:0e:1b:71:ab:3a:98:c5:53:63:db:65:b0:97:99:99: 92:72:1f:b8:f9:0f:cf:d0:57:03:54:f7:48:68:15:a2:04:e7: c5:fe:16:c8:e1:d4:51:c6:33:f7:60:a1:91:0a:0a:24:37:a8: 7f:36:eb:f1:88:1f:56:74:03:4f:58:22:ce:0c:a3:4c:66:c8: 3f:77:a9:c6:a6:e1:56:86:da:97:6e:d5:54:3e:27:15:8a:b4: d6:08:83:a5:a8:7e:0f:97:de:ab:6c:3b:66:3d:85:2e:26:75: ec:fe:75:f6:b6:48:c4:28:2e:26:de:04:1e:9e:70:d4:d4:73: ad:53:b8:47:97:8e:c0:48:fc:b1:41:e3:f7:aa:44:ae:9d:61: 8c:03:1d:e1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTUig11YyK3Oq9K1GFvZySCIPLzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNF ODZGOTIzOTAeFw0yNjA3MjQwOTAwNTBaFw0yNjA3MjUxMDQ4NTBaMDMxMTAvBgNV BAMTKDNFQjU2OTYyMzA2MzY1QzJFMTA1QjBBM0I4MkM5REU5RTY4NDJGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF62O55hWybN8uKgA7nY2TSbP8 UU0iauhJdgcaKlsBLINcDjd+bzgWx3ZP25mJ/p8wazzXgjv2ztUVjXk4lJOW/2EG aO2Lyq6Ex+x9LkLkOCatE1MmTAb7jWncoQSTzYhALIZNFJoz6L5Ah3w6q4oiR2hY emxyJBCTx/oHEYovXa9+0rZXIb1989Ta1rf9W0PEDFBpq2b5VRkNWGg+QY14WpZ9 H2vZsYrhNwoGhY7h9m2Amj8yYviZmTLNYuZ08IbCRHLNy/enHNr83OAx6tG4VU4U rsLapuqW7o0HImFZ23SZ9os/YE6p4IvuWlLiP7kz3O/3IggaLnH6J33u81lnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPrVpYjBjZcLhBbCjuCyd6eaELyYwHwYDVR0j BBgwFoAUb5mOcQwg0qnSVgNGaAJiQ+hvkjkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU0NzY1NTk1NjEwMzE2OS8wLzZGOTk4RTcxMEMyMEQyQTlEMjU2MDM0NjY4MDI2 MjQzRTg2RjkyMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNFODZGOTIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NDc2NTU5NTYxMDMxNjkvMC82Rjk5OEU3MTBDMjBE MkE5RDI1NjAzNDY2ODAyNjI0M0U4NkY5MjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7XNyBd49VVH T5T85HNLXotFOtGSOVCwPk15P/nY2DyYxOyYVurkeW7K4ZrWcAvr5auzoWFQRBhr poDEMuUGcDCcgBZO1Bbcsdrw6IJAcqHgEGqKkDTTggq5+mHZB7E3MuCaaiCyHVuy /r+NkRbYDhtxqzqYxVNj22Wwl5mZknIfuPkPz9BXA1T3SGgVogTnxf4WyOHUUcYz 92ChkQoKJDeofzbr8YgfVnQDT1gizgyjTGbIP3epxqbhVobal27VVD4nFYq01giD pah+D5feq2w7Zj2FLiZ17P519rZIxCguJt4EHp5w1NRzrVO4R5eOwEj8sUHj96pE rp1hjAMd4Q== -----END CERTIFICATE-----Generated at Fri Jul 24 21:33:09 2026 by rpki-client