$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft File: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft (raw, json) Hash identifier: FVYDwFIIVSv0mCAFbp1+QXiqTfkl1OCY1WSpCe5SlII= Subject key identifier: 1D:CF:2F:05:15:9C:11:01:F9:B2:C3:F7:E6:C0:07:00:7E:A7:12:4F Authority key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Certificate issuer: /CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Certificate serial: 63CCA25902192BFE5263D20F2B7389DD7FE34A9B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft Manifest number: 65 Signing time: Mon 13 Apr 2026 03:39:17 +0000 Manifest this update: Mon 13 Apr 2026 03:34:17 +0000 Manifest next update: Tue 14 Apr 2026 04:13:17 +0000 Files and hashes: 1: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl (hash: tNrIkfvfyH0cdZT9tQ+exgS46odkYZkKpqhUeQ2ZFw8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 04:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:cc:a2:59:02:19:2b:fe:52:63:d2:0f:2b:73:89:dd:7f:e3:4a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Validity Not Before: Apr 13 03:34:17 2026 GMT Not After : Apr 14 04:13:17 2026 GMT Subject: CN=1DCF2F05159C1101F9B2C3F7E6C007007EA7124F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:82:86:80:30:20:5c:3d:f8:73:bd:27:48: ba:8e:4e:70:aa:d3:3d:b0:71:74:4b:c2:6a:44:2b: 76:71:c2:b5:74:eb:30:2a:77:fa:14:0f:10:1d:b5: 15:f5:1c:c7:70:6c:67:e6:ec:9b:2f:b9:5b:f5:80: 01:4b:58:77:2e:39:2c:b2:ce:2b:cd:e0:90:65:a5: 39:12:d8:4e:0c:bd:e2:ca:d5:14:91:d9:fb:25:38: b4:aa:df:4e:84:db:ee:d2:6f:28:b2:48:a3:c3:7f: 0f:ac:fe:07:bc:44:13:da:01:09:6a:1a:98:4a:a6: f9:d9:d6:29:9a:c8:f5:46:ac:3b:95:c6:6b:84:d9: 2e:02:b6:4c:24:8b:31:f6:25:5f:89:d6:01:f7:95: e7:39:d1:ae:61:88:ee:7e:6e:f4:06:ab:61:90:c2: c8:c0:d0:65:64:5d:03:2a:ce:b5:6a:b4:77:d0:20: d2:d4:8b:36:7e:2e:55:fa:21:32:c8:62:dd:b8:d0: 75:c5:7b:93:47:8e:ba:bd:9d:b3:ad:a3:28:89:af: e7:41:87:54:8b:8e:ce:20:e1:70:88:e8:ae:dc:f0: 71:f7:67:e9:e5:ac:62:65:c3:32:3e:cb:ea:15:e9: 8c:b4:f8:e9:c4:f8:06:df:4c:b3:f6:1b:45:c4:68: 3e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CF:2F:05:15:9C:11:01:F9:B2:C3:F7:E6:C0:07:00:7E:A7:12:4F X509v3 Authority Key Identifier: keyid:D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ee:69:9a:60:d6:3b:58:d6:5c:6d:ac:44:fc:d4:59:63:b2: 9e:eb:be:62:69:41:54:46:82:45:3b:e2:63:b8:47:05:53:b1: 8b:04:3c:82:08:82:d3:ae:74:0b:70:6c:26:35:fe:9f:7b:90: 15:2e:82:b3:16:c7:13:03:b9:14:2c:cc:13:bd:fc:72:48:76: 67:b3:61:0d:2b:e2:09:7c:93:bc:7e:c7:97:45:e4:cc:b1:54: 0b:0c:09:f6:3c:bb:89:c7:27:2e:c0:6a:c4:33:bf:c6:68:b6: 94:46:c5:02:b9:82:67:50:3f:ed:c4:fc:c4:06:b9:24:f1:a9: b3:e9:1e:10:97:21:49:5e:65:40:9e:86:6a:7b:06:b5:55:4a: 31:b4:2e:79:67:18:ff:5d:22:22:82:85:21:fa:66:4d:f2:28: 56:3a:3c:d0:10:7d:de:ae:ea:e2:1e:72:c0:10:a4:39:63:e1: f0:6a:7c:7d:b5:d8:84:76:2f:55:ea:84:53:94:63:ac:9f:e0: f6:9b:12:69:55:8f:d1:25:51:f3:5c:38:c9:96:04:e8:a5:27: 93:84:6d:8f:85:78:b6:7b:26:7a:ff:3a:58:97:e9:83:d8:72: d8:90:c0:a3:7d:f8:69:33:38:e1:d3:d4:e4:f0:1c:dc:48:52: 59:32:60:8b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUY8yiWQIZK/5SY9IPK3OJ3X/jSpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4 ODk2QkU0RDAeFw0yNjA0MTMwMzM0MTdaFw0yNjA0MTQwNDEzMTdaMDMxMTAvBgNV BAMTKDFEQ0YyRjA1MTU5QzExMDFGOUIyQzNGN0U2QzAwNzAwN0VBNzEyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1QYKGgDAgXD34c70nSLqOTnCq 0z2wcXRLwmpEK3ZxwrV06zAqd/oUDxAdtRX1HMdwbGfm7JsvuVv1gAFLWHcuOSyy zivN4JBlpTkS2E4MveLK1RSR2fslOLSq306E2+7SbyiySKPDfw+s/ge8RBPaAQlq GphKpvnZ1imayPVGrDuVxmuE2S4CtkwkizH2JV+J1gH3lec50a5hiO5+bvQGq2GQ wsjA0GVkXQMqzrVqtHfQINLUizZ+LlX6ITLIYt240HXFe5NHjrq9nbOtoyiJr+dB h1SLjs4g4XCI6K7c8HH3Z+nlrGJlwzI+y+oV6Yy0+OnE+AbfTLP2G0XEaD6FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHc8vBRWcEQH5ssP35sAHAH6nEk8wHwYDVR0j BBgwFoAU1vs+dmj9xs0YEG7oU9HGRYiWvk0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODcxMjk2Mi8wL0Q2RkIzRTc2NjhGREM2Q0QxODEwNkVFODUzRDFD NjQ1ODg5NkJFNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3MTI5NjIvMC9ENkZCM0U3NjY4RkRD NkNEMTgxMDZFRTg1M0QxQzY0NTg4OTZCRTRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiu5pmmDWO1jW XG2sRPzUWWOynuu+YmlBVEaCRTviY7hHBVOxiwQ8ggiC0650C3BsJjX+n3uQFS6C sxbHEwO5FCzME738ckh2Z7NhDSviCXyTvH7Hl0XkzLFUCwwJ9jy7iccnLsBqxDO/ xmi2lEbFArmCZ1A/7cT8xAa5JPGps+keEJchSV5lQJ6GansGtVVKMbQueWcY/10i IoKFIfpmTfIoVjo80BB93q7q4h5ywBCkOWPh8Gp8fbXYhHYvVeqEU5RjrJ/g9psS aVWP0SVR81w4yZYE6KUnk4Rtj4V4tnsmev86WJfpg9hy2JDAo334aTM44dPU5PAc 3EhSWTJgiw== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:40 2026 by rpki-client