$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft File: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft (raw, json) Hash identifier: 2txu9jeAfJKjplB+aq9PxRLk/RYvOUkuWfkryQ5xRYw= Subject key identifier: CA:5E:FF:DE:1A:FF:87:B2:02:09:24:0A:B8:98:51:1B:12:0D:41:E3 Authority key identifier: 71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 Certificate issuer: /CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Certificate serial: 5DDDDECDE7F0B912F8375ADD3F388D10D427D032 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft Manifest number: B6 Signing time: Sat 03 Oct 2026 06:11:29 +0000 Manifest this update: Sat 03 Oct 2026 06:06:29 +0000 Manifest next update: Tue 06 Oct 2026 10:39:29 +0000 Files and hashes: 1: 3130332e3134372e3132342e302f32342d3234203d3e2034383132.roa (hash: RTIL7pSBicBirhk5lHYPd9ZAXm/vBtAaCSHa5kDDI8k=) 2: 3130332e3134372e3132342e302f32342d3234203d3e203137363231.roa (hash: h0YZk3m9PfR3qf/OG78Z8ldBE8xpriz8QQrGcV+RdXA=) 3: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl (hash: P79uVvCDn9L4cGvCxJH0inSHb+W/xebwScXAPA7s5uk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 09:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:dd:de:cd:e7:f0:b9:12:f8:37:5a:dd:3f:38:8d:10:d4:27:d0:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Validity Not Before: Oct 3 06:06:29 2026 GMT Not After : Oct 6 10:39:29 2026 GMT Subject: CN=CA5EFFDE1AFF87B20209240AB898511B120D41E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ab:26:9e:f1:c1:46:5f:d2:3b:1d:09:02:b5: d0:6e:0a:27:26:c6:bb:7a:5c:d0:3c:2b:0c:55:13: d3:03:85:46:35:c7:5c:d1:ff:54:8d:ea:6d:96:a1: af:c1:81:89:d0:77:84:92:63:16:36:2e:ac:d1:a7: 5f:14:02:85:5f:20:74:1e:ec:a3:db:1d:bf:9b:c1: 8d:32:53:59:68:3a:66:a2:bf:08:81:57:99:46:7c: af:59:52:43:c4:e1:25:8c:85:cc:86:af:30:b9:f5: 41:58:ef:de:70:a4:0b:dd:c7:6d:e7:55:be:1f:eb: d6:83:9e:46:4b:e5:19:6b:9b:32:66:8c:fd:c6:d1: 59:71:2d:77:5d:2e:fb:5b:0a:59:43:ff:22:c3:24: fc:a7:c3:12:2e:de:ca:6f:d2:31:08:68:6a:11:2c: 78:96:94:f6:b2:c0:ba:f7:3c:16:13:b1:9a:ac:2e: 04:36:d8:32:f7:1a:78:8f:46:c8:d0:f2:f6:de:6b: ce:7f:78:1f:08:2a:02:46:e1:ed:09:74:61:29:5e: 94:f8:cf:a0:7e:58:c5:bc:eb:04:67:b0:56:cf:2f: 05:f0:2d:34:4e:a8:df:a9:a8:c8:76:ff:20:b2:67: a2:c7:52:e9:e6:76:a8:c6:5a:f3:4f:68:eb:fe:aa: 99:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5E:FF:DE:1A:FF:87:B2:02:09:24:0A:B8:98:51:1B:12:0D:41:E3 X509v3 Authority Key Identifier: keyid:71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:37:50:be:0a:24:63:0f:5b:60:f7:29:46:35:12:d0:ab:37: db:ed:af:1c:e3:e9:c8:0b:ce:b2:30:74:90:16:d7:16:5f:76: 00:a1:c9:29:7d:ff:d1:9d:2d:70:b1:b2:98:16:93:95:0e:aa: 68:87:e4:6c:1e:c3:64:01:ca:59:23:c2:b7:ed:db:82:29:d9: 69:99:e8:d3:fc:90:f9:f7:75:fc:d0:fe:ce:ae:ed:46:fc:e2: 31:2b:b4:c9:46:11:78:35:6f:08:56:e7:0c:de:6b:d2:1f:71: 82:26:4c:50:f4:b1:87:8e:f4:c3:9a:5a:cb:5c:fe:53:e4:be: d3:a7:57:a9:d8:7f:6e:29:b0:cc:e7:b6:92:22:35:71:45:74: c2:de:ff:51:ee:ee:d7:1c:05:6d:11:43:88:9d:d6:ab:4e:18: d1:90:cd:51:d8:c7:84:61:c6:76:a8:6c:af:ab:6e:23:16:6c: 3b:f2:d1:09:e4:90:7d:64:52:86:77:ae:86:d1:29:bf:94:54: 60:18:93:ae:14:b7:39:6a:fd:9c:34:b4:34:31:e1:b5:df:9c: a8:c8:c6:81:7a:be:80:75:d6:87:d1:14:5e:eb:e7:90:00:85: 50:33:27:81:f1:70:b0:48:df:f9:98:14:fd:70:0e:96:22:c7: 87:fb:a5:dc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXd3ezefwuRL4N1rdPziNENQn0DIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1 QjIwNkIwMzAeFw0yNjEwMDMwNjA2MjlaFw0yNjEwMDYxMDM5MjlaMDMxMTAvBgNV BAMTKENBNUVGRkRFMUFGRjg3QjIwMjA5MjQwQUI4OTg1MTFCMTIwRDQxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfqyae8cFGX9I7HQkCtdBuCicm xrt6XNA8KwxVE9MDhUY1x1zR/1SN6m2Woa/BgYnQd4SSYxY2LqzRp18UAoVfIHQe 7KPbHb+bwY0yU1loOmaivwiBV5lGfK9ZUkPE4SWMhcyGrzC59UFY795wpAvdx23n Vb4f69aDnkZL5RlrmzJmjP3G0VlxLXddLvtbCllD/yLDJPynwxIu3spv0jEIaGoR LHiWlPaywLr3PBYTsZqsLgQ22DL3GniPRsjQ8vbea85/eB8IKgJG4e0JdGEpXpT4 z6B+WMW86wRnsFbPLwXwLTROqN+pqMh2/yCyZ6LHUunmdqjGWvNPaOv+qpl7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyl7/3hr/h7ICCSQKuJhRGxINQeMwHwYDVR0j BBgwFoAUceociy6d2Tn9ppPPALt4YFsgawMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTQxMjA4MjMxNTY4OTk5MS8wLzcxRUExQzhCMkU5REQ5MzlGREE2OTNDRjAwQkI3 ODYwNUIyMDZCMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1QjIwNkIwMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDE0MTIwODIzMTU2ODk5OTEvMC83MUVBMUM4QjJFOURE OTM5RkRBNjkzQ0YwMEJCNzg2MDVCMjA2QjAzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzdQvgokYw9b YPcpRjUS0Ks32+2vHOPpyAvOsjB0kBbXFl92AKHJKX3/0Z0tcLGymBaTlQ6qaIfk bB7DZAHKWSPCt+3bginZaZno0/yQ+fd1/ND+zq7tRvziMSu0yUYReDVvCFbnDN5r 0h9xgiZMUPSxh470w5pay1z+U+S+06dXqdh/bimwzOe2kiI1cUV0wt7/Ue7u1xwF bRFDiJ3Wq04Y0ZDNUdjHhGHGdqhsr6tuIxZsO/LRCeSQfWRShneuhtEpv5RUYBiT rhS3OWr9nDS0NDHhtd+cqMjGgXq+gHXWh9EUXuvnkACFUDMngfFwsEjf+ZgU/XAO liLHh/ul3A== -----END CERTIFICATE-----Generated at Sat Oct 3 11:36:50 2026 by rpki-client