$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft File: EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft (raw, json) Hash identifier: IHc51bnRoZu2EgOy7Nz12t5BHqmJAH4uVywNXVfpFrg= Subject key identifier: CA:61:17:08:E5:77:59:18:50:13:7A:D9:31:4A:8D:51:59:49:F5:B6 Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3 Certificate issuer: /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3 Certificate serial: 769EEEC830E011446EBD6A1A1636A706A9A461FB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft Manifest number: 05 Signing time: Fri 17 Apr 2026 23:19:49 +0000 Manifest this update: Fri 17 Apr 2026 23:14:49 +0000 Manifest next update: Sun 19 Apr 2026 01:28:49 +0000 Files and hashes: 1: EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl (hash: VkO+pOw7vmfZP+lnVuAORJqGqtSxvQT61uX1LLlMSIY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:9e:ee:c8:30:e0:11:44:6e:bd:6a:1a:16:36:a7:06:a9:a4:61:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3 Validity Not Before: Apr 17 23:14:49 2026 GMT Not After : Apr 19 01:28:49 2026 GMT Subject: CN=CA611708E577591850137AD9314A8D515949F5B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4c:1b:83:21:1b:b4:49:82:85:07:ec:fa:04: 5b:18:01:76:19:57:fc:da:3b:8d:73:8a:2b:6d:d3: 85:8b:0c:b0:cb:eb:8f:a1:17:c8:5f:d2:3c:f0:c5: ea:93:c9:fe:d2:5a:92:05:a8:8d:f4:d4:05:d8:45: 0d:08:96:bc:25:7c:9d:86:03:be:d5:9f:3b:7c:a6: 4b:0a:cd:36:93:ba:90:92:cd:f1:19:4e:0a:9b:f8: d9:34:a0:96:63:e0:a4:b9:a9:47:85:54:9f:19:16: 06:39:bd:08:9a:8a:80:5b:2d:b2:40:92:42:23:78: e2:b3:cb:67:32:6f:e5:c3:c8:69:97:50:3d:85:ee: 8c:0f:8e:ef:07:52:32:3c:3f:af:41:f9:94:63:a5: 48:9c:6f:cc:78:f9:48:bf:61:aa:c7:53:ad:ce:bf: 01:d8:40:6b:03:94:77:d2:28:f5:a2:c2:55:85:37: 25:50:06:86:0f:d3:80:7e:cb:6e:95:f0:d3:5b:70: e0:b1:34:0b:db:bc:79:19:09:e5:1a:aa:18:66:07: 36:90:a2:e8:9d:07:b0:0b:42:99:16:4c:e3:7d:10: 55:11:85:df:dd:29:01:0d:15:c8:5c:92:6e:a7:0e: bf:81:f5:50:6f:7f:5a:4b:80:99:5c:66:71:61:30: e7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:61:17:08:E5:77:59:18:50:13:7A:D9:31:4A:8D:51:59:49:F5:B6 X509v3 Authority Key Identifier: keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:af:19:c7:13:d4:72:11:9e:12:e5:fc:f1:5b:ca:8e:1f:d6: 25:19:65:35:d2:9a:c3:7d:c0:1f:c8:42:d5:5e:f8:64:cf:88: 33:2d:34:5f:f6:7e:d8:93:69:b2:20:c0:73:22:3a:35:4c:66: f1:36:0c:67:40:02:bc:a7:9d:1c:89:55:75:7c:c7:47:c0:8a: c5:87:0c:ad:00:a4:2a:b7:b6:6a:ed:cd:c5:a9:06:0a:d7:24: 99:de:b2:98:ba:b3:f0:41:f4:4a:27:48:fa:86:07:de:a6:8b: b2:6e:d1:e5:54:2c:b7:5b:7c:0d:12:fe:0f:eb:01:e3:26:f9: e8:67:08:75:7b:4e:b3:88:5d:42:b8:e0:e0:d0:2f:82:c6:4f: f3:e1:1d:35:47:1f:68:2b:a7:9d:8c:54:e9:c5:a4:33:6c:01: 31:64:07:93:6d:8c:ef:e0:3a:1c:3c:66:df:f6:e1:42:a7:8a: ce:9d:20:b2:a4:b0:25:df:65:4b:b6:33:b4:35:c3:c4:06:2c: 92:ea:8a:61:30:74:68:07:eb:75:26:57:d7:5e:de:e0:d2:5f: e1:48:b7:0f:45:c1:e5:77:94:12:d4:a8:1a:bd:c9:7c:1d:4d: e5:36:bb:83:f9:cb:26:8d:85:13:b0:26:fe:31:dc:65:04:d5: 18:bd:aa:3a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdp7uyDDgEURuvWoaFjanBqmkYfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM2RkIxNDI1QjJFQ0Q4OTZBODFEN0E0RTFDQUJCRDhF RTU4QkJEMzAeFw0yNjA0MTcyMzE0NDlaFw0yNjA0MTkwMTI4NDlaMDMxMTAvBgNV BAMTKENBNjExNzA4RTU3NzU5MTg1MDEzN0FEOTMxNEE4RDUxNTk0OUY1QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSTBuDIRu0SYKFB+z6BFsYAXYZ V/zaO41ziitt04WLDLDL64+hF8hf0jzwxeqTyf7SWpIFqI301AXYRQ0IlrwlfJ2G A77Vnzt8pksKzTaTupCSzfEZTgqb+Nk0oJZj4KS5qUeFVJ8ZFgY5vQiaioBbLbJA kkIjeOKzy2cyb+XDyGmXUD2F7owPju8HUjI8P69B+ZRjpUicb8x4+Ui/YarHU63O vwHYQGsDlHfSKPWiwlWFNyVQBoYP04B+y26V8NNbcOCxNAvbvHkZCeUaqhhmBzaQ ouidB7ALQpkWTON9EFURhd/dKQENFchckm6nDr+B9VBvf1pLgJlcZnFhMOcvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUymEXCOV3WRhQE3rZMUqNUVlJ9bYwHwYDVR0j BBgwFoAU7G+xQlsuzYlqgdek4cq72O5Yu9MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYyNjkzNDcyNjUyNDkzMC8wL0VDNkZCMTQyNUIyRUNEODk2QTgxRDdBNEUxQ0FC QkQ4RUU1OEJCRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM2RkIxNDI1QjJFQ0Q4OTZBODFEN0E0RTFDQUJCRDhFRTU4QkJEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MjY5MzQ3MjY1MjQ5MzAvMC9FQzZGQjE0MjVCMkVD RDg5NkE4MUQ3QTRFMUNBQkJEOEVFNThCQkQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACa8ZxxPUchGe EuX88VvKjh/WJRllNdKaw33AH8hC1V74ZM+IMy00X/Z+2JNpsiDAcyI6NUxm8TYM Z0ACvKedHIlVdXzHR8CKxYcMrQCkKre2au3NxakGCtckmd6ymLqz8EH0SidI+oYH 3qaLsm7R5VQst1t8DRL+D+sB4yb56GcIdXtOs4hdQrjg4NAvgsZP8+EdNUcfaCun nYxU6cWkM2wBMWQHk22M7+A6HDxm3/bhQqeKzp0gsqSwJd9lS7YztDXDxAYskuqK YTB0aAfrdSZX117e4NJf4Ui3D0XB5XeUEtSoGr3JfB1N5Ta7g/nLJo2FE7Am/jHc ZQTVGL2qOg== -----END CERTIFICATE-----Generated at Sat Apr 18 02:42:42 2026 by rpki-client