$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft File: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft (raw, json) Hash identifier: cPTdQUDTpcC+n6q1l2f8GrfNbVkY4zmcd0LHWNmzvgA= Subject key identifier: 3C:0E:89:79:E2:14:BA:80:47:28:24:61:E6:C2:A4:06:45:85:44:16 Authority key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Certificate issuer: /CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Certificate serial: 5B755EA3B49EF14770F35AB76E387561690AFF6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft Manifest number: B9 Signing time: Sun 14 Jun 2026 05:52:49 +0000 Manifest this update: Sun 14 Jun 2026 05:47:49 +0000 Manifest next update: Mon 15 Jun 2026 09:09:49 +0000 Files and hashes: 1: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl (hash: PAcEQkoWgyd0s6iUI7uqj7AyfAtGzA8AuPzlD2DQrPM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:75:5e:a3:b4:9e:f1:47:70:f3:5a:b7:6e:38:75:61:69:0a:ff:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Validity Not Before: Jun 14 05:47:49 2026 GMT Not After : Jun 15 09:09:49 2026 GMT Subject: CN=3C0E8979E214BA8047282461E6C2A40645854416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6e:76:5f:3b:9f:39:ea:23:c0:fb:4e:08:65: ec:5a:23:11:df:06:37:77:8f:92:df:b1:d5:dd:5a: 64:0c:56:97:a1:45:19:b2:51:99:67:0d:96:6a:c6: 5a:78:64:8e:aa:ce:08:c0:85:d9:d1:3c:9e:7b:d5: d5:7b:4b:e1:77:f6:7b:34:4d:fe:74:20:03:e5:3b: 0d:2b:92:ef:f1:d5:53:39:8b:04:25:8f:33:37:54: 81:f5:a0:e6:9e:80:ad:e5:35:19:1e:b3:5b:2e:9d: 13:17:74:c2:ef:77:87:32:d2:6f:2d:39:a3:7f:74: 60:3e:ac:75:91:70:dd:b1:bc:71:7f:a1:4e:59:5a: 54:aa:25:21:68:50:9f:2f:ed:bc:4f:ed:4a:44:c7: f5:aa:55:37:3a:61:30:91:08:92:55:50:83:2c:be: 4a:bb:cf:27:b5:a7:f6:fd:a9:26:77:7d:bd:07:2d: 71:ce:c6:bc:54:32:a4:60:1f:6e:bd:13:41:08:fa: 1a:4e:82:3a:d9:08:ed:df:b1:7f:ab:ba:13:65:88: d0:53:d3:8b:0b:70:3d:3c:f9:22:62:fe:df:09:39: e0:e9:83:f1:49:c4:7b:ed:1b:01:db:df:09:40:36: 9e:b7:23:a6:4f:26:39:9c:d1:1d:7b:df:65:87:bd: fa:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0E:89:79:E2:14:BA:80:47:28:24:61:E6:C2:A4:06:45:85:44:16 X509v3 Authority Key Identifier: keyid:D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e7:38:ef:f7:bf:e0:fe:f8:1d:0a:ad:e8:06:eb:b7:bc:20: f5:1f:a0:0f:1a:e7:e9:e2:62:87:3e:9b:c1:2f:4a:24:79:a6: 0b:4e:e5:69:a2:8c:23:d8:f5:ba:4c:2a:35:c6:6f:4c:2a:70: 58:64:03:a8:6c:bd:ce:7e:7e:af:f4:ff:07:09:4f:36:32:d3: 57:bc:7d:87:0a:5c:e9:e2:51:3a:d6:94:08:62:85:e4:4a:5a: a7:4a:31:c3:e1:59:d7:54:ec:af:19:30:ce:70:31:2d:a3:77: 3e:bf:60:c1:e1:8a:70:52:3e:b7:44:d6:42:00:eb:9c:2d:98: eb:70:c7:4a:13:cc:50:6d:7a:8c:8f:e8:67:19:94:f0:ae:47: 18:fa:1f:d6:b7:f0:0d:8e:81:56:db:30:18:b9:c6:4a:37:eb: ae:0c:7a:3f:8f:00:42:f9:1d:95:ec:bf:a4:72:9c:a5:d4:29: 44:2b:be:3f:84:8c:72:02:73:91:e9:af:72:9d:32:00:9b:cc: ac:c4:76:23:4e:f0:f8:ef:46:89:12:e3:9a:6a:c4:ea:e3:4c: c7:99:15:35:cf:5b:60:fb:e1:1c:fe:ff:64:bd:b8:2d:3c:6c: bb:6d:b7:25:b7:f9:1b:98:47:7c:45:81:1f:85:26:42:c4:9c: 70:8b:0f:b7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUW3Veo7Se8Udw81q3bjh1YWkK/20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4 ODk2QkU0RDAeFw0yNjA2MTQwNTQ3NDlaFw0yNjA2MTUwOTA5NDlaMDMxMTAvBgNV BAMTKDNDMEU4OTc5RTIxNEJBODA0NzI4MjQ2MUU2QzJBNDA2NDU4NTQ0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCbnZfO5856iPA+04IZexaIxHf Bjd3j5LfsdXdWmQMVpehRRmyUZlnDZZqxlp4ZI6qzgjAhdnRPJ571dV7S+F39ns0 Tf50IAPlOw0rku/x1VM5iwQljzM3VIH1oOaegK3lNRkes1sunRMXdMLvd4cy0m8t OaN/dGA+rHWRcN2xvHF/oU5ZWlSqJSFoUJ8v7bxP7UpEx/WqVTc6YTCRCJJVUIMs vkq7zye1p/b9qSZ3fb0HLXHOxrxUMqRgH269E0EI+hpOgjrZCO3fsX+ruhNliNBT 04sLcD08+SJi/t8JOeDpg/FJxHvtGwHb3wlANp63I6ZPJjmc0R1732WHvfr5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPA6JeeIUuoBHKCRh5sKkBkWFRBYwHwYDVR0j BBgwFoAU1vs+dmj9xs0YEG7oU9HGRYiWvk0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODcxMjk2Mi8wL0Q2RkIzRTc2NjhGREM2Q0QxODEwNkVFODUzRDFD NjQ1ODg5NkJFNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3MTI5NjIvMC9ENkZCM0U3NjY4RkRD NkNEMTgxMDZFRTg1M0QxQzY0NTg4OTZCRTRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuc47/e/4P74 HQqt6Abrt7wg9R+gDxrn6eJihz6bwS9KJHmmC07laaKMI9j1ukwqNcZvTCpwWGQD qGy9zn5+r/T/BwlPNjLTV7x9hwpc6eJROtaUCGKF5Epap0oxw+FZ11TsrxkwznAx LaN3Pr9gweGKcFI+t0TWQgDrnC2Y63DHShPMUG16jI/oZxmU8K5HGPof1rfwDY6B VtswGLnGSjfrrgx6P48AQvkdley/pHKcpdQpRCu+P4SMcgJzkemvcp0yAJvMrMR2 I07w+O9GiRLjmmrE6uNMx5kVNc9bYPvhHP7/ZL24LTxsu223Jbf5G5hHfEWBH4Um QsSccIsPtw== -----END CERTIFICATE-----Generated at Sun Jun 14 09:56:00 2026 by rpki-client