$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft File: 6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft (raw, json) Hash identifier: oHTwJKK3snVLqspXNwkSF2qTnwgzNZNndDnCZgVXl6g= Subject key identifier: E6:73:95:06:FB:3D:8C:71:8E:ED:10:E7:4E:F6:56:31:97:6C:CB:E0 Authority key identifier: 6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3 Certificate issuer: /CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3 Certificate serial: 1131EE5E27C332BF062C8687C5883AA3C9E975B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft Manifest number: 8C Signing time: Tue 28 Jul 2026 19:07:35 +0000 Manifest this update: Tue 28 Jul 2026 19:02:35 +0000 Manifest next update: Wed 29 Jul 2026 20:05:35 +0000 Files and hashes: 1: 3130332e3137302e3231322e302f32342d3234203d3e20313436383432.roa (hash: oIVYiH99ns+ZO8k2snXu2q5AtM9u9S/dgbN/MlAUrrI=) 2: 6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl (hash: wfZ3IePbKT63LafbdzQOtvWW2TrZ6BOfj7JhU+FKm4o=) 3: 3130332e3137302e3231332e302f32342d3234203d3e20313436383432.roa (hash: xHB51GTEu6E4O2uPU5Q+PFtFl9kWbp78dTmrzsJmvSE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:05:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:31:ee:5e:27:c3:32:bf:06:2c:86:87:c5:88:3a:a3:c9:e9:75:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3 Validity Not Before: Jul 28 19:02:35 2026 GMT Not After : Jul 29 20:05:35 2026 GMT Subject: CN=E6739506FB3D8C718EED10E74EF65631976CCBE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:af:70:a8:dd:b9:66:62:6c:1a:c9:2f:6d:bd: 4f:1f:b1:f1:c4:3d:86:3c:7f:bb:b1:df:38:2b:c1: 68:68:08:f5:b4:b1:89:42:92:d0:ac:19:e3:73:d7: 39:3b:cf:4c:86:ee:ca:18:ae:d1:6e:72:95:df:28: 08:06:af:db:c2:78:99:83:95:ad:c3:2b:65:32:77: 33:50:8e:aa:11:ba:12:fd:e5:bf:f2:7e:9e:2d:7d: a7:a4:ab:a5:df:c6:10:20:61:75:5b:cf:cb:36:fc: c1:ab:a5:38:02:4f:3c:52:3e:e0:e6:58:db:3e:11: e0:7e:47:a8:af:7e:48:fa:11:99:df:a6:02:fb:36: 24:e3:f2:87:9e:51:97:22:8a:1b:9f:5a:35:ff:6d: 5e:78:a5:f4:3b:6c:91:04:ab:77:a8:d3:d8:ee:52: 80:58:08:20:3b:1f:e3:e6:3c:8a:bc:6b:ad:08:17: ce:87:b2:73:65:0c:56:68:9c:26:30:8c:d1:5b:fe: b0:c0:1f:b9:67:a7:f1:71:dc:25:79:11:87:b0:fe: 3a:fd:f6:1b:0c:07:7b:74:53:70:50:bf:0b:ba:0c: 97:f4:c2:7b:f0:23:13:5f:ae:d7:c5:bb:8b:cd:9e: e0:78:89:07:bb:17:77:5c:d7:6b:33:4a:b6:04:8f: da:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:73:95:06:FB:3D:8C:71:8E:ED:10:E7:4E:F6:56:31:97:6C:CB:E0 X509v3 Authority Key Identifier: keyid:6E:47:FF:58:A1:C5:AA:85:84:D2:95:3C:1E:AD:4D:E8:61:57:EB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097077346453684225/0/6E47FF58A1C5AA8584D2953C1EAD4DE86157EBD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:df:d3:56:28:a3:9d:7c:5c:b5:14:24:f3:27:69:38:0d:c9: 90:fe:dc:cb:0a:1e:0c:47:87:50:53:3b:9a:f7:46:87:4b:89: 85:b2:91:0e:c6:7f:d0:44:10:db:4b:d7:bb:29:6d:48:7a:7a: 31:82:73:c4:a7:bd:82:4d:95:e9:0f:14:7f:59:04:d1:fa:1e: 20:f2:64:d9:cc:bf:14:dd:54:3e:b8:46:9e:02:ee:ef:55:3b: 1d:76:43:00:a3:4c:7f:8c:44:ba:45:f6:5f:77:82:f9:87:50: bc:36:61:65:2c:d9:13:c3:d9:9b:3a:65:89:0f:de:59:6a:3e: 78:9f:41:8c:a3:62:b1:29:9c:31:d9:70:19:a8:0d:ce:b4:cc: b3:af:91:4b:1b:36:c2:b3:2c:6f:f9:29:9a:bf:cd:db:6c:c4: 0c:fa:5a:0a:65:84:df:51:e5:15:b1:80:9e:f8:66:7e:da:3b: 2c:56:cd:50:5d:43:17:7d:cc:32:7f:43:8f:91:1b:4a:50:94: 2f:07:e6:67:92:43:e0:bf:1b:1a:c0:87:0c:8c:39:e4:bc:90: 2a:83:74:28:cf:cd:2e:4a:ba:97:ba:d3:c3:09:c5:06:9d:e2: f5:9a:82:70:fd:b2:26:58:22:91:99:50:ea:0b:9e:b2:6c:e9: 75:c2:8c:48 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUETHuXifDMr8GLIaHxYg6o8npdbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkU0N0ZGNThBMUM1QUE4NTg0RDI5NTNDMUVBRDRERTg2 MTU3RUJEMzAeFw0yNjA3MjgxOTAyMzVaFw0yNjA3MjkyMDA1MzVaMDMxMTAvBgNV BAMTKEU2NzM5NTA2RkIzRDhDNzE4RUVEMTBFNzRFRjY1NjMxOTc2Q0NCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqr3Co3blmYmwayS9tvU8fsfHE PYY8f7ux3zgrwWhoCPW0sYlCktCsGeNz1zk7z0yG7soYrtFucpXfKAgGr9vCeJmD la3DK2UydzNQjqoRuhL95b/yfp4tfaekq6XfxhAgYXVbz8s2/MGrpTgCTzxSPuDm WNs+EeB+R6ivfkj6EZnfpgL7NiTj8oeeUZciihufWjX/bV54pfQ7bJEEq3eo09ju UoBYCCA7H+PmPIq8a60IF86HsnNlDFZonCYwjNFb/rDAH7lnp/Fx3CV5EYew/jr9 9hsMB3t0U3BQvwu6DJf0wnvwIxNfrtfFu4vNnuB4iQe7F3dc12szSrYEj9orAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5nOVBvs9jHGO7RDnTvZWMZdsy+AwHwYDVR0j BBgwFoAUbkf/WKHFqoWE0pU8Hq1N6GFX69MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3NzM0NjQ1MzY4NDIyNS8wLzZFNDdGRjU4QTFDNUFBODU4NEQyOTUzQzFFQUQ0 REU4NjE1N0VCRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkU0N0ZGNThBMUM1QUE4NTg0RDI5NTNDMUVBRDRERTg2MTU3RUJEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzczNDY0NTM2ODQyMjUvMC82RTQ3RkY1OEExQzVB QTg1ODREMjk1M0MxRUFENERFODYxNTdFQkQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQt/TViijnXxc tRQk8ydpOA3JkP7cywoeDEeHUFM7mvdGh0uJhbKRDsZ/0EQQ20vXuyltSHp6MYJz xKe9gk2V6Q8Uf1kE0foeIPJk2cy/FN1UPrhGngLu71U7HXZDAKNMf4xEukX2X3eC +YdQvDZhZSzZE8PZmzpliQ/eWWo+eJ9BjKNisSmcMdlwGagNzrTMs6+RSxs2wrMs b/kpmr/N22zEDPpaCmWE31HlFbGAnvhmfto7LFbNUF1DF33MMn9Dj5EbSlCULwfm Z5JD4L8bGsCHDIw55LyQKoN0KM/NLkq6l7rTwwnFBp3i9ZqCcP2yJlgikZlQ6gue smzpdcKMSA== -----END CERTIFICATE-----Generated at Wed Jul 29 06:33:18 2026 by rpki-client