$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft File: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft (raw, json) Hash identifier: dWvSRL9mAeUbl8o7R+3Ms7NB0rRMgCyaeHCUE2YCgPo= Subject key identifier: 28:AA:79:C5:84:77:67:BE:DA:FF:97:B6:DE:5D:8B:C9:3E:7E:D6:5D Authority key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Certificate issuer: /CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Certificate serial: 2C0081A4716FE86275C4B24BFCC60FA40A533DC0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft Manifest number: 8F Signing time: Wed 13 May 2026 14:26:05 +0000 Manifest this update: Wed 13 May 2026 14:21:05 +0000 Manifest next update: Thu 14 May 2026 16:46:05 +0000 Files and hashes: 1: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl (hash: oZVdXxOboYdWAJf0OZgZhFc9mQv8jZc4ggZttLW0zk4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:00:81:a4:71:6f:e8:62:75:c4:b2:4b:fc:c6:0f:a4:0a:53:3d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Validity Not Before: May 13 14:21:05 2026 GMT Not After : May 14 16:46:05 2026 GMT Subject: CN=28AA79C5847767BEDAFF97B6DE5D8BC93E7ED65D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:92:f3:95:69:71:42:44:fb:5e:77:30:4b: 4c:fb:0f:0e:27:0b:e0:f5:b3:fd:5e:58:a6:bd:0d: f0:09:81:d7:ee:c4:92:43:33:c1:7e:9c:84:e9:3d: 9a:8b:34:3d:88:77:cf:8d:0d:cc:ba:af:ff:af:60: 34:eb:25:39:eb:58:11:44:01:96:62:ab:62:cf:b5: b1:d0:e9:0b:c2:95:eb:c1:9f:6b:35:6c:4f:04:8e: 37:b7:b3:40:1f:eb:e5:39:6a:bb:a8:3f:82:6e:62: 4c:4b:a5:c9:91:d4:de:26:4d:48:1f:c2:8d:a8:db: a1:f6:97:87:4d:2f:71:ac:22:53:ce:68:04:1b:18: f9:70:06:7b:37:ab:f8:60:20:85:b6:4a:a9:4a:55: e4:f1:65:1d:3c:7d:25:88:37:b9:3c:d7:ee:3a:b7: 2a:8a:ae:92:9b:c1:b1:a4:10:a9:f9:47:3d:01:a1: e0:e2:46:bf:31:97:b2:d8:d2:39:62:c0:fc:6a:20: 4d:bd:0c:e1:e9:50:1e:28:7c:99:dd:e8:e5:4e:fd: a9:39:32:6a:25:bb:b9:1e:e4:fe:65:b9:ea:28:53: 27:d7:0c:d1:f4:a2:12:c4:1a:79:4b:35:67:4a:c4: 05:41:07:88:44:fd:0b:af:75:5e:60:2d:b3:e4:18: a6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AA:79:C5:84:77:67:BE:DA:FF:97:B6:DE:5D:8B:C9:3E:7E:D6:5D X509v3 Authority Key Identifier: keyid:D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:a6:e9:8a:fc:24:28:dd:9b:8c:71:ab:2a:4c:e8:53:83:c5: 3c:2e:d4:ff:c2:b6:81:46:66:ce:ce:16:f6:2e:6a:05:d0:c0: 3a:43:1c:0f:db:dd:be:f9:5d:c9:f6:9e:69:a6:49:00:9e:94: 34:02:07:6e:1a:a1:64:60:6a:36:1b:ee:19:0e:ae:cf:70:f2: 78:90:74:92:4d:84:3c:ac:c5:41:e9:7d:e6:9a:fb:48:66:5e: 40:d2:fb:ac:8f:18:31:14:2e:44:81:0c:4f:ad:99:9e:54:65: 84:d1:cf:18:a8:de:bd:16:5d:e9:3e:68:17:97:33:94:c7:04: 30:46:6a:a8:3f:46:c3:30:1a:dc:f4:d7:55:c3:93:4a:5d:e7: 49:e2:5d:c7:cc:e9:e7:18:99:fa:58:fa:ca:41:18:af:23:1c: 61:7b:79:72:02:fb:03:db:37:c2:36:1a:3c:33:09:4e:87:60: e1:74:0b:67:e1:ea:1e:f0:b0:ae:34:49:f3:7a:da:b7:71:7d: 18:8e:4d:5a:bd:ae:e0:9c:d0:75:fd:06:b1:68:cc:21:4f:8f: a3:f7:a8:1e:e2:74:74:56:10:47:32:1e:a5:f4:d2:ea:9c:e0: 6d:bb:df:c8:50:57:61:63:a6:93:bc:9b:cd:1d:85:67:c8:f3: ae:09:8c:b5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULACBpHFv6GJ1xLJL/MYPpApTPcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4 ODk2QkU0RDAeFw0yNjA1MTMxNDIxMDVaFw0yNjA1MTQxNjQ2MDVaMDMxMTAvBgNV BAMTKDI4QUE3OUM1ODQ3NzY3QkVEQUZGOTdCNkRFNUQ4QkM5M0U3RUQ2NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0kJLzlWlxQkT7XncwS0z7Dw4n C+D1s/1eWKa9DfAJgdfuxJJDM8F+nITpPZqLND2Id8+NDcy6r/+vYDTrJTnrWBFE AZZiq2LPtbHQ6QvClevBn2s1bE8Ejje3s0Af6+U5aruoP4JuYkxLpcmR1N4mTUgf wo2o26H2l4dNL3GsIlPOaAQbGPlwBns3q/hgIIW2SqlKVeTxZR08fSWIN7k81+46 tyqKrpKbwbGkEKn5Rz0BoeDiRr8xl7LY0jliwPxqIE29DOHpUB4ofJnd6OVO/ak5 Mmolu7ke5P5lueooUyfXDNH0ohLEGnlLNWdKxAVBB4hE/QuvdV5gLbPkGKaXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKKp5xYR3Z77a/5e23l2LyT5+1l0wHwYDVR0j BBgwFoAU1vs+dmj9xs0YEG7oU9HGRYiWvk0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODcxMjk2Mi8wL0Q2RkIzRTc2NjhGREM2Q0QxODEwNkVFODUzRDFD NjQ1ODg5NkJFNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3MTI5NjIvMC9ENkZCM0U3NjY4RkRD NkNEMTgxMDZFRTg1M0QxQzY0NTg4OTZCRTRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKbpivwkKN2b jHGrKkzoU4PFPC7U/8K2gUZmzs4W9i5qBdDAOkMcD9vdvvldyfaeaaZJAJ6UNAIH bhqhZGBqNhvuGQ6uz3DyeJB0kk2EPKzFQel95pr7SGZeQNL7rI8YMRQuRIEMT62Z nlRlhNHPGKjevRZd6T5oF5czlMcEMEZqqD9GwzAa3PTXVcOTSl3nSeJdx8zp5xiZ +lj6ykEYryMcYXt5cgL7A9s3wjYaPDMJTodg4XQLZ+HqHvCwrjRJ83rat3F9GI5N Wr2u4JzQdf0GsWjMIU+Po/eoHuJ0dFYQRzIepfTS6pzgbbvfyFBXYWOmk7ybzR2F Z8jzrgmMtQ== -----END CERTIFICATE-----Generated at Wed May 13 19:42:35 2026 by rpki-client