$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft File: 6F998E710C20D2A9D256034668026243E86F9239.mft (raw, json) Hash identifier: +Xt++RBgao0iZxFLgPM7Px31unrRnwA6Ef9kQo8p84I= Subject key identifier: 03:7D:6A:97:5D:2A:1F:3D:1E:31:B7:29:87:58:FA:B0:A2:6A:C0:C7 Authority key identifier: 6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 Certificate issuer: /CN=6F998E710C20D2A9D256034668026243E86F9239 Certificate serial: 66C9602F46430EC411AB294E142E448CB9D2063A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft Manifest number: D3 Signing time: Fri 16 Oct 2026 14:27:39 +0000 Manifest this update: Fri 16 Oct 2026 14:22:39 +0000 Manifest next update: Mon 19 Oct 2026 15:04:39 +0000 Files and hashes: 1: 6F998E710C20D2A9D256034668026243E86F9239.crl (hash: 0SIqBJFBskeWPqvIHZBMcH6eX7RklYBCqbCOm91AYi4=) 2: 323430313a36303a3a2f33322d3332203d3e2030.roa (hash: 71m86gm6yxnGiaqfSvrzEvHzssQUJiLPa3d4KKP4Eyw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c9:60:2f:46:43:0e:c4:11:ab:29:4e:14:2e:44:8c:b9:d2:06:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F998E710C20D2A9D256034668026243E86F9239 Validity Not Before: Oct 16 14:22:39 2026 GMT Not After : Oct 19 15:04:39 2026 GMT Subject: CN=037D6A975D2A1F3D1E31B7298758FAB0A26AC0C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cb:17:71:6a:1f:2b:aa:08:a5:7c:eb:8a:be: 44:6c:21:76:61:2c:93:9c:7e:14:6c:a8:05:06:9d: 8a:7a:8b:b0:80:a7:11:a3:39:94:b1:01:49:38:23: d5:38:c0:dd:62:20:e9:8e:a7:0f:61:ab:18:84:19: 0b:53:4b:05:0a:74:bb:64:6a:1a:95:bb:f5:f9:e3: db:a4:99:36:90:5b:3a:de:47:27:65:ee:03:7e:e6: ad:6e:f2:99:5a:50:a8:dc:36:61:21:52:c3:ca:21: ac:1a:42:f5:7a:23:d3:77:dd:bb:a4:ca:a7:e4:1c: cd:51:d6:b4:c2:dd:ea:49:14:ff:e4:50:94:33:0e: e1:a5:be:c4:f1:55:e0:e8:2a:1e:26:43:0b:d0:f8: 59:49:4c:6a:16:ef:12:3e:81:22:80:b0:9c:a2:86: 93:49:35:ae:a6:07:07:07:de:52:a1:e0:3c:0c:55: 2a:89:7f:01:ef:02:47:f3:d0:03:d6:90:e8:ec:a4: 18:4a:db:40:cd:c2:a2:98:2f:6c:dd:d4:7d:9c:4c: 54:f2:88:f0:b8:8b:77:f2:ee:13:5d:12:be:2a:94: 55:ae:c2:96:64:4b:61:65:c1:0e:ed:2f:d4:4b:0b: 77:3a:58:37:d1:f0:3d:0e:b8:44:aa:44:7d:77:9c: 85:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7D:6A:97:5D:2A:1F:3D:1E:31:B7:29:87:58:FA:B0:A2:6A:C0:C7 X509v3 Authority Key Identifier: keyid:6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:36:36:22:df:4c:41:3d:96:09:38:c6:cd:e7:60:c4:b7:4f: 4b:26:38:16:c2:f4:43:72:39:f4:4a:fb:3c:83:53:25:5e:25: 08:c9:f0:b1:c6:de:7d:30:ea:fd:1f:98:ce:43:f2:15:63:b6: d0:30:4f:20:a2:56:29:9d:55:d3:a7:c4:66:f6:17:18:dd:18: 21:77:9e:67:c0:f4:50:8b:7e:76:4e:e9:fc:29:1c:b0:90:1e: ac:40:b1:db:29:3e:0a:46:d9:94:94:85:00:0e:33:91:e6:7b: 08:32:77:6a:ad:b5:5c:7d:b1:57:ba:a5:56:50:29:49:ad:a0: 8d:6b:cc:4c:87:c9:66:ae:f5:cc:d1:bc:2d:c2:bb:34:d0:91: 13:bf:57:1b:c4:76:2e:49:db:a0:69:75:9e:1b:ea:c6:c4:31: 27:bb:59:06:e7:4a:43:38:56:50:c5:bd:1f:b9:c9:12:40:dd: bb:e1:ce:49:7c:7f:6c:41:d7:55:78:d9:64:fc:05:63:ec:d4: 2b:e8:f0:d1:6f:8d:c5:04:c7:88:10:20:3b:4f:15:13:db:5e: ed:4d:11:fa:92:c3:66:ed:d3:59:e3:e1:ee:03:48:bb:06:93: 23:d3:4e:d8:e7:62:e8:25:0e:67:29:21:68:db:bd:78:4b:7b: 92:48:21:58 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZslgL0ZDDsQRqylOFC5EjLnSBjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNF ODZGOTIzOTAeFw0yNjEwMTYxNDIyMzlaFw0yNjEwMTkxNTA0MzlaMDMxMTAvBgNV BAMTKDAzN0Q2QTk3NUQyQTFGM0QxRTMxQjcyOTg3NThGQUIwQTI2QUMwQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUyxdxah8rqgilfOuKvkRsIXZh LJOcfhRsqAUGnYp6i7CApxGjOZSxAUk4I9U4wN1iIOmOpw9hqxiEGQtTSwUKdLtk ahqVu/X549ukmTaQWzreRydl7gN+5q1u8plaUKjcNmEhUsPKIawaQvV6I9N33buk yqfkHM1R1rTC3epJFP/kUJQzDuGlvsTxVeDoKh4mQwvQ+FlJTGoW7xI+gSKAsJyi hpNJNa6mBwcH3lKh4DwMVSqJfwHvAkfz0APWkOjspBhK20DNwqKYL2zd1H2cTFTy iPC4i3fy7hNdEr4qlFWuwpZkS2FlwQ7tL9RLC3c6WDfR8D0OuESqRH13nIVBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUA31ql10qHz0eMbcph1j6sKJqwMcwHwYDVR0j BBgwFoAUb5mOcQwg0qnSVgNGaAJiQ+hvkjkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU0NzY1NTk1NjEwMzE2OS8wLzZGOTk4RTcxMEMyMEQyQTlEMjU2MDM0NjY4MDI2 MjQzRTg2RjkyMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNFODZGOTIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NDc2NTU5NTYxMDMxNjkvMC82Rjk5OEU3MTBDMjBE MkE5RDI1NjAzNDY2ODAyNjI0M0U4NkY5MjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDY2It9MQT2W CTjGzedgxLdPSyY4FsL0Q3I59Er7PINTJV4lCMnwscbefTDq/R+YzkPyFWO20DBP IKJWKZ1V06fEZvYXGN0YIXeeZ8D0UIt+dk7p/CkcsJAerECx2yk+CkbZlJSFAA4z keZ7CDJ3aq21XH2xV7qlVlApSa2gjWvMTIfJZq71zNG8LcK7NNCRE79XG8R2Lknb oGl1nhvqxsQxJ7tZBudKQzhWUMW9H7nJEkDdu+HOSXx/bEHXVXjZZPwFY+zUK+jw 0W+NxQTHiBAgO08VE9te7U0R+pLDZu3TWePh7gNIuwaTI9NO2Odi6CUOZykhaNu9 eEt7kkghWA== -----END CERTIFICATE-----Generated at Sun Oct 18 09:25:37 2026 by rpki-client