$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft File: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft (raw, json) Hash identifier: 3Rp5ASZma+mmGmj5xZdooWV1zRNrTZIQynCeGNxLTso= Subject key identifier: 76:C3:94:92:CC:CB:51:35:53:F7:45:92:B0:C0:03:A4:17:A6:1F:94 Authority key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Certificate issuer: /CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Certificate serial: 1657602D08742551A68EDC2A0629A4678B8A94B2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft Manifest number: 6B Signing time: Fri 17 Apr 2026 05:49:40 +0000 Manifest this update: Fri 17 Apr 2026 05:44:40 +0000 Manifest next update: Sat 18 Apr 2026 08:24:40 +0000 Files and hashes: 1: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl (hash: hEFn1KmeQNXtRvXyMqkY1jkA42KDWv8qwtZfSy48VQg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:57:60:2d:08:74:25:51:a6:8e:dc:2a:06:29:a4:67:8b:8a:94:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Validity Not Before: Apr 17 05:44:40 2026 GMT Not After : Apr 18 08:24:40 2026 GMT Subject: CN=76C39492CCCB513553F74592B0C003A417A61F94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:db:bf:99:4f:42:87:0c:ff:01:03:f2:60:8d: e7:98:35:2e:f0:ef:5b:84:f6:19:28:ec:88:f2:dd: 1b:04:ad:4c:a7:29:8e:25:57:81:93:64:ff:37:3f: 0c:98:dc:ec:d1:1f:7f:d8:28:70:22:35:7d:f9:fe: 91:38:62:10:8e:09:8c:7a:bd:1e:3a:44:3a:a4:20: 38:7e:de:2a:da:da:48:4a:fa:14:d5:e4:54:59:ef: 4c:a3:3b:12:88:2e:3b:77:95:d7:1f:01:67:83:f9: 0d:40:27:71:e3:48:36:d7:4a:2f:70:8a:ac:ff:a9: 82:67:6f:0c:84:30:e2:f7:42:e6:df:88:c8:fa:a0: f0:c9:46:59:be:8a:39:a5:ca:29:16:78:09:8d:03: 08:7c:63:b7:ea:91:d9:50:07:3d:8b:d9:b5:03:3c: 17:f8:82:8c:dd:13:3d:74:3b:05:8d:f6:a8:f2:68: 87:9a:a1:ec:dd:9b:0a:c5:6d:88:b3:65:34:36:18: a0:43:c2:29:d6:98:c2:34:bd:1b:d9:3e:fa:50:e4: ae:63:80:f6:7a:f5:d1:ee:e3:0a:d1:f1:8b:f0:24: 12:47:fe:88:70:34:9c:d2:15:25:cb:63:77:97:92: ef:c7:fb:04:84:45:5c:d1:ae:6a:1c:55:9a:d7:72: c0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C3:94:92:CC:CB:51:35:53:F7:45:92:B0:C0:03:A4:17:A6:1F:94 X509v3 Authority Key Identifier: keyid:D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b3:4e:54:d8:53:5b:6a:e1:c3:67:6b:19:fb:a0:23:19:ff: c2:40:d2:84:ef:12:df:2f:4a:85:98:28:e1:ec:18:fd:40:d3: 9c:f5:5d:05:41:f3:60:8e:97:f7:08:14:f8:ad:22:80:8b:66: fa:dd:5f:c9:fa:88:f8:b8:d5:3c:ff:c1:77:63:3b:ba:91:f9: 51:92:ea:fa:ca:59:86:d6:50:96:47:58:2a:64:1a:38:85:b3: 3b:d2:90:a8:b2:b7:34:d7:0b:99:94:eb:66:ec:89:c6:2f:ad: 51:69:6b:49:db:8a:83:4d:9b:21:8a:0e:f3:ad:f9:f6:9f:03: 93:79:42:e4:cd:83:6c:b1:9d:5f:ec:14:41:f9:29:23:bc:f2: c8:8d:ea:ee:cb:9e:24:20:e4:09:02:28:90:85:15:39:dd:92: 35:e1:ee:4c:c5:16:89:65:96:c7:3d:67:cd:a9:be:08:83:c9: 20:8f:d2:55:46:65:ce:b4:0a:2b:0a:eb:f9:9b:54:b5:48:76: 62:f1:04:d9:e3:61:62:da:14:86:af:bc:51:be:62:dd:43:71: 81:81:e6:8c:6d:80:55:07:21:49:31:af:c0:b8:79:8f:3a:da: 61:66:43:32:a5:c9:03:d4:bb:02:99:c5:c7:51:35:2e:44:f6: 22:a4:a1:3f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFldgLQh0JVGmjtwqBimkZ4uKlLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4 ODk2QkU0RDAeFw0yNjA0MTcwNTQ0NDBaFw0yNjA0MTgwODI0NDBaMDMxMTAvBgNV BAMTKDc2QzM5NDkyQ0NDQjUxMzU1M0Y3NDU5MkIwQzAwM0E0MTdBNjFGOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE27+ZT0KHDP8BA/JgjeeYNS7w 71uE9hko7Ijy3RsErUynKY4lV4GTZP83PwyY3OzRH3/YKHAiNX35/pE4YhCOCYx6 vR46RDqkIDh+3ira2khK+hTV5FRZ70yjOxKILjt3ldcfAWeD+Q1AJ3HjSDbXSi9w iqz/qYJnbwyEMOL3QubfiMj6oPDJRlm+ijmlyikWeAmNAwh8Y7fqkdlQBz2L2bUD PBf4gozdEz10OwWN9qjyaIeaoezdmwrFbYizZTQ2GKBDwinWmMI0vRvZPvpQ5K5j gPZ69dHu4wrR8YvwJBJH/ohwNJzSFSXLY3eXku/H+wSERVzRrmocVZrXcsDZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdsOUkszLUTVT90WSsMADpBemH5QwHwYDVR0j BBgwFoAU1vs+dmj9xs0YEG7oU9HGRYiWvk0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODcxMjk2Mi8wL0Q2RkIzRTc2NjhGREM2Q0QxODEwNkVFODUzRDFD NjQ1ODg5NkJFNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3MTI5NjIvMC9ENkZCM0U3NjY4RkRD NkNEMTgxMDZFRTg1M0QxQzY0NTg4OTZCRTRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7NOVNhTW2rh w2drGfugIxn/wkDShO8S3y9KhZgo4ewY/UDTnPVdBUHzYI6X9wgU+K0igItm+t1f yfqI+LjVPP/Bd2M7upH5UZLq+spZhtZQlkdYKmQaOIWzO9KQqLK3NNcLmZTrZuyJ xi+tUWlrSduKg02bIYoO86359p8Dk3lC5M2DbLGdX+wUQfkpI7zyyI3q7sueJCDk CQIokIUVOd2SNeHuTMUWiWWWxz1nzam+CIPJII/SVUZlzrQKKwrr+ZtUtUh2YvEE 2eNhYtoUhq+8Ub5i3UNxgYHmjG2AVQchSTGvwLh5jzraYWZDMqXJA9S7ApnFx1E1 LkT2IqShPw== -----END CERTIFICATE-----Generated at Sat Apr 18 01:05:25 2026 by rpki-client