$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft File: C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft (raw, json) Hash identifier: 6kiBTulhDuVmu+Ye/XW2oLThIncrnCGvcdPLQ7g7XxY= Subject key identifier: 84:68:07:D8:94:EF:0B:B0:9A:30:17:3E:AF:6B:EC:83:D9:4D:70:24 Authority key identifier: C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB Certificate issuer: /CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Certificate serial: 1C5EB955CE0A1DA6B29D53E23FAD5A50FB74637E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft Manifest number: 67 Signing time: Mon 28 Sep 2026 23:06:43 +0000 Manifest this update: Mon 28 Sep 2026 23:01:43 +0000 Manifest next update: Fri 02 Oct 2026 01:33:43 +0000 Files and hashes: 1: C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl (hash: symoRWDH4G8Eg45gkmGUf63v6bQQl0S9YdK1wHuf5qA=) 2: 3130332e33352e3138322e302f32332d3233203d3e2030.roa (hash: kpDKPXbo2qavM/9Asvqfc84qinUNEiy1Asmc23+iN6U=) 3: 34332e3234362e3131342e302f32332d3233203d3e2030.roa (hash: EyIGtasSac982Su0EhYIcMSzpqWwVN0Snz1ExIFDXbA=) 4: 34332e3234302e35362e302f32322d3232203d3e2030.roa (hash: fUquqZO/jRnoexjUkCY8aUxe2xZ+sGDGR336oDjLV6g=) 5: 34332e3234362e3131332e302f32342d3234203d3e2030.roa (hash: TW47z1sGpU8fzHRBDk9ZIUHZxgI5j0f0rFegaKKWvWY=) 6: 3135302e3132392e3133362e302f32322d3232203d3e2034383337.roa (hash: +hoH7sbwHcCO+Lo6uK8YC9snfhyFUkr3JblTcfw/qj8=) 7: 3130332e33362e32382e302f32322d3232203d3e2030.roa (hash: dZhmLOnlmSDCjxQMx8exT12WjKrgqD7Q38CZTFsMrC8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 01:33:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:5e:b9:55:ce:0a:1d:a6:b2:9d:53:e2:3f:ad:5a:50:fb:74:63:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Validity Not Before: Sep 28 23:01:43 2026 GMT Not After : Oct 2 01:33:43 2026 GMT Subject: CN=846807D894EF0BB09A30173EAF6BEC83D94D7024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:fe:04:c8:80:30:aa:c6:fa:1b:27:0d:5b: fd:b4:f9:a3:8b:d6:2e:89:81:10:22:e2:1e:a2:ca: 87:dd:d6:bf:4c:4c:37:aa:31:90:12:6a:1c:b3:1c: 81:d7:3d:d6:98:47:06:8d:6e:10:96:34:8a:75:49: ab:eb:30:6b:2d:8d:9b:75:bd:ed:7f:6d:ad:6c:04: a5:5e:e8:d4:c2:4b:3b:8b:31:e2:84:b7:88:ba:0f: da:8c:c5:d7:76:a1:6e:86:9a:8c:4f:5f:95:75:e9: f3:8f:aa:9b:c7:df:28:07:08:f5:d0:46:18:b4:35: c0:01:35:43:f1:b1:d4:85:95:d7:75:da:5f:5a:4e: a4:1e:70:32:96:c9:23:89:48:be:0e:c7:f1:17:fa: b6:50:67:01:7f:9c:f5:e4:3c:b7:5e:07:df:c7:d1: f9:85:28:78:de:4b:a2:c8:fa:de:20:8d:c2:98:e3: 74:c6:32:b4:91:c7:e2:69:f6:4e:39:73:2d:a5:23: 0e:0f:c4:bc:f5:39:54:12:e4:86:d2:8b:ad:db:a8: 92:26:30:61:1b:0a:4c:11:de:6f:c9:28:16:c8:c4: 6b:20:77:7a:d1:46:64:0c:21:03:19:cb:fe:94:9d: d7:77:5a:6f:fb:5c:13:33:48:bd:5a:31:3e:0f:a9: f0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:68:07:D8:94:EF:0B:B0:9A:30:17:3E:AF:6B:EC:83:D9:4D:70:24 X509v3 Authority Key Identifier: keyid:C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:2a:00:53:80:01:fa:f8:67:88:d6:4f:04:79:25:22:cf:40: 77:8c:f4:f9:06:9a:87:b8:d0:d4:3b:a4:5f:7d:70:31:27:8a: c9:95:16:d0:7d:be:10:60:8b:45:5f:20:cd:21:ae:eb:b5:78: ee:53:c7:4b:12:eb:7b:67:64:85:a5:ce:b3:ef:55:66:d8:e0: f1:22:d2:88:06:aa:be:9d:3c:1a:2c:ad:6e:34:a0:b2:8e:2b: 5f:f4:05:ac:9b:8b:41:0c:8e:cf:c8:55:07:b3:97:f2:9e:72: 30:df:43:b8:f0:a8:b7:15:b9:89:61:6b:a1:6f:bf:ea:9c:21: 5c:70:35:51:23:06:44:70:3e:00:5f:b3:de:5e:9b:db:25:f7: 12:25:87:20:d6:f8:55:31:11:c9:15:15:a4:24:85:c3:e7:c4: a8:28:30:53:1b:c9:67:cc:b5:60:fa:1e:75:fc:04:78:19:f2: 4b:59:60:db:5b:9d:28:29:a0:bd:43:e4:01:e6:11:f9:83:0b: ab:e6:fd:81:da:ca:50:97:76:d4:84:5c:31:bf:a8:99:35:af: c3:99:7b:3a:a0:a6:87:35:25:55:b1:55:1c:f9:a7:ef:ca:af: ec:57:01:14:3b:10:ae:e0:e5:82:43:69:16:9d:e6:67:03:d6: f4:da:ef:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHF65Vc4KHaaynVPiP61aUPt0Y34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZD ODc2MTRFQjAeFw0yNjA5MjgyMzAxNDNaFw0yNjEwMDIwMTMzNDNaMDMxMTAvBgNV BAMTKDg0NjgwN0Q4OTRFRjBCQjA5QTMwMTczRUFGNkJFQzgzRDk0RDcwMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuKP4EyIAwqsb6GycNW/20+aOL 1i6JgRAi4h6iyofd1r9MTDeqMZASahyzHIHXPdaYRwaNbhCWNIp1SavrMGstjZt1 ve1/ba1sBKVe6NTCSzuLMeKEt4i6D9qMxdd2oW6GmoxPX5V16fOPqpvH3ygHCPXQ Rhi0NcABNUPxsdSFldd12l9aTqQecDKWySOJSL4Ox/EX+rZQZwF/nPXkPLdeB9/H 0fmFKHjeS6LI+t4gjcKY43TGMrSRx+Jp9k45cy2lIw4PxLz1OVQS5IbSi63bqJIm MGEbCkwR3m/JKBbIxGsgd3rRRmQMIQMZy/6Undd3Wm/7XBMzSL1aMT4PqfD/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhGgH2JTvC7CaMBc+r2vsg9lNcCQwHwYDVR0j BBgwFoAUxGdrMFj1s/m/tli77Y9edsh2FOswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg2NTc4MTU5NjA2MTczMy8wL0M0Njc2QjMwNThGNUIzRjlCRkI2NThCQkVEOEY1 RTc2Qzg3NjE0RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZDODc2MTRFQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM4NjU3ODE1OTYwNjE3MzMvMC9DNDY3NkIzMDU4RjVC M0Y5QkZCNjU4QkJFRDhGNUU3NkM4NzYxNEVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxSoAU4AB+vhn iNZPBHklIs9Ad4z0+Qaah7jQ1DukX31wMSeKyZUW0H2+EGCLRV8gzSGu67V47lPH SxLre2dkhaXOs+9VZtjg8SLSiAaqvp08GiytbjSgso4rX/QFrJuLQQyOz8hVB7OX 8p5yMN9DuPCotxW5iWFroW+/6pwhXHA1USMGRHA+AF+z3l6b2yX3EiWHINb4VTER yRUVpCSFw+fEqCgwUxvJZ8y1YPoedfwEeBnyS1lg21udKCmgvUPkAeYR+YMLq+b9 gdrKUJd21IRcMb+omTWvw5l7OqCmhzUlVbFVHPmn78qv7FcBFDsQruDlgkNpFp3m ZwPW9NrvQQ== -----END CERTIFICATE-----Generated at Wed Sep 30 21:11:17 2026 by rpki-client