$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft File: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft (raw, json) Hash identifier: lWwPrjVVmjlDzbMmIUdnPON6WM47BbUzbeD9vaLx1kQ= Subject key identifier: EA:A7:B4:17:B3:BE:18:A1:8F:CB:4C:33:B4:88:DE:F0:C0:81:72:BB Authority key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Certificate issuer: /CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Certificate serial: 3AB90F6C6AE560AFFD48AB6523056CDB1D781FE4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft Manifest number: 2D Signing time: Mon 02 Mar 2026 00:53:16 +0000 Manifest this update: Mon 02 Mar 2026 00:48:16 +0000 Manifest next update: Tue 03 Mar 2026 02:39:16 +0000 Files and hashes: 1: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl (hash: W7DoJI9rk4JpFyl4y17yOaWGTZKCzLOU1qILVTrfTcY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 02:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b9:0f:6c:6a:e5:60:af:fd:48:ab:65:23:05:6c:db:1d:78:1f:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Validity Not Before: Mar 2 00:48:16 2026 GMT Not After : Mar 3 02:39:16 2026 GMT Subject: CN=EAA7B417B3BE18A18FCB4C33B488DEF0C08172BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f3:37:41:2a:6f:83:ad:aa:23:a0:ce:75:26: 52:a0:2a:1e:24:58:a0:d9:44:2c:e4:93:be:1c:c5: 1f:52:9e:0d:84:a7:76:92:1b:0a:45:59:7e:ac:3a: e0:ec:2e:e9:98:6e:73:3e:35:64:d0:9f:b5:18:d6: 3a:76:94:89:63:cb:b7:42:8e:3b:c1:09:60:ea:ce: f8:52:cf:de:de:ce:da:47:02:40:20:98:bd:5f:3c: 7d:dc:a6:83:b7:81:d7:36:1d:80:1e:70:3a:12:9d: e5:77:85:01:cc:ae:02:f9:ac:e5:fb:32:0d:e7:07: 4f:09:fd:47:1d:1c:da:a5:b7:00:00:4b:9d:a1:83: d4:d5:6b:05:a2:47:a1:f1:47:3e:9d:aa:07:33:bd: 99:af:ab:a9:ad:6f:de:5d:6c:0d:90:5e:ed:8c:5f: 87:15:84:b5:e5:7b:21:1f:ed:44:f2:d1:d5:3e:64: 62:d9:61:80:d6:82:53:6d:96:60:99:8a:32:ef:ae: ae:8c:c0:fd:81:b9:b9:fb:1a:79:52:09:42:16:40: 4e:1a:0a:ed:1b:27:dc:66:91:50:76:65:a8:8f:75: 66:98:fa:a2:ea:4e:d3:29:24:78:33:13:a1:1f:b0: 83:5e:28:e2:c9:1c:cc:ca:a1:6f:c0:d9:f9:46:81: 51:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A7:B4:17:B3:BE:18:A1:8F:CB:4C:33:B4:88:DE:F0:C0:81:72:BB X509v3 Authority Key Identifier: keyid:D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:34:fb:c4:2d:68:33:23:ca:6b:94:76:c6:50:be:fe:bb:86: 71:28:a6:a3:7d:86:cc:67:cf:ba:35:22:72:c5:72:30:c2:79: 06:63:58:2e:0e:3f:f4:4c:21:7e:8f:57:c2:af:1e:96:3a:99: 3c:65:a1:aa:15:f0:fd:ad:cc:6f:66:b7:6e:58:79:97:5e:66: 15:2f:b5:38:49:a6:f4:f6:fe:2a:63:c3:c1:02:16:89:d5:cb: 3e:c9:36:47:81:25:74:d7:65:6c:96:c1:1b:90:31:16:dc:8c: 93:55:1a:37:69:6d:97:e1:16:35:c0:01:d5:37:73:b7:e9:b2: f8:c9:e4:6d:05:3f:5d:32:36:5f:1c:40:04:67:b1:c0:72:72: 36:1d:ff:31:9b:e5:e7:fd:87:21:27:ad:23:ad:b7:bd:e1:94: 24:19:ed:3d:e2:b3:eb:a7:cb:7d:1a:e0:5d:e0:7c:6d:a1:1d: 3c:08:26:e3:18:87:c1:c4:53:59:9a:04:43:74:9b:35:27:4f: ff:28:83:e9:2b:0e:c1:0e:3f:0f:da:70:0d:ed:d4:85:e5:97: 5b:1d:e5:6b:14:f8:61:3b:7e:7e:d1:2f:d3:e9:0b:09:27:dc: 20:c3:40:01:98:24:2c:ae:ac:52:e1:3f:35:1d:c9:39:71:b7: 09:ff:88:b1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOrkPbGrlYK/9SKtlIwVs2x14H+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4 ODk2QkU0RDAeFw0yNjAzMDIwMDQ4MTZaFw0yNjAzMDMwMjM5MTZaMDMxMTAvBgNV BAMTKEVBQTdCNDE3QjNCRTE4QTE4RkNCNEMzM0I0ODhERUYwQzA4MTcyQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCO8zdBKm+DraojoM51JlKgKh4k WKDZRCzkk74cxR9Sng2Ep3aSGwpFWX6sOuDsLumYbnM+NWTQn7UY1jp2lIljy7dC jjvBCWDqzvhSz97eztpHAkAgmL1fPH3cpoO3gdc2HYAecDoSneV3hQHMrgL5rOX7 Mg3nB08J/UcdHNqltwAAS52hg9TVawWiR6HxRz6dqgczvZmvq6mtb95dbA2QXu2M X4cVhLXleyEf7UTy0dU+ZGLZYYDWglNtlmCZijLvrq6MwP2Bubn7GnlSCUIWQE4a Cu0bJ9xmkVB2ZaiPdWaY+qLqTtMpJHgzE6EfsINeKOLJHMzKoW/A2flGgVGbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6qe0F7O+GKGPy0wztIje8MCBcrswHwYDVR0j BBgwFoAU1vs+dmj9xs0YEG7oU9HGRYiWvk0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODcxMjk2Mi8wL0Q2RkIzRTc2NjhGREM2Q0QxODEwNkVFODUzRDFD NjQ1ODg5NkJFNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3MTI5NjIvMC9ENkZCM0U3NjY4RkRD NkNEMTgxMDZFRTg1M0QxQzY0NTg4OTZCRTRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDT7xC1oMyPK a5R2xlC+/ruGcSimo32GzGfPujUicsVyMMJ5BmNYLg4/9Ewhfo9Xwq8eljqZPGWh qhXw/a3Mb2a3blh5l15mFS+1OEmm9Pb+KmPDwQIWidXLPsk2R4EldNdlbJbBG5Ax FtyMk1UaN2ltl+EWNcAB1Tdzt+my+MnkbQU/XTI2XxxABGexwHJyNh3/MZvl5/2H ISetI623veGUJBntPeKz66fLfRrgXeB8baEdPAgm4xiHwcRTWZoEQ3SbNSdP/yiD 6SsOwQ4/D9pwDe3UheWXWx3laxT4YTt+ftEv0+kLCSfcIMNAAZgkLK6sUuE/NR3J OXG3Cf+IsQ== -----END CERTIFICATE-----Generated at Mon Mar 2 12:54:42 2026 by rpki-client