$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft File: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft (raw, json) Hash identifier: Jg6CSnAnpR72VxtYSO55DHJQXkmPnjDNF4ejPJKz19A= Subject key identifier: 88:33:26:5E:34:F8:37:5C:47:F4:2F:86:2E:D7:E6:32:AC:AC:8E:36 Authority key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Certificate issuer: /CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Certificate serial: 6E7C4F2BA61A3C83E59D99D90F7BEBDF09CAD129 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft Manifest number: A4 Signing time: Fri 29 May 2026 13:07:50 +0000 Manifest this update: Fri 29 May 2026 13:02:50 +0000 Manifest next update: Sat 30 May 2026 16:10:50 +0000 Files and hashes: 1: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl (hash: lCCcTtnSBBr61YHqWMjBLymXjVOvFsPPjOi/KrTMxK8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:7c:4f:2b:a6:1a:3c:83:e5:9d:99:d9:0f:7b:eb:df:09:ca:d1:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Validity Not Before: May 29 13:02:50 2026 GMT Not After : May 30 16:10:50 2026 GMT Subject: CN=8833265E34F8375C47F42F862ED7E632ACAC8E36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:41:4f:93:a2:4c:63:3e:01:6b:6f:2f:69:40: 36:36:b0:6f:8f:bf:5f:6e:fa:d0:0f:22:e7:2c:04: 0e:8f:30:42:ff:42:b5:62:75:69:8c:24:b0:75:24: 43:f9:5d:fd:82:72:ef:d8:8e:6c:75:f0:09:38:88: 64:ac:1e:a9:86:ba:14:80:a2:3f:87:94:f8:da:e4: aa:40:de:64:6b:fe:d6:2d:fe:f3:00:77:b6:33:57: 19:0c:59:09:3d:e1:a6:89:88:45:22:af:03:6e:c2: 08:34:a3:16:d3:85:55:c7:57:6c:9a:67:98:c6:a3: 39:0b:89:1f:fa:1b:ee:b7:92:9c:53:24:27:a4:29: b5:a1:05:2a:3a:bc:66:d0:26:1c:51:e5:11:03:c9: 76:0f:79:a6:de:fb:a5:bc:ee:66:99:9d:29:73:1a: 9d:f5:eb:6e:a9:1c:90:df:bd:7f:5f:36:4b:ce:c2: 3c:9f:37:a9:c2:c7:f6:8e:ae:d9:eb:39:94:17:fa: 05:88:4f:58:84:74:a9:e5:71:e9:6a:4f:cb:24:40: 73:c0:68:8b:ba:d6:89:c5:70:b2:c3:94:41:6f:ec: 2d:ea:28:da:ae:74:8f:ed:6f:20:c0:99:ea:2c:bb: b3:30:c7:71:34:f9:5f:4e:a0:4d:a3:02:f8:37:65: 6d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:33:26:5E:34:F8:37:5C:47:F4:2F:86:2E:D7:E6:32:AC:AC:8E:36 X509v3 Authority Key Identifier: keyid:D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:57:01:60:73:ee:f6:06:b3:2b:d0:44:0d:83:28:da:63:f8: 14:9f:17:ec:ba:35:b5:fa:06:da:79:bb:d6:de:57:d9:da:a8: 8f:95:2e:c9:6a:2b:c2:f9:af:f0:57:c6:63:ed:d3:7d:38:a3: 2f:08:1b:c6:03:79:12:cd:68:d0:9f:f2:34:b3:04:18:ea:8b: 2f:0c:60:a4:d7:2a:22:4a:bf:75:be:09:ba:50:74:3b:b5:4b: 2b:60:71:b2:6f:80:8d:a0:85:24:6b:1f:9d:ae:05:e3:4b:23: aa:07:84:15:98:d7:7e:ad:c5:6b:07:08:b0:86:be:aa:d3:37: 1b:f9:46:18:87:05:a4:c5:ae:9b:37:d9:18:12:48:33:cb:8b: 60:7d:8a:f6:bb:6d:91:72:83:09:4e:93:29:bb:72:8c:49:42: fa:06:eb:ee:70:7c:39:5e:d0:91:f3:4a:6f:8b:41:2d:59:67: 6c:b2:a7:5c:8f:83:a8:00:96:59:cb:1f:6d:48:82:af:cc:b2: 27:fa:19:b7:78:79:d0:80:15:f0:a7:ed:52:43:12:22:98:7b: a1:ef:8e:6d:23:3c:83:fc:dd:ef:b3:f7:b0:7b:81:ff:0e:0a: 2f:33:ed:d0:91:d9:c4:07:b2:c3:e5:b6:bc:26:6c:bb:7c:c5: dc:71:ec:e9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbnxPK6YaPIPlnZnZD3vr3wnK0SkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4 ODk2QkU0RDAeFw0yNjA1MjkxMzAyNTBaFw0yNjA1MzAxNjEwNTBaMDMxMTAvBgNV BAMTKDg4MzMyNjVFMzRGODM3NUM0N0Y0MkY4NjJFRDdFNjMyQUNBQzhFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClQU+TokxjPgFrby9pQDY2sG+P v19u+tAPIucsBA6PMEL/QrVidWmMJLB1JEP5Xf2Ccu/Yjmx18Ak4iGSsHqmGuhSA oj+HlPja5KpA3mRr/tYt/vMAd7YzVxkMWQk94aaJiEUirwNuwgg0oxbThVXHV2ya Z5jGozkLiR/6G+63kpxTJCekKbWhBSo6vGbQJhxR5REDyXYPeabe+6W87maZnSlz Gp31626pHJDfvX9fNkvOwjyfN6nCx/aOrtnrOZQX+gWIT1iEdKnlcelqT8skQHPA aIu61onFcLLDlEFv7C3qKNqudI/tbyDAmeosu7Mwx3E0+V9OoE2jAvg3ZW37AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiDMmXjT4N1xH9C+GLtfmMqysjjYwHwYDVR0j BBgwFoAU1vs+dmj9xs0YEG7oU9HGRYiWvk0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODcxMjk2Mi8wL0Q2RkIzRTc2NjhGREM2Q0QxODEwNkVFODUzRDFD NjQ1ODg5NkJFNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3MTI5NjIvMC9ENkZCM0U3NjY4RkRD NkNEMTgxMDZFRTg1M0QxQzY0NTg4OTZCRTRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFcBYHPu9gaz K9BEDYMo2mP4FJ8X7Lo1tfoG2nm71t5X2dqoj5UuyWorwvmv8FfGY+3TfTijLwgb xgN5Es1o0J/yNLMEGOqLLwxgpNcqIkq/db4JulB0O7VLK2Bxsm+AjaCFJGsfna4F 40sjqgeEFZjXfq3FawcIsIa+qtM3G/lGGIcFpMWumzfZGBJIM8uLYH2K9rttkXKD CU6TKbtyjElC+gbr7nB8OV7QkfNKb4tBLVlnbLKnXI+DqACWWcsfbUiCr8yyJ/oZ t3h50IAV8KftUkMSIph7oe+ObSM8g/zd77P3sHuB/w4KLzPt0JHZxAeyw+W2vCZs u3zF3HHs6Q== -----END CERTIFICATE-----Generated at Fri May 29 22:05:25 2026 by rpki-client