$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft File: 67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft (raw, json) Hash identifier: zAF5WCDqmUHLaRyY71Vd3KNwk3gPdmMFtyGy5ML/dBQ= Subject key identifier: AF:8D:86:EE:5C:39:00:AF:27:A5:25:1C:B6:CA:13:55:46:18:51:C6 Authority key identifier: 67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16 Certificate issuer: /CN=67966D34EFBF4CBCFB00CF9C204539BFE0A25316 Certificate serial: 4CB67D5723665B949E0DEE854D8B676B70849C14 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft Manifest number: 0136 Signing time: Sun 27 Sep 2026 03:39:36 +0000 Manifest this update: Sun 27 Sep 2026 03:34:36 +0000 Manifest next update: Wed 30 Sep 2026 10:54:36 +0000 Files and hashes: 1: 3130332e3134302e31342e302f32332d3332203d3e203137363231.roa (hash: 2cWU5UH8whnz87agI1VludkKe4lf2cSxtmFnl04vmyI=) 2: 3130332e3134302e31342e302f32332d3332203d3e20313339303931.roa (hash: Dm1g3UjQyhGbjlFkBoWW9J4T2d5S6s8go1jP82Lkdfk=) 3: 67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl (hash: uCzXSfjpWlNIdsGrJGCR/6iXOpz0JvMyCFGxDDSlrqs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:b6:7d:57:23:66:5b:94:9e:0d:ee:85:4d:8b:67:6b:70:84:9c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67966D34EFBF4CBCFB00CF9C204539BFE0A25316 Validity Not Before: Sep 27 03:34:36 2026 GMT Not After : Sep 30 10:54:36 2026 GMT Subject: CN=AF8D86EE5C3900AF27A5251CB6CA1355461851C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4b:cb:b7:c4:b4:c5:12:e4:16:96:e0:e1:94: ff:19:14:df:20:7a:92:b1:eb:58:11:48:2e:6d:82: 02:27:74:89:78:a3:d2:6f:99:f6:a5:4d:6a:a3:fe: 28:2a:5c:5d:77:06:08:92:38:c4:b3:b6:12:fb:e8: 81:48:64:38:7b:81:fd:d6:60:f7:0a:f1:3d:2a:77: ec:b6:a6:dc:4d:63:bf:e5:0b:b2:8c:fa:80:c6:98: 6d:68:aa:eb:fb:16:12:8a:5f:20:c4:59:2a:ca:9a: 4a:84:77:8f:f2:f7:96:57:43:21:25:b5:d4:9d:b9: fc:57:03:a8:36:40:95:6c:fd:82:52:fc:6d:5b:38: 7b:ea:28:2d:3f:2e:b0:2e:ed:e7:94:1f:52:98:5a: 0e:28:90:76:4f:bb:e2:bc:2f:5a:89:74:bf:15:d6: de:25:cc:d3:5f:4c:e5:cc:85:76:43:1d:d4:f7:19: 40:1b:f6:81:d8:80:45:ba:e1:97:2a:e4:62:eb:2c: e9:c1:bf:19:e0:e0:be:38:6c:99:a2:73:dd:f4:d0: 0f:a3:c6:95:db:41:82:4a:ed:07:c3:51:6a:cc:90: 0f:bb:79:6b:f3:31:1a:1a:b4:7e:5e:bf:f6:de:95: e1:b5:46:66:a6:2d:8b:cc:96:81:85:ed:ef:a2:91: 9f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8D:86:EE:5C:39:00:AF:27:A5:25:1C:B6:CA:13:55:46:18:51:C6 X509v3 Authority Key Identifier: keyid:67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:6f:8e:15:74:a6:9e:3b:82:1d:96:31:29:10:98:b0:51:e8: 6c:74:02:90:3e:89:ba:ac:1f:62:28:03:fd:36:80:a0:5d:4d: b9:c1:59:ed:dc:46:ea:e5:49:0f:c0:f0:97:f9:5b:e5:56:45: e9:6d:d2:e1:5d:d4:aa:3e:43:61:80:3d:8f:9c:7a:6c:2b:a3: 2c:1f:18:9c:4b:05:60:6a:4b:9f:30:63:db:63:9f:ba:89:f5: 0b:1e:a1:d0:ad:8a:a7:42:c5:74:71:bf:60:f3:60:f3:46:2d: 68:d8:c3:f6:1a:92:08:97:de:7e:e8:5e:92:14:5d:0c:1f:79: 1f:f0:f3:63:3e:3d:11:c6:44:6f:35:cc:0a:b7:de:32:8c:fb: 40:31:ff:7f:2f:b4:be:0a:1e:04:88:3a:ae:03:53:58:4c:59: 25:75:60:8b:d8:86:c4:df:be:09:3b:62:b4:35:02:7f:9d:c5: ce:1a:d1:08:10:77:a7:09:0a:c7:7d:ee:b1:a6:4f:83:87:9d: 5b:6a:e4:73:69:9d:f4:a6:0a:ac:d3:20:d4:5f:64:eb:4e:f2: 64:e3:9e:b8:b5:e0:54:d2:47:50:26:16:89:6f:f2:9a:8d:86: fd:3b:23:67:7f:7d:1c:2f:62:ee:94:22:80:d7:88:80:76:f8: d7:bc:17:7b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTLZ9VyNmW5SeDe6FTYtna3CEnBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc5NjZEMzRFRkJGNENCQ0ZCMDBDRjlDMjA0NTM5QkZF MEEyNTMxNjAeFw0yNjA5MjcwMzM0MzZaFw0yNjA5MzAxMDU0MzZaMDMxMTAvBgNV BAMTKEFGOEQ4NkVFNUMzOTAwQUYyN0E1MjUxQ0I2Q0ExMzU1NDYxODUxQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxS8u3xLTFEuQWluDhlP8ZFN8g epKx61gRSC5tggIndIl4o9JvmfalTWqj/igqXF13BgiSOMSzthL76IFIZDh7gf3W YPcK8T0qd+y2ptxNY7/lC7KM+oDGmG1oquv7FhKKXyDEWSrKmkqEd4/y95ZXQyEl tdSdufxXA6g2QJVs/YJS/G1bOHvqKC0/LrAu7eeUH1KYWg4okHZPu+K8L1qJdL8V 1t4lzNNfTOXMhXZDHdT3GUAb9oHYgEW64Zcq5GLrLOnBvxng4L44bJmic9300A+j xpXbQYJK7QfDUWrMkA+7eWvzMRoatH5ev/beleG1RmamLYvMloGF7e+ikZ+7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUr42G7lw5AK8npSUctsoTVUYYUcYwHwYDVR0j BBgwFoAUZ5ZtNO+/TLz7AM+cIEU5v+CiUxYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzg1OTA3NC8wLzY3OTY2RDM0RUZCRjRDQkNGQjAwQ0Y5QzIwNDUz OUJGRTBBMjUzMTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjc5NjZEMzRFRkJGNENCQ0ZCMDBDRjlDMjA0NTM5QkZFMEEyNTMxNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc4NTkwNzQvMC82Nzk2NkQzNEVGQkY0 Q0JDRkIwMENGOUMyMDQ1MzlCRkUwQTI1MzE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWG+OFXSmnjuC HZYxKRCYsFHobHQCkD6JuqwfYigD/TaAoF1NucFZ7dxG6uVJD8Dwl/lb5VZF6W3S 4V3Uqj5DYYA9j5x6bCujLB8YnEsFYGpLnzBj22Ofuon1Cx6h0K2Kp0LFdHG/YPNg 80YtaNjD9hqSCJfefuhekhRdDB95H/DzYz49EcZEbzXMCrfeMoz7QDH/fy+0vgoe BIg6rgNTWExZJXVgi9iGxN++CTtitDUCf53FzhrRCBB3pwkKx33usaZPg4edW2rk c2md9KYKrNMg1F9k607yZOOeuLXgVNJHUCYWiW/ymo2G/TsjZ399HC9i7pQigNeI gHb417wXew== -----END CERTIFICATE-----Generated at Mon Sep 28 11:26:26 2026 by rpki-client