$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft File: 6F998E710C20D2A9D256034668026243E86F9239.mft (raw, json) Hash identifier: cJaa/L7cfc9xcC/1zJ6NpUqaB0IPQeBuHQEDTpKAqz0= Subject key identifier: F8:57:D8:50:57:99:D7:A7:A7:D7:7D:0D:59:31:26:4B:92:EE:3E:C3 Authority key identifier: 6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 Certificate issuer: /CN=6F998E710C20D2A9D256034668026243E86F9239 Certificate serial: 25415F6902B2BFFE4A69BA356FC051716D5C573B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft Manifest number: D2 Signing time: Wed 14 Oct 2026 07:43:50 +0000 Manifest this update: Wed 14 Oct 2026 07:38:50 +0000 Manifest next update: Sat 17 Oct 2026 14:22:50 +0000 Files and hashes: 1: 323430313a36303a3a2f33322d3332203d3e2030.roa (hash: 71m86gm6yxnGiaqfSvrzEvHzssQUJiLPa3d4KKP4Eyw=) 2: 6F998E710C20D2A9D256034668026243E86F9239.crl (hash: RBxMPk7zSkQZB2Z/seNGVmbwuoCICKXP1cyi0YO3lpE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 14:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:41:5f:69:02:b2:bf:fe:4a:69:ba:35:6f:c0:51:71:6d:5c:57:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F998E710C20D2A9D256034668026243E86F9239 Validity Not Before: Oct 14 07:38:50 2026 GMT Not After : Oct 17 14:22:50 2026 GMT Subject: CN=F857D8505799D7A7A7D77D0D5931264B92EE3EC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ce:30:9c:4e:20:21:58:21:6f:25:ea:3c:6e: cb:2c:4d:de:69:c5:41:24:52:c2:c4:91:39:dc:02: e9:19:d9:8a:df:79:74:b0:2a:81:db:14:72:aa:a1: e1:ba:53:6d:93:37:31:fd:7c:20:d7:88:1e:6b:f4: 52:c8:6a:9e:9c:9b:4e:b6:18:ab:9a:ad:b0:5c:b2: 5e:cc:06:cf:b3:c0:8a:6a:15:d8:a2:04:08:4a:d3: ed:fa:b4:e8:eb:0c:98:46:73:da:03:55:7b:bf:e9: 89:b8:bc:93:7c:eb:48:7e:f4:e2:17:fd:af:ed:04: b4:ba:f1:02:a2:a8:49:cd:ed:df:73:46:12:6f:b3: 85:f7:e2:15:f1:50:d5:85:98:88:d0:d4:fd:47:aa: 6b:04:5e:6b:17:72:a0:0e:1d:70:c4:7a:78:1c:44: 55:f4:1f:8f:ab:01:ca:d0:e2:bf:4d:56:3f:3e:4a: 70:90:c4:63:79:82:24:69:5f:48:82:38:62:91:d7: 63:56:9d:99:d5:f7:5f:df:c3:0c:75:3d:a5:69:7a: 1d:32:72:0e:57:12:3d:36:a7:4a:69:3f:31:42:a3: 38:4f:d8:92:0b:30:e8:2d:0b:3e:ce:62:fc:e8:56: 8c:0f:c5:e1:4f:e4:b4:9a:4d:a1:e6:50:28:1d:e3: 24:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:57:D8:50:57:99:D7:A7:A7:D7:7D:0D:59:31:26:4B:92:EE:3E:C3 X509v3 Authority Key Identifier: keyid:6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:4b:67:a3:1f:60:7b:13:ea:4d:3b:14:99:ba:56:79:77:76: 59:b9:df:e6:24:5d:34:a3:42:cb:46:73:94:0a:97:ff:82:3f: b8:61:a6:c3:80:c0:58:3e:20:ed:3c:ff:65:f9:18:2c:55:b4: 09:c5:2e:9b:b8:4d:99:4f:c2:12:68:20:c1:be:8d:68:84:d7: 45:6b:48:ce:21:28:81:38:94:5c:f9:dd:ec:d8:4a:62:dc:46: 9c:d6:03:4c:87:46:61:08:af:91:ce:14:16:d7:90:f3:c5:53: 02:72:e7:98:c9:34:4a:02:5b:ee:6c:2c:12:57:64:38:7f:09: 6a:14:cb:2b:df:7e:39:03:9c:42:9d:be:30:40:ac:25:29:d8: d1:2c:be:5c:32:4d:90:9a:de:c6:20:ba:10:01:c2:bf:bc:a3: f6:77:44:04:96:5b:91:0c:40:b6:96:03:cb:68:36:da:b8:0f: 27:1c:38:58:6a:9d:73:41:24:d1:d7:c2:ea:9a:7a:1b:24:32: 72:3f:f7:6a:4d:43:ba:fd:59:2d:21:12:ef:26:fa:23:4d:4c: ab:f7:0b:72:a4:5a:e2:9c:0f:96:ec:2e:7f:7f:42:87:c0:f9: 58:2b:95:94:9f:55:85:64:08:6d:73:74:70:a5:25:6a:95:7e: 80:a4:cd:f9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJUFfaQKyv/5Kabo1b8BRcW1cVzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNF ODZGOTIzOTAeFw0yNjEwMTQwNzM4NTBaFw0yNjEwMTcxNDIyNTBaMDMxMTAvBgNV BAMTKEY4NTdEODUwNTc5OUQ3QTdBN0Q3N0QwRDU5MzEyNjRCOTJFRTNFQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCizjCcTiAhWCFvJeo8bsssTd5p xUEkUsLEkTncAukZ2YrfeXSwKoHbFHKqoeG6U22TNzH9fCDXiB5r9FLIap6cm062 GKuarbBcsl7MBs+zwIpqFdiiBAhK0+36tOjrDJhGc9oDVXu/6Ym4vJN860h+9OIX /a/tBLS68QKiqEnN7d9zRhJvs4X34hXxUNWFmIjQ1P1HqmsEXmsXcqAOHXDEengc RFX0H4+rAcrQ4r9NVj8+SnCQxGN5giRpX0iCOGKR12NWnZnV91/fwwx1PaVpeh0y cg5XEj02p0ppPzFCozhP2JILMOgtCz7OYvzoVowPxeFP5LSaTaHmUCgd4yRtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+FfYUFeZ16en130NWTEmS5LuPsMwHwYDVR0j BBgwFoAUb5mOcQwg0qnSVgNGaAJiQ+hvkjkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU0NzY1NTk1NjEwMzE2OS8wLzZGOTk4RTcxMEMyMEQyQTlEMjU2MDM0NjY4MDI2 MjQzRTg2RjkyMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNFODZGOTIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NDc2NTU5NTYxMDMxNjkvMC82Rjk5OEU3MTBDMjBE MkE5RDI1NjAzNDY2ODAyNjI0M0U4NkY5MjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuEtnox9gexPq TTsUmbpWeXd2Wbnf5iRdNKNCy0ZzlAqX/4I/uGGmw4DAWD4g7Tz/ZfkYLFW0CcUu m7hNmU/CEmggwb6NaITXRWtIziEogTiUXPnd7NhKYtxGnNYDTIdGYQivkc4UFteQ 88VTAnLnmMk0SgJb7mwsEldkOH8JahTLK99+OQOcQp2+MECsJSnY0Sy+XDJNkJre xiC6EAHCv7yj9ndEBJZbkQxAtpYDy2g22rgPJxw4WGqdc0Ek0dfC6pp6GyQycj/3 ak1Duv1ZLSES7yb6I01Mq/cLcqRa4pwPluwuf39Ch8D5WCuVlJ9VhWQIbXN0cKUl apV+gKTN+Q== -----END CERTIFICATE-----Generated at Thu Oct 15 08:37:44 2026 by rpki-client