$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft File: CAA1931F96137E124A84BFBFF4963C4475B970C7.mft (raw, json) Hash identifier: jFF9D/pFeQVtxWybLRwG8BCXQ4yirkFf9Ii4lM8NoiM= Subject key identifier: 1F:69:1E:91:24:3F:B7:40:83:F3:EE:13:CE:71:E6:79:C7:CB:0F:47 Authority key identifier: CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 Certificate issuer: /CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Certificate serial: 79E9CDCB455C22A60DEAC26838E133F46D3DA7EE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft Manifest number: 013D Signing time: Tue 13 Oct 2026 04:07:42 +0000 Manifest this update: Tue 13 Oct 2026 04:02:42 +0000 Manifest next update: Fri 16 Oct 2026 05:09:42 +0000 Files and hashes: 1: CAA1931F96137E124A84BFBFF4963C4475B970C7.crl (hash: Qf/X43udUfcg8jBo7I1XWvrbRDGdo04eDQdcs0FC50k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 05:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e9:cd:cb:45:5c:22:a6:0d:ea:c2:68:38:e1:33:f4:6d:3d:a7:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Validity Not Before: Oct 13 04:02:42 2026 GMT Not After : Oct 16 05:09:42 2026 GMT Subject: CN=1F691E91243FB74083F3EE13CE71E679C7CB0F47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:81:69:d1:c6:89:6b:aa:84:a7:65:8e:b1: c5:bd:6b:56:3b:9e:48:9b:2c:ec:03:49:ce:ec:9a: 1e:f2:bb:1e:cf:c1:e3:43:3c:5e:bd:46:41:55:f2: 1b:e1:12:a6:e0:f1:cb:a6:5f:14:72:a8:46:6f:10: 77:7d:3d:f4:a2:96:50:eb:96:ea:3d:32:2c:cf:da: a3:81:0a:36:ba:20:24:33:81:9e:55:29:d7:d2:5f: 2e:58:03:68:47:fc:5c:a7:28:f8:ad:f1:24:4b:39: cd:ff:08:12:5a:7f:89:27:36:da:5b:77:48:ff:e9: 03:42:75:21:bf:a2:c7:b7:cb:15:2c:fd:e0:75:ec: 80:6e:7e:a4:c6:a9:07:99:4f:39:f4:a7:4f:11:bf: f5:7c:31:06:de:ee:50:6c:b1:7a:6f:8f:93:30:25: 8a:04:66:c7:3a:a6:0a:bb:54:58:3d:a9:03:19:79: b6:5b:08:9f:1f:e9:ed:46:91:03:1f:60:a7:cc:57: 81:79:c6:cd:aa:85:c7:4b:b5:48:d8:7d:92:71:93: 60:27:5c:ad:5b:cc:c8:ae:e8:98:b0:c5:54:10:78: 01:7e:1b:ac:75:a5:5e:f4:7b:8b:da:42:80:90:63: 08:51:dc:09:f6:f5:ba:4d:95:8f:c9:31:7b:58:5e: dc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:69:1E:91:24:3F:B7:40:83:F3:EE:13:CE:71:E6:79:C7:CB:0F:47 X509v3 Authority Key Identifier: keyid:CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c8:3e:e0:4f:72:0d:2c:24:7f:d1:dd:c4:b0:55:5b:33:01: cf:a8:78:20:6d:e7:9e:e4:e0:d5:b6:fe:8b:03:a5:85:46:e6: a7:d2:2b:cb:85:e2:18:c9:5b:9c:31:bd:01:82:49:0d:e3:91: f5:4c:d7:1e:7b:03:5d:da:1b:13:f6:ea:f1:c3:a3:ed:6e:a4: 0e:08:29:59:3a:df:ac:aa:88:b9:91:65:e9:42:81:78:42:54: 4b:65:5e:a9:28:98:58:0e:b9:d6:c9:b7:90:72:c3:33:7c:7e: e9:9a:1b:b1:89:fa:ee:2d:73:7a:6f:92:45:6b:14:da:fe:28: 8e:ce:e5:05:d9:c0:b1:eb:1c:29:2f:8d:95:99:15:fa:a8:7c: 17:b2:0e:be:cb:80:1a:14:0b:64:7f:50:9b:99:34:5f:c4:c0: 93:0d:1b:84:da:f8:98:d5:8d:a0:2c:d5:75:34:f0:22:0a:65: 89:03:28:03:b9:1e:03:31:e5:5b:d2:cb:5a:8f:8a:62:c0:ec: 79:64:39:74:14:d0:21:2d:79:f2:bf:18:9a:05:a9:3b:21:8d: d2:91:a4:ab:74:56:c4:b8:e7:20:fd:2d:06:fe:4e:bb:5f:b5: 8a:2a:77:e9:d9:d5:18:2e:47:ec:aa:fb:ce:47:4b:86:a9:c4: 1c:fe:ba:ca -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeenNy0VcIqYN6sJoOOEz9G09p+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3 NUI5NzBDNzAeFw0yNjEwMTMwNDAyNDJaFw0yNjEwMTYwNTA5NDJaMDMxMTAvBgNV BAMTKDFGNjkxRTkxMjQzRkI3NDA4M0YzRUUxM0NFNzFFNjc5QzdDQjBGNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzuYFp0caJa6qEp2WOscW9a1Y7 nkibLOwDSc7smh7yux7PweNDPF69RkFV8hvhEqbg8cumXxRyqEZvEHd9PfSillDr luo9MizP2qOBCja6ICQzgZ5VKdfSXy5YA2hH/FynKPit8SRLOc3/CBJaf4knNtpb d0j/6QNCdSG/ose3yxUs/eB17IBufqTGqQeZTzn0p08Rv/V8MQbe7lBssXpvj5Mw JYoEZsc6pgq7VFg9qQMZebZbCJ8f6e1GkQMfYKfMV4F5xs2qhcdLtUjYfZJxk2An XK1bzMiu6JiwxVQQeAF+G6x1pV70e4vaQoCQYwhR3An29bpNlY/JMXtYXtzJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUH2kekSQ/t0CD8+4TznHmecfLD0cwHwYDVR0j BBgwFoAUyqGTH5YTfhJKhL+/9JY8RHW5cMcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8wL0NBQTE5MzFGOTYxMzdFMTI0QTg0QkZCRkY0OTYz QzQ0NzVCOTcwQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3NUI5NzBDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMC9DQUExOTMxRjk2MTM3 RTEyNEE4NEJGQkZGNDk2M0M0NDc1Qjk3MEM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8g+4E9yDSwk f9HdxLBVWzMBz6h4IG3nnuTg1bb+iwOlhUbmp9Iry4XiGMlbnDG9AYJJDeOR9UzX HnsDXdobE/bq8cOj7W6kDggpWTrfrKqIuZFl6UKBeEJUS2VeqSiYWA651sm3kHLD M3x+6ZobsYn67i1zem+SRWsU2v4ojs7lBdnAsescKS+NlZkV+qh8F7IOvsuAGhQL ZH9Qm5k0X8TAkw0bhNr4mNWNoCzVdTTwIgpliQMoA7keAzHlW9LLWo+KYsDseWQ5 dBTQIS158r8YmgWpOyGN0pGkq3RWxLjnIP0tBv5Ou1+1iip36dnVGC5H7Kr7zkdL hqnEHP66yg== -----END CERTIFICATE-----Generated at Wed Oct 14 11:55:45 2026 by rpki-client