$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft File: 6F998E710C20D2A9D256034668026243E86F9239.mft (raw, json) Hash identifier: 3SAunnpjMOUQbtt6swyVUgcPSlwo19MfMfKPGdVrZs0= Subject key identifier: C0:8B:A9:2C:BF:6F:33:08:F6:3F:30:A5:CD:45:CB:52:37:A1:28:B3 Authority key identifier: 6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 Certificate issuer: /CN=6F998E710C20D2A9D256034668026243E86F9239 Certificate serial: 106FC93384D31B91135A22DD82C54F1C79FE0C91 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft Manifest number: 95 Signing time: Wed 29 Jul 2026 16:44:47 +0000 Manifest this update: Wed 29 Jul 2026 16:39:47 +0000 Manifest next update: Thu 30 Jul 2026 18:21:47 +0000 Files and hashes: 1: 6F998E710C20D2A9D256034668026243E86F9239.crl (hash: sm3YaAEt7O122uKh+XQ6ZnDydS8Hz+MNlaMMnia4qaw=) 2: 323430313a36303a3a2f33322d3332203d3e2030.roa (hash: 71m86gm6yxnGiaqfSvrzEvHzssQUJiLPa3d4KKP4Eyw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 18:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:6f:c9:33:84:d3:1b:91:13:5a:22:dd:82:c5:4f:1c:79:fe:0c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F998E710C20D2A9D256034668026243E86F9239 Validity Not Before: Jul 29 16:39:47 2026 GMT Not After : Jul 30 18:21:47 2026 GMT Subject: CN=C08BA92CBF6F3308F63F30A5CD45CB5237A128B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ee:a4:e5:7d:ae:30:61:f0:b1:1a:99:e6:61: 33:90:2f:7c:2a:c5:40:3e:3e:14:38:60:92:bc:c2: 62:57:d0:4a:9d:e5:cf:94:e7:5f:e3:b3:d1:61:48: 86:47:22:0b:4f:d7:54:d6:56:1b:1f:8d:f7:0e:76: 1e:bb:db:44:08:97:48:97:df:a8:f5:e7:d4:09:13: fa:8b:0d:e9:e4:96:ed:07:5f:db:8f:62:b6:d9:d7: 68:6f:ea:0b:a3:d1:88:25:a1:d8:0f:ce:a3:a0:62: 97:12:83:53:3a:b4:4b:48:51:e8:0c:85:cd:9d:80: 60:74:50:2f:d3:44:bc:0f:11:1b:b1:d9:6c:c8:76: 93:b3:65:f5:96:3b:42:60:a5:0d:99:3b:ce:c9:84: c7:a4:91:87:2b:b6:65:07:22:a7:ec:fb:8b:af:10: 95:3f:8a:7d:5e:49:31:8f:ad:bc:f4:1f:9a:a5:4e: 7e:48:a9:4f:87:c5:3f:15:f0:ed:d5:1d:73:30:93: 46:8a:f6:7e:49:a0:68:1e:47:cc:f0:e5:f5:75:71: b8:f0:f9:ae:ba:d0:cd:a8:b1:bb:14:f1:80:55:fd: e6:ab:47:68:36:de:80:52:36:f7:17:7f:07:be:b8: d8:94:24:57:3c:67:48:6e:79:e3:49:af:fe:67:b7: 60:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8B:A9:2C:BF:6F:33:08:F6:3F:30:A5:CD:45:CB:52:37:A1:28:B3 X509v3 Authority Key Identifier: keyid:6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:bf:16:99:1d:c8:25:b7:ba:49:8f:59:5c:dc:68:70:04:6b: cd:0c:97:78:c6:ec:79:f7:e4:0e:33:7f:ff:54:dc:2b:73:ac: 28:bc:54:65:68:0a:a5:87:8a:fe:a2:ff:dd:17:85:5a:3f:af: 22:52:07:1c:4b:c0:0b:a6:13:c9:81:18:70:b0:3b:f5:3b:03: a4:7b:17:12:ad:81:1b:18:5b:ee:de:51:99:4f:0a:04:6b:13: d5:cb:54:b9:5a:d1:e9:45:aa:8a:2b:11:4e:48:34:ba:f6:18: a2:5f:8a:85:1d:1b:c2:38:ff:3b:58:27:a5:43:c8:c9:d2:21: 44:49:5e:cb:6b:f7:2c:41:38:fa:de:6a:0c:22:ff:07:ff:f8: 5a:47:d4:d0:e5:33:f2:02:0d:9f:ce:c5:ec:66:fd:56:25:46: 27:62:6b:4c:4d:a0:ba:43:67:a3:50:0d:6d:40:e5:7c:eb:f9: 1c:ba:95:d1:30:80:fc:08:9c:01:49:e2:4a:d9:b3:8c:5c:ed: cb:e2:35:80:90:c4:a7:73:2b:f4:ff:11:4d:d2:e0:63:bc:01: 55:ed:4c:48:f6:6d:a1:b3:0e:11:14:4c:84:71:b4:f7:b0:5b: 21:58:c8:6b:2a:0e:00:7b:e9:05:ba:6f:e6:c2:3a:64:b1:21: e5:22:57:c6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEG/JM4TTG5ETWiLdgsVPHHn+DJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNF ODZGOTIzOTAeFw0yNjA3MjkxNjM5NDdaFw0yNjA3MzAxODIxNDdaMDMxMTAvBgNV BAMTKEMwOEJBOTJDQkY2RjMzMDhGNjNGMzBBNUNENDVDQjUyMzdBMTI4QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ7qTlfa4wYfCxGpnmYTOQL3wq xUA+PhQ4YJK8wmJX0Eqd5c+U51/js9FhSIZHIgtP11TWVhsfjfcOdh6720QIl0iX 36j159QJE/qLDenklu0HX9uPYrbZ12hv6guj0YglodgPzqOgYpcSg1M6tEtIUegM hc2dgGB0UC/TRLwPERux2WzIdpOzZfWWO0JgpQ2ZO87JhMekkYcrtmUHIqfs+4uv EJU/in1eSTGPrbz0H5qlTn5IqU+HxT8V8O3VHXMwk0aK9n5JoGgeR8zw5fV1cbjw +a660M2osbsU8YBV/earR2g23oBSNvcXfwe+uNiUJFc8Z0hueeNJr/5nt2BdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwIupLL9vMwj2PzClzUXLUjehKLMwHwYDVR0j BBgwFoAUb5mOcQwg0qnSVgNGaAJiQ+hvkjkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU0NzY1NTk1NjEwMzE2OS8wLzZGOTk4RTcxMEMyMEQyQTlEMjU2MDM0NjY4MDI2 MjQzRTg2RjkyMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNFODZGOTIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NDc2NTU5NTYxMDMxNjkvMC82Rjk5OEU3MTBDMjBE MkE5RDI1NjAzNDY2ODAyNjI0M0U4NkY5MjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZr8WmR3IJbe6 SY9ZXNxocARrzQyXeMbseffkDjN//1TcK3OsKLxUZWgKpYeK/qL/3ReFWj+vIlIH HEvAC6YTyYEYcLA79TsDpHsXEq2BGxhb7t5RmU8KBGsT1ctUuVrR6UWqiisRTkg0 uvYYol+KhR0bwjj/O1gnpUPIydIhREley2v3LEE4+t5qDCL/B//4WkfU0OUz8gIN n87F7Gb9ViVGJ2JrTE2gukNno1ANbUDlfOv5HLqV0TCA/AicAUniStmzjFzty+I1 gJDEp3Mr9P8RTdLgY7wBVe1MSPZtobMOERRMhHG097BbIVjIayoOAHvpBbpv5sI6 ZLEh5SJXxg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:20 2026 by rpki-client