$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft File: 7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft (raw, json) Hash identifier: +TN6N47w1Q7WYaqi31cscfNyVFxoUVftsLi/uDZSl6E= Subject key identifier: D9:E8:CA:90:32:AE:4E:E2:37:42:DA:AA:44:03:1C:31:21:70:69:46 Authority key identifier: 7D:76:05:9D:BE:0A:9C:07:7B:DF:FB:87:3A:EF:8E:C8:B6:8C:23:AF Certificate issuer: /CN=7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF Certificate serial: 724F1FA19402BFE0941AD2735E74522E23FA91F7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft Manifest number: 02 Signing time: Wed 13 May 2026 04:10:55 +0000 Manifest this update: Wed 13 May 2026 04:05:55 +0000 Manifest next update: Thu 14 May 2026 04:10:55 +0000 Files and hashes: 1: 7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.crl (hash: 5k0w0Dm8jewHbsrRsm/CKwFO/Vl9fFaCzWVVa+TuElQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.crl rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:4f:1f:a1:94:02:bf:e0:94:1a:d2:73:5e:74:52:2e:23:fa:91:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF Validity Not Before: May 13 04:05:55 2026 GMT Not After : May 14 04:10:55 2026 GMT Subject: CN=D9E8CA9032AE4EE23742DAAA44031C3121706946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:dd:83:2d:9a:d0:e7:c0:a7:5a:82:60:7b: fe:e1:21:47:2b:97:0c:04:b8:bb:31:0e:d9:29:7e: 95:5a:20:ee:3d:48:3e:06:94:f8:66:20:c0:6c:5a: 85:0a:00:78:03:58:97:52:cb:0d:c8:82:cc:92:ef: e9:b2:1b:fc:91:82:15:c6:40:78:d9:68:b1:7c:96: c6:f7:27:5a:92:75:9a:47:9d:40:db:2d:51:55:19: 02:26:75:4d:94:ca:d1:ef:73:8d:aa:52:7f:79:6b: 4a:e5:3b:3d:d6:fb:21:e8:e3:d7:f2:ac:49:e7:07: ed:3c:43:35:70:1e:e2:47:2c:0d:cc:92:56:84:f5: 8f:05:9b:cb:a0:d5:27:0a:86:a6:ac:65:d0:41:1d: 6c:eb:ca:90:e5:6b:45:78:49:d2:dd:c3:b5:17:d1: 64:3a:cb:f3:36:65:f8:ee:10:fb:8f:98:14:a9:1e: d6:50:15:17:50:77:73:59:35:de:18:50:27:cd:e6: da:f8:94:bd:a1:c4:bc:48:bf:f0:88:65:ba:5e:b5: 85:0c:d4:55:08:36:33:80:26:3d:d0:97:d7:30:cb: a9:68:22:81:fc:a9:9b:01:a1:e9:5d:2a:37:42:e4: aa:5a:fa:f7:85:2b:d5:ce:63:21:de:a1:4a:94:4c: 71:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E8:CA:90:32:AE:4E:E2:37:42:DA:AA:44:03:1C:31:21:70:69:46 X509v3 Authority Key Identifier: keyid:7D:76:05:9D:BE:0A:9C:07:7B:DF:FB:87:3A:EF:8E:C8:B6:8C:23:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106505783899586577/0/7D76059DBE0A9C077BDFFB873AEF8EC8B68C23AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:89:0a:e3:d4:dd:6c:11:8a:66:9d:4b:80:c3:78:b2:36:31: f0:a2:a0:34:1d:44:44:44:43:87:38:1f:6e:d1:af:d0:25:33: 87:32:78:1f:e4:19:ad:1a:3c:9f:7c:0d:7c:06:fd:d8:8b:e7: e0:0f:7f:06:6c:0d:7d:01:c2:07:53:e4:43:cb:dc:d5:53:67: 62:25:0e:19:2f:ae:6c:eb:10:a5:9e:ef:38:a3:88:48:4b:2d: fb:fe:7b:d8:64:85:fa:0d:9e:83:bc:95:22:c1:c9:fc:3b:d5: 1f:63:14:84:08:56:ba:9f:7f:98:fc:8d:40:7e:4d:92:77:5a: 2e:8e:3f:79:8b:f5:9c:25:4d:c1:d3:ca:fd:3f:20:98:f1:56: f9:68:b7:9f:6a:d3:46:dd:19:f7:25:5f:ff:22:d1:73:3b:ec: 2d:7a:21:73:bb:6c:75:bf:b7:5f:dd:61:21:85:bf:0c:8c:d6: d5:43:7e:8d:8f:61:d5:50:6c:28:89:d5:7a:d6:21:5d:61:93: 26:05:75:16:f0:f4:ba:a3:1e:5b:7a:15:78:ce:08:25:49:75: 95:2f:bd:c1:1b:24:7c:16:63:06:fe:c2:f9:4e:9d:48:5f:f2: c2:22:60:76:77:3d:88:6a:38:dc:f1:69:d7:1f:5e:c5:f4:96: a8:eb:2a:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUck8foZQCv+CUGtJzXnRSLiP6kfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q3NjA1OURCRTBBOUMwNzdCREZGQjg3M0FFRjhFQzhC NjhDMjNBRjAeFw0yNjA1MTMwNDA1NTVaFw0yNjA1MTQwNDEwNTVaMDMxMTAvBgNV BAMTKEQ5RThDQTkwMzJBRTRFRTIzNzQyREFBQTQ0MDMxQzMxMjE3MDY5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzMt2DLZrQ58CnWoJge/7hIUcr lwwEuLsxDtkpfpVaIO49SD4GlPhmIMBsWoUKAHgDWJdSyw3IgsyS7+myG/yRghXG QHjZaLF8lsb3J1qSdZpHnUDbLVFVGQImdU2UytHvc42qUn95a0rlOz3W+yHo49fy rEnnB+08QzVwHuJHLA3MklaE9Y8Fm8ug1ScKhqasZdBBHWzrypDla0V4SdLdw7UX 0WQ6y/M2ZfjuEPuPmBSpHtZQFRdQd3NZNd4YUCfN5tr4lL2hxLxIv/CIZbpetYUM 1FUINjOAJj3Ql9cwy6loIoH8qZsBoeldKjdC5Kpa+veFK9XOYyHeoUqUTHEhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2ejKkDKuTuI3QtqqRAMcMSFwaUYwHwYDVR0j BBgwFoAUfXYFnb4KnAd73/uHOu+OyLaMI68wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjUwNTc4Mzg5OTU4NjU3Ny8wLzdENzYwNTlEQkUwQTlDMDc3QkRGRkI4NzNBRUY4 RUM4QjY4QzIzQUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0Q3NjA1OURCRTBBOUMwNzdCREZGQjg3M0FFRjhFQzhCNjhDMjNBRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY1MDU3ODM4OTk1ODY1NzcvMC83RDc2MDU5REJFMEE5 QzA3N0JERkZCODczQUVGOEVDOEI2OEMyM0FGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArokK49TdbBGK Zp1LgMN4sjYx8KKgNB1ERERDhzgfbtGv0CUzhzJ4H+QZrRo8n3wNfAb92Ivn4A9/ BmwNfQHCB1PkQ8vc1VNnYiUOGS+ubOsQpZ7vOKOISEst+/572GSF+g2eg7yVIsHJ /DvVH2MUhAhWup9/mPyNQH5NkndaLo4/eYv1nCVNwdPK/T8gmPFW+Wi3n2rTRt0Z 9yVf/yLRczvsLXohc7tsdb+3X91hIYW/DIzW1UN+jY9h1VBsKInVetYhXWGTJgV1 FvD0uqMeW3oVeM4IJUl1lS+9wRskfBZjBv7C+U6dSF/ywiJgdnc9iGo43PFp1x9e xfSWqOsqBw== -----END CERTIFICATE-----Generated at Wed May 13 20:55:01 2026 by rpki-client