$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft File: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft (raw, json) Hash identifier: y7RxiuGZ4A9PTte7k8OcvwPeW8nDayivRPxwXUN9Pt8= Subject key identifier: 42:18:D6:2D:34:5F:A8:9C:04:44:B9:1F:76:F9:C6:46:EB:A6:CC:C1 Authority key identifier: 6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D Certificate issuer: /CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D Certificate serial: 401B41B5CD82A432993D09A7DC2C30D8CBD6E5FA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft Manifest number: CB Signing time: Sat 10 Oct 2026 10:44:35 +0000 Manifest this update: Sat 10 Oct 2026 10:39:35 +0000 Manifest next update: Tue 13 Oct 2026 21:07:35 +0000 Files and hashes: 1: 3130332e34342e3139382e302f32342d3234203d3e2034383030.roa (hash: 6dqpVUqXBgLgk1fCILtRSZoIidor7YhnbVbc5fHfQhk=) 2: 3130332e34342e3137382e302f32332d3233203d3e2034383437.roa (hash: lSEivQpgfyTwattyz5XGR7SBQ4DIJ5haeZxfSmZXjnc=) 3: 6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl (hash: +EMidUIvfyqlmhgfQ64Vy21JWrUjvNZcz0URx++EeWo=) 4: 34332e3232352e3231362e302f32322d3232203d3e2034383437.roa (hash: j/eV+lOtMaJE7zLazg78nWoyQGsOhGQyTahosxccrn8=) 5: 3130332e34342e3137362e302f32332d3233203d3e2034383437.roa (hash: ae7SUgq9OA/NLExuOxlNbHZGMMv09rTQmfolmacGeB4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:1b:41:b5:cd:82:a4:32:99:3d:09:a7:dc:2c:30:d8:cb:d6:e5:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6DB7BEC2F251B209F570DD156FE1574B6D030B3D Validity Not Before: Oct 10 10:39:35 2026 GMT Not After : Oct 13 21:07:35 2026 GMT Subject: CN=4218D62D345FA89C0444B91F76F9C646EBA6CCC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3a:3f:da:53:62:90:75:6a:4d:33:f7:b6:32: 2b:a7:f3:a9:e7:a6:24:68:e5:c3:50:5b:24:ef:4e: 76:5f:fb:f7:53:ae:d0:48:81:4b:cb:a0:01:98:bc: 8a:f0:6f:fa:e1:60:ba:d3:d7:0a:75:af:7c:55:c6: 28:26:e6:c9:43:2a:bc:3e:f0:4a:7b:89:b0:bd:43: fe:80:e6:70:3a:8b:c9:ca:d8:34:1c:ad:ea:71:78: 5a:b4:19:ea:d8:e5:18:d1:5e:3d:a4:9d:40:97:7d: 18:a5:36:cd:80:30:95:56:2d:32:f7:cc:91:49:65: 7f:5d:d2:84:58:23:ac:cd:4d:32:80:15:d1:0c:da: 1f:4c:59:a9:29:70:43:a1:26:6b:16:39:54:2e:3a: 56:41:53:fd:30:25:ad:3b:29:74:6d:ef:b8:43:7f: 60:d9:d9:e9:53:e8:5b:17:00:62:ba:dd:17:09:a7: 60:a9:b2:66:66:9c:76:a0:26:0c:f0:1f:e6:75:4a: 35:53:2f:f9:7b:a3:97:bb:91:bc:71:8b:e3:6a:56: 89:c4:ca:55:7d:76:b1:1d:4b:d3:af:dd:99:10:30: 7f:cc:1b:31:f4:ac:37:1a:1a:f9:97:be:bf:b7:8e: cd:66:c4:77:50:ee:78:d2:84:98:f3:9e:f2:9e:b2: 3b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:18:D6:2D:34:5F:A8:9C:04:44:B9:1F:76:F9:C6:46:EB:A6:CC:C1 X509v3 Authority Key Identifier: keyid:6D:B7:BE:C2:F2:51:B2:09:F5:70:DD:15:6F:E1:57:4B:6D:03:0B:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095955785751461891/0/6DB7BEC2F251B209F570DD156FE1574B6D030B3D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0c:5e:6f:e3:a5:70:c6:21:96:a2:b4:b5:dc:e9:9e:56:0a: be:0a:e2:01:80:f9:ce:24:b8:9c:72:5f:1e:bc:9b:2f:9b:81: 1e:42:ce:5a:74:b9:7b:4b:91:af:23:e9:b2:6a:a0:dd:88:b2: 7c:93:f8:1b:86:a7:ad:44:53:95:93:1a:21:db:e3:2e:0a:4f: 1d:b5:99:fc:93:c9:d4:ce:2e:57:88:a4:1c:f0:df:51:d7:ba: bc:32:cd:69:96:10:8e:f0:e4:f0:59:36:47:16:95:05:fc:23: c3:92:5c:e9:92:73:17:e3:e0:68:f3:2f:2a:9b:70:5e:3f:1f: 4b:0e:4d:17:d2:5f:ca:b4:84:77:6b:e0:17:02:5d:ab:75:3c: 72:52:b5:61:f2:1b:8b:f4:2f:ba:d0:07:bc:4b:52:35:b9:e3: 0d:9e:da:10:3d:a9:2b:67:2a:fa:98:7a:6f:ea:5e:d8:48:93: c8:7c:10:7e:83:a7:a5:a6:96:fc:ca:6f:2f:b7:9a:a3:49:e9: 92:20:d9:59:a1:e8:0c:79:0a:f7:c5:ec:19:37:94:4e:df:a8: 08:5d:b6:e3:cf:5f:d4:fe:50:9d:76:e6:3a:38:85:68:bf:a2: 08:29:52:9f:2f:1b:fa:1a:80:6f:af:00:86:78:df:fe:28:e1: ba:5c:9e:30 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQBtBtc2CpDKZPQmn3Cww2MvW5fowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkRCN0JFQzJGMjUxQjIwOUY1NzBERDE1NkZFMTU3NEI2 RDAzMEIzRDAeFw0yNjEwMTAxMDM5MzVaFw0yNjEwMTMyMTA3MzVaMDMxMTAvBgNV BAMTKDQyMThENjJEMzQ1RkE4OUMwNDQ0QjkxRjc2RjlDNjQ2RUJBNkNDQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeOj/aU2KQdWpNM/e2Miun86nn piRo5cNQWyTvTnZf+/dTrtBIgUvLoAGYvIrwb/rhYLrT1wp1r3xVxigm5slDKrw+ 8Ep7ibC9Q/6A5nA6i8nK2DQcrepxeFq0GerY5RjRXj2knUCXfRilNs2AMJVWLTL3 zJFJZX9d0oRYI6zNTTKAFdEM2h9MWakpcEOhJmsWOVQuOlZBU/0wJa07KXRt77hD f2DZ2elT6FsXAGK63RcJp2CpsmZmnHagJgzwH+Z1SjVTL/l7o5e7kbxxi+NqVonE ylV9drEdS9Ov3ZkQMH/MGzH0rDcaGvmXvr+3js1mxHdQ7njShJjznvKesjsNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQhjWLTRfqJwERLkfdvnGRuumzMEwHwYDVR0j BBgwFoAUbbe+wvJRsgn1cN0Vb+FXS20DCz0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk1NTc4NTc1MTQ2MTg5MS8wLzZEQjdCRUMyRjI1MUIyMDlGNTcwREQxNTZGRTE1 NzRCNkQwMzBCM0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkRCN0JFQzJGMjUxQjIwOUY1NzBERDE1NkZFMTU3NEI2RDAzMEIzRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NTU3ODU3NTE0NjE4OTEvMC82REI3QkVDMkYyNTFC MjA5RjU3MEREMTU2RkUxNTc0QjZEMDMwQjNELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwxeb+OlcMYh lqK0tdzpnlYKvgriAYD5ziS4nHJfHrybL5uBHkLOWnS5e0uRryPpsmqg3YiyfJP4 G4anrURTlZMaIdvjLgpPHbWZ/JPJ1M4uV4ikHPDfUde6vDLNaZYQjvDk8Fk2RxaV Bfwjw5Jc6ZJzF+PgaPMvKptwXj8fSw5NF9JfyrSEd2vgFwJdq3U8clK1YfIbi/Qv utAHvEtSNbnjDZ7aED2pK2cq+ph6b+pe2EiTyHwQfoOnpaaW/MpvL7eao0npkiDZ WaHoDHkK98XsGTeUTt+oCF22489f1P5QnXbmOjiFaL+iCClSny8b+hqAb68Ahnjf /ijhulyeMA== -----END CERTIFICATE-----Generated at Sun Oct 11 23:40:30 2026 by rpki-client