$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft File: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft (raw, json) Hash identifier: jc2hr9n/PZ0m2OT81Wn6XknCEvr+IA92B32t7rqbOjI= Subject key identifier: 46:D4:CB:CB:72:87:35:0F:39:73:30:2B:03:89:98:8D:B9:91:F9:0A Authority key identifier: 6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72 Certificate issuer: /CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72 Certificate serial: 7096B3E6865F65646632F65F45430A08A0D6B93D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft Manifest number: DA Signing time: Sat 03 Oct 2026 11:11:53 +0000 Manifest this update: Sat 03 Oct 2026 11:06:53 +0000 Manifest next update: Tue 06 Oct 2026 15:50:53 +0000 Files and hashes: 1: 3130332e3130352e3230302e302f32342d3234203d3e20313337373634.roa (hash: wAWydnytWwQ6KDrEdMo8gC5yClAHE5G7egoVtj8VJEQ=) 2: 3130332e3130352e3230332e302f32342d3234203d3e20313337373634.roa (hash: njPdr9nkl5PqUnxF8eOxJG8abgbqDS3nA0LWdpX0NDQ=) 3: 323430333a356563303a3a2f33322d3332203d3e2030.roa (hash: pn5P8/momGxXTFfknwO8tuClvccGh1zTNEWhwlA2qwo=) 4: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl (hash: Wf5ourMqxhx3j+mqITcIvl2fzSrLY4u7elACWrNVg5M=) 5: 3130332e3133392e3231322e302f32342d3234203d3e2034383437.roa (hash: fgedEchRrP66KqqHCaA1a1U1d7AKMe+NspTQhBPC/H4=) 6: 3130332e39382e34302e302f32322d3232203d3e2030.roa (hash: e8iEGGHTv4+FgS9wkri7Y69nnBMxrR4pBM+NO8acXaE=) 7: 3130332e3133392e3231332e302f32342d3234203d3e2034383437.roa (hash: k1rAJlK3nl+RMukZCZAOyW2Ztrz5xzJsS+9Jm+UCWLI=) 8: 3130332e3130352e3230312e302f32342d3234203d3e20313337373634.roa (hash: NVUII80DwSw0zpMxLmgIHiGlPbICMvueravTJ8IQZ6Y=) 9: 3130332e3130352e3230322e302f32342d3234203d3e20313337373634.roa (hash: yVxOUCxwSQgdQ2Vm2tB9MZclhRZA4b88sSbFOq2CQHY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 09:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:96:b3:e6:86:5f:65:64:66:32:f6:5f:45:43:0a:08:a0:d6:b9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72 Validity Not Before: Oct 3 11:06:53 2026 GMT Not After : Oct 6 15:50:53 2026 GMT Subject: CN=46D4CBCB7287350F3973302B0389988DB991F90A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a9:2c:05:57:74:83:a6:ed:54:68:da:2c:d2: 66:b7:bf:f8:be:69:d1:be:da:bb:a6:2d:e7:03:db: aa:ef:d2:5b:3a:ce:8e:d1:43:cb:85:e4:1d:af:44: b0:af:98:63:60:f8:de:82:99:04:7a:90:da:b8:d3: 06:47:8e:70:eb:07:90:08:4c:04:78:64:af:af:cf: f6:29:7b:85:2f:2b:fc:4b:86:2a:83:d0:0d:54:1c: bb:49:9e:1c:dc:8e:a5:ea:54:ee:02:47:ea:52:38: 76:09:b9:5e:99:ea:90:db:0f:bc:fa:86:bd:99:bc: 25:2f:96:7e:98:20:46:86:f7:ed:81:d1:78:bc:fe: 0e:6e:71:3d:24:50:46:fc:b8:79:6c:e6:ed:ae:89: 16:20:65:fa:8f:68:d2:a7:16:fb:ab:46:b3:b3:9b: e2:a6:c4:24:e5:ca:ed:34:30:9d:e6:53:f0:50:2b: 76:28:15:41:c1:b3:8c:cb:d1:a4:fc:3f:a7:2a:3f: 0d:d7:9c:f4:57:03:26:ea:cc:49:98:05:4e:a0:f8: 27:3d:aa:cf:9d:73:ac:ff:c1:5d:0a:50:25:0e:2b: c1:c4:b1:ed:30:be:e2:e0:3e:48:8e:ac:db:24:95: 5f:d4:f8:a3:7a:c7:91:b9:7d:32:07:0e:a6:87:00: 6b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D4:CB:CB:72:87:35:0F:39:73:30:2B:03:89:98:8D:B9:91:F9:0A X509v3 Authority Key Identifier: keyid:6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ed:7d:69:df:4c:04:96:66:47:1f:62:af:6b:a1:63:36:a2: 47:4a:ed:5b:1d:3c:42:5b:24:c9:7a:f2:a0:e6:ab:1a:b9:a5: b2:b7:6e:31:9c:91:4d:a9:21:a8:c4:32:ea:15:3b:c9:8d:57: b9:c5:ad:c9:eb:d0:b0:a9:98:cb:9d:46:53:3e:9e:87:11:10: f1:eb:6e:99:17:6e:96:83:f5:24:76:99:4b:c4:83:2e:17:f4: c0:db:dc:65:34:f3:67:b6:f6:73:fa:17:3e:49:95:d0:bd:91: 2c:9a:9e:22:74:f5:65:76:3a:a1:66:e7:3c:3d:ac:1e:a8:dc: 6b:c6:d3:11:bf:95:26:2b:9e:8f:0c:ea:72:f5:8a:77:da:15: 45:12:56:48:b9:9e:f3:43:b6:23:2f:d6:37:76:a0:21:f8:52: b3:ee:43:ca:eb:48:ee:82:b0:aa:bc:a1:10:16:bd:ff:13:1e: ce:af:4e:68:f2:f2:6f:cb:d9:19:b9:a5:ab:62:b4:99:74:05: c9:b9:71:42:18:12:57:da:8d:07:c9:53:98:f4:b5:a8:ab:9d: bc:47:70:7e:18:5a:00:f4:e0:21:3f:89:3b:da:cc:bf:a5:45: c9:ca:0a:c2:b5:6e:d6:d0:56:38:f2:d6:e5:69:98:3c:85:80: 45:84:df:a3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcJaz5oZfZWRmMvZfRUMKCKDWuT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYz NjUzNkU3MjAeFw0yNjEwMDMxMTA2NTNaFw0yNjEwMDYxNTUwNTNaMDMxMTAvBgNV BAMTKDQ2RDRDQkNCNzI4NzM1MEYzOTczMzAyQjAzODk5ODhEQjk5MUY5MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2qSwFV3SDpu1UaNos0ma3v/i+ adG+2rumLecD26rv0ls6zo7RQ8uF5B2vRLCvmGNg+N6CmQR6kNq40wZHjnDrB5AI TAR4ZK+vz/Ype4UvK/xLhiqD0A1UHLtJnhzcjqXqVO4CR+pSOHYJuV6Z6pDbD7z6 hr2ZvCUvln6YIEaG9+2B0Xi8/g5ucT0kUEb8uHls5u2uiRYgZfqPaNKnFvurRrOz m+KmxCTlyu00MJ3mU/BQK3YoFUHBs4zL0aT8P6cqPw3XnPRXAybqzEmYBU6g+Cc9 qs+dc6z/wV0KUCUOK8HEse0wvuLgPkiOrNsklV/U+KN6x5G5fTIHDqaHAGuJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURtTLy3KHNQ85czArA4mYjbmR+QowHwYDVR0j BBgwFoAUa4a9P6D7Cze6xk1sjS2fZjZTbnIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1MTY3MDg1Mjk0Mzg3My8wLzZCODZCRDNGQTBGQjBCMzdCQUM2NEQ2QzhEMkQ5 RjY2MzY1MzZFNzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYzNjUzNkU3Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTE2NzA4NTI5NDM4NzMvMC82Qjg2QkQzRkEwRkIw QjM3QkFDNjRENkM4RDJEOUY2NjM2NTM2RTcyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARO19ad9MBJZm Rx9ir2uhYzaiR0rtWx08QlskyXryoOarGrmlsrduMZyRTakhqMQy6hU7yY1XucWt yevQsKmYy51GUz6ehxEQ8etumRduloP1JHaZS8SDLhf0wNvcZTTzZ7b2c/oXPkmV 0L2RLJqeInT1ZXY6oWbnPD2sHqjca8bTEb+VJiuejwzqcvWKd9oVRRJWSLme80O2 Iy/WN3agIfhSs+5DyutI7oKwqryhEBa9/xMezq9OaPLyb8vZGbmlq2K0mXQFyblx QhgSV9qNB8lTmPS1qKudvEdwfhhaAPTgIT+JO9rMv6VFycoKwrVu1tBWOPLW5WmY PIWARYTfow== -----END CERTIFICATE-----Generated at Sun Oct 4 01:21:48 2026 by rpki-client