$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.mft File: E6EBE56C67A0271F8DD2C651102DC953E4D98347.mft (raw, json) Hash identifier: 48iMXLF5MkSZyhwatWVc74BmiUYf1DpnKDU3V1Rqdtw= Subject key identifier: B0:F5:FA:AA:B8:C3:35:9F:5E:5E:48:AD:6A:FC:E7:4E:CF:DE:7C:62 Authority key identifier: E6:EB:E5:6C:67:A0:27:1F:8D:D2:C6:51:10:2D:C9:53:E4:D9:83:47 Certificate issuer: /CN=E6EBE56C67A0271F8DD2C651102DC953E4D98347 Certificate serial: 06E8979DDC83F7BFF2F3A1E121BF727A6250F946 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E6EBE56C67A0271F8DD2C651102DC953E4D98347.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.mft Manifest number: 85 Signing time: Fri 24 Jul 2026 02:40:11 +0000 Manifest this update: Fri 24 Jul 2026 02:35:11 +0000 Manifest next update: Sat 25 Jul 2026 06:32:11 +0000 Files and hashes: 1: E6EBE56C67A0271F8DD2C651102DC953E4D98347.crl (hash: JKMgrCEK/49+FnKGxzvF+TThXfjZF+oUIhVmsmG6wd8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.crl rsync://rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E6EBE56C67A0271F8DD2C651102DC953E4D98347.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:e8:97:9d:dc:83:f7:bf:f2:f3:a1:e1:21:bf:72:7a:62:50:f9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E6EBE56C67A0271F8DD2C651102DC953E4D98347 Validity Not Before: Jul 24 02:35:11 2026 GMT Not After : Jul 25 06:32:11 2026 GMT Subject: CN=B0F5FAAAB8C3359F5E5E48AD6AFCE74ECFDE7C62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:14:1e:00:93:cc:c3:6f:2d:99:b4:32:f3:1d: 3e:af:1a:e8:2d:cf:55:54:a1:df:e6:bb:82:ab:83: 8e:ac:df:74:c8:ba:f6:85:e3:98:0b:a4:e9:17:55: a6:e7:5d:ff:af:3d:88:bf:d2:94:f9:53:f8:da:71: 5e:a1:a5:38:4b:be:91:cc:c3:8f:fd:4a:41:3d:09: 01:f6:40:bf:e4:c6:21:23:d8:23:59:cc:77:ad:86: cd:cd:9b:e3:bf:57:84:36:53:c3:31:3c:b3:87:41: 7a:ad:08:9e:58:de:c5:d4:2f:1c:f3:c1:bd:91:c7: 2c:45:36:1d:72:ae:e4:3f:c3:82:bb:dc:f5:ed:a5: 9f:b5:e2:b4:35:53:b7:72:0e:47:e4:0b:24:38:da: e0:67:31:f7:fc:8f:07:4a:69:dc:ff:9f:fe:ba:c6: 45:d2:f0:9e:d1:04:6d:c3:0b:1a:fe:a0:84:3c:0c: f9:ba:0f:d1:90:81:fe:c1:f1:15:f8:f9:0d:df:eb: 27:d6:2b:a9:16:94:7a:f0:71:f2:bd:43:22:4e:e2: f3:4b:2b:80:09:27:b6:08:cc:e7:5a:43:52:13:52: 45:84:b2:5a:ee:d5:c8:6e:e0:10:f8:22:bd:cb:d1: 6b:80:9e:f4:af:c1:b2:e1:34:77:fa:46:72:97:b2: d9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F5:FA:AA:B8:C3:35:9F:5E:5E:48:AD:6A:FC:E7:4E:CF:DE:7C:62 X509v3 Authority Key Identifier: keyid:E6:EB:E5:6C:67:A0:27:1F:8D:D2:C6:51:10:2D:C9:53:E4:D9:83:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E6EBE56C67A0271F8DD2C651102DC953E4D98347.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097033213122969602/0/E6EBE56C67A0271F8DD2C651102DC953E4D98347.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:0a:25:a7:a9:fa:ca:6b:6b:77:32:cd:a1:d1:fd:39:00:25: 9b:63:ec:26:26:db:1f:b3:b1:ec:72:aa:c9:e6:0c:39:af:97: de:60:29:f5:4a:7a:33:83:81:e8:09:ea:94:c5:38:f6:4c:6b: 60:f1:91:a0:52:0b:f5:e0:2d:2b:2d:56:60:16:02:1c:9f:51: fd:4f:91:77:0c:fa:55:90:e3:f2:3c:e7:95:17:ee:8e:e1:54: f0:d4:ff:bf:40:69:2c:6a:fe:1d:bf:ba:b6:16:bd:aa:b1:50: c2:a3:86:02:75:7e:04:58:dc:66:2b:ae:5d:31:0d:f5:c8:ae: 6e:94:c9:1a:32:cd:31:56:90:a3:03:45:72:36:68:58:f2:c7: 9b:9a:ba:40:ea:22:60:21:0d:82:30:e9:cf:ef:f4:98:b4:67: 20:5e:73:9a:a9:42:56:d1:10:5e:eb:4b:cc:3a:5b:19:f4:39: 0b:82:e5:d5:f1:33:a6:6c:80:a4:41:2b:fa:97:74:da:a4:b0: 42:63:b4:05:5a:cf:65:89:c2:27:72:47:70:0a:e3:6b:72:74: 13:67:c0:73:19:f8:17:b8:a7:ae:de:ef:6e:ff:07:33:f8:a1: fd:7a:7b:cb:d9:af:3c:7a:32:dd:80:74:b4:c1:40:33:ac:d1: 53:05:d1:f8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBuiXndyD97/y86HhIb9yemJQ+UYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTZFQkU1NkM2N0EwMjcxRjhERDJDNjUxMTAyREM5NTNF NEQ5ODM0NzAeFw0yNjA3MjQwMjM1MTFaFw0yNjA3MjUwNjMyMTFaMDMxMTAvBgNV BAMTKEIwRjVGQUFBQjhDMzM1OUY1RTVFNDhBRDZBRkNFNzRFQ0ZERTdDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqFB4Ak8zDby2ZtDLzHT6vGugt z1VUod/mu4Krg46s33TIuvaF45gLpOkXVabnXf+vPYi/0pT5U/jacV6hpThLvpHM w4/9SkE9CQH2QL/kxiEj2CNZzHeths3Nm+O/V4Q2U8MxPLOHQXqtCJ5Y3sXULxzz wb2RxyxFNh1yruQ/w4K73PXtpZ+14rQ1U7dyDkfkCyQ42uBnMff8jwdKadz/n/66 xkXS8J7RBG3DCxr+oIQ8DPm6D9GQgf7B8RX4+Q3f6yfWK6kWlHrwcfK9QyJO4vNL K4AJJ7YIzOdaQ1ITUkWEslru1chu4BD4Ir3L0WuAnvSvwbLhNHf6RnKXstlFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsPX6qrjDNZ9eXkitavznTs/efGIwHwYDVR0j BBgwFoAU5uvlbGegJx+N0sZREC3JU+TZg0cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzMzIxMzEyMjk2OTYwMi8wL0U2RUJFNTZDNjdBMDI3MUY4REQyQzY1MTEwMkRD OTUzRTREOTgzNDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTZFQkU1NkM2N0EwMjcxRjhERDJDNjUxMTAyREM5NTNFNEQ5ODM0Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzMyMTMxMjI5Njk2MDIvMC9FNkVCRTU2QzY3QTAy NzFGOEREMkM2NTExMDJEQzk1M0U0RDk4MzQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4wolp6n6ymtr dzLNodH9OQAlm2PsJibbH7Ox7HKqyeYMOa+X3mAp9Up6M4OB6AnqlMU49kxrYPGR oFIL9eAtKy1WYBYCHJ9R/U+Rdwz6VZDj8jznlRfujuFU8NT/v0BpLGr+Hb+6tha9 qrFQwqOGAnV+BFjcZiuuXTEN9ciubpTJGjLNMVaQowNFcjZoWPLHm5q6QOoiYCEN gjDpz+/0mLRnIF5zmqlCVtEQXutLzDpbGfQ5C4Ll1fEzpmyApEEr+pd02qSwQmO0 BVrPZYnCJ3JHcArja3J0E2fAcxn4F7inrt7vbv8HM/ih/Xp7y9mvPHoy3YB0tMFA M6zRUwXR+A== -----END CERTIFICATE-----Generated at Fri Jul 24 19:07:38 2026 by rpki-client