$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft File: AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft (raw, json) Hash identifier: hNmovAdUVScJpQdCe8VzZ0YdmUEIlwYToPDs35acJ+I= Subject key identifier: 1D:6C:24:86:2F:AD:BA:63:34:0B:88:54:A0:E1:6F:29:F5:4D:23:B1 Authority key identifier: AA:70:A0:EA:BC:F6:A4:8C:19:7B:68:C8:25:54:CE:3B:68:13:92:1D Certificate issuer: /CN=AA70A0EABCF6A48C197B68C82554CE3B6813921D Certificate serial: 3340FAD16D48FA39A4222DE9A786EA3ABB126792 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft Manifest number: 64 Signing time: Thu 08 Oct 2026 02:07:05 +0000 Manifest this update: Thu 08 Oct 2026 02:02:05 +0000 Manifest next update: Sun 11 Oct 2026 10:48:05 +0000 Files and hashes: 1: AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl (hash: hCO2sBWjiPseaINujqtl0dctl9ZV8lIp0Cg5oKuYGzc=) 2: 34352e3131352e3136342e302f32322d3232203d3e2034383337.roa (hash: 9cMTr5aVkYXb2qvIvVsGRcoKjxYWlPZfKd7XpNYBdBQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 10:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:40:fa:d1:6d:48:fa:39:a4:22:2d:e9:a7:86:ea:3a:bb:12:67:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA70A0EABCF6A48C197B68C82554CE3B6813921D Validity Not Before: Oct 8 02:02:05 2026 GMT Not After : Oct 11 10:48:05 2026 GMT Subject: CN=1D6C24862FADBA63340B8854A0E16F29F54D23B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ea:6d:92:7d:cb:e4:82:e6:dd:9c:4d:2e:31: 55:41:44:3a:2b:2c:42:8c:a5:3f:bb:79:cb:a0:02: 4d:1d:c9:1a:6b:37:eb:3f:52:00:06:67:97:0e:c0: 6a:78:d2:e0:a9:9e:d4:0e:a1:47:80:48:42:98:3b: 5e:e6:d4:18:76:02:73:e0:c0:a0:60:6a:b1:91:30: e2:42:ed:64:8e:ee:ef:c6:aa:96:97:ce:ba:27:01: 04:0d:42:6b:79:61:c9:93:4f:63:3d:1c:14:ee:c6: 50:a4:e5:56:4b:8a:b4:97:ce:65:82:a5:eb:ac:b9: aa:70:aa:ac:87:3e:64:40:c7:57:fd:b3:09:88:89: c7:0d:48:e5:41:a1:e6:e3:e3:43:e8:66:78:43:f7: 92:0d:24:11:a1:b5:5f:60:c9:63:64:1d:98:3b:75: 98:3a:b9:b4:dc:3c:a4:45:2a:1b:09:66:a1:85:51: 41:ed:84:a1:e8:33:08:d3:3f:d3:a6:a2:2e:13:8b: 08:04:f8:0e:e7:ce:39:a7:91:17:fb:7b:1d:c8:d0: 3f:0a:b9:4c:25:ef:41:97:b2:bf:44:35:81:03:db: 95:b6:18:bf:8f:84:64:ac:61:0b:89:07:9c:f3:56: a1:a6:42:0d:77:6a:8a:77:4a:9c:01:7d:b7:22:ce: 35:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6C:24:86:2F:AD:BA:63:34:0B:88:54:A0:E1:6F:29:F5:4D:23:B1 X509v3 Authority Key Identifier: keyid:AA:70:A0:EA:BC:F6:A4:8C:19:7B:68:C8:25:54:CE:3B:68:13:92:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e1:e8:7e:32:de:d5:b4:00:4d:6b:77:31:e2:12:d8:83:7d: 44:c1:4b:86:f2:99:b8:49:0d:27:62:9e:40:3c:3f:1b:01:ce: 10:f9:9e:58:16:7a:dc:cc:a1:25:30:2a:9e:30:88:dd:db:e7: c8:b4:03:d1:ea:81:bf:cd:dc:f8:58:7c:bc:0f:46:bf:da:ef: 01:a7:d8:12:a3:d5:e7:95:af:ae:69:73:9e:6a:8d:c3:62:17: f7:b9:e1:a2:ae:24:e8:9d:32:11:8a:dd:80:e6:02:0f:f7:35: 29:47:58:05:f8:70:b9:9b:db:a0:8c:e9:dc:ee:a5:a3:e9:d7: d8:3e:6b:cb:a2:e1:01:ec:5d:5f:01:9d:63:10:16:0e:87:99: 42:da:c4:a6:2e:f9:b6:9f:8c:c9:7a:db:ef:16:67:d4:05:ca: 3c:a8:f1:ef:4c:f4:57:33:fd:6a:c3:ab:d7:20:70:b6:8f:bb: 98:46:b3:41:27:29:e2:91:bc:b5:c8:8f:8a:0c:5f:d4:15:4e: 19:62:08:0a:97:54:4d:76:a6:2d:97:d8:7c:0b:54:0f:6d:99: 13:1e:f6:70:e7:7e:4b:55:6d:f4:55:da:4e:a5:ad:30:a4:f4: 12:ff:c4:c3:93:16:9b:20:44:ba:68:0b:06:27:c6:cd:c5:16: d5:25:a2:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM0D60W1I+jmkIi3pp4bqOrsSZ5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3MEEwRUFCQ0Y2QTQ4QzE5N0I2OEM4MjU1NENFM0I2 ODEzOTIxRDAeFw0yNjEwMDgwMjAyMDVaFw0yNjEwMTExMDQ4MDVaMDMxMTAvBgNV BAMTKDFENkMyNDg2MkZBREJBNjMzNDBCODg1NEEwRTE2RjI5RjU0RDIzQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh6m2SfcvkgubdnE0uMVVBRDor LEKMpT+7ecugAk0dyRprN+s/UgAGZ5cOwGp40uCpntQOoUeASEKYO17m1Bh2AnPg wKBgarGRMOJC7WSO7u/GqpaXzronAQQNQmt5YcmTT2M9HBTuxlCk5VZLirSXzmWC peusuapwqqyHPmRAx1f9swmIiccNSOVBoebj40PoZnhD95INJBGhtV9gyWNkHZg7 dZg6ubTcPKRFKhsJZqGFUUHthKHoMwjTP9Omoi4TiwgE+A7nzjmnkRf7ex3I0D8K uUwl70GXsr9ENYED25W2GL+PhGSsYQuJB5zzVqGmQg13aop3SpwBfbcizjV3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHWwkhi+tumM0C4hUoOFvKfVNI7EwHwYDVR0j BBgwFoAUqnCg6rz2pIwZe2jIJVTOO2gTkh0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzkwNzE2NTY4NjMzMzQ3Ny8wL0FBNzBBMEVBQkNGNkE0OEMxOTdCNjhDODI1NTRD RTNCNjgxMzkyMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUE3MEEwRUFCQ0Y2QTQ4QzE5N0I2OEM4MjU1NENFM0I2ODEzOTIxRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM5MDcxNjU2ODYzMzM0NzcvMC9BQTcwQTBFQUJDRjZB NDhDMTk3QjY4QzgyNTU0Q0UzQjY4MTM5MjFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOHofjLe1bQA TWt3MeIS2IN9RMFLhvKZuEkNJ2KeQDw/GwHOEPmeWBZ63MyhJTAqnjCI3dvnyLQD 0eqBv83c+Fh8vA9Gv9rvAafYEqPV55WvrmlznmqNw2IX97nhoq4k6J0yEYrdgOYC D/c1KUdYBfhwuZvboIzp3O6lo+nX2D5ry6LhAexdXwGdYxAWDoeZQtrEpi75tp+M yXrb7xZn1AXKPKjx70z0VzP9asOr1yBwto+7mEazQScp4pG8tciPigxf1BVOGWII CpdUTXamLZfYfAtUD22ZEx72cOd+S1Vt9FXaTqWtMKT0Ev/Ew5MWmyBEumgLBifG zcUW1SWi1w== -----END CERTIFICATE-----Generated at Sat Oct 10 14:01:42 2026 by rpki-client