$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft File: F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft (raw, json) Hash identifier: rbCMQRU8nrcv+hjmlITesIW/PPMpE1vXB+8GjLFLn7s= Subject key identifier: 15:61:EC:0D:30:5A:E7:CC:6F:17:9E:AD:39:5E:C0:D7:3C:91:87:F7 Authority key identifier: F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2 Certificate issuer: /CN=F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2 Certificate serial: 75F00B06BA7136C193E62BA3AB0196792B8682E9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft Manifest number: A4 Signing time: Tue 29 Sep 2026 13:52:26 +0000 Manifest this update: Tue 29 Sep 2026 13:47:26 +0000 Manifest next update: Fri 02 Oct 2026 21:40:26 +0000 Files and hashes: 1: F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.crl (hash: CPpc1D+tpH3JyG7KffspCyaNIGAkT1kHRhmWEyoKnlA=) 2: AS4808.roa (hash: A/3edimCOZBPSpIK5xYGrmqDvuq4JdDc71VER3fVQSE=) 3: AS9808.roa (hash: isSsUjIqBqLwcnpLClZ+srBakUgI8KxcUiPPayd08pY=) 4: AS0.roa (hash: EvHOeE0VRoKmj+IkX+G9k6Kw919D0rfcsecsEPiPJNA=) 5: AS23724.roa (hash: VrxvW554iSf2GVuzUFyOMwezMHT2fRkfSfE9WYRUSpI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.crl rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 21:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f0:0b:06:ba:71:36:c1:93:e6:2b:a3:ab:01:96:79:2b:86:82:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2 Validity Not Before: Sep 29 13:47:26 2026 GMT Not After : Oct 2 21:40:26 2026 GMT Subject: CN=1561EC0D305AE7CC6F179EAD395EC0D73C9187F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bc:cb:7e:bf:97:de:a1:25:fc:a2:e9:95:04: 92:e8:0a:a8:73:72:e3:08:c5:e6:5c:88:71:e4:b2: 6f:d7:04:0d:48:a5:3a:2a:d3:18:0f:8f:5d:fd:02: a3:a9:9e:ab:d3:dd:88:06:6c:ef:3c:06:bc:b8:07: 51:52:8f:a4:ae:df:21:fc:57:09:f4:fb:26:29:6a: 82:9c:03:a1:8f:10:37:75:91:ed:79:08:15:1d:05: 8b:cb:0e:5b:c6:1b:e3:bc:bc:db:25:93:b8:4a:d4: 94:c1:5b:bc:5b:89:ae:e0:b3:ab:24:3b:a0:ae:f8: 6b:e9:8a:f1:6d:21:e1:fb:cf:93:54:ae:36:39:b4: ca:9b:6b:5a:d5:ae:70:38:b3:16:77:a4:78:4a:43: f3:87:03:2c:02:f7:94:77:45:56:a6:fc:94:f0:cb: d4:35:ce:9f:0e:3d:3a:ba:38:e1:0c:09:91:f7:a5: e6:db:e4:3c:1b:32:47:d3:29:4a:3b:b0:db:a2:51: e7:49:3b:4d:f2:b2:0e:5b:32:df:d9:47:0e:d1:0d: 45:61:36:63:21:92:c5:b3:ba:ca:30:37:77:a6:5a: 50:98:88:93:f1:78:66:bf:d5:55:33:10:8b:a3:ca: 67:3c:80:74:ab:15:a8:ee:93:62:17:a6:e6:3d:41: 00:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:61:EC:0D:30:5A:E7:CC:6F:17:9E:AD:39:5E:C0:D7:3C:91:87:F7 X509v3 Authority Key Identifier: keyid:F6:FB:05:F4:0E:21:1E:A9:D8:D3:85:A6:E0:1D:76:AC:FE:AB:E9:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108630512513056787/0/F6FB05F40E211EA9D8D385A6E01D76ACFEABE9E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:d6:d0:63:ed:36:bd:e8:ab:49:bf:5f:d5:c4:d3:45:52:be: a7:a4:ed:35:6b:d1:35:08:f2:5f:5b:d4:03:3e:0a:86:8a:ce: 77:06:26:71:d8:4e:46:7f:80:10:4a:07:ba:95:17:04:13:f8: cb:17:1f:b9:9a:43:e1:f2:59:17:53:cf:e2:f6:4a:3b:cb:0f: 50:66:ba:b7:c7:5c:dc:c8:16:e5:fa:20:61:ea:b7:bc:74:4a: 84:67:db:61:bd:e4:3e:35:03:98:76:e3:9c:e9:42:5a:13:1d: 76:d7:b2:6f:c0:b5:2b:a2:f8:3c:25:32:99:c5:f3:18:13:bf: b9:51:c4:fa:3d:e5:5b:41:09:66:17:5e:af:be:9f:59:42:9b: b3:aa:59:5b:12:82:e8:bf:98:2e:47:24:3c:8b:96:84:90:2d: e0:6b:99:84:c8:ff:77:de:ab:bc:57:07:71:ce:79:49:17:32: 33:47:e1:6f:ea:de:b3:e8:13:2c:d9:02:65:66:cc:5b:7c:09: 19:9d:7a:4f:6e:eb:12:19:ea:4d:b5:52:f2:27:6c:fc:01:04: 3b:cb:42:35:60:4b:97:11:a8:41:26:80:e8:fa:50:90:ec:65: 42:ce:65:b7:82:c2:20:97:da:86:d0:55:6c:9c:34:63:b6:43: 87:dc:2f:08 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdfALBrpxNsGT5iujqwGWeSuGgukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZGQjA1RjQwRTIxMUVBOUQ4RDM4NUE2RTAxRDc2QUNG RUFCRTlFMjAeFw0yNjA5MjkxMzQ3MjZaFw0yNjEwMDIyMTQwMjZaMDMxMTAvBgNV BAMTKDE1NjFFQzBEMzA1QUU3Q0M2RjE3OUVBRDM5NUVDMEQ3M0M5MTg3RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwvMt+v5feoSX8oumVBJLoCqhz cuMIxeZciHHksm/XBA1IpToq0xgPj139AqOpnqvT3YgGbO88Bry4B1FSj6Su3yH8 Vwn0+yYpaoKcA6GPEDd1ke15CBUdBYvLDlvGG+O8vNslk7hK1JTBW7xbia7gs6sk O6Cu+GvpivFtIeH7z5NUrjY5tMqba1rVrnA4sxZ3pHhKQ/OHAywC95R3RVam/JTw y9Q1zp8OPTq6OOEMCZH3pebb5DwbMkfTKUo7sNuiUedJO03ysg5bMt/ZRw7RDUVh NmMhksWzusowN3emWlCYiJPxeGa/1VUzEIujymc8gHSrFajuk2IXpuY9QQCVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFWHsDTBa58xvF56tOV7A1zyRh/cwHwYDVR0j BBgwFoAU9vsF9A4hHqnY04Wm4B12rP6r6eIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODYzMDUxMjUxMzA1Njc4Ny8wL0Y2RkIwNUY0MEUyMTFFQTlEOEQzODVBNkUwMUQ3 NkFDRkVBQkU5RTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjZGQjA1RjQwRTIxMUVBOUQ4RDM4NUE2RTAxRDc2QUNGRUFCRTlFMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2MzA1MTI1MTMwNTY3ODcvMC9GNkZCMDVGNDBFMjEx RUE5RDhEMzg1QTZFMDFENzZBQ0ZFQUJFOUUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvdbQY+02veir Sb9f1cTTRVK+p6TtNWvRNQjyX1vUAz4KhorOdwYmcdhORn+AEEoHupUXBBP4yxcf uZpD4fJZF1PP4vZKO8sPUGa6t8dc3MgW5fogYeq3vHRKhGfbYb3kPjUDmHbjnOlC WhMddteyb8C1K6L4PCUymcXzGBO/uVHE+j3lW0EJZhder76fWUKbs6pZWxKC6L+Y LkckPIuWhJAt4GuZhMj/d96rvFcHcc55SRcyM0fhb+res+gTLNkCZWbMW3wJGZ16 T27rEhnqTbVS8ids/AEEO8tCNWBLlxGoQSaA6PpQkOxlQs5lt4LCIJfahtBVbJw0 Y7ZDh9wvCA== -----END CERTIFICATE-----Generated at Thu Oct 1 19:17:28 2026 by rpki-client