$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft File: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft (raw, json) Hash identifier: 1eflG4qy9bC3GbnbQ34xd32FfxhbBf9mpceYlf9y9PY= Subject key identifier: 74:AC:D7:36:A2:CE:E8:D4:B9:B9:26:C7:A3:D0:1E:3A:E4:A1:1E:E3 Authority key identifier: 24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B Certificate issuer: /CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Certificate serial: 24255B86ADE61F2E7A89471F39800F8E7B749D11 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft Manifest number: 9B Signing time: Sat 10 Oct 2026 03:09:09 +0000 Manifest this update: Sat 10 Oct 2026 03:04:09 +0000 Manifest next update: Tue 13 Oct 2026 09:51:09 +0000 Files and hashes: 1: 3130332e3133312e3133382e302f32332d3233203d3e20313336313937.roa (hash: zT8XBWbZQ9y9tGdKDC3b9QwRJtTXCLs9KZRJOE6nT9M=) 2: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl (hash: zWxxl0dlcEAd25hhv8QyL24/5Lzu0ry8+OvI2M6zcl0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:25:5b:86:ad:e6:1f:2e:7a:89:47:1f:39:80:0f:8e:7b:74:9d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Validity Not Before: Oct 10 03:04:09 2026 GMT Not After : Oct 13 09:51:09 2026 GMT Subject: CN=74ACD736A2CEE8D4B9B926C7A3D01E3AE4A11EE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:88:54:b3:45:45:16:18:fc:3e:09:09:54:ef: 78:04:ef:a5:84:10:63:94:52:b3:56:4e:83:b2:cf: e7:22:7b:e0:2d:41:a0:7d:2c:67:e1:2e:ec:32:8f: 0e:ea:d9:67:39:1d:9c:aa:d7:22:94:5c:b8:f4:1b: 54:96:a2:40:f7:f8:9b:45:b9:3c:48:a9:44:9d:af: 66:ab:45:54:46:0a:ae:a6:d7:b4:8b:06:49:80:3d: e5:d5:08:5c:7d:ce:b4:9f:53:d6:8d:a5:25:d5:42: c4:3c:50:7b:2e:b6:65:e6:d7:4f:90:e8:d5:7e:c3: 42:13:e1:3d:d7:74:27:35:2a:b8:68:bc:17:eb:37: bf:48:a9:c2:29:15:f2:96:b8:53:4f:fd:f8:9e:49: 2d:f8:31:d3:ff:31:54:1c:cc:4e:b3:58:91:31:83: b8:61:42:5c:b6:77:67:c1:4b:09:fd:64:b2:a5:a4: 14:6e:5b:bb:f2:73:54:be:f4:85:cf:73:86:ed:26: 8e:e5:34:d8:19:55:fa:cb:bf:3f:e0:1c:33:7c:7e: 84:96:98:4f:e2:bb:69:d5:ba:fb:c9:18:a6:11:46: e8:0f:c8:c8:0e:bb:1d:33:cd:51:40:37:8a:a6:e8: f1:9c:ec:c1:e8:20:2a:b2:db:d6:8a:04:6a:ce:be: 5d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AC:D7:36:A2:CE:E8:D4:B9:B9:26:C7:A3:D0:1E:3A:E4:A1:1E:E3 X509v3 Authority Key Identifier: keyid:24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:1b:3c:8d:8e:39:fe:08:77:ed:25:5d:67:4e:cf:7a:53:66: 0d:98:45:32:b2:86:c5:15:ff:01:28:4d:a1:e2:0c:ee:4b:d0: 6b:c7:6c:5b:34:88:6f:16:20:dc:a0:71:43:5c:7c:3b:d6:10: e2:41:fb:5b:b2:f3:8e:47:e0:86:b8:74:cc:3f:9b:bb:a2:7c: 47:9d:66:8c:dd:8b:d3:fa:16:d5:3e:e0:5d:ba:c2:5a:f7:8f: c3:8f:59:63:2b:ad:58:9c:ff:e4:45:e1:1b:43:51:63:b0:dc: a4:f8:d4:34:b2:01:78:62:11:44:db:55:e7:4a:35:8a:12:bd: 79:8b:c0:a0:18:7d:ce:9d:db:59:da:d5:f0:36:01:7f:d3:33: d2:68:d8:ac:da:0d:0c:94:7c:bc:53:13:0d:6a:ec:ee:b2:ec: b1:41:4a:bb:60:e8:9b:f5:3e:50:16:73:84:39:0e:33:42:e7: 2c:b2:f7:cc:27:89:32:68:c3:18:08:9d:84:e4:7b:59:7e:10: 82:ea:dd:94:b1:7f:5d:5b:7a:3a:a9:0d:a8:47:d3:c5:62:9b: a0:36:87:d5:ba:bd:e8:d2:33:9c:2d:03:a9:ba:c1:af:b9:3f: 31:90:1a:a4:fd:d2:52:c0:71:f3:07:c8:fe:0d:88:ae:a1:94: 16:74:05:0d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJCVbhq3mHy56iUcfOYAPjnt0nREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJG QzAzNUQ2QjAeFw0yNjEwMTAwMzA0MDlaFw0yNjEwMTMwOTUxMDlaMDMxMTAvBgNV BAMTKDc0QUNENzM2QTJDRUU4RDRCOUI5MjZDN0EzRDAxRTNBRTRBMTFFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTiFSzRUUWGPw+CQlU73gE76WE EGOUUrNWToOyz+cie+AtQaB9LGfhLuwyjw7q2Wc5HZyq1yKUXLj0G1SWokD3+JtF uTxIqUSdr2arRVRGCq6m17SLBkmAPeXVCFx9zrSfU9aNpSXVQsQ8UHsutmXm10+Q 6NV+w0IT4T3XdCc1KrhovBfrN79IqcIpFfKWuFNP/fieSS34MdP/MVQczE6zWJEx g7hhQly2d2fBSwn9ZLKlpBRuW7vyc1S+9IXPc4btJo7lNNgZVfrLvz/gHDN8foSW mE/iu2nVuvvJGKYRRugPyMgOux0zzVFAN4qm6PGc7MHoICqy29aKBGrOvl1jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdKzXNqLO6NS5uSbHo9AeOuShHuMwHwYDVR0j BBgwFoAUJN9dV9PckMcMdY2p+D7QcvwDXWswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODkzNTg1OTA2MDY3MDQ4My8wLzI0REY1RDU3RDNEQzkwQzcwQzc1OERBOUY4M0VE MDcyRkMwMzVENkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJGQzAzNUQ2Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg5MzU4NTkwNjA2NzA0ODMvMC8yNERGNUQ1N0QzREM5 MEM3MEM3NThEQTlGODNFRDA3MkZDMDM1RDZCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohs8jY45/gh3 7SVdZ07PelNmDZhFMrKGxRX/AShNoeIM7kvQa8dsWzSIbxYg3KBxQ1x8O9YQ4kH7 W7Lzjkfghrh0zD+bu6J8R51mjN2L0/oW1T7gXbrCWvePw49ZYyutWJz/5EXhG0NR Y7DcpPjUNLIBeGIRRNtV50o1ihK9eYvAoBh9zp3bWdrV8DYBf9Mz0mjYrNoNDJR8 vFMTDWrs7rLssUFKu2Dom/U+UBZzhDkOM0LnLLL3zCeJMmjDGAidhOR7WX4Qgurd lLF/XVt6OqkNqEfTxWKboDaH1bq96NIznC0DqbrBr7k/MZAapP3SUsBx8wfI/g2I rqGUFnQFDQ== -----END CERTIFICATE-----Generated at Sat Oct 10 13:16:00 2026 by rpki-client