$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft File: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft (raw, json) Hash identifier: 75rrlUFSY6lEAWDgBJTvVchgKBnhQPwN7yuss5lG6fc= Subject key identifier: 1F:D7:3A:64:B7:4D:A5:AA:6E:3A:F9:3C:7A:07:32:12:88:CE:55:CF Authority key identifier: 87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B Certificate issuer: /CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Certificate serial: 7F6BE00AE97BC5DCFAE9357EAC4A35D2BEDE8751 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft Manifest number: C8 Signing time: Wed 07 Oct 2026 13:31:15 +0000 Manifest this update: Wed 07 Oct 2026 13:26:15 +0000 Manifest next update: Sat 10 Oct 2026 17:09:15 +0000 Files and hashes: 1: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl (hash: 61qrlAmAbks84iHAF22gLtrbuAoHzZzWeltG4NXdy/4=) 2: 3231312e3135352e3136302e302f32312d3332203d3e2034383038.roa (hash: hPusrnjhYJm8+TZ/gEk8IBFbZqCjOYQH0MPwt972ygo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 17:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:6b:e0:0a:e9:7b:c5:dc:fa:e9:35:7e:ac:4a:35:d2:be:de:87:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Validity Not Before: Oct 7 13:26:15 2026 GMT Not After : Oct 10 17:09:15 2026 GMT Subject: CN=1FD73A64B74DA5AA6E3AF93C7A07321288CE55CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:63:99:d7:9f:49:34:e8:50:c4:c4:a5:0d: d2:f9:a2:48:03:be:b6:57:b0:0e:3d:9e:48:b9:49: 75:b2:29:8c:fa:c8:d2:5f:fc:13:8f:55:ec:9a:b4: 17:dd:6a:e4:a4:84:b1:30:e7:ae:34:ac:fb:58:9d: 70:f6:3b:d0:09:a2:fe:9f:cd:ed:ff:5b:f9:18:a2: 67:9c:df:c8:29:f4:0a:f2:be:7c:d7:b9:ca:d0:9f: 10:de:27:e4:82:9c:da:5c:79:e8:f6:aa:cf:5d:a5: 6a:15:b3:bc:e9:ed:06:37:34:d8:6c:6c:f0:f2:aa: 1f:a9:a3:b7:a0:99:73:ba:c8:d2:74:52:75:8d:b1: b9:eb:1e:12:8e:39:02:b6:50:f6:42:04:ca:77:f5: bb:50:1c:63:df:9c:74:59:f4:48:1d:12:77:cb:a2: cf:ae:fa:4a:65:e1:d3:94:ab:72:db:c9:15:28:53: e2:c5:31:e1:e0:bb:36:55:c0:3c:6c:4a:88:8d:cc: c3:90:50:06:08:fe:f4:e3:55:e9:1d:35:7b:b8:71: 1b:a7:23:a9:92:48:85:18:5d:d1:98:da:39:6b:d5: d1:48:60:c7:1b:65:10:a0:e1:38:57:36:da:06:70: ae:05:0c:b2:26:b0:30:c9:07:cf:62:03:ce:78:2e: 72:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D7:3A:64:B7:4D:A5:AA:6E:3A:F9:3C:7A:07:32:12:88:CE:55:CF X509v3 Authority Key Identifier: keyid:87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:cc:1c:3a:52:3d:5c:ac:05:02:86:f4:0e:ea:e2:4a:1b:b5: d1:ba:0b:8e:db:68:9b:66:8f:af:cb:e8:d1:e3:c9:39:4e:5e: ce:a9:de:79:a4:53:b7:54:c0:99:20:cb:91:17:d2:1d:8a:72: 88:4c:18:7a:64:fb:90:16:1a:7c:f1:24:77:8e:21:0a:1c:43: 55:73:1b:65:64:cf:a5:ee:81:ee:31:8e:47:19:7b:da:dd:47: d4:36:47:98:e2:99:bd:46:95:d5:75:d0:90:af:fe:5a:e8:76: 6c:35:bc:b6:b4:45:74:76:72:c0:fd:b0:1f:7e:1c:eb:75:c2: 7b:45:36:04:9d:82:b8:9d:f7:59:de:93:c4:eb:0a:52:6b:65: c2:a2:41:c3:0e:e7:ec:29:30:93:3a:54:e7:3a:9e:c5:e9:f2: 42:54:5f:46:cb:26:02:34:ca:d3:a0:51:88:79:93:aa:6c:54: 10:4a:23:3f:4d:e7:2e:b8:a0:1f:85:fe:41:47:08:c4:84:ab: 5b:08:07:43:d8:ca:b3:58:2d:2a:e2:2a:ea:89:bc:ef:99:9a: cf:44:d0:c8:c5:a3:aa:d8:5c:dc:b2:d2:d3:ea:2e:91:ce:5b: c7:71:ba:54:5c:06:f4:9e:31:73:8f:6b:c5:d4:3e:a2:a3:66: fc:4f:be:78 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf2vgCul7xdz66TV+rEo10r7eh1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5 MjA5QzU5QjAeFw0yNjEwMDcxMzI2MTVaFw0yNjEwMTAxNzA5MTVaMDMxMTAvBgNV BAMTKDFGRDczQTY0Qjc0REE1QUE2RTNBRjkzQzdBMDczMjEyODhDRTU1Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6umOZ159JNOhQxMSlDdL5okgD vrZXsA49nki5SXWyKYz6yNJf/BOPVeyatBfdauSkhLEw5640rPtYnXD2O9AJov6f ze3/W/kYomec38gp9AryvnzXucrQnxDeJ+SCnNpceej2qs9dpWoVs7zp7QY3NNhs bPDyqh+po7egmXO6yNJ0UnWNsbnrHhKOOQK2UPZCBMp39btQHGPfnHRZ9EgdEnfL os+u+kpl4dOUq3LbyRUoU+LFMeHguzZVwDxsSoiNzMOQUAYI/vTjVekdNXu4cRun I6mSSIUYXdGY2jlr1dFIYMcbZRCg4ThXNtoGcK4FDLImsDDJB89iA854LnL7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUH9c6ZLdNpapuOvk8egcyEojOVc8wHwYDVR0j BBgwFoAUh0+htxHcmv3FwM/CDm50SZIJxZswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5Njk3OTQ3NDQzMjAwMi8wLzg3NEZBMUI3MTFEQzlBRkRDNUMwQ0ZDMjBFNkU3 NDQ5OTIwOUM1OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5MjA5QzU5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTY5Nzk0NzQ0MzIwMDIvMC84NzRGQTFCNzExREM5 QUZEQzVDMENGQzIwRTZFNzQ0OTkyMDlDNTlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMwcOlI9XKwF Aob0DuriShu10boLjttom2aPr8vo0ePJOU5ezqneeaRTt1TAmSDLkRfSHYpyiEwY emT7kBYafPEkd44hChxDVXMbZWTPpe6B7jGORxl72t1H1DZHmOKZvUaV1XXQkK/+ Wuh2bDW8trRFdHZywP2wH34c63XCe0U2BJ2CuJ33Wd6TxOsKUmtlwqJBww7n7Ckw kzpU5zqexenyQlRfRssmAjTK06BRiHmTqmxUEEojP03nLrigH4X+QUcIxISrWwgH Q9jKs1gtKuIq6om875maz0TQyMWjqthc3LLS0+oukc5bx3G6VFwG9J4xc49rxdQ+ oqNm/E++eA== -----END CERTIFICATE-----Generated at Fri Oct 9 01:39:25 2026 by rpki-client