$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft File: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft (raw, json) Hash identifier: NQ6Fu5jHvF1OzcbvaHsYgmxJhT3HzIUjmHGeWqSCBRA= Subject key identifier: 8D:99:9A:ED:95:8C:A6:17:F9:9F:8D:37:AF:5F:36:FD:54:57:73:30 Authority key identifier: D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 Certificate issuer: /CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Certificate serial: 370A428EFC0D861E7635981619C1280C2E5B0D01 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft Manifest number: 013D Signing time: Thu 15 Oct 2026 01:16:03 +0000 Manifest this update: Thu 15 Oct 2026 01:11:03 +0000 Manifest next update: Sun 18 Oct 2026 12:26:03 +0000 Files and hashes: 1: D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl (hash: iBRF8dF9P2HPJsthv1RnDlANjSBJDzCojfDOeKcxS98=) 2: 3130332e3132302e39362e302f32342d3234203d3e20313337373230.roa (hash: TJ5xZ9TiOJJ1dCpAh7FBDEzLTP+zf3PlCGw0cOje3l8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 12:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0a:42:8e:fc:0d:86:1e:76:35:98:16:19:c1:28:0c:2e:5b:0d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5 Validity Not Before: Oct 15 01:11:03 2026 GMT Not After : Oct 18 12:26:03 2026 GMT Subject: CN=8D999AED958CA617F99F8D37AF5F36FD54577330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:84:f7:41:de:a4:b9:2c:a6:ec:3d:21:9b:a4: 77:2d:42:10:c5:c8:ec:c7:2f:65:b1:f1:b1:36:c6: c6:ac:b4:69:e0:53:b5:94:0e:44:50:1d:84:a8:ee: 1b:aa:dc:c6:6b:7c:73:7b:2e:a3:9f:1e:fc:75:f1: f9:ce:20:b4:04:f3:da:79:29:bf:ea:c7:80:2e:38: 63:b5:2c:10:08:3d:a9:e5:be:00:05:a8:e8:a9:5e: c5:48:df:38:29:e1:bc:36:e6:61:2a:ce:64:1d:2f: e3:d1:e5:8b:0f:07:3e:09:c5:ed:f9:ac:3e:be:15: d6:5f:cf:88:47:58:b8:82:d3:f8:a7:38:f9:1e:cc: 46:ad:a8:ab:56:a7:5e:20:56:ce:e2:4d:48:13:50: 0f:9a:e7:26:33:0c:6b:bf:e2:20:24:65:28:5b:bc: c8:fa:76:b4:ea:f7:36:48:1f:14:72:ac:9f:e3:76: 88:8d:3e:3e:f0:9e:ae:29:c9:b7:c4:23:0d:89:83: b7:9c:91:cf:5b:16:bb:ad:b0:e9:28:ab:38:b2:4a: b5:9b:b3:2f:ee:fe:0e:5d:59:1e:dd:b2:cd:1e:09: f1:e6:e6:de:d3:9f:c5:a3:a5:7c:13:66:36:4c:b4: a3:27:8f:a5:be:42:26:21:0b:ee:20:11:84:f4:d5: ef:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:99:9A:ED:95:8C:A6:17:F9:9F:8D:37:AF:5F:36:FD:54:57:73:30 X509v3 Authority Key Identifier: keyid:D9:69:31:B6:DF:A4:5C:70:AE:4F:A5:7D:E6:DD:96:DC:D9:1B:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553130049539/0/D96931B6DFA45C70AE4FA57DE6DD96DCD91B93E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f7:a3:d7:fe:11:b9:b0:5e:08:45:49:17:3b:30:9e:68:47: d9:9b:ce:0e:32:28:86:1d:e2:f2:84:be:4d:a4:1c:4b:cc:43: a2:30:8d:94:be:84:82:7a:86:cb:89:44:87:e1:7f:04:92:10: f4:fc:41:e4:d5:bc:6b:48:97:5e:f8:8c:db:81:a0:37:10:93: 52:38:c4:02:8d:69:f0:b7:99:23:e4:92:c4:96:1f:f3:7a:04: ee:f5:3f:93:45:28:c5:5c:15:e1:77:68:93:d6:65:2c:8c:1e: 19:d2:99:55:ef:91:2f:49:08:f9:a2:84:f6:45:64:f4:0b:71: 9f:bf:56:2b:1d:70:d1:a5:7f:12:fb:fa:3a:13:c1:5f:82:68: 4e:f7:d5:53:f3:af:a0:58:88:bb:7e:b9:96:a5:6a:13:b8:bc: e5:9b:3c:2d:78:43:c2:ad:2e:af:e3:5f:4e:69:11:09:f9:19: ee:bb:0a:9b:5d:db:ef:54:d2:db:01:6a:fa:25:14:61:d9:ee: c9:15:72:e6:eb:b1:ba:bc:ea:0e:26:0e:23:15:b4:ed:25:4e: bb:6d:ac:3a:7c:7d:78:1c:87:ad:1e:75:b6:ec:65:25:39:40: e6:19:f7:64:93:bb:16:1d:e0:39:6f:09:e5:ff:a7:06:51:09: ac:5c:97:0c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNwpCjvwNhh52NZgWGcEoDC5bDQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENE OTFCOTNFNTAeFw0yNjEwMTUwMTExMDNaFw0yNjEwMTgxMjI2MDNaMDMxMTAvBgNV BAMTKDhEOTk5QUVEOTU4Q0E2MTdGOTlGOEQzN0FGNUYzNkZENTQ1NzczMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7hPdB3qS5LKbsPSGbpHctQhDF yOzHL2Wx8bE2xsastGngU7WUDkRQHYSo7huq3MZrfHN7LqOfHvx18fnOILQE89p5 Kb/qx4AuOGO1LBAIPanlvgAFqOipXsVI3zgp4bw25mEqzmQdL+PR5YsPBz4Jxe35 rD6+FdZfz4hHWLiC0/inOPkezEatqKtWp14gVs7iTUgTUA+a5yYzDGu/4iAkZShb vMj6drTq9zZIHxRyrJ/jdoiNPj7wnq4pybfEIw2Jg7eckc9bFrutsOkoqziySrWb sy/u/g5dWR7dss0eCfHm5t7Tn8WjpXwTZjZMtKMnj6W+QiYhC+4gEYT01e+fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjZma7ZWMphf5n403r182/VRXczAwHwYDVR0j BBgwFoAU2Wkxtt+kXHCuT6V95t2W3Nkbk+UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEzMDA0OTUzOS8wL0Q5NjkzMUI2REZBNDVDNzBBRTRGQTU3REU2REQ5 NkRDRDkxQjkzRTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDk2OTMxQjZERkE0NUM3MEFFNEZBNTdERTZERDk2RENEOTFCOTNFNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMzAwNDk1MzkvMC9EOTY5MzFCNkRGQTQ1 QzcwQUU0RkE1N0RFNkREOTZEQ0Q5MUI5M0U1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/ej1/4RubBe CEVJFzswnmhH2ZvODjIohh3i8oS+TaQcS8xDojCNlL6EgnqGy4lEh+F/BJIQ9PxB 5NW8a0iXXviM24GgNxCTUjjEAo1p8LeZI+SSxJYf83oE7vU/k0UoxVwV4Xdok9Zl LIweGdKZVe+RL0kI+aKE9kVk9Atxn79WKx1w0aV/Evv6OhPBX4JoTvfVU/OvoFiI u365lqVqE7i85Zs8LXhDwq0ur+NfTmkRCfkZ7rsKm13b71TS2wFq+iUUYdnuyRVy 5uuxurzqDiYOIxW07SVOu22sOnx9eByHrR51tuxlJTlA5hn3ZJO7Fh3gOW8J5f+n BlEJrFyXDA== -----END CERTIFICATE-----Generated at Thu Oct 15 12:06:43 2026 by rpki-client