$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft File: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft (raw, json) Hash identifier: 3RYPbiYfDnSqX/h+tAV4sIXCfqj9STlKxA8hbv30mJI= Subject key identifier: ED:37:98:CA:F7:CC:E8:BF:11:E4:87:6C:43:2B:CA:93:D1:CA:8B:22 Authority key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Certificate issuer: /CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Certificate serial: 653C270FD9E0DC5F38C5803CC0DCDB4B2AAA6C9E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft Manifest number: 23 Signing time: Sun 22 Feb 2026 11:37:30 +0000 Manifest this update: Sun 22 Feb 2026 11:32:30 +0000 Manifest next update: Mon 23 Feb 2026 11:41:30 +0000 Files and hashes: 1: D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl (hash: sKQyKcQB9nM38K2FNIKRJC8ZNGamTaWTuEcpOOYCC4Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:3c:27:0f:d9:e0:dc:5f:38:c5:80:3c:c0:dc:db:4b:2a:aa:6c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Validity Not Before: Feb 22 11:32:30 2026 GMT Not After : Feb 23 11:41:30 2026 GMT Subject: CN=ED3798CAF7CCE8BF11E4876C432BCA93D1CA8B22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0f:37:ea:9e:1a:a9:a3:e8:f5:39:b7:d9:96: 29:16:c6:27:4d:2e:19:ae:75:a5:46:ad:c2:02:b7: 2d:b9:5d:56:ce:11:d3:b7:96:ab:c0:f1:f2:40:da: c4:ce:24:d3:f2:ea:5b:8e:01:a4:72:f4:49:96:de: b9:e8:c6:df:20:30:01:a9:68:91:79:72:6b:29:19: 5d:98:b0:6f:1d:9c:34:df:d2:cc:29:75:46:42:9e: b9:06:26:16:e8:16:56:d0:15:78:e5:7c:52:d7:e6: df:e0:37:de:cf:ad:65:07:43:85:b7:88:a6:ab:36: 45:c3:31:7c:ff:ee:f7:7a:68:09:3e:4e:a1:63:9a: 1d:89:e5:13:ef:08:47:16:fd:2e:89:a3:1f:af:ce: fd:16:5a:a3:36:5d:62:91:0d:70:ad:ff:e3:27:42: 41:25:af:cc:26:9f:1d:27:ef:2a:50:9a:4d:fa:a5: cc:f2:28:aa:84:7d:02:05:32:83:5a:e9:6a:53:78: a8:c5:f1:a2:de:df:8e:1e:26:bf:66:e8:d6:45:ee: c1:c3:c4:bc:32:ea:11:34:b4:78:bb:84:27:8b:ee: 3e:49:03:57:79:08:e3:18:ef:d1:cf:54:f1:59:df: 9f:ca:61:0c:f5:c6:3f:f5:cf:c4:ca:0c:51:a4:e0: 31:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:37:98:CA:F7:CC:E8:BF:11:E4:87:6C:43:2B:CA:93:D1:CA:8B:22 X509v3 Authority Key Identifier: keyid:D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ce:83:1a:e3:f3:50:95:b1:05:52:e1:3e:d8:4b:98:f7:33: e0:67:a5:bd:bc:6d:11:6c:96:12:2c:ce:78:11:8d:4b:64:79: 68:d8:f4:92:54:6a:b6:52:9c:72:63:68:2c:e8:24:ff:ed:48: ec:03:5d:4d:7d:85:46:1f:09:90:05:77:e1:4e:12:97:dd:2c: 09:d2:01:73:37:8d:9a:7c:cc:f4:e7:60:1b:36:03:67:a0:3a: 21:a5:af:07:19:91:88:e9:c2:99:9d:8c:13:eb:7d:b3:c3:4e: ea:10:5b:0e:80:d2:3d:bf:55:51:b4:20:ea:ad:0e:46:11:f6: e2:06:4e:19:79:bf:a6:76:61:04:c8:ae:d8:b2:ae:11:db:db: ec:fb:11:04:4e:27:5f:62:ed:b3:82:be:f9:b5:c0:3d:07:25: c0:a8:88:92:2a:55:cf:ab:61:e9:1e:aa:ad:2b:cd:a3:c4:a3: 4e:e1:af:cb:48:a6:5b:d1:b1:1e:8c:9f:c3:5d:aa:5b:2c:3e: fc:8b:72:23:50:bb:79:35:6b:fb:67:be:20:cb:f9:7f:03:7c: 32:26:5a:41:0f:93:a6:48:92:c6:70:3c:c7:08:de:64:19:01: 8e:c8:46:cb:b8:94:b9:62:b4:f9:ea:3b:fe:bb:c8:1b:bd:f8: 4f:d6:fc:d0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZTwnD9ng3F84xYA8wNzbSyqqbJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4 ODk2QkU0RDAeFw0yNjAyMjIxMTMyMzBaFw0yNjAyMjMxMTQxMzBaMDMxMTAvBgNV BAMTKEVEMzc5OENBRjdDQ0U4QkYxMUU0ODc2QzQzMkJDQTkzRDFDQThCMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXDzfqnhqpo+j1ObfZlikWxidN LhmudaVGrcICty25XVbOEdO3lqvA8fJA2sTOJNPy6luOAaRy9EmW3rnoxt8gMAGp aJF5cmspGV2YsG8dnDTf0swpdUZCnrkGJhboFlbQFXjlfFLX5t/gN97PrWUHQ4W3 iKarNkXDMXz/7vd6aAk+TqFjmh2J5RPvCEcW/S6Jox+vzv0WWqM2XWKRDXCt/+Mn QkElr8wmnx0n7ypQmk36pczyKKqEfQIFMoNa6WpTeKjF8aLe344eJr9m6NZF7sHD xLwy6hE0tHi7hCeL7j5JA1d5COMY79HPVPFZ35/KYQz1xj/1z8TKDFGk4DGVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7TeYyvfM6L8R5IdsQyvKk9HKiyIwHwYDVR0j BBgwFoAU1vs+dmj9xs0YEG7oU9HGRYiWvk0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODcxMjk2Mi8wL0Q2RkIzRTc2NjhGREM2Q0QxODEwNkVFODUzRDFD NjQ1ODg5NkJFNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjg3MDI5MTEzODg3MTI5NjIvMC9ENkZCM0U3NjY4RkRD NkNEMTgxMDZFRTg1M0QxQzY0NTg4OTZCRTRELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB86DGuPzUJWx BVLhPthLmPcz4GelvbxtEWyWEizOeBGNS2R5aNj0klRqtlKccmNoLOgk/+1I7ANd TX2FRh8JkAV34U4Sl90sCdIBczeNmnzM9OdgGzYDZ6A6IaWvBxmRiOnCmZ2ME+t9 s8NO6hBbDoDSPb9VUbQg6q0ORhH24gZOGXm/pnZhBMiu2LKuEdvb7PsRBE4nX2Lt s4K++bXAPQclwKiIkipVz6th6R6qrSvNo8SjTuGvy0imW9GxHoyfw12qWyw+/Ity I1C7eTVr+2e+IMv5fwN8MiZaQQ+TpkiSxnA8xwjeZBkBjshGy7iUuWK0+eo7/rvI G734T9b80A== -----END CERTIFICATE-----Generated at Mon Feb 23 02:14:09 2026 by rpki-client