$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft File: 81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft (raw, json) Hash identifier: XTh8IcTqYms23tBRjyiecKtQTVaevdmvWmBof9Bz+JI= Subject key identifier: 43:B5:D4:28:AD:3F:F7:6E:48:EA:4C:0E:99:FE:CC:D0:03:FD:61:F6 Authority key identifier: 81:C6:11:9E:6A:4D:F7:B7:5E:15:7E:48:A1:36:35:B1:E0:5E:7B:B6 Certificate issuer: /CN=81C6119E6A4DF7B75E157E48A13635B1E05E7BB6 Certificate serial: 5C001AD9D0C2F8E2A199BCF76D8D950F13605F77 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft Manifest number: AB Signing time: Sun 11 Oct 2026 13:50:40 +0000 Manifest this update: Sun 11 Oct 2026 13:45:40 +0000 Manifest next update: Wed 14 Oct 2026 15:15:40 +0000 Files and hashes: 1: 3230322e36332e3136302e302f32302d3230203d3e2034383337.roa (hash: 8hu7dNrKt5Kh0Gug+I9Kc/1oeTX6FuZLquGE19/vspY=) 2: 81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.crl (hash: ewwXiXHsMCSGx1CVj8A9M5+wrgD2ZoMr+76CTFkPQCY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.crl rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 15:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:00:1a:d9:d0:c2:f8:e2:a1:99:bc:f7:6d:8d:95:0f:13:60:5f:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81C6119E6A4DF7B75E157E48A13635B1E05E7BB6 Validity Not Before: Oct 11 13:45:40 2026 GMT Not After : Oct 14 15:15:40 2026 GMT Subject: CN=43B5D428AD3FF76E48EA4C0E99FECCD003FD61F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:27:2d:0c:2e:95:87:b6:60:f1:9a:07:35:4e: 2c:4f:37:0d:93:20:52:d8:d9:b0:85:51:20:60:3c: bc:f0:8c:39:88:21:f2:81:a0:3c:23:31:7b:4e:a3: 51:18:97:89:4f:e7:6c:04:02:d5:5e:3f:06:76:34: 21:cd:01:1d:02:67:35:ec:ae:54:f6:07:f8:d1:79: d4:cb:6a:b9:e0:b0:d8:ff:8d:75:95:89:9f:12:b7: 7c:2f:62:a2:5e:af:e5:c8:e1:89:25:5b:32:cb:99: f7:b0:18:38:cd:2e:aa:8d:59:a7:fc:0b:1a:cb:00: 66:c5:91:a4:44:f1:f7:03:ff:39:3f:fe:0b:40:5f: 83:bc:40:c7:ab:2b:5d:50:d7:c0:19:e3:96:95:ac: 8c:d3:c2:dc:b9:af:14:ce:58:6a:d2:5f:9c:31:0f: 0f:d1:2b:28:8a:ef:72:59:ec:7c:18:71:fe:b8:63: 93:6c:cd:6f:1e:74:53:88:5f:0e:fc:0b:56:69:fe: 1f:fd:7b:ba:04:ea:1b:95:0e:ac:68:83:a4:44:b6: 82:cd:95:b3:9a:fa:a4:08:93:76:bc:1d:8b:b3:f0: 24:6f:8e:1f:e5:6a:bd:c6:11:43:94:33:d3:24:4c: 83:7d:f8:86:f2:07:38:2e:71:78:46:66:eb:e5:6a: 95:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B5:D4:28:AD:3F:F7:6E:48:EA:4C:0E:99:FE:CC:D0:03:FD:61:F6 X509v3 Authority Key Identifier: keyid:81:C6:11:9E:6A:4D:F7:B7:5E:15:7E:48:A1:36:35:B1:E0:5E:7B:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104956753499389957/0/81C6119E6A4DF7B75E157E48A13635B1E05E7BB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:8e:c7:bc:93:ab:81:73:8e:2c:31:a7:04:b1:25:dc:1c:df: 3f:6a:c3:38:e0:19:9d:e6:ca:bc:51:cc:c5:71:d7:14:10:6e: 49:64:6e:d4:e5:2a:a1:2f:dc:2b:07:06:bf:dd:dc:02:db:6e: f6:e1:74:07:2e:54:88:f0:2e:6f:01:d1:f0:6c:d5:0e:9a:54: ea:ea:04:c9:19:93:d3:07:7b:e4:47:b6:4c:46:6f:67:62:ec: c6:79:ef:dd:b1:25:0e:6f:c6:1c:f8:d2:3a:a3:4e:00:be:b2: e1:58:b0:c2:fb:e6:86:be:79:f3:96:b9:a6:bb:de:be:b3:9b: 78:fe:96:18:db:8b:b8:c5:21:da:20:b6:d5:df:23:67:d0:91: bd:6e:b9:f9:c8:b6:7e:c9:bd:cd:f9:2a:74:bd:7b:49:fb:a3: ad:78:63:e4:46:ef:d4:31:c9:cf:74:81:2e:b3:61:49:3d:aa: 05:fb:a8:bb:d6:d9:ad:30:df:08:b4:6e:79:36:71:eb:73:33: 52:b3:98:07:9c:6c:08:ec:31:96:95:df:db:52:49:fe:1c:5a: c6:fd:51:50:2b:ae:c3:b3:2a:f3:34:3b:70:f4:bd:78:e5:79: 69:2f:70:12:96:d0:02:df:ce:e3:0c:8b:5a:2f:d4:d1:f3:b4: 84:63:7d:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXAAa2dDC+OKhmbz3bY2VDxNgX3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFDNjExOUU2QTRERjdCNzVFMTU3RTQ4QTEzNjM1QjFF MDVFN0JCNjAeFw0yNjEwMTExMzQ1NDBaFw0yNjEwMTQxNTE1NDBaMDMxMTAvBgNV BAMTKDQzQjVENDI4QUQzRkY3NkU0OEVBNEMwRTk5RkVDQ0QwMDNGRDYxRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Jy0MLpWHtmDxmgc1TixPNw2T IFLY2bCFUSBgPLzwjDmIIfKBoDwjMXtOo1EYl4lP52wEAtVePwZ2NCHNAR0CZzXs rlT2B/jRedTLarngsNj/jXWViZ8St3wvYqJer+XI4YklWzLLmfewGDjNLqqNWaf8 CxrLAGbFkaRE8fcD/zk//gtAX4O8QMerK11Q18AZ45aVrIzTwty5rxTOWGrSX5wx Dw/RKyiK73JZ7HwYcf64Y5NszW8edFOIXw78C1Zp/h/9e7oE6huVDqxog6REtoLN lbOa+qQIk3a8HYuz8CRvjh/lar3GEUOUM9MkTIN9+IbyBzgucXhGZuvlapV9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQ7XUKK0/925I6kwOmf7M0AP9YfYwHwYDVR0j BBgwFoAUgcYRnmpN97deFX5IoTY1seBee7YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk1Njc1MzQ5OTM4OTk1Ny8wLzgxQzYxMTlFNkE0REY3Qjc1RTE1N0U0OEExMzYz NUIxRTA1RTdCQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODFDNjExOUU2QTRERjdCNzVFMTU3RTQ4QTEzNjM1QjFFMDVFN0JCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ5NTY3NTM0OTkzODk5NTcvMC84MUM2MTE5RTZBNERG N0I3NUUxNTdFNDhBMTM2MzVCMUUwNUU3QkI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANY7HvJOrgXOO LDGnBLEl3BzfP2rDOOAZnebKvFHMxXHXFBBuSWRu1OUqoS/cKwcGv93cAttu9uF0 By5UiPAubwHR8GzVDppU6uoEyRmT0wd75Ee2TEZvZ2Lsxnnv3bElDm/GHPjSOqNO AL6y4Viwwvvmhr5585a5prvevrObeP6WGNuLuMUh2iC21d8jZ9CRvW65+ci2fsm9 zfkqdL17SfujrXhj5Ebv1DHJz3SBLrNhST2qBfuou9bZrTDfCLRueTZx63MzUrOY B5xsCOwxlpXf21JJ/hxaxv1RUCuuw7Mq8zQ7cPS9eOV5aS9wEpbQAt/O4wyLWi/U 0fO0hGN9Eg== -----END CERTIFICATE-----Generated at Mon Oct 12 22:51:38 2026 by rpki-client