$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft File: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft (raw, json) Hash identifier: wS4oh5xKlnyrsGUwb19wp1gUahsO3l1eI7hrMqVtJAk= Subject key identifier: 3E:4D:C5:81:46:C6:3C:75:C2:7C:E6:83:DF:2D:DB:EA:DA:0B:42:8F Authority key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Certificate issuer: /CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Certificate serial: 1A677521C7759D78B799B857378AD037BB508462 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft Manifest number: EE Signing time: Thu 23 Jul 2026 22:24:41 +0000 Manifest this update: Thu 23 Jul 2026 22:19:41 +0000 Manifest next update: Sat 25 Jul 2026 01:27:41 +0000 Files and hashes: 1: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl (hash: n/BLbx6Wwi9lUYCH+c+6iV22qsuZpD5YKJfubRSLn8s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:67:75:21:c7:75:9d:78:b7:99:b8:57:37:8a:d0:37:bb:50:84:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Validity Not Before: Jul 23 22:19:41 2026 GMT Not After : Jul 25 01:27:41 2026 GMT Subject: CN=3E4DC58146C63C75C27CE683DF2DDBEADA0B428F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:35:44:10:9f:64:27:70:b2:24:f2:1b:84:f4: 79:4d:0c:83:52:b6:80:b7:2d:87:8e:2a:2b:43:8f: cf:eb:e1:fb:7e:95:bb:9c:7a:70:06:9a:78:7a:9c: 69:08:a7:15:d1:db:18:9f:ee:cb:ea:e1:8b:d9:6a: 76:b3:70:d2:d9:8a:44:a2:92:30:56:1c:c8:6e:0d: a1:64:53:a6:03:e0:34:09:a7:dd:af:ac:a7:13:30: c8:63:0f:43:1e:ee:67:d4:fb:a2:7e:47:9a:d0:27: 44:cb:67:49:43:d5:07:dd:78:22:62:b1:eb:a9:91: 9f:bb:42:14:c1:58:b6:a6:12:7a:b4:75:3d:ce:2f: a3:8f:91:26:51:5d:41:45:d1:c0:63:8b:65:f8:b1: bd:7b:c3:e7:35:cc:24:be:9b:da:6a:e9:51:d9:97: 66:3a:ac:30:49:a6:c0:6e:17:50:41:5a:89:33:ff: fb:37:de:8c:dc:ca:a2:e7:ba:2a:ec:c9:f8:fa:ea: 8a:b9:d7:23:79:f8:47:1a:77:02:ce:7f:0f:67:f1: e2:2b:b3:c6:48:12:4c:62:45:2d:b3:13:2f:81:6a: c0:7c:b0:a2:c9:00:e6:80:92:43:6c:97:18:1e:66: 41:c8:6e:9b:a6:76:7a:87:df:f1:70:d2:42:dd:28: 98:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4D:C5:81:46:C6:3C:75:C2:7C:E6:83:DF:2D:DB:EA:DA:0B:42:8F X509v3 Authority Key Identifier: keyid:D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:16:04:3b:79:84:26:8a:f3:ef:fc:ae:e4:b8:48:56:e2:fa: f0:d4:45:d0:ce:d8:d1:12:b3:c0:5a:8c:e9:d7:f6:83:9c:9d: a3:31:43:fd:aa:8b:14:af:3f:84:bf:41:03:b8:71:33:56:a4: 52:2d:9a:71:b1:d4:1f:74:9e:6a:a6:0f:97:86:b3:e5:31:b5: 6c:d6:4f:34:7c:2d:7e:14:e9:b0:a5:be:b8:93:4e:3c:0d:0d: 1c:dd:50:ab:2a:a0:cf:9e:1e:18:ce:2d:c6:37:f1:6e:ba:09: 87:9c:df:61:f6:f2:2b:3d:81:f6:e4:f9:88:1a:64:fd:4d:54: 1c:25:b3:28:08:27:6f:73:9f:80:4c:5d:29:49:a2:46:a6:c7: 59:61:3d:b9:fd:48:6b:2e:1d:c9:2e:7e:20:56:01:e0:a8:f7: 39:61:20:ca:da:d6:b1:be:52:54:1a:53:07:92:02:99:bb:12: 3f:e4:4f:21:50:fa:d3:8d:65:c9:92:e8:84:88:6d:63:48:bb: d0:93:b5:f4:82:4b:aa:0c:e1:a3:80:96:ab:f2:f3:1a:67:d2: 56:58:69:d1:46:89:1f:4b:c8:69:79:c0:3e:ec:67:26:cd:be: 6f:05:e5:f2:a5:32:be:8d:ec:70:4b:a0:87:ad:7a:2c:c1:46: 59:2f:89:a8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGmd1Icd1nXi3mbhXN4rQN7tQhGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4 ODk2QkU0RDAeFw0yNjA3MjMyMjE5NDFaFw0yNjA3MjUwMTI3NDFaMDMxMTAvBgNV BAMTKDNFNERDNTgxNDZDNjNDNzVDMjdDRTY4M0RGMkREQkVBREEwQjQyOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdNUQQn2QncLIk8huE9HlNDINS toC3LYeOKitDj8/r4ft+lbucenAGmnh6nGkIpxXR2xif7svq4YvZanazcNLZikSi kjBWHMhuDaFkU6YD4DQJp92vrKcTMMhjD0Me7mfU+6J+R5rQJ0TLZ0lD1QfdeCJi seupkZ+7QhTBWLamEnq0dT3OL6OPkSZRXUFF0cBji2X4sb17w+c1zCS+m9pq6VHZ l2Y6rDBJpsBuF1BBWokz//s33ozcyqLnuirsyfj66oq51yN5+EcadwLOfw9n8eIr s8ZIEkxiRS2zEy+BasB8sKLJAOaAkkNslxgeZkHIbpumdnqH3/Fw0kLdKJgNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPk3FgUbGPHXCfOaD3y3b6toLQo8wHwYDVR0j BBgwFoAU1vs+dmj9xs0YEG7oU9HGRYiWvk0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODcxMjk2Mi8wL0Q2RkIzRTc2NjhGREM2Q0QxODEwNkVFODUzRDFD NjQ1ODg5NkJFNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3MTI5NjIvMC9ENkZCM0U3NjY4RkRD NkNEMTgxMDZFRTg1M0QxQzY0NTg4OTZCRTRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRYEO3mEJorz 7/yu5LhIVuL68NRF0M7Y0RKzwFqM6df2g5ydozFD/aqLFK8/hL9BA7hxM1akUi2a cbHUH3SeaqYPl4az5TG1bNZPNHwtfhTpsKW+uJNOPA0NHN1Qqyqgz54eGM4txjfx broJh5zfYfbyKz2B9uT5iBpk/U1UHCWzKAgnb3OfgExdKUmiRqbHWWE9uf1Iay4d yS5+IFYB4Kj3OWEgytrWsb5SVBpTB5ICmbsSP+RPIVD6041lyZLohIhtY0i70JO1 9IJLqgzho4CWq/LzGmfSVlhp0UaJH0vIaXnAPuxnJs2+bwXl8qUyvo3scEugh616 LMFGWS+JqA== -----END CERTIFICATE-----Generated at Fri Jul 24 18:33:14 2026 by rpki-client