$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft File: D850080623F8BDB006D1C2A5705B45346A8CA661.mft (raw, json) Hash identifier: abHrz9YGxRlFBmN+WyXGCtcxC3MCMdJa2HgqaQ/Ap3E= Subject key identifier: DB:E3:38:3E:72:CC:BF:22:B7:0B:FB:13:1D:A1:B4:E7:03:E2:FA:E0 Authority key identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 Certificate issuer: /CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Certificate serial: 7CB613F7DA45580FD3C9C190B7427C69FFBCF40D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft Manifest number: 013C Signing time: Sun 11 Oct 2026 05:40:20 +0000 Manifest this update: Sun 11 Oct 2026 05:35:20 +0000 Manifest next update: Wed 14 Oct 2026 11:40:20 +0000 Files and hashes: 1: 3135372e31302e3232302e302f32342d3332203d3e203231383539.roa (hash: Rxd0o/VyuWkJ3xTShA4IwXmpRpyz089xpF8UECWdS0c=) 2: 3135372e31302e3232312e302f32342d3332203d3e203231383539.roa (hash: /TNM61t565u3SRwpcC0q9IjEYIMqSAnNTjuw6cWQXYQ=) 3: D850080623F8BDB006D1C2A5705B45346A8CA661.crl (hash: Twyz5CIYx+KVF+i2bQJUcEJimg40KVomKFiyoD6dgns=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 11:40:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b6:13:f7:da:45:58:0f:d3:c9:c1:90:b7:42:7c:69:ff:bc:f4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Validity Not Before: Oct 11 05:35:20 2026 GMT Not After : Oct 14 11:40:20 2026 GMT Subject: CN=DBE3383E72CCBF22B70BFB131DA1B4E703E2FAE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e0:a8:5b:62:92:16:55:aa:32:87:d0:16:db: 78:a4:a8:01:99:3e:8a:14:4f:96:ca:e6:e1:bf:01: 95:2f:8b:c6:4b:c6:9e:16:ff:d8:0c:a6:77:67:10: ae:21:08:fe:fb:5b:61:38:b3:77:8c:15:7b:ab:2f: 7b:ec:5d:7e:91:f2:57:42:ed:56:6b:b4:ae:0a:ca: bb:37:16:41:94:c7:d5:fd:fe:f5:ca:57:f3:79:b8: 19:ad:55:df:05:99:f8:11:b4:e9:6a:a0:b5:5b:aa: c4:de:fd:e5:c0:7c:1d:6b:12:00:b8:e9:79:64:e5: 61:69:2f:77:0a:89:f2:0d:ec:fa:91:90:7e:93:75: 3d:86:c9:48:da:b9:99:f5:80:fd:82:8b:1d:dc:c6: 5b:86:f8:e2:bd:0c:2d:c3:ec:44:3e:c3:e0:55:60: 60:05:be:1b:dd:a1:af:3f:31:c9:5d:4d:72:a8:98: 3f:30:fe:45:99:b4:c8:5d:89:9a:f7:c5:b8:1e:91: ef:60:97:6b:33:89:93:28:73:06:ec:0a:e0:50:1f: b0:a0:0c:8e:99:9d:ed:e7:2b:91:90:f1:12:01:61: e9:15:dc:57:2d:b7:87:50:e1:c9:e8:40:ac:fb:62: 2d:c6:53:f6:63:55:46:04:52:d3:8d:20:d0:66:6b: 6d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E3:38:3E:72:CC:BF:22:B7:0B:FB:13:1D:A1:B4:E7:03:E2:FA:E0 X509v3 Authority Key Identifier: keyid:D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b8:ae:c2:88:94:de:f5:20:f1:7b:5b:95:7c:58:e2:e3:6c: e4:bd:d8:60:10:1b:9c:f4:91:54:ff:94:b5:c5:c4:f9:2a:4c: c9:38:41:a6:60:e2:4a:c0:f4:cc:27:47:5c:fc:a9:5e:cd:1d: 1f:1a:25:07:85:a4:bc:d6:28:8b:6d:9b:c4:a4:43:56:1e:aa: 28:f6:d0:a7:a0:cd:b1:aa:5c:a9:80:33:ce:88:74:5a:6d:d9: 22:e5:c4:d7:ad:2e:6c:18:8b:38:f1:bc:83:55:8f:5a:be:82: 1e:19:89:ea:b0:c2:0a:27:7a:54:c1:42:27:da:66:c8:1a:6f: c0:c2:d3:43:31:3b:ac:cb:35:80:c7:3c:db:96:07:ec:8a:4c: 39:71:1e:97:56:2d:48:cc:74:6f:5a:89:9f:aa:48:69:42:c3: 6f:31:3c:57:38:79:89:18:52:b4:62:b5:fd:79:40:08:82:01: b5:29:a8:87:6a:ab:59:34:10:77:eb:4f:7d:8d:30:90:40:b4: 10:b7:81:08:55:9e:3e:31:a0:2f:22:0e:2c:6d:17:a9:0a:c7: e7:94:a7:ea:53:53:c6:95:cb:49:99:09:e2:9d:be:99:fe:a7: 11:1c:8a:43:f0:ff:cc:41:72:15:02:a5:df:39:e1:77:0b:e4: 0b:2c:f0:3a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfLYT99pFWA/TycGQt0J8af+89A0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2 QThDQTY2MTAeFw0yNjEwMTEwNTM1MjBaFw0yNjEwMTQxMTQwMjBaMDMxMTAvBgNV BAMTKERCRTMzODNFNzJDQ0JGMjJCNzBCRkIxMzFEQTFCNEU3MDNFMkZBRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe4KhbYpIWVaoyh9AW23ikqAGZ PooUT5bK5uG/AZUvi8ZLxp4W/9gMpndnEK4hCP77W2E4s3eMFXurL3vsXX6R8ldC 7VZrtK4Kyrs3FkGUx9X9/vXKV/N5uBmtVd8FmfgRtOlqoLVbqsTe/eXAfB1rEgC4 6Xlk5WFpL3cKifIN7PqRkH6TdT2GyUjauZn1gP2Cix3cxluG+OK9DC3D7EQ+w+BV YGAFvhvdoa8/McldTXKomD8w/kWZtMhdiZr3xbgeke9gl2sziZMocwbsCuBQH7Cg DI6Zne3nK5GQ8RIBYekV3Fctt4dQ4cnoQKz7Yi3GU/ZjVUYEUtONINBma20jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2+M4PnLMvyK3C/sTHaG05wPi+uAwHwYDVR0j BBgwFoAU2FAIBiP4vbAG0cKlcFtFNGqMpmEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8xL0Q4NTAwODA2MjNGOEJEQjAwNkQxQzJBNTcwNUI0 NTM0NkE4Q0E2NjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2QThDQTY2MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMS9EODUwMDgwNjIzRjhC REIwMDZEMUMyQTU3MDVCNDUzNDZBOENBNjYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbiuwoiU3vUg 8XtblXxY4uNs5L3YYBAbnPSRVP+UtcXE+SpMyThBpmDiSsD0zCdHXPypXs0dHxol B4WkvNYoi22bxKRDVh6qKPbQp6DNsapcqYAzzoh0Wm3ZIuXE160ubBiLOPG8g1WP Wr6CHhmJ6rDCCid6VMFCJ9pmyBpvwMLTQzE7rMs1gMc825YH7IpMOXEel1YtSMx0 b1qJn6pIaULDbzE8Vzh5iRhStGK1/XlACIIBtSmoh2qrWTQQd+tPfY0wkEC0ELeB CFWePjGgLyIOLG0XqQrH55Sn6lNTxpXLSZkJ4p2+mf6nERyKQ/D/zEFyFQKl3znh dwvkCyzwOg== -----END CERTIFICATE-----Generated at Mon Oct 12 17:10:44 2026 by rpki-client