$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft File: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft (raw, json) Hash identifier: ZDGUT7NYmJ1cdsbsYnXfH+yoUbBngCi/66u9q6p/XTQ= Subject key identifier: E9:E6:C3:58:8A:3A:3E:9A:08:1C:03:A6:C1:74:11:0A:18:BE:A2:B0 Authority key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Certificate issuer: /CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Certificate serial: 456EF1D1C073BBF0C8A4C8974EB9B0281CF29559 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft Manifest number: F5 Signing time: Wed 29 Jul 2026 11:49:17 +0000 Manifest this update: Wed 29 Jul 2026 11:44:17 +0000 Manifest next update: Thu 30 Jul 2026 13:54:17 +0000 Files and hashes: 1: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl (hash: yl9RSs5blThcQqVBWPlfwPaaxwN515lB7tJh9uouNz0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 13:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:6e:f1:d1:c0:73:bb:f0:c8:a4:c8:97:4e:b9:b0:28:1c:f2:95:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Validity Not Before: Jul 29 11:44:17 2026 GMT Not After : Jul 30 13:54:17 2026 GMT Subject: CN=E9E6C3588A3A3E9A081C03A6C174110A18BEA2B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:31:e4:0f:c0:d7:4d:25:47:fe:2e:98:50:5d: 14:d1:15:c1:55:8c:03:75:6f:f8:70:9e:33:f7:b9: 86:4b:35:4f:85:5f:91:04:56:43:3a:da:49:3c:3f: cf:be:b9:df:4d:36:3d:16:91:4b:7c:49:46:9b:5e: 21:e8:be:d4:1d:89:f7:d4:19:7a:f2:7e:83:6c:a4: 47:bd:68:92:46:a1:ca:c0:e6:1e:6a:35:f2:4a:55: 07:19:94:aa:6b:b2:75:12:5e:93:8e:80:a0:54:c1: e2:76:0c:b4:6b:52:36:31:99:8f:16:ec:ba:e7:06: ee:48:c6:e7:d0:95:c0:9a:d3:75:2a:9c:e1:dc:65: 3f:41:77:38:8d:a2:76:68:75:8c:fe:2a:4f:4e:83: ec:1c:fe:fc:c7:ed:68:b0:0b:cd:99:b3:4f:d0:70: 97:a0:60:40:c9:14:8a:e9:01:00:87:5a:35:cd:b8: c9:cf:2c:77:7a:be:dc:14:5a:94:1a:1e:29:10:cc: 2b:19:93:10:bc:12:0b:80:6f:50:a3:b2:43:1f:38: 54:8e:90:d4:d2:dd:4a:f3:31:4a:77:83:09:f0:f7: f7:1a:73:ee:51:10:c7:f7:a0:b9:e4:0f:ba:2b:47: d1:08:f2:e8:7c:5e:ba:3a:18:d8:fa:94:54:d2:bc: 63:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E6:C3:58:8A:3A:3E:9A:08:1C:03:A6:C1:74:11:0A:18:BE:A2:B0 X509v3 Authority Key Identifier: keyid:D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:27:81:bb:68:a0:b3:20:d5:27:0b:19:7d:d8:87:e0:92:a7: 47:8c:db:25:52:ea:67:57:f3:7d:6f:d6:ad:94:af:a8:86:3a: 21:38:95:60:ac:ba:55:02:00:8b:76:77:d5:c8:4b:5f:7e:9f: 22:d3:78:a8:18:dd:b2:77:de:a3:2c:d3:6b:0a:93:47:70:9e: 02:ed:88:7e:11:d4:ba:87:bb:8c:3f:5b:1a:7c:19:c1:c9:c5: f2:e6:77:b6:f9:5f:54:c2:d4:d3:e8:9c:64:ac:6d:1a:63:36: d5:45:8c:95:fe:72:1a:25:54:c2:f2:1e:b7:11:fb:1c:eb:80: b9:03:9f:80:67:44:90:5a:74:08:59:bb:11:79:ea:75:2f:af: d8:36:4f:c8:3e:b5:b1:b2:df:62:af:2f:60:a3:b9:37:51:59: 1b:88:82:3f:3f:c6:32:b4:06:46:d8:6d:9e:57:2a:71:05:25: f5:54:ad:30:91:5a:04:ef:a2:43:c8:11:c7:12:cb:44:a2:0c: a2:32:86:ba:b9:15:9a:c9:f1:f1:47:ba:15:5b:b9:be:6e:46: ff:2c:09:c4:31:7f:7d:c5:14:45:0c:2d:78:78:c7:c9:31:d1: f1:47:7f:f9:42:a8:77:1c:a1:0c:93:ef:ae:f7:40:b4:fe:5c: c1:7a:8f:61 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURW7x0cBzu/DIpMiXTrmwKBzylVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4 ODk2QkU0RDAeFw0yNjA3MjkxMTQ0MTdaFw0yNjA3MzAxMzU0MTdaMDMxMTAvBgNV BAMTKEU5RTZDMzU4OEEzQTNFOUEwODFDMDNBNkMxNzQxMTBBMThCRUEyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZMeQPwNdNJUf+LphQXRTRFcFV jAN1b/hwnjP3uYZLNU+FX5EEVkM62kk8P8++ud9NNj0WkUt8SUabXiHovtQdiffU GXryfoNspEe9aJJGocrA5h5qNfJKVQcZlKprsnUSXpOOgKBUweJ2DLRrUjYxmY8W 7LrnBu5IxufQlcCa03UqnOHcZT9BdziNonZodYz+Kk9Og+wc/vzH7WiwC82Zs0/Q cJegYEDJFIrpAQCHWjXNuMnPLHd6vtwUWpQaHikQzCsZkxC8EguAb1CjskMfOFSO kNTS3UrzMUp3gwnw9/cac+5REMf3oLnkD7orR9EI8uh8Xro6GNj6lFTSvGNFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6ebDWIo6PpoIHAOmwXQRChi+orAwHwYDVR0j BBgwFoAU1vs+dmj9xs0YEG7oU9HGRYiWvk0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODcxMjk2Mi8wL0Q2RkIzRTc2NjhGREM2Q0QxODEwNkVFODUzRDFD NjQ1ODg5NkJFNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3MTI5NjIvMC9ENkZCM0U3NjY4RkRD NkNEMTgxMDZFRTg1M0QxQzY0NTg4OTZCRTRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyeBu2igsyDV JwsZfdiH4JKnR4zbJVLqZ1fzfW/WrZSvqIY6ITiVYKy6VQIAi3Z31chLX36fItN4 qBjdsnfeoyzTawqTR3CeAu2IfhHUuoe7jD9bGnwZwcnF8uZ3tvlfVMLU0+icZKxt GmM21UWMlf5yGiVUwvIetxH7HOuAuQOfgGdEkFp0CFm7EXnqdS+v2DZPyD61sbLf Yq8vYKO5N1FZG4iCPz/GMrQGRthtnlcqcQUl9VStMJFaBO+iQ8gRxxLLRKIMojKG urkVmsnx8Ue6FVu5vm5G/ywJxDF/fcUURQwteHjHyTHR8Ud/+UKodxyhDJPvrvdA tP5cwXqPYQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:01:49 2026 by rpki-client