$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft File: C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft (raw, json) Hash identifier: 15+7mvSX4lD9W+1Fcxr8gXfKrofocIQYrBq685fOxnM= Subject key identifier: CF:1B:39:6E:18:AD:93:4A:DB:39:B7:51:14:61:A0:CC:1B:39:B5:FF Authority key identifier: C6:FD:EF:6C:A2:BD:7C:82:F8:94:4A:88:D7:13:8B:63:E4:0C:2E:AF Certificate issuer: /CN=C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF Certificate serial: 3ECF36CF67BFEB41C70AC6F0D01F37009B2300F4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft Manifest number: 3B Signing time: Fri 24 Jul 2026 14:26:27 +0000 Manifest this update: Fri 24 Jul 2026 14:21:27 +0000 Manifest next update: Sat 25 Jul 2026 16:08:27 +0000 Files and hashes: 1: C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.crl (hash: QetMa9NFVTwwXbQvorLlKvMwTBB157JAm0bJiVy2Ewk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.crl rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 16:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:cf:36:cf:67:bf:eb:41:c7:0a:c6:f0:d0:1f:37:00:9b:23:00:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF Validity Not Before: Jul 24 14:21:27 2026 GMT Not After : Jul 25 16:08:27 2026 GMT Subject: CN=CF1B396E18AD934ADB39B7511461A0CC1B39B5FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:38:fe:bc:1d:f5:28:7a:aa:a7:77:c4:fb:ae: e6:97:2d:d9:72:ae:19:be:c5:af:a8:7c:36:fd:99: 14:f1:53:d7:26:18:11:a2:d9:e8:aa:4e:21:5e:94: 70:de:99:90:8e:93:6b:5b:38:82:e2:7c:e1:b0:67: 7f:3c:16:70:d0:f2:37:64:b9:4c:4f:2a:d7:80:1d: 23:ee:80:ca:18:9d:49:dd:4b:ee:31:19:b0:75:dd: ab:1a:86:6d:59:6b:07:da:04:f9:61:d2:94:3d:04: 15:95:67:83:3f:7c:03:7c:c9:06:69:75:7f:54:3d: a6:49:3e:58:bf:6b:5b:e8:60:6e:37:d9:db:b9:d0: 15:48:34:58:1d:7f:94:f1:f5:90:d4:72:26:7a:cc: 17:f3:75:ac:70:04:3c:4e:f6:d3:e5:ce:d3:db:da: 9e:e8:7b:f2:4c:2f:89:df:59:c6:6a:f1:38:1b:08: b5:a4:25:60:64:e4:36:a6:03:4a:df:0b:c0:f0:15: 50:7a:74:34:9d:9b:d0:12:07:0a:8b:ba:31:d1:ea: 61:b8:53:21:b1:c2:58:68:f0:1b:e3:29:fc:03:60: 2c:9b:61:af:12:ca:52:7e:80:06:cc:fd:32:f8:28: aa:21:31:58:43:d7:98:7f:86:5e:c9:65:2a:75:f6: fb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1B:39:6E:18:AD:93:4A:DB:39:B7:51:14:61:A0:CC:1B:39:B5:FF X509v3 Authority Key Identifier: keyid:C6:FD:EF:6C:A2:BD:7C:82:F8:94:4A:88:D7:13:8B:63:E4:0C:2E:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:32:b6:cd:6a:a2:e2:ef:3a:f3:06:2c:7e:d4:2f:b4:e8:80: 6c:a0:fa:aa:90:47:bc:f8:36:af:7e:ff:18:43:34:a9:91:3d: 3f:b7:ea:30:c8:cb:7d:5f:4c:ed:94:45:09:de:c9:9e:46:5a: 05:94:7e:f6:a9:8a:be:a8:04:f4:15:95:23:c6:72:0f:39:96: 0f:21:00:29:fc:27:c3:f3:a8:7a:80:0d:d0:35:cf:6c:27:af: cb:33:b7:23:73:ab:b3:63:73:ce:20:fe:74:68:7a:e0:5c:85: b9:43:e8:cc:46:af:2a:14:71:19:6b:2d:2c:57:12:97:f6:f7: 86:84:4b:70:0f:f6:02:ac:c1:0a:07:6a:e5:4e:df:ef:a6:97: f3:23:cb:2c:89:11:0c:db:9e:89:2e:ce:50:6b:37:0f:d3:cb: de:74:f3:27:77:7f:9e:f2:48:f5:30:1b:8b:b0:d8:a0:e8:6b: db:7d:cf:1b:36:8f:0b:46:f8:7d:66:b8:9b:00:db:1e:d1:8d: 6d:51:e3:4a:37:ac:d9:be:2d:20:a1:9d:0d:cb:da:b5:0b:7b: 24:36:54:16:f9:cf:1f:de:48:e6:6e:29:9c:32:7b:9f:fa:86: a1:b8:3a:28:81:06:82:3a:50:83:d4:df:4c:3c:28:b0:f8:d4: f7:c8:df:e8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPs82z2e/60HHCsbw0B83AJsjAPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZGREVGNkNBMkJEN0M4MkY4OTQ0QTg4RDcxMzhCNjNF NDBDMkVBRjAeFw0yNjA3MjQxNDIxMjdaFw0yNjA3MjUxNjA4MjdaMDMxMTAvBgNV BAMTKENGMUIzOTZFMThBRDkzNEFEQjM5Qjc1MTE0NjFBMENDMUIzOUI1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGOP68HfUoeqqnd8T7ruaXLdly rhm+xa+ofDb9mRTxU9cmGBGi2eiqTiFelHDemZCOk2tbOILifOGwZ388FnDQ8jdk uUxPKteAHSPugMoYnUndS+4xGbB13asahm1ZawfaBPlh0pQ9BBWVZ4M/fAN8yQZp dX9UPaZJPli/a1voYG432du50BVINFgdf5Tx9ZDUciZ6zBfzdaxwBDxO9tPlztPb 2p7oe/JML4nfWcZq8TgbCLWkJWBk5DamA0rfC8DwFVB6dDSdm9ASBwqLujHR6mG4 UyGxwlho8BvjKfwDYCybYa8SylJ+gAbM/TL4KKohMVhD15h/hl7JZSp19vv5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzxs5bhitk0rbObdRFGGgzBs5tf8wHwYDVR0j BBgwFoAUxv3vbKK9fIL4lEqI1xOLY+QMLq8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzI4NzAzMDQ2MDUxNDMzMS8wL0M2RkRFRjZDQTJCRDdDODJGODk0NEE4OEQ3MTM4 QjYzRTQwQzJFQUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzZGREVGNkNBMkJEN0M4MkY4OTQ0QTg4RDcxMzhCNjNFNDBDMkVBRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcyODcwMzA0NjA1MTQzMzEvMC9DNkZERUY2Q0EyQkQ3 QzgyRjg5NDRBODhENzEzOEI2M0U0MEMyRUFGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDK2zWqi4u86 8wYsftQvtOiAbKD6qpBHvPg2r37/GEM0qZE9P7fqMMjLfV9M7ZRFCd7JnkZaBZR+ 9qmKvqgE9BWVI8ZyDzmWDyEAKfwnw/OoeoAN0DXPbCevyzO3I3Ors2NzziD+dGh6 4FyFuUPozEavKhRxGWstLFcSl/b3hoRLcA/2AqzBCgdq5U7f76aX8yPLLIkRDNue iS7OUGs3D9PL3nTzJ3d/nvJI9TAbi7DYoOhr233PGzaPC0b4fWa4mwDbHtGNbVHj Sjes2b4tIKGdDcvatQt7JDZUFvnPH95I5m4pnDJ7n/qGobg6KIEGgjpQg9TfTDwo sPjU98jf6A== -----END CERTIFICATE-----Generated at Sat Jul 25 02:09:28 2026 by rpki-client