$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft File: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft (raw, json) Hash identifier: B/5uSx/WqLiXqlCZQs71kV+MG/Jzp1lLUrbHNUWLnwU= Subject key identifier: 08:87:F9:8D:84:4E:23:A3:0C:79:1A:37:54:51:F7:C3:7E:33:DF:86 Authority key identifier: 6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72 Certificate issuer: /CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72 Certificate serial: 7B652C549A9CFBA84D1C37BC99D9011F2B23C528 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft Manifest number: A1 Signing time: Tue 28 Jul 2026 19:42:38 +0000 Manifest this update: Tue 28 Jul 2026 19:37:38 +0000 Manifest next update: Wed 29 Jul 2026 20:52:38 +0000 Files and hashes: 1: 3130332e3133392e3231332e302f32342d3234203d3e2034383437.roa (hash: k1rAJlK3nl+RMukZCZAOyW2Ztrz5xzJsS+9Jm+UCWLI=) 2: 3130332e3130352e3230312e302f32342d3234203d3e20313337373634.roa (hash: NVUII80DwSw0zpMxLmgIHiGlPbICMvueravTJ8IQZ6Y=) 3: 3130332e3130352e3230332e302f32342d3234203d3e20313337373634.roa (hash: njPdr9nkl5PqUnxF8eOxJG8abgbqDS3nA0LWdpX0NDQ=) 4: 3130332e39382e34302e302f32322d3232203d3e2030.roa (hash: e8iEGGHTv4+FgS9wkri7Y69nnBMxrR4pBM+NO8acXaE=) 5: 3130332e3130352e3230302e302f32342d3234203d3e20313337373634.roa (hash: wAWydnytWwQ6KDrEdMo8gC5yClAHE5G7egoVtj8VJEQ=) 6: 3130332e3133392e3231322e302f32342d3234203d3e2034383437.roa (hash: fgedEchRrP66KqqHCaA1a1U1d7AKMe+NspTQhBPC/H4=) 7: 3130332e3130352e3230322e302f32342d3234203d3e20313337373634.roa (hash: yVxOUCxwSQgdQ2Vm2tB9MZclhRZA4b88sSbFOq2CQHY=) 8: 323430333a356563303a3a2f33322d3332203d3e2030.roa (hash: pn5P8/momGxXTFfknwO8tuClvccGh1zTNEWhwlA2qwo=) 9: 6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl (hash: E5+Ay0YA8nV2NBMNAjE9GVRHixxNHdL2Gdx1h/1NeAU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:65:2c:54:9a:9c:fb:a8:4d:1c:37:bc:99:d9:01:1f:2b:23:c5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72 Validity Not Before: Jul 28 19:37:38 2026 GMT Not After : Jul 29 20:52:38 2026 GMT Subject: CN=0887F98D844E23A30C791A375451F7C37E33DF86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:71:e9:c7:ef:5d:c1:f2:3a:bd:ba:9f:e7:4a: 5a:dc:6e:f9:d4:e8:09:4f:c2:89:bb:9c:f2:ef:1c: 4b:cf:4b:df:88:48:cf:de:0d:2a:00:b4:d8:fc:24: 6c:65:6a:be:be:6e:7c:bb:77:ba:91:9a:d0:77:75: 6f:45:5c:7b:fd:09:76:bc:9b:73:c7:c9:11:2f:7d: 3d:81:4c:ed:cb:8f:e4:65:a9:f6:23:45:e4:41:0b: 04:80:7b:d3:db:ae:c9:c8:33:87:d8:6f:1c:88:11: 14:8b:eb:9f:c1:17:b4:92:dd:25:f2:ea:d4:03:94: dd:c5:84:4d:11:ee:d8:e6:c3:0d:c5:96:e8:c3:ea: eb:08:c3:6a:5a:40:a8:98:8b:eb:05:22:40:e1:63: ae:19:e6:c4:66:d4:33:e2:97:31:44:af:0a:30:e0: ba:e4:95:44:e5:17:a4:0f:a6:d6:2f:cd:44:67:44: 5a:e9:28:09:07:c9:11:4b:64:43:d5:bd:75:06:af: f6:a9:20:c8:97:4a:cc:99:74:35:68:c0:3a:02:90: b2:21:f8:52:81:dd:d0:28:85:8c:20:7c:ab:f2:60: bd:77:dc:4a:32:f0:ef:2a:1a:7d:29:93:12:37:6e: 98:0c:da:31:bb:65:67:f8:66:d2:a2:c1:ba:da:2a: 54:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:87:F9:8D:84:4E:23:A3:0C:79:1A:37:54:51:F7:C3:7E:33:DF:86 X509v3 Authority Key Identifier: keyid:6B:86:BD:3F:A0:FB:0B:37:BA:C6:4D:6C:8D:2D:9F:66:36:53:6E:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094551670852943873/0/6B86BD3FA0FB0B37BAC64D6C8D2D9F6636536E72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:79:78:ed:ff:50:a3:12:d7:f4:95:6c:1c:97:d8:5d:06:2e: 65:c7:cc:42:df:6d:e9:eb:99:e9:64:60:79:4b:17:c7:2f:e8: 1e:e4:5c:ba:1c:ed:82:17:67:bf:45:e8:ac:77:ea:92:99:a6: 1e:63:19:d6:41:92:bd:93:d7:fa:41:42:e3:d0:9b:92:88:73: 70:e7:25:c7:12:ff:d2:e6:c4:82:eb:45:88:fe:96:f4:4b:89: 38:b0:ef:06:77:04:64:cd:d6:f6:f1:23:81:de:68:59:71:2a: b6:c9:76:0e:74:53:4a:35:d9:3a:06:d6:e0:84:84:5a:a6:87: 70:73:a4:24:99:ff:11:7e:55:fe:89:ff:f7:f8:08:0c:6a:7a: ae:cd:9a:77:4e:1a:8c:e8:7f:6f:d7:22:0a:25:e0:0a:b2:02: 5b:88:8e:c6:91:2c:b4:01:ec:bd:d4:97:29:fb:25:2c:f9:68: b3:15:ab:90:f2:02:34:27:5f:ba:1d:48:ff:a7:60:5b:80:b7: af:83:eb:ab:9c:ec:48:7a:29:fc:d3:b2:bb:82:a8:ad:27:77: 48:1b:72:2a:08:8c:61:8f:8e:e9:cd:ff:0f:85:aa:e0:5f:4a: 1f:9f:c8:c1:8c:5f:d1:cb:a3:7f:46:6f:24:11:70:be:5f:0f: 46:b7:23:bf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe2UsVJqc+6hNHDe8mdkBHysjxSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYz NjUzNkU3MjAeFw0yNjA3MjgxOTM3MzhaFw0yNjA3MjkyMDUyMzhaMDMxMTAvBgNV BAMTKDA4ODdGOThEODQ0RTIzQTMwQzc5MUEzNzU0NTFGN0MzN0UzM0RGODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLcenH713B8jq9up/nSlrcbvnU 6AlPwom7nPLvHEvPS9+ISM/eDSoAtNj8JGxlar6+bny7d7qRmtB3dW9FXHv9CXa8 m3PHyREvfT2BTO3Lj+RlqfYjReRBCwSAe9PbrsnIM4fYbxyIERSL65/BF7SS3SXy 6tQDlN3FhE0R7tjmww3FlujD6usIw2paQKiYi+sFIkDhY64Z5sRm1DPilzFErwow 4LrklUTlF6QPptYvzURnRFrpKAkHyRFLZEPVvXUGr/apIMiXSsyZdDVowDoCkLIh +FKB3dAohYwgfKvyYL133Eoy8O8qGn0pkxI3bpgM2jG7ZWf4ZtKiwbraKlRVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCIf5jYROI6MMeRo3VFH3w34z34YwHwYDVR0j BBgwFoAUa4a9P6D7Cze6xk1sjS2fZjZTbnIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1MTY3MDg1Mjk0Mzg3My8wLzZCODZCRDNGQTBGQjBCMzdCQUM2NEQ2QzhEMkQ5 RjY2MzY1MzZFNzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI4NkJEM0ZBMEZCMEIzN0JBQzY0RDZDOEQyRDlGNjYzNjUzNkU3Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTE2NzA4NTI5NDM4NzMvMC82Qjg2QkQzRkEwRkIw QjM3QkFDNjRENkM4RDJEOUY2NjM2NTM2RTcyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnl47f9QoxLX 9JVsHJfYXQYuZcfMQt9t6euZ6WRgeUsXxy/oHuRcuhztghdnv0XorHfqkpmmHmMZ 1kGSvZPX+kFC49CbkohzcOclxxL/0ubEgutFiP6W9EuJOLDvBncEZM3W9vEjgd5o WXEqtsl2DnRTSjXZOgbW4ISEWqaHcHOkJJn/EX5V/on/9/gIDGp6rs2ad04ajOh/ b9ciCiXgCrICW4iOxpEstAHsvdSXKfslLPlosxWrkPICNCdfuh1I/6dgW4C3r4Pr q5zsSHop/NOyu4KorSd3SBtyKgiMYY+O6c3/D4Wq4F9KH5/IwYxf0cujf0ZvJBFw vl8PRrcjvw== -----END CERTIFICATE-----Generated at Wed Jul 29 11:25:55 2026 by rpki-client