$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft File: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft (raw, json) Hash identifier: DZ1KUWHQUaPj9/HNvHZMBS339oEI312yU6WZcWvGAeU= Subject key identifier: CA:D2:16:9D:BD:7E:88:BE:9F:DD:99:5D:1B:75:91:FD:87:AE:64:B7 Authority key identifier: 6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72 Certificate issuer: /CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72 Certificate serial: 094941004E44465A810C093B38127CC105ECE665 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft Manifest number: DD Signing time: Sat 10 Oct 2026 04:54:14 +0000 Manifest this update: Sat 10 Oct 2026 04:49:14 +0000 Manifest next update: Tue 13 Oct 2026 11:55:14 +0000 Files and hashes: 1: 3130332e3130352e3230322e302f32342d3234203d3e20313337373634.roa (hash: yVxOUCxwSQgdQ2Vm2tB9MZclhRZA4b88sSbFOq2CQHY=) 2: 3130332e39382e34302e302f32322d3232203d3e2030.roa (hash: e8iEGGHTv4+FgS9wkri7Y69nnBMxrR4pBM+NO8acXaE=) 3: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl (hash: WaC7AGtjlhPxOKBuzYEkev3lBpRl487gfL5WvJTVEtc=) 4: 3130332e3130352e3230332e302f32342d3234203d3e20313337373634.roa (hash: njPdr9nkl5PqUnxF8eOxJG8abgbqDS3nA0LWdpX0NDQ=) 5: 3130332e3130352e3230312e302f32342d3234203d3e20313337373634.roa (hash: NVUII80DwSw0zpMxLmgIHiGlPbICMvueravTJ8IQZ6Y=) 6: 3130332e3133392e3231322e302f32342d3234203d3e2034383437.roa (hash: fgedEchRrP66KqqHCaA1a1U1d7AKMe+NspTQhBPC/H4=) 7: 3130332e3133392e3231332e302f32342d3234203d3e2034383437.roa (hash: k1rAJlK3nl+RMukZCZAOyW2Ztrz5xzJsS+9Jm+UCWLI=) 8: 323430333a356563303a3a2f33322d3332203d3e2030.roa (hash: pn5P8/momGxXTFfknwO8tuClvccGh1zTNEWhwlA2qwo=) 9: 3130332e3130352e3230302e302f32342d3234203d3e20313337373634.roa (hash: wAWydnytWwQ6KDrEdMo8gC5yClAHE5G7egoVtj8VJEQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:49:41:00:4e:44:46:5a:81:0c:09:3b:38:12:7c:c1:05:ec:e6:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72 Validity Not Before: Oct 10 04:49:14 2026 GMT Not After : Oct 13 11:55:14 2026 GMT Subject: CN=CAD2169DBD7E88BE9FDD995D1B7591FD87AE64B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d3:47:5d:26:16:b2:93:d3:5d:58:8e:35:ea: d5:7c:aa:57:84:17:03:fe:1f:4a:4d:0c:12:3c:ff: d9:fb:8b:01:5a:0b:9d:92:a6:98:5a:68:d9:6d:dc: 03:a5:34:e0:dd:12:f7:4b:7d:75:71:0d:57:37:23: 5c:2e:c0:2d:9f:a1:90:f4:67:3c:d7:ef:a4:10:be: 8a:93:11:95:62:97:24:7a:63:76:ac:75:f3:b8:3d: 1d:5c:4c:83:b7:b3:9a:27:81:a8:f0:45:97:6d:76: 24:47:32:d1:84:d8:55:8f:70:de:75:0e:73:e8:62: a9:2b:50:31:03:95:3c:fd:03:eb:76:8d:01:33:4c: f8:04:b8:d1:78:09:34:48:2a:3c:01:0c:db:c6:ca: bd:98:4a:8a:b0:ab:f3:5a:02:cc:74:7b:56:b2:b7: d9:3d:b7:f4:4c:13:c3:f0:13:12:dd:6e:ed:ed:39: c3:cb:01:0c:94:be:0e:33:20:c6:e8:0d:9a:c7:39: c4:59:e3:28:d5:b8:2f:e5:24:8d:77:99:9e:d5:87: c3:e2:d9:b7:6d:b9:a8:fd:bd:fa:fc:1a:35:1c:74: b1:d0:be:1a:db:f2:f3:10:d7:0c:72:ea:80:4a:6c: 7f:8b:bf:b5:20:22:9c:5c:5c:b7:a3:e8:38:2e:28: f4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D2:16:9D:BD:7E:88:BE:9F:DD:99:5D:1B:75:91:FD:87:AE:64:B7 X509v3 Authority Key Identifier: keyid:6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:31:77:0a:b4:cd:9e:c6:08:20:45:eb:4c:67:ca:d6:7d:db: 98:dd:2b:f1:49:12:1e:97:50:da:ec:8c:ba:90:bb:7f:7d:be: 22:e4:1e:2e:ed:ee:5a:ce:98:af:91:16:a0:0b:25:0c:ec:b5: 68:6c:bd:a8:cf:10:dc:9a:35:28:e3:b1:10:ce:96:93:4c:6c: 70:b6:87:89:8f:db:71:a4:e9:12:d6:f6:19:9f:d9:10:1a:3a: f8:f6:fe:bb:ea:4a:d1:c0:eb:12:74:83:ff:4d:32:bf:d1:82: 59:59:57:ea:d3:f3:7d:83:d4:b8:90:f1:8b:65:7f:fb:76:d2: 0a:55:db:de:a6:56:6d:75:d4:74:c9:d0:e4:66:2a:9a:1d:16: b7:07:aa:20:33:02:4a:07:27:67:53:6a:14:a8:79:ae:1c:3d: ca:eb:d9:90:cb:e8:96:73:99:54:18:83:66:41:e8:16:25:8b: 2d:1c:10:db:0e:46:6d:68:4a:9e:27:f5:07:36:64:a8:09:c9: d7:1b:bd:d1:5d:91:5b:b8:3f:1c:3a:1d:56:40:c8:0b:9a:ff: 4e:59:f2:94:63:6f:23:1b:53:78:82:9f:03:21:f5:52:3d:ec: f8:81:cb:94:a4:2c:d6:64:3b:1d:c5:bd:61:4d:58:7c:7f:d9: 75:56:01:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCUlBAE5ERlqBDAk7OBJ8wQXs5mUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYz NjUzNkU3MjAeFw0yNjEwMTAwNDQ5MTRaFw0yNjEwMTMxMTU1MTRaMDMxMTAvBgNV BAMTKENBRDIxNjlEQkQ3RTg4QkU5RkREOTk1RDFCNzU5MUZEODdBRTY0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg00ddJhayk9NdWI416tV8qleE FwP+H0pNDBI8/9n7iwFaC52SpphaaNlt3AOlNODdEvdLfXVxDVc3I1wuwC2foZD0 ZzzX76QQvoqTEZVilyR6Y3asdfO4PR1cTIO3s5ongajwRZdtdiRHMtGE2FWPcN51 DnPoYqkrUDEDlTz9A+t2jQEzTPgEuNF4CTRIKjwBDNvGyr2YSoqwq/NaAsx0e1ay t9k9t/RME8PwExLdbu3tOcPLAQyUvg4zIMboDZrHOcRZ4yjVuC/lJI13mZ7Vh8Pi 2bdtuaj9vfr8GjUcdLHQvhrb8vMQ1wxy6oBKbH+Lv7UgIpxcXLej6DguKPQ9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUytIWnb1+iL6f3ZldG3WR/YeuZLcwHwYDVR0j BBgwFoAUa4a9P6D7Cze6xk1sjS2fZjZTbnIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1MTY3MDg1Mjk0Mzg3My8wLzZCODZCRDNGQTBGQjBCMzdCQUM2NEQ2QzhEMkQ5 RjY2MzY1MzZFNzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYzNjUzNkU3Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTE2NzA4NTI5NDM4NzMvMC82Qjg2QkQzRkEwRkIw QjM3QkFDNjRENkM4RDJEOUY2NjM2NTM2RTcyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzF3CrTNnsYI IEXrTGfK1n3bmN0r8UkSHpdQ2uyMupC7f32+IuQeLu3uWs6Yr5EWoAslDOy1aGy9 qM8Q3Jo1KOOxEM6Wk0xscLaHiY/bcaTpEtb2GZ/ZEBo6+Pb+u+pK0cDrEnSD/00y v9GCWVlX6tPzfYPUuJDxi2V/+3bSClXb3qZWbXXUdMnQ5GYqmh0WtweqIDMCSgcn Z1NqFKh5rhw9yuvZkMvolnOZVBiDZkHoFiWLLRwQ2w5GbWhKnif1BzZkqAnJ1xu9 0V2RW7g/HDodVkDIC5r/TlnylGNvIxtTeIKfAyH1Uj3s+IHLlKQs1mQ7HcW9YU1Y fH/ZdVYB/w== -----END CERTIFICATE-----Generated at Sun Oct 11 07:50:23 2026 by rpki-client