$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft File: 18841C63CD89383303F1BA048085C2212B03B0BD.mft (raw, json) Hash identifier: x4SrzhEXBtx1MemrvHf9CdK/Es1WeZQTxlnmiYNq7Sc= Subject key identifier: 81:23:85:B8:66:E7:DD:0C:94:1A:B5:AD:DE:22:79:D3:71:62:1D:E2 Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD Certificate serial: 12C4A8718487DBD93131C399B8BFE4F12FEB1243 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft Manifest number: 0167 Signing time: Sat 10 Oct 2026 07:31:57 +0000 Manifest this update: Sat 10 Oct 2026 07:26:57 +0000 Manifest next update: Tue 13 Oct 2026 19:16:57 +0000 Files and hashes: 1: 18841C63CD89383303F1BA048085C2212B03B0BD.crl (hash: oAdElMF6fE570HYS1fkZNJHy2/ONss6VW4JrhN2QgUo=) 2: 3132302e33312e38302e302f32302d3234203d3e2030.roa (hash: zlPgx8svUOkP6QDvnXsR/wJyPXALOkehhcLKiX1FHDQ=) 3: 3131322e37332e302e302f31362d3234203d3e20323135353935.roa (hash: Q3QhgmMW/rCek5Iq3n4eTNvmTG379sxYdNigmgh3/Aw=) 4: 3132302e33312e3134362e302f32332d3234203d3e2030.roa (hash: 9t7aUa47CAxmq6LpXdIxR3Z0JJuovCo23iMtWVoITJw=) 5: 3131322e37332e302e302f31362d3234203d3e2036303739.roa (hash: ic+bMYpwvMXyG0wzfRi9FvZLLUsrr5cGyKDq1YgtaI0=) 6: 3131392e33382e3132382e302f31382d3234203d3e2030.roa (hash: bt3UYw+1AatIAMHbGLWYWBwPSL7RH6mMPYGsF/VCSVQ=) 7: 3131322e37332e302e302f31362d3234203d3e2039343537.roa (hash: CA1EM4DqlM9Dg2v/2bjs6kYasg7l2AnSBSDJR7UX2kM=) 8: 3131322e37332e302e302f31362d3234203d3e20333938373034.roa (hash: UNzDlcbKrTZljDk9qpnBAtnIZ9As6OiMLBqsjONpdqU=) 9: 3132302e33312e37322e302f32312d3234203d3e2030.roa (hash: GCRq2g97fXKgccfqVlP1xogDjkOMDLxnRQ6MgzSCYvs=) 10: 3131322e37332e302e302f31362d3234203d3e2032393134.roa (hash: GUOSdxXdq2ZCoFEWX4kUxEqTgxp4mGF6Tfwsv8ROglg=) 11: 3132302e33312e36342e302f32332d3234203d3e2030.roa (hash: 7QhBSr3zxLPMAQ/Xu9Ikk4uLl2pwkEVBRp6apl1fuYM=) 12: 3132302e33312e3139322e302f31382d3234203d3e2030.roa (hash: zneDd+D0qba/NMI1b4Dwh5lgN9WENVTPsJNFHtC+fBc=) 13: 3132302e33312e3134382e302f32322d3234203d3e2030.roa (hash: x3jptYc/NSd1RqPdXdARBG58Cgg7lBo0R8DX+OtEZGA=) 14: 3131322e37332e302e302f31362d3234203d3e2039333138.roa (hash: ATZ0tE1Da7tgOWKPtuupM0upyFDxi0IfpNzaEjY+UOw=) 15: 3132302e33312e39362e302f31392d3234203d3e2030.roa (hash: xQ4R/wnGcu+0HON4qZPLwL2kbRSaYBA6QoHUQZOeOB8=) 16: 3132302e33312e3136302e302f31392d3234203d3e2030.roa (hash: 25WWbovNyEjrH0J2T0Na4+TXs/ZZYTEQWAlYhfam2iE=) 17: 3131322e37332e302e302f31362d3234203d3e2039333034.roa (hash: lWS9dlaXVpnifPvi54jbTcf/VdN7VYeL0YdJMjg+n7k=) 18: 3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa (hash: MdOhlCBAEVr8mcWOdJADYfQQFdivj4/VdgSUXqpzjzs=) 19: 3132302e33312e302e302f31382d3234203d3e2030.roa (hash: Vx9rNGqe/qspYPFAK4aaD69Ln0YuLKP40YKY8O5iDoU=) 20: 3132302e33312e3135322e302f32312d3234203d3e2030.roa (hash: FsvCZUbaG3hRlZH6kUmFkegVgxRRyCSmMilMjQWqGss=) 21: 3132302e33312e3134352e302f32342d3234203d3e2030.roa (hash: xX26RFz/Bq41UW3iRcZ/ng875Kl0I6J4i5WdOJY9HN0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c4:a8:71:84:87:db:d9:31:31:c3:99:b8:bf:e4:f1:2f:eb:12:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD Validity Not Before: Oct 10 07:26:57 2026 GMT Not After : Oct 13 19:16:57 2026 GMT Subject: CN=812385B866E7DD0C941AB5ADDE2279D371621DE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:26:ea:06:ea:44:dd:08:d0:41:0a:5d:72:17: 14:96:41:1b:5f:7f:93:46:53:ac:f7:6a:46:93:7e: 0c:49:92:3b:76:36:31:6d:1d:e0:13:d3:90:3a:80: 82:1e:82:52:4c:d0:a1:c7:a4:50:99:7e:22:1f:bc: 10:e0:5e:8d:bc:7f:81:ba:bc:3f:38:65:f2:2b:ae: 86:a0:17:4f:79:d4:f3:1f:43:14:af:51:1d:49:b4: e1:44:e0:59:90:8a:42:bc:62:da:50:ea:1a:fe:ae: 63:65:ec:bb:e0:93:6b:a4:ee:ac:66:7b:79:8f:95: ad:23:d4:a1:1b:a8:66:9f:0e:1f:3d:6b:3d:7d:78: 15:85:2f:dd:43:77:75:0d:72:10:4e:3f:69:75:7f: 60:d1:8c:db:55:8d:3c:bd:b2:ef:b7:c2:df:a2:5d: b5:06:cc:55:ef:39:c8:13:cc:7d:7f:83:20:b8:5b: c8:c3:e6:6e:6f:a0:2a:4d:eb:a8:71:a5:79:ec:04: 79:85:30:62:b8:31:d9:7e:63:3d:d2:22:2e:c1:18: 1a:36:c9:39:6d:b4:95:da:e0:83:69:fa:85:e3:6d: 0e:ab:88:4c:57:f6:df:78:cd:d4:26:95:a4:27:4c: 38:0c:8c:f1:3d:46:f9:14:45:6f:5c:b7:1c:06:92: cd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:23:85:B8:66:E7:DD:0C:94:1A:B5:AD:DE:22:79:D3:71:62:1D:E2 X509v3 Authority Key Identifier: keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:3c:d9:16:7e:12:1b:58:36:1a:f5:f5:28:26:4f:ca:6c:3f: 0f:6d:25:80:8c:3d:77:9c:69:30:04:20:18:9d:45:04:38:56: c8:51:9e:4c:a0:b4:40:e4:9c:99:54:b2:33:30:ad:26:9b:41: e3:12:f2:70:44:f4:b1:ce:cc:60:dd:91:df:aa:fc:ea:d6:48: 4e:3b:c9:94:cb:9b:b6:94:9d:dd:f4:77:7e:60:5c:90:55:c0: a5:4c:d3:54:54:53:e8:31:5d:51:66:3d:a0:93:79:d2:a9:67: 84:ac:92:13:13:c8:af:11:3b:7f:ae:90:26:6a:4c:ff:f5:8f: ff:a5:af:23:9f:3f:bb:79:bf:fb:45:ab:d9:af:de:d0:9a:46: 2f:c5:de:73:cf:bf:5a:ae:e3:e3:5a:4c:77:41:55:de:e1:dd: 4e:25:17:0a:13:b6:7e:a3:2d:df:f2:ee:65:4d:81:2f:aa:e7: 06:c5:c2:c4:cb:ab:a7:fc:df:19:4d:3b:f2:61:09:ca:41:32: 95:f7:1a:38:fc:46:06:c3:ba:1f:45:68:8c:ca:4b:b3:7f:8f: bd:83:bb:57:72:be:b0:e0:80:b7:56:bc:41:3d:37:23:24:b0: c7:b5:6e:b9:0d:28:a9:6f:c5:d4:16:d5:b7:0b:0a:65:0d:88: bc:54:32:fe -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEsSocYSH29kxMcOZuL/k8S/rEkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy QjAzQjBCRDAeFw0yNjEwMTAwNzI2NTdaFw0yNjEwMTMxOTE2NTdaMDMxMTAvBgNV BAMTKDgxMjM4NUI4NjZFN0REMEM5NDFBQjVBRERFMjI3OUQzNzE2MjFERTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJuoG6kTdCNBBCl1yFxSWQRtf f5NGU6z3akaTfgxJkjt2NjFtHeAT05A6gIIeglJM0KHHpFCZfiIfvBDgXo28f4G6 vD84ZfIrroagF0951PMfQxSvUR1JtOFE4FmQikK8YtpQ6hr+rmNl7Lvgk2uk7qxm e3mPla0j1KEbqGafDh89az19eBWFL91Dd3UNchBOP2l1f2DRjNtVjTy9su+3wt+i XbUGzFXvOcgTzH1/gyC4W8jD5m5voCpN66hxpXnsBHmFMGK4Mdl+Yz3SIi7BGBo2 yTlttJXa4INp+oXjbQ6riExX9t94zdQmlaQnTDgMjPE9RvkURW9ctxwGks3JAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgSOFuGbn3QyUGrWt3iJ503FiHeIwHwYDVR0j BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMC8xODg0MUM2M0NEODkz ODMzMDNGMUJBMDQ4MDg1QzIyMTJCMDNCMEJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTzZFn4SG1g2 GvX1KCZPymw/D20lgIw9d5xpMAQgGJ1FBDhWyFGeTKC0QOScmVSyMzCtJptB4xLy cET0sc7MYN2R36r86tZITjvJlMubtpSd3fR3fmBckFXApUzTVFRT6DFdUWY9oJN5 0qlnhKySExPIrxE7f66QJmpM//WP/6WvI58/u3m/+0Wr2a/e0JpGL8Xec8+/Wq7j 41pMd0FV3uHdTiUXChO2fqMt3/LuZU2BL6rnBsXCxMurp/zfGU078mEJykEylfca OPxGBsO6H0VojMpLs3+PvYO7V3K+sOCAt1a8QT03IySwx7VuuQ0oqW/F1BbVtwsK ZQ2IvFQy/g== -----END CERTIFICATE-----Generated at Sat Oct 10 13:44:05 2026 by rpki-client