$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft File: 6F998E710C20D2A9D256034668026243E86F9239.mft (raw, json) Hash identifier: pmTn3OGqv08jzTNItau6EQDIm8Ws4das58xYlcllcPk= Subject key identifier: 0C:D5:C7:D8:45:1E:35:2A:4F:B5:F4:B2:3E:BA:E2:46:CF:D1:AA:01 Authority key identifier: 6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 Certificate issuer: /CN=6F998E710C20D2A9D256034668026243E86F9239 Certificate serial: 745BE9E7C391C097F9D8D6CC11C49AA507C82C1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft Manifest number: D0 Signing time: Fri 09 Oct 2026 19:23:41 +0000 Manifest this update: Fri 09 Oct 2026 19:18:41 +0000 Manifest next update: Tue 13 Oct 2026 05:47:41 +0000 Files and hashes: 1: 323430313a36303a3a2f33322d3332203d3e2030.roa (hash: 71m86gm6yxnGiaqfSvrzEvHzssQUJiLPa3d4KKP4Eyw=) 2: 6F998E710C20D2A9D256034668026243E86F9239.crl (hash: zradgi5EMKFMnUfRbEeOC6Ml2dnneyvjomYRCbfVwhE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 05:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5b:e9:e7:c3:91:c0:97:f9:d8:d6:cc:11:c4:9a:a5:07:c8:2c:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F998E710C20D2A9D256034668026243E86F9239 Validity Not Before: Oct 9 19:18:41 2026 GMT Not After : Oct 13 05:47:41 2026 GMT Subject: CN=0CD5C7D8451E352A4FB5F4B23EBAE246CFD1AA01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:64:2c:1e:d9:77:85:54:6e:11:89:c2:af:6b: 9d:d8:61:03:b8:25:8f:c1:73:f9:65:9f:4b:62:e4: c4:a5:3d:40:10:2d:df:47:8a:1d:77:61:7d:47:f2: f9:3d:67:3b:58:5a:c6:5d:8e:d0:ab:c6:65:dd:ad: 67:c9:ad:91:e0:8b:1d:6b:9f:1e:49:f3:cf:01:1f: c4:61:70:95:1c:52:fe:66:06:93:5b:a9:db:10:4a: fa:cc:f8:86:48:42:02:b0:c3:a6:a0:fe:b0:92:7f: dd:de:94:bc:ee:5a:29:fe:94:38:98:c0:e0:d4:10: 2d:b7:87:0b:54:5c:92:1c:59:97:bb:21:af:0f:e6: c6:68:fe:81:87:f1:05:36:4f:85:d1:90:e5:e0:78: 5b:0f:db:bf:ca:29:8e:fb:53:ea:87:eb:18:e4:1c: 3b:a2:a3:db:3f:19:db:67:57:5f:3f:bc:33:e6:73: f2:a8:b5:59:89:cf:69:4c:fc:88:70:06:8a:0f:45: a4:3a:09:25:11:9b:7f:fd:b8:29:d9:9a:46:08:f2: 0a:f8:7d:6f:e7:4a:64:b5:b1:22:c3:38:db:31:6c: 8b:73:55:81:88:08:49:29:ad:e7:e6:56:a5:52:cb: fc:86:4d:0d:66:69:70:f9:c0:31:4e:25:06:92:b9: 76:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D5:C7:D8:45:1E:35:2A:4F:B5:F4:B2:3E:BA:E2:46:CF:D1:AA:01 X509v3 Authority Key Identifier: keyid:6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:70:fb:a0:ff:bf:0c:8d:69:dc:0c:5d:dc:9b:6e:64:03:20: 4f:bd:c0:08:d9:a8:36:7d:27:2a:53:f6:5d:13:87:81:1a:34: 23:24:c2:1d:d8:c6:c0:ec:b0:8f:a1:4b:e3:71:1c:ea:94:f2: 18:6b:6d:34:ec:25:d4:44:51:c1:2c:a4:ed:e1:f4:89:12:08: 80:ca:56:db:9d:a9:4f:19:f3:a1:d9:38:27:97:17:d5:0a:cc: f2:0e:1d:7d:a9:ae:96:1e:1d:69:6c:6c:f9:dc:a5:b7:cc:4e: 9a:2c:63:30:ba:09:89:cc:a0:3a:10:0a:32:57:f3:69:6c:95: a2:e5:10:30:bb:92:eb:42:d7:14:d6:85:bb:2c:a5:a8:5a:d8: f7:f3:c7:f5:57:e6:7d:29:52:95:d2:ff:27:70:76:e4:00:8c: 34:89:59:89:ee:7e:8f:0c:3c:7b:6f:5d:c5:56:cb:de:e8:f3: 3c:5b:2a:46:dc:25:00:68:c6:aa:1c:ed:a8:89:49:b4:85:b5: e4:a0:77:7f:36:e8:d4:06:19:9a:78:48:89:25:9f:72:87:71: 3c:bf:b8:8c:6a:e4:3f:be:10:f6:94:5e:8a:6c:0a:57:9e:12: 11:b7:dd:9a:12:3e:13:68:c9:14:1b:33:ad:6c:9a:79:60:5b: 24:8a:66:3d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdFvp58ORwJf52NbMEcSapQfILB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNF ODZGOTIzOTAeFw0yNjEwMDkxOTE4NDFaFw0yNjEwMTMwNTQ3NDFaMDMxMTAvBgNV BAMTKDBDRDVDN0Q4NDUxRTM1MkE0RkI1RjRCMjNFQkFFMjQ2Q0ZEMUFBMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwZCwe2XeFVG4RicKva53YYQO4 JY/Bc/lln0ti5MSlPUAQLd9Hih13YX1H8vk9ZztYWsZdjtCrxmXdrWfJrZHgix1r nx5J888BH8RhcJUcUv5mBpNbqdsQSvrM+IZIQgKww6ag/rCSf93elLzuWin+lDiY wODUEC23hwtUXJIcWZe7Ia8P5sZo/oGH8QU2T4XRkOXgeFsP27/KKY77U+qH6xjk HDuio9s/GdtnV18/vDPmc/KotVmJz2lM/IhwBooPRaQ6CSURm3/9uCnZmkYI8gr4 fW/nSmS1sSLDONsxbItzVYGICEkprefmVqVSy/yGTQ1maXD5wDFOJQaSuXaXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDNXH2EUeNSpPtfSyPrriRs/RqgEwHwYDVR0j BBgwFoAUb5mOcQwg0qnSVgNGaAJiQ+hvkjkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU0NzY1NTk1NjEwMzE2OS8wLzZGOTk4RTcxMEMyMEQyQTlEMjU2MDM0NjY4MDI2 MjQzRTg2RjkyMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNFODZGOTIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NDc2NTU5NTYxMDMxNjkvMC82Rjk5OEU3MTBDMjBE MkE5RDI1NjAzNDY2ODAyNjI0M0U4NkY5MjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3D7oP+/DI1p 3Axd3JtuZAMgT73ACNmoNn0nKlP2XROHgRo0IyTCHdjGwOywj6FL43Ec6pTyGGtt NOwl1ERRwSyk7eH0iRIIgMpW252pTxnzodk4J5cX1QrM8g4dfamulh4daWxs+dyl t8xOmixjMLoJicygOhAKMlfzaWyVouUQMLuS60LXFNaFuyylqFrY9/PH9VfmfSlS ldL/J3B25ACMNIlZie5+jww8e29dxVbL3ujzPFsqRtwlAGjGqhztqIlJtIW15KB3 fzbo1AYZmnhIiSWfcodxPL+4jGrkP74Q9pReimwKV54SEbfdmhI+E2jJFBszrWya eWBbJIpmPQ== -----END CERTIFICATE-----Generated at Sat Oct 10 17:11:24 2026 by rpki-client