$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft File: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft (raw, json) Hash identifier: 6eKtzzv4uQiWWTyi4nREOxI201LZtImYc5XxLjJokKo= Subject key identifier: 00:69:2F:A2:8D:13:DF:D0:F0:13:20:45:DA:A9:2F:98:D9:93:75:0E Authority key identifier: 6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D Certificate issuer: /CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D Certificate serial: 2F60DD2C1CCD0C7535E2316B3D983060FDEF7DA9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft Manifest number: 90 Signing time: Wed 29 Jul 2026 15:14:40 +0000 Manifest this update: Wed 29 Jul 2026 15:09:40 +0000 Manifest next update: Thu 30 Jul 2026 17:55:40 +0000 Files and hashes: 1: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl (hash: WtCDOsIEklm7KHHTDTW6bx67wjh9U3X0WDkp32eTh/Y=) 2: 3130332e34342e3139382e302f32342d3234203d3e2034383030.roa (hash: 6dqpVUqXBgLgk1fCILtRSZoIidor7YhnbVbc5fHfQhk=) 3: 34332e3232352e3231362e302f32322d3232203d3e2034383437.roa (hash: j/eV+lOtMaJE7zLazg78nWoyQGsOhGQyTahosxccrn8=) 4: 3130332e34342e3137362e302f32332d3233203d3e2034383437.roa (hash: ae7SUgq9OA/NLExuOxlNbHZGMMv09rTQmfolmacGeB4=) 5: 3130332e34342e3137382e302f32332d3233203d3e2034383437.roa (hash: lSEivQpgfyTwattyz5XGR7SBQ4DIJ5haeZxfSmZXjnc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 17:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:60:dd:2c:1c:cd:0c:75:35:e2:31:6b:3d:98:30:60:fd:ef:7d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D Validity Not Before: Jul 29 15:09:40 2026 GMT Not After : Jul 30 17:55:40 2026 GMT Subject: CN=00692FA28D13DFD0F0132045DAA92F98D993750E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c8:bf:61:ba:80:fe:ab:e6:cf:06:a0:e2:03: e2:a4:c6:c2:53:dd:25:2f:6e:25:25:40:c2:7c:01: 4d:84:e1:75:c6:32:ac:af:f3:08:af:03:ea:52:58: 20:d2:63:32:ad:a0:49:4b:7c:25:e3:37:7e:db:6c: f4:d6:91:f1:7a:ec:bc:dc:55:f5:a4:75:9b:d3:c9: 43:e3:b6:27:e0:26:67:be:08:91:0b:8c:55:55:c6: 57:6c:f6:41:cb:2c:49:a4:8a:51:58:2f:d3:11:46: 2b:96:d0:e6:a9:cf:01:ca:0c:de:32:ad:5e:3e:49: b6:41:8e:3d:11:1c:0a:ad:30:49:eb:55:98:d4:05: 5f:dc:33:94:2f:bb:1d:53:c4:59:27:48:c6:8a:d6: 02:36:55:84:74:a8:5c:76:ef:47:60:0e:6c:c4:0c: 85:f9:90:50:f0:0c:1a:b3:83:8d:40:27:35:f3:13: 82:d0:aa:36:ab:5a:a7:c2:d3:28:fd:64:e0:b6:91: 06:53:33:81:93:d5:e0:b6:ef:15:81:f2:63:9f:68: 82:f1:41:2a:5a:e1:07:e4:f5:bc:dd:96:b7:14:c7: ca:95:c5:8a:f4:41:98:0d:80:70:71:60:c2:c8:a8: f5:b9:8b:ec:b7:4c:60:44:ae:f6:7c:29:03:56:13: a8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:69:2F:A2:8D:13:DF:D0:F0:13:20:45:DA:A9:2F:98:D9:93:75:0E X509v3 Authority Key Identifier: keyid:6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:64:0c:50:43:0c:ab:66:ab:b1:a0:f0:02:e8:df:ea:53:a5: fa:bc:a1:fe:c5:f8:7b:f7:22:70:bc:22:88:1f:00:a3:f6:a1: 5b:ba:b8:ef:45:7e:a0:c0:1d:a3:e1:ed:5e:64:d7:95:01:ce: 8c:6a:a6:49:44:da:ab:b0:e9:34:ae:4d:cb:30:ff:1f:7a:28: 97:69:45:7c:8c:e4:2a:7a:78:22:0b:03:2b:5f:e1:fc:a6:4b: 8e:16:46:b8:56:f8:0f:fd:c6:6c:5e:b5:39:57:0f:b1:34:aa: 2d:d8:af:e1:5d:63:2c:90:2b:ed:cd:49:03:19:c4:71:b2:99: d6:5f:21:c9:fa:73:97:4a:e0:6c:51:63:b7:ff:e0:bd:09:db: 8b:00:4c:3f:4e:1a:37:f3:ec:c8:fd:66:9e:d2:e6:93:c2:e5: 42:76:c3:ff:1f:7c:a2:1f:09:f1:26:cb:39:48:50:c6:80:f3: da:dc:60:ad:4a:2a:1c:ec:04:a6:9f:a0:28:b0:65:df:7e:55: 53:bf:82:71:93:a9:6f:9b:20:15:6a:8c:44:65:d3:64:a0:07: d4:c6:77:92:f3:72:93:e9:14:81:f7:50:b0:d8:a5:bc:45:ac: c4:1a:84:4d:99:2c:f1:0a:d5:ef:af:d8:90:c2:48:dc:a7:d1: 39:cd:be:98 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL2DdLBzNDHU14jFrPZgwYP3vfakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCN0JFQzJGMjUxQjIwOUY1NzBERDE1NkZFMTU3NEI2 RDAzMEIzRDAeFw0yNjA3MjkxNTA5NDBaFw0yNjA3MzAxNzU1NDBaMDMxMTAvBgNV BAMTKDAwNjkyRkEyOEQxM0RGRDBGMDEzMjA0NURBQTkyRjk4RDk5Mzc1MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yL9huoD+q+bPBqDiA+KkxsJT 3SUvbiUlQMJ8AU2E4XXGMqyv8wivA+pSWCDSYzKtoElLfCXjN37bbPTWkfF67Lzc VfWkdZvTyUPjtifgJme+CJELjFVVxlds9kHLLEmkilFYL9MRRiuW0OapzwHKDN4y rV4+SbZBjj0RHAqtMEnrVZjUBV/cM5Qvux1TxFknSMaK1gI2VYR0qFx270dgDmzE DIX5kFDwDBqzg41AJzXzE4LQqjarWqfC0yj9ZOC2kQZTM4GT1eC27xWB8mOfaILx QSpa4Qfk9bzdlrcUx8qVxYr0QZgNgHBxYMLIqPW5i+y3TGBErvZ8KQNWE6gpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAGkvoo0T39DwEyBF2qkvmNmTdQ4wHwYDVR0j BBgwFoAUbbe+wvJRsgn1cN0Vb+FXS20DCz0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk1NTc4NTc1MTQ2MTg5MS8wLzZEQjdCRUMyRjI1MUIyMDlGNTcwREQxNTZGRTE1 NzRCNkQwMzBCM0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkRCN0JFQzJGMjUxQjIwOUY1NzBERDE1NkZFMTU3NEI2RDAzMEIzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NTU3ODU3NTE0NjE4OTEvMC82REI3QkVDMkYyNTFC MjA5RjU3MEREMTU2RkUxNTc0QjZEMDMwQjNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWQMUEMMq2ar saDwAujf6lOl+ryh/sX4e/cicLwiiB8Ao/ahW7q470V+oMAdo+HtXmTXlQHOjGqm SUTaq7DpNK5NyzD/H3ool2lFfIzkKnp4IgsDK1/h/KZLjhZGuFb4D/3GbF61OVcP sTSqLdiv4V1jLJAr7c1JAxnEcbKZ1l8hyfpzl0rgbFFjt//gvQnbiwBMP04aN/Ps yP1mntLmk8LlQnbD/x98oh8J8SbLOUhQxoDz2txgrUoqHOwEpp+gKLBl335VU7+C cZOpb5sgFWqMRGXTZKAH1MZ3kvNyk+kUgfdQsNilvEWsxBqETZks8QrV76/YkMJI 3KfROc2+mA== -----END CERTIFICATE-----Generated at Wed Jul 29 23:01:54 2026 by rpki-client