$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft (raw, json) Hash identifier: 6BL8Vzg1gZS0VtqP+FPyWCtNiUETBIzOlM4J5bqn5Kw= Subject key identifier: 24:D6:4D:14:5C:C5:B3:A5:DA:FC:4E:DB:FA:BF:B7:94:BD:C9:F3:4D Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Certificate serial: 5609C45ADBEAAF19AE54B2CFF4DB426907EEE5DE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft Manifest number: 013A Signing time: Wed 07 Oct 2026 21:51:52 +0000 Manifest this update: Wed 07 Oct 2026 21:46:52 +0000 Manifest next update: Sun 11 Oct 2026 01:24:52 +0000 Files and hashes: 1: 36302e3234372e3132382e302f31372d3234203d3e203338323833.roa (hash: 1HttYR1/9pBaXgtPZl1e4aT5OlAZeU+pPTR2/P3A8Bw=) 2: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl (hash: oInIlouOPEmCUAQ5gWCDbyyH8KoQqazLT2CMTwQqCFA=) 3: 3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa (hash: pEBTYMTrJftrdNUF40ROyii0lYiGHrRxtoVFM1V2qCo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 01:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:09:c4:5a:db:ea:af:19:ae:54:b2:cf:f4:db:42:69:07:ee:e5:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Validity Not Before: Oct 7 21:46:52 2026 GMT Not After : Oct 11 01:24:52 2026 GMT Subject: CN=24D64D145CC5B3A5DAFC4EDBFABFB794BDC9F34D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4c:2d:93:f5:3d:a1:15:f1:82:16:23:b5:e4: cd:2a:15:bb:c4:7c:27:2f:38:a5:f3:07:0f:40:89: 69:f2:8e:97:70:ed:08:49:e2:75:7c:e9:ba:35:30: 18:7b:26:47:e7:cc:5c:28:49:ee:42:d6:e6:d4:3f: 20:23:c7:7d:93:01:94:6d:87:e5:7b:ab:6e:89:59: 25:c1:c8:be:ab:86:c7:bb:66:b4:7a:72:43:f6:05: 0c:6d:39:3a:9c:7e:6a:68:33:7c:d6:77:7a:47:3c: 58:e2:91:77:0a:94:f5:6a:7f:8b:be:4d:38:81:fa: 38:06:0e:3a:ad:9a:cb:de:d3:cd:f8:04:21:72:1d: 0c:c7:a5:81:a6:1c:93:d6:43:f6:02:40:ed:a2:c7: c9:18:7a:a5:4a:35:98:24:66:d1:3f:17:7f:96:1b: 74:22:66:25:20:24:bc:c4:32:cf:c6:35:75:3b:30: 67:c6:f1:34:a1:cc:24:62:e5:cd:b0:98:b9:c5:e3: d2:fb:7f:09:e9:43:a8:86:fe:b3:c7:f4:fd:cf:4f: bb:63:e1:8f:d3:a5:31:30:8b:cb:08:c3:cd:d7:f0: 40:45:bd:d1:54:4e:fe:f0:8f:6a:c1:e7:0e:29:3f: c2:9b:2d:90:88:d1:6c:4a:34:4c:25:b4:21:44:14: b2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D6:4D:14:5C:C5:B3:A5:DA:FC:4E:DB:FA:BF:B7:94:BD:C9:F3:4D X509v3 Authority Key Identifier: keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b4:bf:06:4d:c0:01:a8:dc:9e:35:de:3c:59:f5:c0:73:da: 8c:3c:7c:57:8e:de:d6:51:83:51:5d:76:b4:8f:96:ae:bc:17: 1c:bf:7c:3f:c3:ec:65:e9:04:e3:ac:5e:7f:2a:49:ba:d0:20: 0f:a1:24:4d:1b:d5:0f:0f:b2:d5:12:5a:fd:c6:5a:27:30:78: f7:9a:db:a9:f5:6c:c4:f6:22:32:6f:13:03:ad:f6:a1:d7:35: 17:4a:bc:66:b8:fe:04:1e:8f:e2:e2:6a:60:4b:ed:53:71:8e: fe:5e:44:4d:38:70:2a:a7:0c:68:1d:af:5d:a4:b6:ad:29:bd: e7:62:25:ca:6f:cf:af:0f:3d:87:b5:03:a3:db:36:de:86:d0: 75:a6:e4:ae:89:be:45:ee:11:ff:e1:41:96:57:b9:80:50:49: de:2d:33:c1:e0:ea:6b:68:3a:fe:b0:bd:f9:3f:ec:1a:f2:43: d1:a9:0b:14:22:b0:5d:b4:ce:00:65:c4:da:7e:d4:b2:71:b4: 5d:b6:54:63:2b:d7:68:43:a3:7d:47:91:01:49:73:aa:2a:54: 08:b9:28:03:32:5c:e3:8d:c7:7f:6d:08:e3:64:31:c3:8d:c6: ad:15:30:3e:51:dd:45:ea:ea:5e:12:6b:df:84:d3:c0:d2:5f: df:81:22:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVgnEWtvqrxmuVLLP9NtCaQfu5d4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThF NTU3NURDRjAeFw0yNjEwMDcyMTQ2NTJaFw0yNjEwMTEwMTI0NTJaMDMxMTAvBgNV BAMTKDI0RDY0RDE0NUNDNUIzQTVEQUZDNEVEQkZBQkZCNzk0QkRDOUYzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TC2T9T2hFfGCFiO15M0qFbvE fCcvOKXzBw9AiWnyjpdw7QhJ4nV86bo1MBh7JkfnzFwoSe5C1ubUPyAjx32TAZRt h+V7q26JWSXByL6rhse7ZrR6ckP2BQxtOTqcfmpoM3zWd3pHPFjikXcKlPVqf4u+ TTiB+jgGDjqtmsve0834BCFyHQzHpYGmHJPWQ/YCQO2ix8kYeqVKNZgkZtE/F3+W G3QiZiUgJLzEMs/GNXU7MGfG8TShzCRi5c2wmLnF49L7fwnpQ6iG/rPH9P3PT7tj 4Y/TpTEwi8sIw83X8EBFvdFUTv7wj2rB5w4pP8KbLZCI0WxKNEwltCFEFLLfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJNZNFFzFs6Xa/E7b+r+3lL3J800wHwYDVR0j BBgwFoAUdEIX1vdOMzjEpEdids5s6OVXXc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDkwNDk2MS8wLzc0NDIxN0Q2Rjc0RTMzMzhDNEE0NDc2Mjc2Q0U2 Q0U4RTU1NzVEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5MDQ5NjEvMC83NDQyMTdENkY3NEUz MzM4QzRBNDQ3NjI3NkNFNkNFOEU1NTc1RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbS/Bk3AAajc njXePFn1wHPajDx8V47e1lGDUV12tI+WrrwXHL98P8PsZekE46xefypJutAgD6Ek TRvVDw+y1RJa/cZaJzB495rbqfVsxPYiMm8TA632odc1F0q8Zrj+BB6P4uJqYEvt U3GO/l5ETThwKqcMaB2vXaS2rSm952Ilym/Prw89h7UDo9s23obQdabkrom+Re4R /+FBlle5gFBJ3i0zweDqa2g6/rC9+T/sGvJD0akLFCKwXbTOAGXE2n7UsnG0XbZU YyvXaEOjfUeRAUlzqipUCLkoAzJc443Hf20I42Qxw43GrRUwPlHdRerqXhJr34TT wNJf34EivA== -----END CERTIFICATE-----Generated at Fri Oct 9 14:37:44 2026 by rpki-client