$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft File: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft (raw, json) Hash identifier: sT62kf+8Y28K7LHUEEe4f3TU11LZ8FMhz8HSFP04Je4= Subject key identifier: 28:AE:03:D6:3C:38:61:37:2C:4E:C7:F3:09:63:5D:60:AF:AC:C1:60 Authority key identifier: AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 Certificate issuer: /CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Certificate serial: 3A39E16390D4B32AB8FEBF8BACCA86A0700A4E25 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft Manifest number: 012F Signing time: Sun 11 Oct 2026 22:26:10 +0000 Manifest this update: Sun 11 Oct 2026 22:21:10 +0000 Manifest next update: Thu 15 Oct 2026 07:42:10 +0000 Files and hashes: 1: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl (hash: 5NdLwUUBxHwqtzAShB/yclg5Rx6B8s0n3radBguQAGQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:39:e1:63:90:d4:b3:2a:b8:fe:bf:8b:ac:ca:86:a0:70:0a:4e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Validity Not Before: Oct 11 22:21:10 2026 GMT Not After : Oct 15 07:42:10 2026 GMT Subject: CN=28AE03D63C3861372C4EC7F309635D60AFACC160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:36:5c:36:e0:4a:9c:07:a1:76:6b:61:16:dc: 4c:1f:08:cf:d7:00:28:4e:62:75:2b:be:63:a9:19: 88:76:34:c2:b8:1f:28:f7:23:3e:23:3a:cd:ca:0b: 06:77:6a:fa:17:3a:72:23:8c:f4:e1:f3:94:4c:03: 31:08:3b:83:d6:3e:6b:f6:1b:51:dd:0c:41:cb:84: 0c:de:37:33:f1:27:da:ab:d8:cd:95:77:0e:f1:05: 24:f1:f3:ce:d5:b8:cf:81:ee:9b:2f:f1:16:fe:05: c7:18:05:16:cb:0d:26:be:68:bb:17:f1:d3:a3:f0: f3:14:b1:00:af:a7:2c:9a:c9:5a:3c:eb:04:f1:69: 7a:d2:8f:0d:dc:82:12:02:a7:ac:21:ed:b7:da:71: 50:68:3d:0f:d8:c7:55:22:e1:7e:8e:4f:75:99:88: 3b:58:46:f2:e8:8b:c2:c3:70:78:ca:67:73:39:4d: e3:c9:a9:15:21:ce:06:48:16:d2:88:fc:49:a8:45: 39:3e:f4:a8:23:ff:0f:c7:21:45:34:a6:59:72:9c: ef:ff:c3:03:42:71:d1:33:03:c7:a8:84:35:0a:c2: eb:a5:37:e5:6d:79:c5:75:5d:3c:67:62:f8:97:68: 48:34:b5:f6:9d:15:c3:a5:d7:97:18:57:21:42:e9: 85:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AE:03:D6:3C:38:61:37:2C:4E:C7:F3:09:63:5D:60:AF:AC:C1:60 X509v3 Authority Key Identifier: keyid:AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f1:ea:43:4e:06:e4:22:12:77:af:d7:4d:c3:ec:51:4b:b1: 77:a8:cf:f0:2d:20:fe:2c:35:ca:a9:ca:19:e1:a4:e2:00:60: 81:ea:c4:79:b3:db:d9:15:f0:cc:2b:89:9d:8a:8a:49:17:ca: ae:bb:7e:7f:9c:7f:80:5e:ea:17:f4:00:1a:43:87:e2:b6:a1: 18:19:b5:6c:2f:1f:49:65:1a:24:34:06:87:1f:78:72:27:fb: b8:c0:12:4d:71:38:b1:95:43:67:10:1f:4f:fe:66:b2:21:71: 2a:d5:3f:a6:22:4f:af:13:e4:09:d8:9b:e2:9e:4b:57:e9:94: 44:ca:85:6f:aa:7d:f3:8e:7c:90:08:d2:42:1a:86:a6:0a:dd: 6a:36:80:1e:94:e4:ff:51:d4:41:c1:ae:5b:f1:47:c6:3a:97: 25:75:bb:bb:a6:68:69:53:7f:e9:a3:25:76:3f:eb:84:d8:e4: 29:94:58:d3:01:71:0d:fa:04:bd:35:50:82:c9:b8:d3:a6:74: 56:8b:98:12:8b:b8:a5:03:1d:4e:ce:3d:b1:aa:3c:c1:41:5d: e3:52:5c:36:84:d1:4c:83:bd:42:f4:68:20:08:01:b1:01:c9: e6:d4:db:c4:93:b1:74:8c:f2:82:1f:b0:47:c2:08:f9:51:fc: 50:25:b6:cb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOjnhY5DUsyq4/r+LrMqGoHAKTiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJD QUI5QTM0MTAeFw0yNjEwMTEyMjIxMTBaFw0yNjEwMTUwNzQyMTBaMDMxMTAvBgNV BAMTKDI4QUUwM0Q2M0MzODYxMzcyQzRFQzdGMzA5NjM1RDYwQUZBQ0MxNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiNlw24EqcB6F2a2EW3EwfCM/X AChOYnUrvmOpGYh2NMK4Hyj3Iz4jOs3KCwZ3avoXOnIjjPTh85RMAzEIO4PWPmv2 G1HdDEHLhAzeNzPxJ9qr2M2Vdw7xBSTx887VuM+B7psv8Rb+BccYBRbLDSa+aLsX 8dOj8PMUsQCvpyyayVo86wTxaXrSjw3cghICp6wh7bfacVBoPQ/Yx1Ui4X6OT3WZ iDtYRvLoi8LDcHjKZ3M5TePJqRUhzgZIFtKI/EmoRTk+9Kgj/w/HIUU0pllynO// wwNCcdEzA8eohDUKwuulN+VtecV1XTxnYviXaEg0tfadFcOl15cYVyFC6YXjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKK4D1jw4YTcsTsfzCWNdYK+swWAwHwYDVR0j BBgwFoAUq0qsgEm/oPTyeKwiOFypq8q5o0EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE5NTcwMDExOTUzNTYxOC8wL0FCNEFBQzgwNDlCRkEwRjRGMjc4QUMyMjM4NUNB OUFCQ0FCOUEzNDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJDQUI5QTM0MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjkxOTU3MDAxMTk1MzU2MTgvMC9BQjRBQUM4MDQ5QkZB MEY0RjI3OEFDMjIzODVDQTlBQkNBQjlBMzQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/HqQ04G5CIS d6/XTcPsUUuxd6jP8C0g/iw1yqnKGeGk4gBggerEebPb2RXwzCuJnYqKSRfKrrt+ f5x/gF7qF/QAGkOH4rahGBm1bC8fSWUaJDQGhx94cif7uMASTXE4sZVDZxAfT/5m siFxKtU/piJPrxPkCdib4p5LV+mURMqFb6p98458kAjSQhqGpgrdajaAHpTk/1HU QcGuW/FHxjqXJXW7u6ZoaVN/6aMldj/rhNjkKZRY0wFxDfoEvTVQgsm406Z0VouY Eou4pQMdTs49sao8wUFd41JcNoTRTIO9QvRoIAgBsQHJ5tTbxJOxdIzygh+wR8II +VH8UCW2yw== -----END CERTIFICATE-----Generated at Tue Oct 13 14:16:48 2026 by rpki-client