$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft File: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft (raw, json) Hash identifier: F0dUF18ooByvZS9DU4YRKA25McqaOUwU5E1k6+qY+4Q= Subject key identifier: FD:BF:09:E7:DB:B4:9E:8E:95:67:8F:BC:06:F8:2E:ED:C7:D8:59:57 Authority key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Certificate issuer: /CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Certificate serial: 44A7FF1096DE35703E7B0C5AE4D1F0AE6E870878 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft Manifest number: 4D Signing time: Thu 26 Mar 2026 12:38:28 +0000 Manifest this update: Thu 26 Mar 2026 12:33:28 +0000 Manifest next update: Fri 27 Mar 2026 14:58:28 +0000 Files and hashes: 1: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl (hash: 3fz/x9upVT8TIFtgAsubKVp6wdhw7HnTgVERDYn9214=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a7:ff:10:96:de:35:70:3e:7b:0c:5a:e4:d1:f0:ae:6e:87:08:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Validity Not Before: Mar 26 12:33:28 2026 GMT Not After : Mar 27 14:58:28 2026 GMT Subject: CN=FDBF09E7DBB49E8E95678FBC06F82EEDC7D85957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3a:7e:f2:f9:54:8b:1c:28:d2:1a:09:c7:79: 67:4f:51:9f:10:fe:3c:7b:aa:81:80:de:31:50:14: a9:48:00:39:96:a3:47:0c:7a:1e:c6:b8:b7:f1:71: 54:67:ed:4c:4d:6e:3d:10:02:f7:41:3f:6b:54:63: 73:69:8b:84:ca:4c:07:56:28:3d:c4:54:08:0e:cc: 25:e2:87:71:95:f6:2d:4e:67:a5:a5:70:89:b4:a4: 1d:02:20:8c:e3:af:fb:69:52:5a:e2:b4:1d:73:4e: 00:b8:07:92:39:92:6b:b9:30:7f:82:d5:d2:1f:2d: 48:e3:a6:dc:80:1e:5f:e1:ea:bd:70:c4:06:03:78: ff:f2:e7:f8:81:dc:45:18:60:c0:31:56:35:dd:ac: 23:07:45:ac:86:88:1d:c4:76:d6:5f:7f:29:ad:87: 3d:72:e9:43:5b:e7:ac:da:34:8c:36:7c:cc:35:00: 3a:e2:a7:18:e4:9a:b6:44:9b:c5:1f:15:17:e4:a2: 7e:c6:ee:c5:d2:39:9d:79:bd:02:d9:1d:f5:08:58: db:7a:b6:7e:6a:f8:58:31:60:aa:df:45:47:99:bf: a3:04:07:c7:19:28:1f:c3:c7:57:fb:4a:97:a3:37: f9:14:33:22:70:45:53:23:87:1b:dd:75:9c:6e:41: b2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BF:09:E7:DB:B4:9E:8E:95:67:8F:BC:06:F8:2E:ED:C7:D8:59:57 X509v3 Authority Key Identifier: keyid:D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:68:9f:af:f6:33:de:a1:93:74:e1:92:03:dd:3e:d0:cf:67: 5c:3f:9b:e3:29:51:c3:d2:41:10:0c:4a:cb:3d:20:e7:91:8f: 1f:5e:65:97:f3:1d:74:a3:4c:71:ed:d1:02:9f:9b:01:40:2e: 19:c4:87:7c:e3:62:c4:6f:58:03:e9:38:88:7d:92:d4:84:bb: d0:fc:45:e6:80:7e:8e:c9:9e:14:a4:ab:73:5d:1d:50:06:32: 6b:9e:8f:3c:d9:65:83:09:3f:8f:64:5e:e1:d1:1f:bc:b0:f6: c0:ab:f1:37:ac:33:8b:94:2d:6f:d6:9b:09:18:d2:df:5c:06: 8f:3c:41:50:cf:2b:20:79:bc:b7:0f:7b:bb:96:b4:1a:8c:f0: 80:58:12:cc:85:ec:a4:dd:4e:21:83:d1:ad:61:f8:00:cb:10: 9e:39:9c:dd:a1:29:97:bb:43:d6:a0:18:8f:e1:f1:b9:59:9b: be:1c:19:91:a0:49:10:50:b3:26:69:db:5c:43:b2:29:25:a2: 63:c1:28:59:d4:b9:16:39:60:c3:72:04:a8:28:45:55:f9:8b: 48:e2:fe:61:e9:03:fb:cb:1d:69:19:c2:15:91:5a:ff:71:51: 28:58:ff:6a:4b:23:07:30:38:ac:37:da:79:71:69:1a:fb:e3: 25:25:76:71 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURKf/EJbeNXA+ewxa5NHwrm6HCHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4 ODk2QkU0RDAeFw0yNjAzMjYxMjMzMjhaFw0yNjAzMjcxNDU4MjhaMDMxMTAvBgNV BAMTKEZEQkYwOUU3REJCNDlFOEU5NTY3OEZCQzA2RjgyRUVEQzdEODU5NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMOn7y+VSLHCjSGgnHeWdPUZ8Q /jx7qoGA3jFQFKlIADmWo0cMeh7GuLfxcVRn7UxNbj0QAvdBP2tUY3Npi4TKTAdW KD3EVAgOzCXih3GV9i1OZ6WlcIm0pB0CIIzjr/tpUlritB1zTgC4B5I5kmu5MH+C 1dIfLUjjptyAHl/h6r1wxAYDeP/y5/iB3EUYYMAxVjXdrCMHRayGiB3EdtZffymt hz1y6UNb56zaNIw2fMw1ADripxjkmrZEm8UfFRfkon7G7sXSOZ15vQLZHfUIWNt6 tn5q+FgxYKrfRUeZv6MEB8cZKB/Dx1f7SpejN/kUMyJwRVMjhxvddZxuQbK3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/b8J59u0no6VZ4+8Bvgu7cfYWVcwHwYDVR0j BBgwFoAU1vs+dmj9xs0YEG7oU9HGRYiWvk0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODcxMjk2Mi8wL0Q2RkIzRTc2NjhGREM2Q0QxODEwNkVFODUzRDFD NjQ1ODg5NkJFNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3MTI5NjIvMC9ENkZCM0U3NjY4RkRD NkNEMTgxMDZFRTg1M0QxQzY0NTg4OTZCRTRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmifr/Yz3qGT dOGSA90+0M9nXD+b4ylRw9JBEAxKyz0g55GPH15ll/MddKNMce3RAp+bAUAuGcSH fONixG9YA+k4iH2S1IS70PxF5oB+jsmeFKSrc10dUAYya56PPNllgwk/j2Re4dEf vLD2wKvxN6wzi5Qtb9abCRjS31wGjzxBUM8rIHm8tw97u5a0GozwgFgSzIXspN1O IYPRrWH4AMsQnjmc3aEpl7tD1qAYj+HxuVmbvhwZkaBJEFCzJmnbXEOyKSWiY8Eo WdS5Fjlgw3IEqChFVfmLSOL+YekD+8sdaRnCFZFa/3FRKFj/aksjBzA4rDfaeXFp GvvjJSV2cQ== -----END CERTIFICATE-----Generated at Fri Mar 27 01:29:46 2026 by rpki-client