$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft File: 6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft (raw, json) Hash identifier: 08VxFi5frsWk6hLb4cRPflYYseIFK/HmCIUcDyTwuvY= Subject key identifier: 44:AB:0D:CB:F7:FC:CE:4F:49:F4:BA:1C:B1:68:5A:52:E4:84:A6:D9 Authority key identifier: 6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3 Certificate issuer: /CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3 Certificate serial: 02223FD6B54F1E30CB924A73F8902A4137933AF3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft Manifest number: 86 Signing time: Fri 24 Jul 2026 14:01:21 +0000 Manifest this update: Fri 24 Jul 2026 13:56:21 +0000 Manifest next update: Sat 25 Jul 2026 14:57:21 +0000 Files and hashes: 1: 6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl (hash: fz/S9XZO24DST9SSoB/nRPj4c3Klj2qoshN+hoWmc8A=) 2: 3130332e3137302e3231332e302f32342d3234203d3e20313436383432.roa (hash: xHB51GTEu6E4O2uPU5Q+PFtFl9kWbp78dTmrzsJmvSE=) 3: 3130332e3137302e3231322e302f32342d3234203d3e20313436383432.roa (hash: oIVYiH99ns+ZO8k2snXu2q5AtM9u9S/dgbN/MlAUrrI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:22:3f:d6:b5:4f:1e:30:cb:92:4a:73:f8:90:2a:41:37:93:3a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3 Validity Not Before: Jul 24 13:56:21 2026 GMT Not After : Jul 25 14:57:21 2026 GMT Subject: CN=44AB0DCBF7FCCE4F49F4BA1CB1685A52E484A6D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:61:9e:1a:1b:97:7f:e8:95:99:c5:88:84: 69:2a:64:6e:5f:91:d5:bd:11:63:52:1b:52:b7:48: ec:55:e6:9a:9b:f0:cf:b7:f7:30:4f:f9:32:2b:98: 4e:87:fa:fc:16:b5:77:4f:7d:bf:5d:7d:64:18:14: 49:8c:66:e9:6b:46:29:a4:46:ce:28:b2:6f:00:89: 02:9c:64:a3:b4:a6:37:4c:7e:61:ab:65:43:db:88: fe:ef:a1:5b:f2:c6:8a:0a:7c:f6:8d:1a:d1:d6:83: 7e:92:5b:f4:3e:97:d4:5f:c7:63:75:cb:e1:01:3a: f8:81:cd:74:53:de:43:ef:e4:a7:b1:da:16:f8:4b: 7d:d2:d5:75:c5:ca:44:b7:05:94:4e:fe:25:80:d3: ed:b5:37:92:09:35:d6:db:2d:be:c1:ce:6f:2f:ca: da:b6:04:5c:8a:93:38:37:f8:b9:a0:26:65:6d:c8: fc:15:e6:1f:cc:35:62:17:fa:7f:7f:05:71:fb:83: 31:98:14:3c:c6:a0:70:dd:a9:cf:9c:90:25:1e:9d: 22:bd:1f:b0:ae:34:49:01:47:00:82:e8:85:e8:c1: 9f:06:ef:f3:20:fd:8e:9a:68:58:27:34:cf:1b:41: 36:d7:4e:8d:06:5d:68:7b:c0:59:3b:2f:25:ab:4a: 12:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AB:0D:CB:F7:FC:CE:4F:49:F4:BA:1C:B1:68:5A:52:E4:84:A6:D9 X509v3 Authority Key Identifier: keyid:6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:37:71:f1:e1:26:81:e4:fc:d9:2b:ae:d5:20:a8:c0:5f:9d: 27:e7:48:85:0d:97:1c:20:0d:a4:33:5b:22:59:61:9d:3f:25: 5e:3e:0f:1d:1a:c6:42:e9:61:7f:78:9f:68:57:53:07:89:a8: 84:be:96:05:9a:9f:57:80:2d:2c:c9:e8:b8:5b:2b:1e:90:74: f9:fb:47:4c:4b:cb:73:55:4d:42:44:5a:05:f2:33:c5:46:74: 4f:67:df:a7:41:44:92:e9:04:09:41:fd:43:3c:c2:cb:14:27: 7d:1f:74:9f:fd:c3:16:7a:5f:52:6f:4f:43:60:36:ac:1c:aa: c0:98:ed:04:f5:3e:87:bb:a8:57:51:24:73:99:a7:ce:38:08: 88:ed:98:53:40:7a:9b:e6:46:8e:d8:1a:b7:26:8b:32:48:1b: f9:b0:5e:2e:2a:b1:4f:2c:d7:3b:0e:43:ba:0d:25:d8:9e:30: df:3f:10:67:76:29:7f:8d:b7:73:4a:52:20:d0:59:6d:02:85: 28:15:45:5e:05:0f:d5:b0:45:69:39:f0:60:79:ac:be:ca:d1: b9:aa:32:de:4d:ad:24:fa:70:db:70:27:fb:9e:b1:89:d8:a0: 90:0d:85:f1:a1:5d:bd:a3:a0:84:9d:83:44:16:bd:8b:ab:13: 16:c2:9e:c8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAiI/1rVPHjDLkkpz+JAqQTeTOvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU0N0ZGNThBMUM1QUE4NTg0RDI5NTNDMUVBRDRERTg2 MTU3RUJEMzAeFw0yNjA3MjQxMzU2MjFaFw0yNjA3MjUxNDU3MjFaMDMxMTAvBgNV BAMTKDQ0QUIwRENCRjdGQ0NFNEY0OUY0QkExQ0IxNjg1QTUyRTQ4NEE2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClumGeGhuXf+iVmcWIhGkqZG5f kdW9EWNSG1K3SOxV5pqb8M+39zBP+TIrmE6H+vwWtXdPfb9dfWQYFEmMZulrRimk Rs4osm8AiQKcZKO0pjdMfmGrZUPbiP7voVvyxooKfPaNGtHWg36SW/Q+l9Rfx2N1 y+EBOviBzXRT3kPv5Kex2hb4S33S1XXFykS3BZRO/iWA0+21N5IJNdbbLb7Bzm8v ytq2BFyKkzg3+LmgJmVtyPwV5h/MNWIX+n9/BXH7gzGYFDzGoHDdqc+ckCUenSK9 H7CuNEkBRwCC6IXowZ8G7/Mg/Y6aaFgnNM8bQTbXTo0GXWh7wFk7LyWrShLfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURKsNy/f8zk9J9LocsWhaUuSEptkwHwYDVR0j BBgwFoAUbkf/WKHFqoWE0pU8Hq1N6GFX69MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3NzM0NjQ1MzY4NDIyNS8wLzZFNDdGRjU4QTFDNUFBODU4NEQyOTUzQzFFQUQ0 REU4NjE1N0VCRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkU0N0ZGNThBMUM1QUE4NTg0RDI5NTNDMUVBRDRERTg2MTU3RUJEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzczNDY0NTM2ODQyMjUvMC82RTQ3RkY1OEExQzVB QTg1ODREMjk1M0MxRUFENERFODYxNTdFQkQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzdx8eEmgeT8 2Suu1SCowF+dJ+dIhQ2XHCANpDNbIllhnT8lXj4PHRrGQulhf3ifaFdTB4mohL6W BZqfV4AtLMnouFsrHpB0+ftHTEvLc1VNQkRaBfIzxUZ0T2ffp0FEkukECUH9QzzC yxQnfR90n/3DFnpfUm9PQ2A2rByqwJjtBPU+h7uoV1Ekc5mnzjgIiO2YU0B6m+ZG jtgatyaLMkgb+bBeLiqxTyzXOw5Dug0l2J4w3z8QZ3Ypf423c0pSINBZbQKFKBVF XgUP1bBFaTnwYHmsvsrRuaoy3k2tJPpw23An+56xidigkA2F8aFdvaOghJ2DRBa9 i6sTFsKeyA== -----END CERTIFICATE-----Generated at Fri Jul 24 18:53:42 2026 by rpki-client