$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft File: 1133679B2C104A0446FA0C3764EEE246C5D21075.mft (raw, json) Hash identifier: 3PEoOvOLY/D7PmCotb+Saf93SZcuHSSpz8AUymnAtG8= Subject key identifier: 04:36:60:FA:28:A6:F9:06:E8:B8:61:7A:CB:5F:E2:6E:71:5E:A2:E7 Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Certificate serial: 0EF2C33EE52510FD4384DED4C621D1D880ED11D0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft Manifest number: 0142 Signing time: Sat 10 Oct 2026 12:34:39 +0000 Manifest this update: Sat 10 Oct 2026 12:29:39 +0000 Manifest next update: Tue 13 Oct 2026 14:54:39 +0000 Files and hashes: 1: 34332e3232382e3234302e302f32322d3232203d3e203535393931.roa (hash: aAK3b2YO28PMJfPm9Aj9uOiTBwmGFcaW1Dy+MYbP2/I=) 2: 3130332e34312e3131362e302f32322d3232203d3e203535393931.roa (hash: AG763JgzLnCax1h82iKqPfAHIhWbgVBR2u2s+SqTVuQ=) 3: 1133679B2C104A0446FA0C3764EEE246C5D21075.crl (hash: 5aCDuJMp0X1cowgbG6CssNaq5GNQAusNCnI70JFN/Tc=) 4: 3130332e35362e3130342e302f32322d3232203d3e203535393931.roa (hash: Xx3438ml27BwMKWjax5Et9SPWqEU02J5BKCONck0i14=) 5: 34332e3232382e3230342e302f32322d3232203d3e203535393931.roa (hash: C3XWgFxWcqi0OOcgRWNYvHKGt6IvkEPUV44+1IA9tHk=) 6: 3130332e35362e3130302e302f32322d3232203d3e203535393931.roa (hash: U00Rs/DfaBM8oQSZxv8Kvu4Q3MPtjO43KKG0d8r3TTQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:f2:c3:3e:e5:25:10:fd:43:84:de:d4:c6:21:d1:d8:80:ed:11:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Validity Not Before: Oct 10 12:29:39 2026 GMT Not After : Oct 13 14:54:39 2026 GMT Subject: CN=043660FA28A6F906E8B8617ACB5FE26E715EA2E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0a:3e:f9:1f:6f:b1:71:28:3f:73:03:9c:c4: ba:93:d4:66:91:9f:70:02:eb:a7:19:48:63:d7:9a: ed:49:bb:41:02:c0:5f:5f:4d:91:89:7f:75:f4:02: da:35:ce:4f:a0:37:ff:ac:09:97:2c:22:2b:71:1e: 82:be:f9:b1:3f:e9:04:35:cd:1b:4c:b1:67:48:f0: 44:f9:24:2b:46:65:7c:f7:a4:eb:dd:12:89:ff:a3: a7:25:f7:ae:a7:f6:8c:63:e2:4d:48:04:20:8d:52: a3:ca:04:f8:bb:4e:49:be:75:6c:cd:9d:c4:fd:5b: 92:c4:86:95:55:f2:9c:81:ed:3c:d7:51:f2:07:9f: f2:8e:0d:c0:85:9f:0f:79:91:5c:85:05:5e:ee:c1: d0:c2:b1:5b:6a:d2:94:94:26:5b:04:07:4c:02:de: fc:e9:31:87:cf:7d:e5:56:97:9d:8d:57:8e:3c:2b: 17:b8:54:e1:1b:1b:71:70:f4:79:27:2b:0a:60:24: 4d:2f:c2:d4:93:d4:84:c7:df:b8:6a:b4:fb:79:0d: c1:f1:ee:ad:1b:d3:ac:34:22:b4:5d:24:48:fe:4b: 58:84:db:1b:e3:3c:0a:6c:22:06:d7:3e:00:54:ed: de:13:fc:e6:e7:e8:35:fe:71:31:77:23:41:25:2b: 88:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:36:60:FA:28:A6:F9:06:E8:B8:61:7A:CB:5F:E2:6E:71:5E:A2:E7 X509v3 Authority Key Identifier: keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:fb:58:50:8e:67:4b:38:7b:4e:3a:a2:90:5a:50:aa:a7:d3: 07:41:82:3b:23:17:23:45:6e:ae:c8:a4:22:49:2f:b7:55:d7: b8:fb:ff:8d:7e:f2:b2:e1:29:19:12:63:9f:18:f7:01:01:23: fa:cd:47:36:44:56:ea:e9:70:9c:01:b5:e4:73:55:6a:64:14: 80:58:00:da:a4:41:bb:f4:0c:90:7b:34:0b:95:bf:1f:c0:ca: 1c:51:ad:73:ab:08:43:0a:d9:e0:aa:ba:b3:b0:81:7d:a5:d5: e9:70:56:1d:ba:f6:ee:12:9f:70:79:c8:c3:13:7a:04:26:de: 2a:d4:70:5c:ed:0e:16:f7:34:10:e3:58:d8:70:cc:d0:ff:ce: 89:4a:6b:1c:cb:50:be:82:97:32:92:58:98:d7:3e:06:a2:6e: a1:95:fe:c6:ba:50:36:25:eb:d4:00:95:94:e5:df:f5:19:d4: 90:17:85:9d:ae:4b:93:e6:64:5f:8d:56:36:ce:d9:8e:8c:01: 91:be:a1:4a:30:f7:44:06:c0:6c:3f:b0:2b:b8:cc:11:1e:d4: 93:c5:58:3e:1d:2c:89:08:4e:53:32:64:85:f5:e6:ba:29:9c: 80:d2:25:27:7b:66:de:06:f2:14:0c:13:28:92:2b:be:9b:78: b5:f4:17:b1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDvLDPuUlEP1DhN7UxiHR2IDtEdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZD NUQyMTA3NTAeFw0yNjEwMTAxMjI5MzlaFw0yNjEwMTMxNDU0MzlaMDMxMTAvBgNV BAMTKDA0MzY2MEZBMjhBNkY5MDZFOEI4NjE3QUNCNUZFMjZFNzE1RUEyRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCj75H2+xcSg/cwOcxLqT1GaR n3AC66cZSGPXmu1Ju0ECwF9fTZGJf3X0Ato1zk+gN/+sCZcsIitxHoK++bE/6QQ1 zRtMsWdI8ET5JCtGZXz3pOvdEon/o6cl966n9oxj4k1IBCCNUqPKBPi7Tkm+dWzN ncT9W5LEhpVV8pyB7TzXUfIHn/KODcCFnw95kVyFBV7uwdDCsVtq0pSUJlsEB0wC 3vzpMYfPfeVWl52NV448Kxe4VOEbG3Fw9HknKwpgJE0vwtST1ITH37hqtPt5DcHx 7q0b06w0IrRdJEj+S1iE2xvjPApsIgbXPgBU7d4T/Obn6DX+cTF3I0ElK4jdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBDZg+iim+QbouGF6y1/ibnFeoucwHwYDVR0j BBgwFoAUETNnmywQSgRG+gw3ZO7iRsXSEHUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQwMDMyMi8wLzExMzM2NzlCMkMxMDRBMDQ0NkZBMEMzNzY0RUVF MjQ2QzVEMjEwNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0MDAzMjIvMC8xMTMzNjc5QjJDMTA0 QTA0NDZGQTBDMzc2NEVFRTI0NkM1RDIxMDc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/tYUI5nSzh7 TjqikFpQqqfTB0GCOyMXI0VursikIkkvt1XXuPv/jX7ysuEpGRJjnxj3AQEj+s1H NkRW6ulwnAG15HNVamQUgFgA2qRBu/QMkHs0C5W/H8DKHFGtc6sIQwrZ4Kq6s7CB faXV6XBWHbr27hKfcHnIwxN6BCbeKtRwXO0OFvc0EONY2HDM0P/OiUprHMtQvoKX MpJYmNc+BqJuoZX+xrpQNiXr1ACVlOXf9RnUkBeFna5Lk+ZkX41WNs7ZjowBkb6h SjD3RAbAbD+wK7jMER7Uk8VYPh0siQhOUzJkhfXmuimcgNIlJ3tm3gbyFAwTKJIr vpt4tfQXsQ== -----END CERTIFICATE-----Generated at Sat Oct 10 17:16:39 2026 by rpki-client