$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft File: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft (raw, json) Hash identifier: gYucOoOkfWCLMn1OopcTlfXVd2tE/1XzF5xZW4drW7s= Subject key identifier: F1:E1:93:5F:F6:AD:FA:B0:21:D8:7B:D0:1C:7B:20:80:1E:83:06:A6 Authority key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Certificate issuer: /CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Certificate serial: 210E5685AFD0715F2F9E55C7800BDFF3AD1688D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft Manifest number: 0131 Signing time: Sat 10 Oct 2026 13:39:43 +0000 Manifest this update: Sat 10 Oct 2026 13:34:43 +0000 Manifest next update: Tue 13 Oct 2026 22:37:43 +0000 Files and hashes: 1: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl (hash: JPf5FLNbh88pf/lmABVqxo7Cf6nnAsU9QDrP8B0t0oA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 22:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0e:56:85:af:d0:71:5f:2f:9e:55:c7:80:0b:df:f3:ad:16:88:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Validity Not Before: Oct 10 13:34:43 2026 GMT Not After : Oct 13 22:37:43 2026 GMT Subject: CN=F1E1935FF6ADFAB021D87BD01C7B20801E8306A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:65:33:12:33:2d:a6:07:cc:a1:31:a8:4d: ce:f4:df:d9:8c:1d:28:dd:63:8f:e5:32:60:1a:a5: 7c:77:ef:52:8a:06:b5:10:de:a7:4d:f3:15:f2:f2: d4:5c:76:a9:60:29:e1:dc:ca:28:97:47:7a:ef:27: c1:92:0d:22:07:72:d4:a3:31:ae:10:0e:aa:cf:72: bd:de:cd:73:46:cd:3f:ac:2c:b1:25:1b:69:9c:be: 65:60:20:f0:93:67:6a:57:e7:97:2d:1f:39:0e:b2: 82:74:d5:d5:04:54:62:bb:16:43:53:26:e1:60:ba: f8:ba:21:67:d6:18:6d:7a:84:b1:b1:8a:b8:6a:fc: d2:fe:46:b1:70:8f:f8:9f:56:ea:61:d7:9c:90:ac: 06:dd:f9:73:4c:e6:1d:8b:16:4d:7b:63:08:94:a6: 89:bd:63:b3:85:73:af:18:67:7d:5a:75:ab:59:07: 8c:95:49:27:aa:59:ff:ee:0a:d3:80:69:5f:78:95: 9b:89:6b:b4:96:df:a7:58:ca:f4:03:aa:c9:d5:ca: b7:0b:29:5f:f9:6e:db:ab:18:f4:db:5b:35:44:46: 52:97:68:c7:92:40:32:b3:48:0b:ed:31:a6:40:20: 33:e0:78:78:d6:cc:98:74:45:64:63:1c:d2:d4:f6: 00:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E1:93:5F:F6:AD:FA:B0:21:D8:7B:D0:1C:7B:20:80:1E:83:06:A6 X509v3 Authority Key Identifier: keyid:D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:73:9e:53:d6:5a:97:70:6d:ae:51:9f:18:35:f8:f6:d7:88: 15:6d:80:76:2f:42:1f:ed:d5:3b:56:90:79:e5:34:d5:19:7d: da:cc:f8:de:fe:bb:c7:a1:a6:f6:a6:db:f0:92:45:30:97:28: 56:08:da:a8:4b:6e:a9:8d:f3:5c:34:f5:fd:41:a0:54:66:f2: 44:1d:59:32:19:6e:af:63:6d:06:59:3c:08:56:de:7d:d1:b0: 56:ff:2f:7d:63:2c:c1:ba:88:8a:ba:54:18:d9:74:c8:40:af: 27:de:a4:68:8b:5e:95:d5:96:c7:50:83:32:d8:7e:1c:7e:ef: ce:b8:50:23:1b:e0:ce:b3:bb:12:18:8f:2c:47:be:61:11:64: e6:a8:83:5d:6e:f0:6d:86:57:20:15:96:15:57:fd:8f:91:b1: 75:2f:63:49:55:6a:d3:f2:1a:45:b1:fc:c7:fc:6d:81:b0:3d: 7c:05:0a:48:13:b8:40:f3:ed:3a:64:08:71:a5:61:b3:79:83: cd:aa:e3:4b:cd:0b:e1:9c:cb:ed:be:5c:2b:e0:4e:ed:46:36: 7a:00:e5:0c:af:ea:29:6c:04:7a:72:fd:b5:dc:bf:5d:c3:fa: 49:31:d9:33:86:dc:1f:e0:3c:14:fa:0c:55:ff:be:7c:96:16: 69:02:12:d5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIQ5Wha/QcV8vnlXHgAvf860WiNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4 ODk2QkU0RDAeFw0yNjEwMTAxMzM0NDNaFw0yNjEwMTMyMjM3NDNaMDMxMTAvBgNV BAMTKEYxRTE5MzVGRjZBREZBQjAyMUQ4N0JEMDFDN0IyMDgwMUU4MzA2QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulWUzEjMtpgfMoTGoTc7039mM HSjdY4/lMmAapXx371KKBrUQ3qdN8xXy8tRcdqlgKeHcyiiXR3rvJ8GSDSIHctSj Ma4QDqrPcr3ezXNGzT+sLLElG2mcvmVgIPCTZ2pX55ctHzkOsoJ01dUEVGK7FkNT JuFguvi6IWfWGG16hLGxirhq/NL+RrFwj/ifVuph15yQrAbd+XNM5h2LFk17YwiU pom9Y7OFc68YZ31adatZB4yVSSeqWf/uCtOAaV94lZuJa7SW36dYyvQDqsnVyrcL KV/5bturGPTbWzVERlKXaMeSQDKzSAvtMaZAIDPgeHjWzJh0RWRjHNLU9gAFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8eGTX/at+rAh2HvQHHsggB6DBqYwHwYDVR0j BBgwFoAU1vs+dmj9xs0YEG7oU9HGRYiWvk0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODcxMjk2Mi8wL0Q2RkIzRTc2NjhGREM2Q0QxODEwNkVFODUzRDFD NjQ1ODg5NkJFNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3MTI5NjIvMC9ENkZCM0U3NjY4RkRD NkNEMTgxMDZFRTg1M0QxQzY0NTg4OTZCRTRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHnOeU9Zal3Bt rlGfGDX49teIFW2Adi9CH+3VO1aQeeU01Rl92sz43v67x6Gm9qbb8JJFMJcoVgja qEtuqY3zXDT1/UGgVGbyRB1ZMhlur2NtBlk8CFbefdGwVv8vfWMswbqIirpUGNl0 yECvJ96kaIteldWWx1CDMth+HH7vzrhQIxvgzrO7EhiPLEe+YRFk5qiDXW7wbYZX IBWWFVf9j5GxdS9jSVVq0/IaRbH8x/xtgbA9fAUKSBO4QPPtOmQIcaVhs3mDzarj S80L4ZzL7b5cK+BO7UY2egDlDK/qKWwEenL9tdy/XcP6STHZM4bcH+A8FPoMVf++ fJYWaQIS1Q== -----END CERTIFICATE-----Generated at Mon Oct 12 13:18:49 2026 by rpki-client