$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft File: EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft (raw, json) Hash identifier: GA+xvzF6t7EQSnqwXeNIspC+IOM79VaVRNtfJRsdePY= Subject key identifier: 96:B4:ED:5E:18:0E:30:67:A2:85:6F:72:70:4B:4C:80:F4:87:1E:B2 Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3 Certificate issuer: /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3 Certificate serial: 77C6DDE5BF9FE965E29C20C16A7F416BA08C5B75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft Manifest number: 27 Signing time: Wed 13 May 2026 12:16:04 +0000 Manifest this update: Wed 13 May 2026 12:11:04 +0000 Manifest next update: Thu 14 May 2026 15:25:04 +0000 Files and hashes: 1: EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl (hash: OwDAgBqjom7sJzDKMIHYqPR+og18UQkhARGqcSLV0HQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c6:dd:e5:bf:9f:e9:65:e2:9c:20:c1:6a:7f:41:6b:a0:8c:5b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3 Validity Not Before: May 13 12:11:04 2026 GMT Not After : May 14 15:25:04 2026 GMT Subject: CN=96B4ED5E180E3067A2856F72704B4C80F4871EB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e0:40:3f:ce:6f:2b:dd:c8:a9:c8:f6:c7:82: 7d:22:ba:03:9e:dc:59:1f:f9:96:f6:8a:63:7d:8e: 39:63:7b:2b:57:3f:cf:de:28:7b:09:6d:b2:af:2c: 01:d0:3c:5d:89:a8:4a:c8:7b:aa:61:48:31:c0:1c: cd:e0:72:4d:06:96:e5:2b:50:e8:5d:04:67:72:d7: de:53:6c:3d:e5:1c:f6:97:28:39:23:19:21:91:41: 56:07:7a:4e:77:a0:ec:50:8b:c8:83:72:4b:df:fc: 51:6e:19:b4:74:97:43:27:04:ff:12:3b:47:25:17: 02:4a:9e:71:fb:0e:64:cb:c1:bd:5d:d3:8c:ff:93: 96:8f:33:33:48:d2:4b:35:b5:35:9d:70:83:2e:1a: 64:9d:48:a9:c6:ad:0b:0f:de:ce:1d:04:15:f9:4a: aa:99:00:b9:cd:94:9c:28:48:83:eb:fb:84:7b:12: 2f:a8:a9:e1:2e:9b:b9:ed:7c:1f:43:9f:76:17:11: ec:24:b3:4f:9b:9f:e1:4b:07:3b:dd:c9:35:bf:ac: 75:18:0b:66:24:8f:c8:e3:99:cf:02:14:85:1d:23: b5:5e:ca:a1:85:20:d3:99:b4:a6:01:21:41:1b:1d: 93:2d:bd:20:df:91:71:58:b2:58:05:98:8d:91:bd: bb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B4:ED:5E:18:0E:30:67:A2:85:6F:72:70:4B:4C:80:F4:87:1E:B2 X509v3 Authority Key Identifier: keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:40:1c:02:ff:5a:77:4c:10:7e:43:e4:e2:ed:15:bb:da:f6: 38:c3:ce:b1:5f:94:10:cd:1a:98:0f:86:0f:47:5e:50:19:fb: 78:4d:07:1b:fa:30:98:44:8d:0c:8e:fc:4a:6b:88:98:c7:70: 1c:89:2a:12:15:b3:33:26:3d:33:d2:36:23:01:fa:c0:a1:77: a6:aa:fe:69:85:cd:e3:72:55:10:b5:a6:57:b7:3c:f6:f5:48: 12:2f:ba:bc:c1:6e:82:7c:32:28:d7:d7:30:28:58:b7:a2:c9: f3:e1:ec:a1:0b:f4:7f:80:24:c6:a8:22:59:ef:5a:e1:a7:8a: ab:0f:03:e7:48:e3:e2:c2:d6:aa:11:16:d6:81:5f:38:7b:5e: 9a:cf:ca:e7:2e:90:2e:fb:53:61:88:03:17:42:40:fe:42:c7: a4:ed:6b:65:66:0d:b1:91:36:6c:ce:94:66:1c:82:22:60:e5: a5:b3:77:4d:bc:a9:1e:6f:a8:e4:e2:c9:d0:1f:3c:90:20:42: 99:45:4f:63:0b:c9:a6:97:17:d2:fc:66:36:f0:1f:8a:5e:0b: 97:c3:a7:95:0b:a2:d0:49:dd:aa:36:ed:3f:df:bb:c8:17:16: 44:fa:15:bb:34:2e:3e:d9:3c:87:5d:ee:94:d4:ba:31:17:42: d4:1d:f9:4d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd8bd5b+f6WXinCDBan9Ba6CMW3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM2RkIxNDI1QjJFQ0Q4OTZBODFEN0E0RTFDQUJCRDhF RTU4QkJEMzAeFw0yNjA1MTMxMjExMDRaFw0yNjA1MTQxNTI1MDRaMDMxMTAvBgNV BAMTKDk2QjRFRDVFMTgwRTMwNjdBMjg1NkY3MjcwNEI0QzgwRjQ4NzFFQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI4EA/zm8r3cipyPbHgn0iugOe 3Fkf+Zb2imN9jjljeytXP8/eKHsJbbKvLAHQPF2JqErIe6phSDHAHM3gck0GluUr UOhdBGdy195TbD3lHPaXKDkjGSGRQVYHek53oOxQi8iDckvf/FFuGbR0l0MnBP8S O0clFwJKnnH7DmTLwb1d04z/k5aPMzNI0ks1tTWdcIMuGmSdSKnGrQsP3s4dBBX5 SqqZALnNlJwoSIPr+4R7Ei+oqeEum7ntfB9Dn3YXEewks0+bn+FLBzvdyTW/rHUY C2Ykj8jjmc8CFIUdI7VeyqGFINOZtKYBIUEbHZMtvSDfkXFYslgFmI2RvbvvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlrTtXhgOMGeihW9ycEtMgPSHHrIwHwYDVR0j BBgwFoAU7G+xQlsuzYlqgdek4cq72O5Yu9MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYyNjkzNDcyNjUyNDkzMC8wL0VDNkZCMTQyNUIyRUNEODk2QTgxRDdBNEUxQ0FC QkQ4RUU1OEJCRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM2RkIxNDI1QjJFQ0Q4OTZBODFEN0E0RTFDQUJCRDhFRTU4QkJEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MjY5MzQ3MjY1MjQ5MzAvMC9FQzZGQjE0MjVCMkVD RDg5NkE4MUQ3QTRFMUNBQkJEOEVFNThCQkQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkAcAv9ad0wQ fkPk4u0Vu9r2OMPOsV+UEM0amA+GD0deUBn7eE0HG/owmESNDI78SmuImMdwHIkq EhWzMyY9M9I2IwH6wKF3pqr+aYXN43JVELWmV7c89vVIEi+6vMFugnwyKNfXMChY t6LJ8+HsoQv0f4AkxqgiWe9a4aeKqw8D50jj4sLWqhEW1oFfOHtems/K5y6QLvtT YYgDF0JA/kLHpO1rZWYNsZE2bM6UZhyCImDlpbN3TbypHm+o5OLJ0B88kCBCmUVP YwvJppcX0vxmNvAfil4Ll8OnlQui0EndqjbtP9+7yBcWRPoVuzQuPtk8h13ulNS6 MRdC1B35TQ== -----END CERTIFICATE-----Generated at Wed May 13 20:54:59 2026 by rpki-client