$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft File: CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft (raw, json) Hash identifier: f4dHl4XfHcbS2VZY3Xi4P7rdgLXxX2EbcVEptV35NGg= Subject key identifier: BC:B3:E1:65:37:78:5C:9E:BB:C9:8A:8A:08:1B:D8:DE:A4:EA:0B:3B Authority key identifier: CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 Certificate issuer: /CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Certificate serial: 234FB126720EAFBAD021DC904673C6B7D6ED2AB5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft Manifest number: A6 Signing time: Mon 12 Oct 2026 18:47:17 +0000 Manifest this update: Mon 12 Oct 2026 18:42:17 +0000 Manifest next update: Fri 16 Oct 2026 00:07:17 +0000 Files and hashes: 1: CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl (hash: +Y0ZNy0dGzMXlmqQH65aXKypERSG0+P2RLO74f1uyOA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:4f:b1:26:72:0e:af:ba:d0:21:dc:90:46:73:c6:b7:d6:ed:2a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Validity Not Before: Oct 12 18:42:17 2026 GMT Not After : Oct 16 00:07:17 2026 GMT Subject: CN=BCB3E16537785C9EBBC98A8A081BD8DEA4EA0B3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bf:ae:e2:4b:cf:dc:ea:d1:06:c5:fe:bc:40: d4:56:cc:27:6a:f6:26:85:b3:13:9f:8e:7b:4c:9f: 31:51:17:f8:03:c0:83:36:99:91:c2:c8:fe:3d:b5: 95:9d:51:53:5e:12:8a:c9:39:a1:ab:5a:95:9b:ef: 9e:a5:07:be:cc:ae:23:b4:1a:ec:d4:fc:03:9c:04: 53:13:d6:09:f9:5a:a5:48:15:7f:a4:b9:97:59:b4: ba:05:3f:54:db:fb:41:e7:59:e4:d9:ef:99:02:cd: 98:a3:e8:cf:db:85:2d:1e:14:1e:e5:92:f2:80:21: f1:ff:35:da:66:cc:89:38:c7:9c:3b:3f:76:c9:1a: bc:67:2c:78:98:d6:f1:d9:39:2a:07:c7:44:d2:67: 98:82:c9:a0:dd:a6:f7:05:3e:c0:82:6a:f5:b5:09: 97:d5:60:9a:60:15:fb:b4:23:30:db:36:0c:cb:08: c3:e1:81:c8:53:29:6d:7f:e9:85:59:09:00:21:a8: 10:a7:66:51:d3:a4:77:42:e2:83:ce:6c:cb:88:0e: f9:1c:50:48:10:4c:77:fd:f1:28:32:0e:ec:d6:5d: 4e:31:25:30:3c:50:f8:60:8d:40:0d:e4:78:b4:ac: 3d:e6:1f:52:ed:f6:bb:83:e1:5c:c0:66:8e:cd:e7: 56:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B3:E1:65:37:78:5C:9E:BB:C9:8A:8A:08:1B:D8:DE:A4:EA:0B:3B X509v3 Authority Key Identifier: keyid:CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:3d:6a:86:cd:54:6d:e0:d2:c8:b0:4e:3b:56:67:e2:db:c1: 56:1b:7c:3e:40:67:28:91:41:c3:d1:59:d9:6d:ee:cc:38:48: 1f:f6:27:63:66:a4:91:bc:31:28:10:c8:55:90:f3:31:cd:11: 0e:75:97:76:b3:4d:cb:a8:d1:77:0e:e0:5c:44:b1:60:8b:8b: d9:8a:82:7d:87:c6:b0:2f:b2:5e:f4:e9:2d:ae:dc:9e:45:85: 3c:98:67:bc:99:b1:33:41:86:d6:10:63:9e:06:77:ba:4e:4a: 9e:c2:1e:bf:5c:e1:02:c4:da:0c:ad:87:95:84:84:94:b2:db: ba:a3:95:ec:86:a7:48:e6:0b:b7:3f:c6:fa:65:e2:f6:ec:c8: 3c:7b:d4:d2:2b:00:3a:3e:88:1b:a7:c0:6f:5e:cb:4c:2e:8a: 81:a8:c8:f6:34:81:cf:fa:a8:dc:f4:6a:cc:9b:fb:f6:42:ac: fa:71:2a:0e:80:00:df:6d:94:38:b1:88:1b:46:6f:fa:e0:c3: 13:9e:3b:07:64:49:d7:ca:47:b5:bb:e4:62:20:d7:db:95:ae: 27:3c:0d:5d:49:4b:2e:71:9e:eb:e1:52:53:35:aa:a0:91:1a: 46:cd:f4:e1:d6:04:4d:ea:1e:c9:43:95:97:f7:ca:b5:40:eb: 2d:98:2d:c3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUI0+xJnIOr7rQIdyQRnPGt9btKrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0Uw RDEwREFDNDAeFw0yNjEwMTIxODQyMTdaFw0yNjEwMTYwMDA3MTdaMDMxMTAvBgNV BAMTKEJDQjNFMTY1Mzc3ODVDOUVCQkM5OEE4QTA4MUJEOERFQTRFQTBCM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRv67iS8/c6tEGxf68QNRWzCdq 9iaFsxOfjntMnzFRF/gDwIM2mZHCyP49tZWdUVNeEorJOaGrWpWb756lB77MriO0 GuzU/AOcBFMT1gn5WqVIFX+kuZdZtLoFP1Tb+0HnWeTZ75kCzZij6M/bhS0eFB7l kvKAIfH/NdpmzIk4x5w7P3bJGrxnLHiY1vHZOSoHx0TSZ5iCyaDdpvcFPsCCavW1 CZfVYJpgFfu0IzDbNgzLCMPhgchTKW1/6YVZCQAhqBCnZlHTpHdC4oPObMuIDvkc UEgQTHf98SgyDuzWXU4xJTA8UPhgjUAN5Hi0rD3mH1Lt9ruD4VzAZo7N51aDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvLPhZTd4XJ67yYqKCBvY3qTqCzswHwYDVR0j BBgwFoAUzqzme4xvJFW/65XKl/Tvzg0Q2sQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTAwNDc5NjQ1MjQwNTI2Ny8wL0NFQUNFNjdCOEM2RjI0NTVCRkVCOTVDQTk3RjRF RkNFMEQxMERBQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0UwRDEwREFDNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkwMDQ3OTY0NTI0MDUyNjcvMC9DRUFDRTY3QjhDNkYy NDU1QkZFQjk1Q0E5N0Y0RUZDRTBEMTBEQUM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuj1qhs1UbeDS yLBOO1Zn4tvBVht8PkBnKJFBw9FZ2W3uzDhIH/YnY2akkbwxKBDIVZDzMc0RDnWX drNNy6jRdw7gXESxYIuL2YqCfYfGsC+yXvTpLa7cnkWFPJhnvJmxM0GG1hBjngZ3 uk5KnsIev1zhAsTaDK2HlYSElLLbuqOV7IanSOYLtz/G+mXi9uzIPHvU0isAOj6I G6fAb17LTC6KgajI9jSBz/qo3PRqzJv79kKs+nEqDoAA322UOLGIG0Zv+uDDE547 B2RJ18pHtbvkYiDX25WuJzwNXUlLLnGe6+FSUzWqoJEaRs304dYETeoeyUOVl/fK tUDrLZgtww== -----END CERTIFICATE-----Generated at Tue Oct 13 15:09:25 2026 by rpki-client