$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft File: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft (raw, json) Hash identifier: hYN8z3fJK8ctiVcyRqMj2Ol2yNtkYj3+vglb1w4aRv4= Subject key identifier: A2:71:7F:73:2E:BC:A1:CB:34:C3:54:D0:82:D5:45:22:50:9A:B0:D7 Authority key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Certificate issuer: /CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Certificate serial: 3D276D13CB862134E5EFF777B0BE6B02E9CD3F40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft Manifest number: 0132 Signing time: Mon 12 Oct 2026 22:42:28 +0000 Manifest this update: Mon 12 Oct 2026 22:37:28 +0000 Manifest next update: Fri 16 Oct 2026 06:31:28 +0000 Files and hashes: 1: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl (hash: Bliw/RUitF2SvLSJsECjiBD2HJV7jS0rJqhN8rZ5gT4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:27:6d:13:cb:86:21:34:e5:ef:f7:77:b0:be:6b:02:e9:cd:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Validity Not Before: Oct 12 22:37:28 2026 GMT Not After : Oct 16 06:31:28 2026 GMT Subject: CN=A2717F732EBCA1CB34C354D082D54522509AB0D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:33:da:12:97:e0:88:3b:a8:1f:0c:fe:66:24: 96:09:24:e8:f6:dc:52:c0:98:08:8e:ba:0b:ec:af: 43:9d:a1:cd:6d:1d:68:a5:b6:8e:ce:8d:24:cc:d3: b3:6e:c8:96:fd:5c:77:bb:41:5a:7d:38:f5:41:a3: 23:a4:1e:8d:d2:1c:5a:d6:f9:53:fd:7a:47:84:57: ca:58:77:0a:93:a0:1b:35:01:af:a2:52:d7:0e:b5: 0f:39:b4:4c:16:0e:c2:65:9c:d2:b3:a3:c2:12:40: 1e:dc:58:4a:f1:b7:c4:8c:95:94:bf:38:d6:fe:5f: 0e:80:03:b6:1f:5a:e5:bf:64:e5:3e:0c:e7:4d:97: 71:fc:8c:e6:2c:00:39:f5:db:fa:11:0c:78:3a:78: 8b:a1:bd:65:81:d1:16:0f:8c:60:ad:aa:ad:75:9a: 5e:58:06:87:b5:c2:d9:40:99:89:f3:5e:07:ee:db: a9:5c:f4:b6:73:d7:d4:6a:fb:78:79:82:76:d0:90: 81:d7:84:48:dd:51:56:62:64:01:bd:64:cc:10:91: bf:08:79:b1:f8:8a:18:07:43:4c:0d:e4:73:1f:78: fc:ae:fa:53:b3:fe:5c:39:22:29:a3:b7:cf:bf:40: 95:f6:1a:8f:eb:e9:5c:5f:8f:a8:ea:36:48:e7:51: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:71:7F:73:2E:BC:A1:CB:34:C3:54:D0:82:D5:45:22:50:9A:B0:D7 X509v3 Authority Key Identifier: keyid:D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a4:ea:cd:93:32:38:60:98:ce:9b:77:58:e0:ae:a0:32:c4: f1:52:1b:14:d0:45:96:d7:ce:7f:09:34:e7:30:85:90:bd:3b: 0e:3b:80:82:95:24:64:16:8a:ad:ab:da:5e:37:35:d7:ec:2b: c0:3e:d7:27:2b:58:50:28:10:1c:20:cb:bf:30:e0:ff:0f:8c: 1e:d6:76:d8:b9:e0:c7:8e:d2:fd:3c:bf:e8:3c:0f:1e:f8:43: 41:ca:ab:bd:28:02:a1:27:a8:18:6a:f7:68:4e:91:79:c6:e7: 3b:5d:49:e7:a4:34:61:c5:95:cb:65:c5:da:58:17:02:cb:42: 5c:48:a6:27:be:a2:a1:fa:87:68:3a:29:d1:9d:04:d0:73:c2: 50:3f:6b:da:76:c9:25:ba:b0:32:b3:ea:30:aa:62:02:1a:e9: a6:d4:53:4b:c9:b5:66:10:35:f6:42:e9:b3:bd:7e:93:b5:09: 5c:8b:ea:c0:8b:a7:83:3e:10:06:b5:b9:27:35:b3:a2:a0:eb: 8b:57:8d:ab:6d:fe:76:61:8f:6d:20:5d:c6:bd:7e:69:3f:1c: 69:71:49:7a:d8:c0:5e:c0:df:e6:47:0f:8d:04:04:73:59:1a: a3:cc:bb:a3:61:c9:ab:a1:5a:cb:29:13:68:99:52:f9:ac:c8: 8b:6d:b0:75 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPSdtE8uGITTl7/d3sL5rAunNP0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4 ODk2QkU0RDAeFw0yNjEwMTIyMjM3MjhaFw0yNjEwMTYwNjMxMjhaMDMxMTAvBgNV BAMTKEEyNzE3RjczMkVCQ0ExQ0IzNEMzNTREMDgyRDU0NTIyNTA5QUIwRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHM9oSl+CIO6gfDP5mJJYJJOj2 3FLAmAiOugvsr0Odoc1tHWilto7OjSTM07NuyJb9XHe7QVp9OPVBoyOkHo3SHFrW +VP9ekeEV8pYdwqToBs1Aa+iUtcOtQ85tEwWDsJlnNKzo8ISQB7cWErxt8SMlZS/ ONb+Xw6AA7YfWuW/ZOU+DOdNl3H8jOYsADn12/oRDHg6eIuhvWWB0RYPjGCtqq11 ml5YBoe1wtlAmYnzXgfu26lc9LZz19Rq+3h5gnbQkIHXhEjdUVZiZAG9ZMwQkb8I ebH4ihgHQ0wN5HMfePyu+lOz/lw5Iimjt8+/QJX2Go/r6Vxfj6jqNkjnUW1dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUonF/cy68ocs0w1TQgtVFIlCasNcwHwYDVR0j BBgwFoAU1vs+dmj9xs0YEG7oU9HGRYiWvk0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODcxMjk2Mi8wL0Q2RkIzRTc2NjhGREM2Q0QxODEwNkVFODUzRDFD NjQ1ODg5NkJFNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3MTI5NjIvMC9ENkZCM0U3NjY4RkRD NkNEMTgxMDZFRTg1M0QxQzY0NTg4OTZCRTRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqTqzZMyOGCY zpt3WOCuoDLE8VIbFNBFltfOfwk05zCFkL07DjuAgpUkZBaKravaXjc11+wrwD7X JytYUCgQHCDLvzDg/w+MHtZ22Lngx47S/Ty/6DwPHvhDQcqrvSgCoSeoGGr3aE6R ecbnO11J56Q0YcWVy2XF2lgXAstCXEimJ76iofqHaDop0Z0E0HPCUD9r2nbJJbqw MrPqMKpiAhrpptRTS8m1ZhA19kLps71+k7UJXIvqwIungz4QBrW5JzWzoqDri1eN q23+dmGPbSBdxr1+aT8caXFJetjAXsDf5kcPjQQEc1kao8y7o2HJq6FayykTaJlS +azIi22wdQ== -----END CERTIFICATE-----Generated at Tue Oct 13 19:26:18 2026 by rpki-client