$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft File: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft (raw, json) Hash identifier: fzcxPHXWdB0rG3a6pX/ZDfHdJ1SHxHcIW3I4VuV0SuQ= Subject key identifier: 6E:58:A6:1E:62:32:AA:2C:CF:C9:08:01:69:7C:80:16:21:46:5C:7C Authority key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Certificate issuer: /CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Certificate serial: 2A9B8C0AE5A187244CEB785275D95826EFAA0319 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft Manifest number: E1 Signing time: Tue 14 Jul 2026 05:50:34 +0000 Manifest this update: Tue 14 Jul 2026 05:45:34 +0000 Manifest next update: Wed 15 Jul 2026 09:09:34 +0000 Files and hashes: 1: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl (hash: MZ0B4ldIaX08KL1loc++wxbIYNH5TtomrbSdRt1rdfk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:9b:8c:0a:e5:a1:87:24:4c:eb:78:52:75:d9:58:26:ef:aa:03:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Validity Not Before: Jul 14 05:45:34 2026 GMT Not After : Jul 15 09:09:34 2026 GMT Subject: CN=6E58A61E6232AA2CCFC90801697C801621465C7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e7:24:03:ca:b3:1b:f6:ef:6a:e9:90:fc:ef: 97:f1:1f:6c:83:21:80:0a:f2:8c:2f:f0:c4:73:86: 80:46:90:b4:11:11:18:08:b0:85:35:fa:72:30:a2: b6:16:a1:9b:0d:9b:f3:5b:d1:9e:28:9a:f4:a5:c8: 8a:7a:7c:8c:b6:06:e1:8c:ad:f0:38:17:02:fe:00: 69:aa:f5:77:bb:d8:8e:b7:76:82:a4:30:e7:f4:bb: dc:ff:54:46:97:2d:03:5e:75:8c:a8:c7:8e:72:9b: 59:ce:79:7e:cd:fb:52:08:5a:5d:55:ee:d2:ba:b2: c3:74:42:97:86:8e:3b:91:2e:a0:7b:7e:76:98:bf: c9:cb:2e:f0:59:31:1a:64:9a:23:a2:bc:26:a3:90: ab:18:e5:30:1f:cd:74:6b:8f:06:f9:b4:04:0b:df: 51:14:13:b2:cd:c1:d7:26:fe:be:6a:6f:af:fe:55: 24:00:55:3b:3a:1e:ea:cf:6c:02:1b:d1:01:a2:63: 43:67:8f:1c:c4:1c:30:a3:f4:6d:69:f9:94:46:cf: 1c:05:0c:a7:6a:3d:bf:76:49:78:c3:ca:3f:28:ca: 67:61:45:53:e3:ef:de:c4:a1:5e:e3:fd:d4:ac:db: 64:4b:aa:6b:bf:93:15:bc:dd:a8:96:6b:54:c1:1f: 8a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:58:A6:1E:62:32:AA:2C:CF:C9:08:01:69:7C:80:16:21:46:5C:7C X509v3 Authority Key Identifier: keyid:D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5d:f1:a9:1e:23:06:40:d1:4e:2a:b4:4b:8c:9d:d9:c3:9f: fe:37:10:30:fe:54:14:36:0d:0b:49:af:cc:87:0b:b0:50:19: 16:66:48:62:71:97:3a:4f:18:c4:67:0c:11:eb:db:62:d7:a4: c6:29:67:92:27:3b:d1:fc:70:1c:3c:83:e1:11:a8:a4:9f:98: 99:7c:a1:28:0e:84:91:76:b1:90:10:69:4b:e4:b2:f8:52:93: 98:d2:02:8b:dd:f0:40:47:ee:5a:52:e8:6c:57:b2:64:54:64: 19:b3:ae:db:9d:76:58:6c:aa:b4:91:6e:37:ff:f9:7a:cf:b1: 1a:d0:4c:d0:b7:d5:14:7d:2d:86:f9:32:0e:06:f1:4f:0e:76: 3d:e4:1c:6a:a5:7e:d1:28:80:66:81:48:a0:4c:12:90:a7:ea: f2:a5:9b:f1:55:29:34:7a:d8:b3:79:33:9b:d3:ea:4b:2c:5d: 08:11:c6:60:a7:f7:32:16:52:8e:fc:79:da:27:a8:81:7f:1a: 30:f6:b0:8b:59:32:bd:d7:36:6a:34:58:a3:c5:05:7c:47:43: b1:63:79:b6:1d:e2:96:d1:84:43:42:9c:a7:f1:95:d8:a8:5f: d1:0a:a2:92:46:fe:a0:05:d6:b4:4e:0e:16:f5:12:08:0e:9f: ab:9b:cd:fd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKpuMCuWhhyRM63hSddlYJu+qAxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4 ODk2QkU0RDAeFw0yNjA3MTQwNTQ1MzRaFw0yNjA3MTUwOTA5MzRaMDMxMTAvBgNV BAMTKDZFNThBNjFFNjIzMkFBMkNDRkM5MDgwMTY5N0M4MDE2MjE0NjVDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM5yQDyrMb9u9q6ZD875fxH2yD IYAK8owv8MRzhoBGkLQRERgIsIU1+nIworYWoZsNm/Nb0Z4omvSlyIp6fIy2BuGM rfA4FwL+AGmq9Xe72I63doKkMOf0u9z/VEaXLQNedYyox45ym1nOeX7N+1IIWl1V 7tK6ssN0QpeGjjuRLqB7fnaYv8nLLvBZMRpkmiOivCajkKsY5TAfzXRrjwb5tAQL 31EUE7LNwdcm/r5qb6/+VSQAVTs6HurPbAIb0QGiY0NnjxzEHDCj9G1p+ZRGzxwF DKdqPb92SXjDyj8oymdhRVPj797EoV7j/dSs22RLqmu/kxW83aiWa1TBH4rvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUblimHmIyqizPyQgBaXyAFiFGXHwwHwYDVR0j BBgwFoAU1vs+dmj9xs0YEG7oU9HGRYiWvk0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODcxMjk2Mi8wL0Q2RkIzRTc2NjhGREM2Q0QxODEwNkVFODUzRDFD NjQ1ODg5NkJFNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3MTI5NjIvMC9ENkZCM0U3NjY4RkRD NkNEMTgxMDZFRTg1M0QxQzY0NTg4OTZCRTRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPF3xqR4jBkDR Tiq0S4yd2cOf/jcQMP5UFDYNC0mvzIcLsFAZFmZIYnGXOk8YxGcMEevbYtekxiln kic70fxwHDyD4RGopJ+YmXyhKA6EkXaxkBBpS+Sy+FKTmNICi93wQEfuWlLobFey ZFRkGbOu2512WGyqtJFuN//5es+xGtBM0LfVFH0thvkyDgbxTw52PeQcaqV+0SiA ZoFIoEwSkKfq8qWb8VUpNHrYs3kzm9PqSyxdCBHGYKf3MhZSjvx52ieogX8aMPaw i1kyvdc2ajRYo8UFfEdDsWN5th3iltGEQ0Kcp/GV2Khf0Qqikkb+oAXWtE4OFvUS CA6fq5vN/Q== -----END CERTIFICATE-----Generated at Tue Jul 14 20:12:43 2026 by rpki-client