$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft File: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft (raw, json) Hash identifier: QLl95kz/YqlRSdeF2VlS+pEHBpPxhY3EUcu6f2fEsK0= Subject key identifier: AC:FD:AF:93:42:38:12:6E:F7:2D:06:F8:51:C0:C7:EE:AC:64:82:2C Authority key identifier: 6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C Certificate issuer: /CN=A91EFAA20000/serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C Certificate serial: 378802B731379610A55C965F2FE7FB2B6EDB96D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft Manifest number: BE Signing time: Fri 25 Sep 2026 23:38:07 +0000 Manifest this update: Fri 25 Sep 2026 23:33:07 +0000 Manifest next update: Tue 29 Sep 2026 07:13:07 +0000 Files and hashes: 1: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl (hash: /HuqX0TyTZtaQExee7Lyz03OU2KOSep9SDHRFOE2f8s=) 2: 3230332e39342e302e302f31392d3139203d3e203137373339.roa (hash: +m3tQEFjHE7EvQqZt5ZFMX5uxgUV2P9Xu/hnIBd3mN4=) 3: 323430373a343838303a3a2f33322d3332203d3e2030.roa (hash: ijCaVomoD4Gp49iRFc8q+IjUsH7ACZllQmvyC2Sz9cQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 07:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:88:02:b7:31:37:96:10:a5:5c:96:5f:2f:e7:fb:2b:6e:db:96:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAA20000, serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C Validity Not Before: Sep 25 23:33:07 2026 GMT Not After : Sep 29 07:13:07 2026 GMT Subject: CN=ACFDAF934238126EF72D06F851C0C7EEAC64822C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bc:74:27:90:7b:c6:34:48:58:55:6f:f9:86: 82:6e:84:18:e1:20:4e:d8:66:3a:81:92:b1:56:44: 63:30:88:e3:2b:07:35:0d:5e:bc:43:b3:c3:ef:7b: c2:d9:d4:c6:79:66:5f:47:9f:3c:5f:26:24:64:93: 2f:88:df:2c:af:de:76:ce:16:e7:8e:d9:1a:92:d0: 03:79:d0:46:10:4d:98:5f:d2:f3:15:9e:da:52:91: 82:ce:4a:cb:f6:9b:2f:b4:4a:a9:a9:34:8c:88:c9: 74:48:76:df:12:98:72:78:37:a1:49:c9:1b:58:b6: 05:4c:4f:5a:ec:be:3e:8e:ca:ad:a2:26:a3:49:33: 7d:c0:9a:e8:91:80:d3:87:9c:4e:7c:ce:77:4a:08: b7:55:d8:ae:4d:99:17:83:7f:6f:71:36:9b:91:e3: b6:ec:08:67:03:db:cb:6c:ca:51:e0:01:aa:6f:ce: 76:dc:0c:ba:b6:19:f3:cd:e0:7d:0f:c9:03:16:cf: ff:96:3d:21:df:53:26:d3:01:ea:25:9e:3e:bb:ee: 32:1a:80:7e:21:85:4c:ee:59:f2:5b:57:0f:b3:3b: b1:47:46:d9:a6:8e:be:c4:a9:87:3b:51:75:8e:62: 52:93:90:9a:1f:30:5a:dd:1d:3a:e9:81:58:d0:41: 3c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FD:AF:93:42:38:12:6E:F7:2D:06:F8:51:C0:C7:EE:AC:64:82:2C X509v3 Authority Key Identifier: keyid:6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:22:46:f7:5b:c8:fa:26:18:bb:3c:88:49:0c:b4:4a:90:46: ef:66:5c:a0:64:69:84:d8:68:32:a4:10:ba:2a:ca:79:37:d6: 8d:55:21:17:9a:e5:92:98:c3:05:a1:92:ba:71:c6:3b:e7:80: e7:57:b8:16:b6:e8:cc:58:8b:c9:c0:a6:02:c2:ff:72:74:ca: 83:cf:f8:f4:6b:23:f0:90:34:51:3d:c3:78:0d:57:0b:ae:ef: 5e:cc:e0:79:42:e7:6c:54:e9:55:ac:89:c2:32:67:78:3f:22: 6f:b7:c7:c8:eb:9d:75:36:cb:8a:e3:b8:6b:7e:26:c3:5e:96: 3a:5c:e0:55:df:4c:30:71:66:26:e1:74:db:c4:c8:ab:55:ab: b8:bd:e8:1e:67:be:8c:e9:89:81:c3:89:76:a0:9b:bc:c6:b7: d9:8b:b7:b3:cd:c4:92:13:0a:bc:50:14:36:07:87:1e:05:3f: 04:b3:29:4d:b9:b5:b5:e1:77:17:03:27:9c:a1:6f:5e:6b:e7: 5b:43:79:c3:67:9c:22:e2:b3:29:de:7c:c2:35:02:6a:b1:7d: 78:a9:ca:dd:04:96:72:1b:dc:27:cc:6e:ed:52:c8:47:1e:70: 25:b7:62:e8:57:29:bd:3f:24:6f:c1:4d:86:02:f1:2a:0b:41: c7:0f:b2:f2 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUN4gCtzE3lhClXJZfL+f7K27bltcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRUZBQTIwMDAwMTEwLwYDVQQFEyg2QTM4Nzk5RTdG RDIxOTg1RUQ4ODJFODhGRkMwREFGRUZGODdGNTRDMB4XDTI2MDkyNTIzMzMwN1oX DTI2MDkyOTA3MTMwN1owMzExMC8GA1UEAxMoQUNGREFGOTM0MjM4MTI2RUY3MkQw NkY4NTFDMEM3RUVBQzY0ODIyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANu8dCeQe8Y0SFhVb/mGgm6EGOEgTthmOoGSsVZEYzCI4ysHNQ1evEOzw+97 wtnUxnlmX0efPF8mJGSTL4jfLK/eds4W547ZGpLQA3nQRhBNmF/S8xWe2lKRgs5K y/abL7RKqak0jIjJdEh23xKYcng3oUnJG1i2BUxPWuy+Po7KraImo0kzfcCa6JGA 04ecTnzOd0oIt1XYrk2ZF4N/b3E2m5HjtuwIZwPby2zKUeABqm/OdtwMurYZ883g fQ/JAxbP/5Y9Id9TJtMB6iWePrvuMhqAfiGFTO5Z8ltXD7M7sUdG2aaOvsSphztR dY5iUpOQmh8wWt0dOumBWNBBPG0CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBSs/a+T QjgSbvctBvhRwMfurGSCLDAfBgNVHSMEGDAWgBRqOHmef9IZhe2ILoj/wNr+/4f1 TDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk5OTYzODExNTAwMTMwMzA3LzAvNkEzODc5 OUU3RkQyMTk4NUVEODgyRTg4RkZDMERBRkVGRjg3RjU0Qy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvYWpoNW5uX1NH WVh0aUM2SV84RGFfdi1IOVV3LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5OTk2MzgxMTUw MDEzMDMwNy8wLzZBMzg3OTlFN0ZEMjE5ODVFRDg4MkU4OEZGQzBEQUZFRkY4N0Y1 NEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBQIkb3W8j6Jhi7PIhJDLRKkEbvZlygZGmE2GgypBC6Ksp5 N9aNVSEXmuWSmMMFoZK6ccY754DnV7gWtujMWIvJwKYCwv9ydMqDz/j0ayPwkDRR PcN4DVcLru9ezOB5QudsVOlVrInCMmd4PyJvt8fI6511NsuK47hrfibDXpY6XOBV 30wwcWYm4XTbxMirVau4vegeZ76M6YmBw4l2oJu8xrfZi7ezzcSSEwq8UBQ2B4ce BT8EsylNubW14XcXAyecoW9ea+dbQ3nDZ5wi4rMp3nzCNQJqsX14qcrdBJZyG9wn zG7tUshHHnAlt2LoVym9PyRvwU2GAvEqC0HHD7Ly -----END CERTIFICATE-----Generated at Sat Sep 26 14:58:52 2026 by rpki-client