$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft File: 74280C847DD28C691A500655BD81B3F019C5FCF7.mft (raw, json) Hash identifier: KRQ8rayxYDJ24XgM4uTsCxH+B3zXUPtBHE4Oll6hTks= Subject key identifier: 8E:29:7E:92:9A:D9:1D:13:16:7F:1D:D1:90:32:11:72:6E:A7:51:B2 Authority key identifier: 74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 Certificate issuer: /CN=74280C847DD28C691A500655BD81B3F019C5FCF7 Certificate serial: 02A1AE364C51C41A71C47D1C3069319D8A644653 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft Manifest number: D3 Signing time: Mon 12 Oct 2026 05:41:38 +0000 Manifest this update: Mon 12 Oct 2026 05:36:38 +0000 Manifest next update: Thu 15 Oct 2026 12:20:38 +0000 Files and hashes: 1: 3130332e3138362e3130382e302f32332d3234203d3e203538353433.roa (hash: OcoevkYBZMWLQg+hvAPBGYan1zQFD9QLG6yATABRCBQ=) 2: 74280C847DD28C691A500655BD81B3F019C5FCF7.crl (hash: NsBhTw5ou9qyL6q9RYCmejO63i4YFyP67cek6XWMQh8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a1:ae:36:4c:51:c4:1a:71:c4:7d:1c:30:69:31:9d:8a:64:46:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74280C847DD28C691A500655BD81B3F019C5FCF7 Validity Not Before: Oct 12 05:36:38 2026 GMT Not After : Oct 15 12:20:38 2026 GMT Subject: CN=8E297E929AD91D13167F1DD1903211726EA751B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:da:a1:43:9f:b2:ce:0e:3f:81:59:b3:78:62: bc:de:6b:04:79:4a:e5:12:be:23:a0:fc:41:6b:80: 64:1e:7f:4a:98:32:a8:cc:63:a8:92:ff:2b:5e:b5: 5b:68:ef:cc:7b:f9:5b:2d:2b:20:40:a4:4d:a2:77: 39:cc:2f:8e:c9:dd:8f:ce:e4:4a:60:d6:cc:2a:61: 1a:93:8f:3b:ec:58:e6:18:de:30:bc:fe:22:2e:ce: 24:6b:a0:70:06:ad:e0:c5:88:73:c3:89:28:20:ef: bc:7c:83:ed:ed:d6:03:e4:fa:a9:ac:42:48:91:9c: 50:6d:e8:cd:31:a0:9e:bd:1b:48:e1:de:b8:4a:95: 19:d7:d7:8e:94:b9:fb:10:9d:a8:7b:58:c4:ea:42: 53:12:3b:dd:8e:e9:63:78:12:22:2a:71:f8:13:14: f0:52:e2:fc:39:17:8b:d2:08:05:41:87:4f:33:db: e6:ab:22:03:89:21:25:ef:34:08:9d:06:e7:4d:a2: d8:b2:96:49:db:5a:60:0b:f2:df:eb:44:3b:45:32: 41:46:d6:ed:96:df:16:5e:ce:15:08:39:cd:0a:c8: 37:b2:ee:b7:27:7a:74:2f:82:56:14:ea:84:73:ba: 82:ae:35:d4:dd:a1:61:06:fb:e5:1f:51:f2:6a:96: c8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:29:7E:92:9A:D9:1D:13:16:7F:1D:D1:90:32:11:72:6E:A7:51:B2 X509v3 Authority Key Identifier: keyid:74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a8:7a:3b:5f:46:e5:7e:8d:ba:e4:ba:d9:a0:5f:10:7c:33: 46:be:2b:2f:7d:da:22:29:85:83:91:00:7a:98:7b:e9:2a:04: 15:76:d7:59:18:b9:15:cb:bc:c6:2f:d9:19:38:22:7f:99:96: dc:c5:8c:bd:5f:2a:89:9e:d7:14:54:b3:c6:e8:44:81:b8:a1: 4b:ab:3f:fd:2c:8e:09:d5:43:9a:15:02:11:af:60:41:15:cb: d9:f2:52:cc:2e:3e:c6:2d:13:61:f1:5d:bd:f1:cf:3b:d5:fb: b1:50:12:43:21:d9:58:21:5a:c4:72:60:e6:e3:14:b7:72:cb: d8:ed:e7:3a:9e:80:08:c0:54:be:30:27:c5:e9:bc:59:94:03: 9f:fc:82:32:30:db:a1:f6:6f:0d:d8:f0:ee:f7:2f:74:c5:62: ab:02:69:43:f4:eb:c6:09:63:f5:66:fe:94:8d:99:61:78:38: 33:e5:b4:d5:3d:68:17:00:16:15:8c:f2:4a:a1:f7:76:9e:69: cc:1b:a6:db:d6:5f:6e:7d:a5:64:82:9a:94:a4:49:7d:45:f6: 14:51:0a:2a:6c:c2:a6:8c:e0:5d:ca:f1:12:7f:10:51:a0:ab: 58:2a:78:cc:84:fb:fc:c0:d4:2c:75:f9:e7:bc:ee:3b:1b:ae: a6:d0:09:82 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAqGuNkxRxBpxxH0cMGkxnYpkRlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAx OUM1RkNGNzAeFw0yNjEwMTIwNTM2MzhaFw0yNjEwMTUxMjIwMzhaMDMxMTAvBgNV BAMTKDhFMjk3RTkyOUFEOTFEMTMxNjdGMUREMTkwMzIxMTcyNkVBNzUxQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo2qFDn7LODj+BWbN4YrzeawR5 SuUSviOg/EFrgGQef0qYMqjMY6iS/ytetVto78x7+VstKyBApE2idznML47J3Y/O 5Epg1swqYRqTjzvsWOYY3jC8/iIuziRroHAGreDFiHPDiSgg77x8g+3t1gPk+qms QkiRnFBt6M0xoJ69G0jh3rhKlRnX146UufsQnah7WMTqQlMSO92O6WN4EiIqcfgT FPBS4vw5F4vSCAVBh08z2+arIgOJISXvNAidBudNotiylknbWmAL8t/rRDtFMkFG 1u2W3xZezhUIOc0KyDey7rcnenQvglYU6oRzuoKuNdTdoWEG++UfUfJqlsjLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjil+kprZHRMWfx3RkDIRcm6nUbIwHwYDVR0j BBgwFoAUdCgMhH3SjGkaUAZVvYGz8BnF/PcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1OTcyODA2NDc5MDUzMS8wLzc0MjgwQzg0N0REMjhDNjkxQTUwMDY1NUJEODFC M0YwMTlDNUZDRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAxOUM1RkNGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTk3MjgwNjQ3OTA1MzEvMC83NDI4MEM4NDdERDI4 QzY5MUE1MDA2NTVCRDgxQjNGMDE5QzVGQ0Y3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKh6O19G5X6N uuS62aBfEHwzRr4rL33aIimFg5EAeph76SoEFXbXWRi5Fcu8xi/ZGTgif5mW3MWM vV8qiZ7XFFSzxuhEgbihS6s//SyOCdVDmhUCEa9gQRXL2fJSzC4+xi0TYfFdvfHP O9X7sVASQyHZWCFaxHJg5uMUt3LL2O3nOp6ACMBUvjAnxem8WZQDn/yCMjDbofZv Ddjw7vcvdMViqwJpQ/Trxglj9Wb+lI2ZYXg4M+W01T1oFwAWFYzySqH3dp5pzBum 29Zfbn2lZIKalKRJfUX2FFEKKmzCpozgXcrxEn8QUaCrWCp4zIT7/MDULHX557zu OxuuptAJgg== -----END CERTIFICATE-----Generated at Tue Oct 13 17:54:57 2026 by rpki-client