$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft File: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft (raw, json) Hash identifier: A6F16cJvAHGyTmsXPLS2hzHdjPfgZKq0UD0v4gKzjyg= Subject key identifier: 6D:ED:57:EE:35:A7:72:00:8F:E1:39:2B:5C:76:D0:8A:01:95:B4:58 Authority key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Certificate issuer: /CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Certificate serial: 5F2CC04A92263288D58DD4232774725E344E4C45 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft Manifest number: 0133 Signing time: Thu 15 Oct 2026 06:36:27 +0000 Manifest this update: Thu 15 Oct 2026 06:31:27 +0000 Manifest next update: Sun 18 Oct 2026 17:19:27 +0000 Files and hashes: 1: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl (hash: wifDt1yJfGrJnH2j3Kx2bZ/Ubm5SL4XAOpst2LGHhAk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 17:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:2c:c0:4a:92:26:32:88:d5:8d:d4:23:27:74:72:5e:34:4e:4c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Validity Not Before: Oct 15 06:31:27 2026 GMT Not After : Oct 18 17:19:27 2026 GMT Subject: CN=6DED57EE35A772008FE1392B5C76D08A0195B458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:42:d3:8e:30:4d:b7:3a:84:50:db:13:a9:e0: 7b:4b:cd:c1:9b:50:8c:a1:7c:79:7d:10:db:63:38: 39:22:67:45:d2:ee:b7:1f:c8:1d:2e:3b:ae:10:bb: bc:4d:f7:9d:2d:f6:62:63:bc:e5:f7:fb:a9:67:3c: ff:14:d2:c3:1d:ff:5d:85:3c:19:b8:e0:63:2c:5c: 22:94:b2:05:ca:1b:26:51:1c:74:8b:12:71:34:45: c6:30:15:8b:eb:97:3a:b4:5c:9f:cc:59:56:2d:d7: 1b:38:c1:af:7a:a7:81:10:52:5a:cf:84:b3:09:93: 7f:a3:1b:6c:ce:36:af:de:57:b3:9f:1a:4f:1b:70: 73:61:41:ad:9d:1f:17:66:bd:83:d8:e3:bf:59:32: b9:1f:52:03:5c:c1:3a:f8:ab:f2:88:e2:24:84:cc: 41:ab:eb:39:08:16:2b:74:21:aa:88:a8:18:ed:10: f6:78:c8:b3:28:cd:01:d3:03:8a:a5:56:19:91:b3: f1:7e:b9:ac:da:e1:71:1e:6a:00:a3:b9:1c:0d:8c: 89:59:31:a8:72:77:91:91:f7:08:15:4e:81:79:e9: c2:20:1b:30:06:82:69:8a:97:e0:0a:5b:10:1d:fa: d5:70:7c:eb:11:9c:50:ad:f3:20:54:26:ac:22:b7: f2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:ED:57:EE:35:A7:72:00:8F:E1:39:2B:5C:76:D0:8A:01:95:B4:58 X509v3 Authority Key Identifier: keyid:D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0a:9f:d9:12:cd:2a:29:20:07:8b:18:64:88:7a:d6:c9:cd: 7b:3a:73:2e:c8:13:6d:c1:ae:cd:82:da:25:f1:89:67:f8:e8: ad:47:24:1a:82:94:4f:73:9a:a2:2a:6e:84:f9:b5:85:d2:fa: b3:c9:0c:c2:54:73:19:a9:40:f5:74:77:bd:c5:43:b2:69:83: 3c:55:a5:95:a6:37:9b:ac:30:c8:73:0b:25:3b:aa:a8:c8:7d: e7:1b:f8:81:03:8f:a8:1a:f0:14:55:0f:86:e1:05:a3:0c:5c: c9:0d:93:90:41:55:59:38:0d:5a:7a:e1:81:fb:79:8c:57:e9: a9:c5:6a:61:c8:80:12:1e:47:b1:58:38:eb:34:df:61:d4:ac: bf:1d:31:fc:33:be:32:5a:df:76:7b:5e:fc:34:75:38:95:5e: 73:1d:db:75:06:9e:a2:5e:2e:08:09:b2:78:c5:75:79:6d:80: af:e0:37:fd:13:d1:ab:97:85:67:69:bf:03:17:24:8c:99:95: ca:9c:92:3f:ad:d5:77:06:90:5e:39:3e:aa:a6:c9:7c:1c:00: a6:6e:b8:96:65:93:d5:f4:0a:c8:66:70:56:f9:7a:58:d3:b1: 41:4b:1a:19:e8:0c:11:16:59:fd:49:a7:d5:8d:e1:e9:97:a6: 51:92:81:0b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXyzASpImMojVjdQjJ3RyXjROTEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4 ODk2QkU0RDAeFw0yNjEwMTUwNjMxMjdaFw0yNjEwMTgxNzE5MjdaMDMxMTAvBgNV BAMTKDZERUQ1N0VFMzVBNzcyMDA4RkUxMzkyQjVDNzZEMDhBMDE5NUI0NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbQtOOME23OoRQ2xOp4HtLzcGb UIyhfHl9ENtjODkiZ0XS7rcfyB0uO64Qu7xN950t9mJjvOX3+6lnPP8U0sMd/12F PBm44GMsXCKUsgXKGyZRHHSLEnE0RcYwFYvrlzq0XJ/MWVYt1xs4wa96p4EQUlrP hLMJk3+jG2zONq/eV7OfGk8bcHNhQa2dHxdmvYPY479ZMrkfUgNcwTr4q/KI4iSE zEGr6zkIFit0IaqIqBjtEPZ4yLMozQHTA4qlVhmRs/F+uaza4XEeagCjuRwNjIlZ Mahyd5GR9wgVToF56cIgGzAGgmmKl+AKWxAd+tVwfOsRnFCt8yBUJqwit/KHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbe1X7jWncgCP4TkrXHbQigGVtFgwHwYDVR0j BBgwFoAU1vs+dmj9xs0YEG7oU9HGRYiWvk0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODcxMjk2Mi8wL0Q2RkIzRTc2NjhGREM2Q0QxODEwNkVFODUzRDFD NjQ1ODg5NkJFNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3MTI5NjIvMC9ENkZCM0U3NjY4RkRD NkNEMTgxMDZFRTg1M0QxQzY0NTg4OTZCRTRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwqf2RLNKikg B4sYZIh61snNezpzLsgTbcGuzYLaJfGJZ/jorUckGoKUT3OaoipuhPm1hdL6s8kM wlRzGalA9XR3vcVDsmmDPFWllaY3m6wwyHMLJTuqqMh95xv4gQOPqBrwFFUPhuEF owxcyQ2TkEFVWTgNWnrhgft5jFfpqcVqYciAEh5HsVg46zTfYdSsvx0x/DO+Mlrf dnte/DR1OJVecx3bdQaeol4uCAmyeMV1eW2Ar+A3/RPRq5eFZ2m/AxckjJmVypyS P63VdwaQXjk+qqbJfBwApm64lmWT1fQKyGZwVvl6WNOxQUsaGegMERZZ/Umn1Y3h 6ZemUZKBCw== -----END CERTIFICATE-----Generated at Thu Oct 15 19:10:26 2026 by rpki-client