$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft File: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft (raw, json) Hash identifier: y7zTczBCNnqaYiAPPfdvpCg+k1NUeuyv9IlRmlrNO1E= Subject key identifier: 51:B2:84:39:C7:18:6A:F0:2B:52:4A:9E:3F:A7:9C:8B:03:75:E7:BA Authority key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Certificate issuer: /CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Certificate serial: 2F40A41FCDCF5391B3BAB3F971E2AFDCF94387D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft Manifest number: 011E Signing time: Fri 28 Aug 2026 08:08:37 +0000 Manifest this update: Fri 28 Aug 2026 08:03:37 +0000 Manifest next update: Mon 31 Aug 2026 17:15:37 +0000 Files and hashes: 1: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl (hash: +f6uohIE3ze6Og/hUOmiluXbfudqk0ObFwoItPWXtMg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:40:a4:1f:cd:cf:53:91:b3:ba:b3:f9:71:e2:af:dc:f9:43:87:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Validity Not Before: Aug 28 08:03:37 2026 GMT Not After : Aug 31 17:15:37 2026 GMT Subject: CN=51B28439C7186AF02B524A9E3FA79C8B0375E7BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:31:ac:9a:ac:22:00:7e:d3:55:1e:04:4a:a6: 6a:3a:f5:60:df:d0:ce:6f:1e:de:ce:26:a0:29:80: a1:5e:c9:0d:43:5b:82:1d:b2:75:8f:50:17:d8:1b: 8c:31:e0:c1:e1:b4:15:91:3c:4e:c7:03:3f:ec:e6: d9:b1:5e:58:62:dc:07:36:c9:df:39:25:3a:62:89: 67:c7:c9:63:e4:42:f1:c3:ff:aa:fb:f6:6a:7c:e7: fa:ac:7e:1c:a7:44:ad:b8:d4:73:ba:88:93:0a:18: 6d:21:e3:e0:d1:99:33:a4:a6:25:a3:1a:ac:3e:fb: 94:20:fe:c1:2a:e6:31:fa:cf:6c:a2:9c:a9:2b:e5: ad:21:5f:37:5d:44:c7:8f:9f:b2:d3:01:50:6b:7a: d0:eb:cc:d8:7b:a6:05:e9:85:b2:9d:76:b0:97:73: 6c:1e:d4:6d:25:64:a6:57:23:54:33:44:22:c2:ca: 70:93:4e:54:f2:08:ae:16:76:a8:b8:b5:cd:0e:a0: b3:5e:f5:8f:b1:11:01:83:0e:38:49:0b:ec:60:68: c7:ce:98:0f:b4:73:6f:0b:ac:9e:f5:33:2a:19:de: 00:24:2e:39:91:aa:03:4b:cc:6d:20:f9:59:33:ce: 6c:a2:3d:1d:25:0e:7f:12:87:ff:02:5b:d1:44:b4: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B2:84:39:C7:18:6A:F0:2B:52:4A:9E:3F:A7:9C:8B:03:75:E7:BA X509v3 Authority Key Identifier: keyid:D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:c1:b6:a6:74:4b:3a:27:4e:5b:55:d6:7a:68:54:72:66:05: 35:a0:a8:49:14:16:49:c7:89:26:d2:74:ca:d7:03:3f:3d:1a: a5:49:36:a5:69:fd:f9:5d:64:d6:f0:12:47:25:23:a1:e3:96: 58:f7:8f:81:e8:93:e5:9e:5c:f2:18:05:c5:99:ac:f5:b6:99: 6c:14:db:7b:d9:ce:fe:b3:87:bd:c9:57:be:c5:30:72:17:42: 85:bc:a6:01:5e:f3:bd:ab:8d:f7:25:9e:bf:aa:7f:1a:d2:0c: 3a:c0:74:49:82:91:f1:17:88:52:9b:d9:32:22:e0:fa:38:df: cd:a4:89:8d:36:b6:95:69:7f:57:a2:05:cf:35:b8:e5:b3:c5: 9c:1d:b4:ad:76:cd:a8:e9:5e:f5:ac:8d:bd:67:d9:b8:c9:48: a4:0c:f1:f4:21:92:c1:bc:60:1d:a0:0c:88:e3:19:06:5e:9f: 3a:c9:fe:7d:9b:fe:a5:fb:4b:e7:12:d4:18:9a:67:d0:49:ad: f8:e2:83:91:bb:69:46:a5:62:52:b6:b8:81:c2:8b:d5:28:65: c2:dd:35:6c:71:1d:40:8d:fc:67:40:2b:11:be:c9:ae:b8:68: b0:45:25:6c:01:c2:ed:e8:bb:94:55:05:b4:22:13:bd:1b:fa: fc:f5:95:54 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL0CkH83PU5GzurP5ceKv3PlDh9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4 ODk2QkU0RDAeFw0yNjA4MjgwODAzMzdaFw0yNjA4MzExNzE1MzdaMDMxMTAvBgNV BAMTKDUxQjI4NDM5QzcxODZBRjAyQjUyNEE5RTNGQTc5QzhCMDM3NUU3QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPMayarCIAftNVHgRKpmo69WDf 0M5vHt7OJqApgKFeyQ1DW4IdsnWPUBfYG4wx4MHhtBWRPE7HAz/s5tmxXlhi3Ac2 yd85JTpiiWfHyWPkQvHD/6r79mp85/qsfhynRK241HO6iJMKGG0h4+DRmTOkpiWj Gqw++5Qg/sEq5jH6z2yinKkr5a0hXzddRMePn7LTAVBretDrzNh7pgXphbKddrCX c2we1G0lZKZXI1QzRCLCynCTTlTyCK4Wdqi4tc0OoLNe9Y+xEQGDDjhJC+xgaMfO mA+0c28LrJ71MyoZ3gAkLjmRqgNLzG0g+VkzzmyiPR0lDn8Sh/8CW9FEtC3lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUbKEOccYavArUkqeP6eciwN157owHwYDVR0j BBgwFoAU1vs+dmj9xs0YEG7oU9HGRYiWvk0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODcxMjk2Mi8wL0Q2RkIzRTc2NjhGREM2Q0QxODEwNkVFODUzRDFD NjQ1ODg5NkJFNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3MTI5NjIvMC9ENkZCM0U3NjY4RkRD NkNEMTgxMDZFRTg1M0QxQzY0NTg4OTZCRTRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMG2pnRLOidO W1XWemhUcmYFNaCoSRQWSceJJtJ0ytcDPz0apUk2pWn9+V1k1vASRyUjoeOWWPeP geiT5Z5c8hgFxZms9baZbBTbe9nO/rOHvclXvsUwchdChbymAV7zvauN9yWev6p/ GtIMOsB0SYKR8ReIUpvZMiLg+jjfzaSJjTa2lWl/V6IFzzW45bPFnB20rXbNqOle 9ayNvWfZuMlIpAzx9CGSwbxgHaAMiOMZBl6fOsn+fZv+pftL5xLUGJpn0Emt+OKD kbtpRqViUra4gcKL1Shlwt01bHEdQI38Z0ArEb7JrrhosEUlbAHC7ei7lFUFtCIT vRv6/PWVVA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:24 2026 by rpki-client