$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft File: 67B1959E3870485E7CC0C0360949F51B41A758A3.mft (raw, json) Hash identifier: 3PD93tpFl8BMKTVNVDkUxBBKQZ1SGMooTOmH8dxy+gI= Subject key identifier: 57:5A:60:12:56:55:4F:65:FC:B7:3E:90:E2:8D:FB:22:20:69:28:D3 Authority key identifier: 67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 Certificate issuer: /CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Certificate serial: 12873356BEC1511834602EF40372DB376DC1A800 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft Manifest number: CF Signing time: Fri 02 Oct 2026 20:05:43 +0000 Manifest this update: Fri 02 Oct 2026 20:00:43 +0000 Manifest next update: Mon 05 Oct 2026 22:17:43 +0000 Files and hashes: 1: 3130332e34352e3136342e302f32322d3234203d3e2030.roa (hash: qFy9a+PvPMMBUAWhb0lNvREvdLvM/JaKv22h6OsAR6Y=) 2: 67B1959E3870485E7CC0C0360949F51B41A758A3.crl (hash: jrrhkIIXqSCSF2aHq6ACvfE7WDx3cT60oXzSb4P1diQ=) 3: 34332e3232362e3131362e302f32322d3234203d3e2034383337.roa (hash: NDaSIXQdg9kzL5++BXp0DBrYDW4X7HPrqiDp2q88qJE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 22:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:87:33:56:be:c1:51:18:34:60:2e:f4:03:72:db:37:6d:c1:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Validity Not Before: Oct 2 20:00:43 2026 GMT Not After : Oct 5 22:17:43 2026 GMT Subject: CN=575A601256554F65FCB73E90E28DFB22206928D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:d0:51:16:88:2b:c6:c2:43:d2:15:a3:75: 09:57:47:c7:23:42:f9:b2:4f:39:1f:4a:50:42:90: 42:41:a9:4a:89:f4:a2:5c:1f:83:c4:65:05:da:4a: af:0f:75:1d:59:fc:48:6a:b5:de:0e:43:b6:eb:65: e3:6c:09:2f:bb:7b:53:d6:ca:4b:f2:be:54:2a:8e: ad:e0:3e:3d:13:cd:8d:4b:f3:e8:08:51:e3:7c:18: 97:ca:31:90:26:4a:a5:56:8d:4b:fb:d0:2c:e3:30: ff:7d:ea:c2:23:b5:4c:b0:e8:bf:a9:af:c6:26:c3: 70:03:70:27:2b:19:b2:2d:56:cc:c0:8f:c2:7a:0c: 51:29:75:48:28:f5:5f:ad:de:2e:15:2e:b7:4a:fc: 6d:27:7a:e7:ff:ec:2c:ff:80:f3:b5:8b:97:d6:49: e9:79:bb:69:b4:d9:5a:60:9e:2a:32:50:15:7e:f2: b8:e0:31:c4:b9:ba:16:35:6d:7c:42:f8:7f:f5:bb: 5e:35:be:fd:8b:1a:c9:e9:0f:f1:8f:d1:6c:33:a5: 8d:6d:c2:da:bc:c6:16:f3:0c:2e:69:ea:d3:84:93: 68:f3:b3:75:05:07:85:f4:50:11:68:bb:12:e4:b3: 1c:4c:3f:05:5d:55:1f:6f:ad:86:0d:70:29:41:ea: e9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5A:60:12:56:55:4F:65:FC:B7:3E:90:E2:8D:FB:22:20:69:28:D3 X509v3 Authority Key Identifier: keyid:67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c1:36:0e:62:83:cb:a4:e3:3b:00:83:ed:d0:2d:db:11:9e: 90:92:bc:3a:81:74:c5:e7:45:41:55:6a:c6:e1:e4:7f:1a:9e: 22:bd:82:cf:97:79:58:b0:6f:14:39:85:41:62:ba:2b:72:24: a5:6a:c8:90:50:b5:f3:cb:29:ea:90:a3:3b:0f:e4:1f:f4:9e: 22:27:61:50:42:43:1e:f3:e0:48:80:dc:da:0b:ca:09:57:8a: 37:86:74:3d:65:ec:ec:5d:11:32:29:50:4f:df:0c:8a:6d:0f: bb:ba:e6:6d:1c:6e:a8:c4:e0:44:7b:31:c5:f3:2e:72:ff:23: f8:a5:73:87:f3:ee:5f:be:44:6f:f3:3f:fb:92:56:55:06:7f: de:08:83:fc:ad:b1:9a:f5:d8:40:4b:85:2d:bb:7c:24:c5:6f: d2:40:d6:00:a8:5e:b2:a0:da:14:47:1f:cb:f8:31:97:f5:dd: d6:45:f1:70:13:39:50:ae:80:91:fe:1a:df:93:37:f4:73:7d: 7f:1e:60:d7:5c:29:89:5c:4b:02:d0:cb:49:ab:e0:a4:67:4e: ba:f6:51:c2:94:fd:a4:5e:8d:4f:fb:5e:21:f5:42:2b:38:b3: b6:74:d7:f6:74:da:9c:b0:ed:96:fd:63:3b:d7:b0:0f:99:29: bc:8a:8d:9c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEoczVr7BURg0YC70A3LbN23BqAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0 MUE3NThBMzAeFw0yNjEwMDIyMDAwNDNaFw0yNjEwMDUyMjE3NDNaMDMxMTAvBgNV BAMTKDU3NUE2MDEyNTY1NTRGNjVGQ0I3M0U5MEUyOERGQjIyMjA2OTI4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jNBRFogrxsJD0hWjdQlXR8cj QvmyTzkfSlBCkEJBqUqJ9KJcH4PEZQXaSq8PdR1Z/Ehqtd4OQ7brZeNsCS+7e1PW ykvyvlQqjq3gPj0TzY1L8+gIUeN8GJfKMZAmSqVWjUv70CzjMP996sIjtUyw6L+p r8Ymw3ADcCcrGbItVszAj8J6DFEpdUgo9V+t3i4VLrdK/G0neuf/7Cz/gPO1i5fW Sel5u2m02VpgnioyUBV+8rjgMcS5uhY1bXxC+H/1u141vv2LGsnpD/GP0WwzpY1t wtq8xhbzDC5p6tOEk2jzs3UFB4X0UBFouxLksxxMPwVdVR9vrYYNcClB6ukTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUV1pgElZVT2X8tz6Q4o37IiBpKNMwHwYDVR0j BBgwFoAUZ7GVnjhwSF58wMA2CUn1G0GnWKMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDExOTMwNDEzNzI3NzQ0My8wLzY3QjE5NTlFMzg3MDQ4NUU3Q0MwQzAzNjA5NDlG NTFCNDFBNzU4QTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0MUE3NThBMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQxMTkzMDQxMzcyNzc0NDMvMC82N0IxOTU5RTM4NzA0 ODVFN0NDMEMwMzYwOTQ5RjUxQjQxQTc1OEEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcE2DmKDy6Tj OwCD7dAt2xGekJK8OoF0xedFQVVqxuHkfxqeIr2Cz5d5WLBvFDmFQWK6K3IkpWrI kFC188sp6pCjOw/kH/SeIidhUEJDHvPgSIDc2gvKCVeKN4Z0PWXs7F0RMilQT98M im0Pu7rmbRxuqMTgRHsxxfMucv8j+KVzh/PuX75Eb/M/+5JWVQZ/3giD/K2xmvXY QEuFLbt8JMVv0kDWAKhesqDaFEcfy/gxl/Xd1kXxcBM5UK6Akf4a35M39HN9fx5g 11wpiVxLAtDLSavgpGdOuvZRwpT9pF6NT/teIfVCKziztnTX9nTanLDtlv1jO9ew D5kpvIqNnA== -----END CERTIFICATE-----Generated at Sun Oct 4 19:44:24 2026 by rpki-client