$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft File: C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft (raw, json) Hash identifier: YKNJ98mt8l0p5EVfDgYZckUkvcV/lLHPYL1RFSs3hYg= Subject key identifier: E6:8A:22:3F:AD:53:A7:E9:13:17:A1:7B:82:0A:89:B9:36:6C:37:A9 Authority key identifier: C6:FD:EF:6C:A2:BD:7C:82:F8:94:4A:88:D7:13:8B:63:E4:0C:2E:AF Certificate issuer: /CN=C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF Certificate serial: 709F0D20023844FBC8570F484FD1BAFE684A4125 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft Manifest number: 37 Signing time: Tue 21 Jul 2026 11:48:43 +0000 Manifest this update: Tue 21 Jul 2026 11:43:43 +0000 Manifest next update: Wed 22 Jul 2026 13:14:43 +0000 Files and hashes: 1: C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.crl (hash: DdsTSz5lQsVpiSfEzc/bDUFuXioSjKQuU4UMLfBuONo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.crl rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 13:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:9f:0d:20:02:38:44:fb:c8:57:0f:48:4f:d1:ba:fe:68:4a:41:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF Validity Not Before: Jul 21 11:43:43 2026 GMT Not After : Jul 22 13:14:43 2026 GMT Subject: CN=E68A223FAD53A7E91317A17B820A89B9366C37A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c1:be:2a:bb:14:fe:12:ac:b1:31:c4:60:83: 82:03:eb:40:87:3d:35:92:b3:95:b0:53:3f:2b:24: 7d:32:a7:13:e0:3a:3d:31:9a:84:84:c1:e9:2b:32: 88:7c:4e:bd:cc:3a:59:9f:42:17:5a:3e:63:a5:a3: 6f:77:d6:a6:f8:5f:a6:ec:df:56:9b:bf:a0:49:77: 7c:06:2f:1a:e7:6b:ca:b8:93:b6:56:22:81:ba:02: 87:a2:a6:c6:13:1f:e9:bb:7c:36:9c:fb:37:94:92: d6:76:85:56:35:2a:16:8e:c3:27:af:47:24:1e:4b: cc:8e:77:61:a3:5a:29:19:ad:f6:f9:83:6d:f7:95: 85:7b:a2:d7:e9:a4:e2:91:85:24:27:74:94:a0:d1: 69:87:fd:d4:04:7e:75:03:e9:63:ab:a6:b8:58:3a: 76:28:7a:58:7f:25:05:19:4a:2c:30:a1:12:ed:f4: 13:c7:36:7b:19:34:d9:e8:ba:d0:d7:e5:da:7f:46: 8a:bf:2a:d1:b3:fe:f1:ab:9c:52:a3:13:1e:61:c1: 25:cf:72:22:39:75:02:39:6e:de:83:a0:ac:e6:23: 2f:7e:d2:4f:7d:e9:2b:e4:5f:e3:eb:45:26:a5:e6: 39:79:d9:3b:09:bb:0b:7a:1b:7a:fa:6f:2b:82:1b: 57:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8A:22:3F:AD:53:A7:E9:13:17:A1:7B:82:0A:89:B9:36:6C:37:A9 X509v3 Authority Key Identifier: keyid:C6:FD:EF:6C:A2:BD:7C:82:F8:94:4A:88:D7:13:8B:63:E4:0C:2E:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117287030460514331/0/C6FDEF6CA2BD7C82F8944A88D7138B63E40C2EAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e4:c9:29:a8:bb:05:ee:66:02:46:5c:85:fa:f1:96:e1:af: 20:c8:9c:19:83:37:bb:c7:02:ee:c8:9f:8d:e9:b4:7d:6e:41: 9a:96:6e:b3:ce:85:59:f1:19:e4:9b:33:39:f8:4d:f8:b3:19: d9:19:0d:c8:c4:46:77:01:9c:ea:ca:2c:23:2b:40:5f:45:39: d3:7e:8e:8b:15:10:27:8b:9f:3d:3c:dc:87:a6:b5:8f:8f:23: 8a:c4:ce:f8:73:f8:14:3e:fc:16:0f:aa:5d:c0:28:f7:f5:72: 57:b1:ce:10:7c:9f:87:a5:6f:ab:fb:ee:b6:ab:1b:9c:02:93: 43:44:54:44:f3:09:6a:92:f6:01:a6:2f:9b:4f:ee:00:8a:74: bb:be:0e:e6:56:5d:05:4e:6f:6c:a9:61:50:1f:e4:05:95:ba: 84:97:88:bf:49:b2:76:6e:63:9d:0e:ed:99:60:e7:12:a7:7f: 51:44:09:36:96:69:36:ea:25:ac:2b:47:f1:2d:df:8d:c8:7c: a0:51:6f:df:e6:87:91:88:07:73:0b:22:9e:bd:b8:b0:1a:e2: 81:ee:15:b9:d2:e7:71:69:00:97:87:da:18:6d:d5:30:6e:4f: a9:93:ee:32:23:e5:41:aa:84:93:42:35:ec:20:20:41:4b:eb: 10:66:ea:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcJ8NIAI4RPvIVw9IT9G6/mhKQSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzZGREVGNkNBMkJEN0M4MkY4OTQ0QTg4RDcxMzhCNjNF NDBDMkVBRjAeFw0yNjA3MjExMTQzNDNaFw0yNjA3MjIxMzE0NDNaMDMxMTAvBgNV BAMTKEU2OEEyMjNGQUQ1M0E3RTkxMzE3QTE3QjgyMEE4OUI5MzY2QzM3QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPwb4quxT+EqyxMcRgg4ID60CH PTWSs5WwUz8rJH0ypxPgOj0xmoSEwekrMoh8Tr3MOlmfQhdaPmOlo2931qb4X6bs 31abv6BJd3wGLxrna8q4k7ZWIoG6AoeipsYTH+m7fDac+zeUktZ2hVY1KhaOwyev RyQeS8yOd2GjWikZrfb5g233lYV7otfppOKRhSQndJSg0WmH/dQEfnUD6WOrprhY OnYoelh/JQUZSiwwoRLt9BPHNnsZNNnoutDX5dp/Roq/KtGz/vGrnFKjEx5hwSXP ciI5dQI5bt6DoKzmIy9+0k996SvkX+PrRSal5jl52TsJuwt6G3r6byuCG1e9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5ooiP61Tp+kTF6F7ggqJuTZsN6kwHwYDVR0j BBgwFoAUxv3vbKK9fIL4lEqI1xOLY+QMLq8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzI4NzAzMDQ2MDUxNDMzMS8wL0M2RkRFRjZDQTJCRDdDODJGODk0NEE4OEQ3MTM4 QjYzRTQwQzJFQUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzZGREVGNkNBMkJEN0M4MkY4OTQ0QTg4RDcxMzhCNjNFNDBDMkVBRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTcyODcwMzA0NjA1MTQzMzEvMC9DNkZERUY2Q0EyQkQ3 QzgyRjg5NDRBODhENzEzOEI2M0U0MEMyRUFGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+TJKai7Be5m AkZchfrxluGvIMicGYM3u8cC7sifjem0fW5BmpZus86FWfEZ5JszOfhN+LMZ2RkN yMRGdwGc6sosIytAX0U5036OixUQJ4ufPTzch6a1j48jisTO+HP4FD78Fg+qXcAo 9/VyV7HOEHyfh6Vvq/vutqsbnAKTQ0RURPMJapL2AaYvm0/uAIp0u74O5lZdBU5v bKlhUB/kBZW6hJeIv0mydm5jnQ7tmWDnEqd/UUQJNpZpNuolrCtH8S3fjch8oFFv 3+aHkYgHcwsinr24sBrige4VudLncWkAl4faGG3VMG5PqZPuMiPlQaqEk0I17CAg QUvrEGbq9g== -----END CERTIFICATE-----Generated at Tue Jul 21 22:13:39 2026 by rpki-client