$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft File: 819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft (raw, json) Hash identifier: seNYVxEO90fSH2wsVn4uJ/6ThDVtPiqfI/vTCyD/ixg= Subject key identifier: 7F:95:B0:EE:17:4F:A5:22:E4:1B:4E:93:E3:F5:4D:9B:CE:F3:BD:B0 Authority key identifier: 81:90:43:52:0D:3A:1F:4E:5E:DC:D8:C0:57:62:42:5A:8A:01:F3:D9 Certificate issuer: /CN=819043520D3A1F4E5EDCD8C05762425A8A01F3D9 Certificate serial: 317F84E54B12904132FD00F42F16850BE7EFC250 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft Manifest number: 68 Signing time: Sat 10 Oct 2026 22:40:04 +0000 Manifest this update: Sat 10 Oct 2026 22:35:04 +0000 Manifest next update: Wed 14 Oct 2026 05:07:04 +0000 Files and hashes: 1: 819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl (hash: kUAgdYXHKT6iHlK1+ixkVS2Ti9M77TqkfxQ8PZmScI8=) 2: 36302e3233322e302e302f31372d3137203d3e203234313433.roa (hash: cXD/OfZhxV2I85LOF/CmMWrUatSOUukkmst2PGONvFo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:7f:84:e5:4b:12:90:41:32:fd:00:f4:2f:16:85:0b:e7:ef:c2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819043520D3A1F4E5EDCD8C05762425A8A01F3D9 Validity Not Before: Oct 10 22:35:04 2026 GMT Not After : Oct 14 05:07:04 2026 GMT Subject: CN=7F95B0EE174FA522E41B4E93E3F54D9BCEF3BDB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:58:1e:23:23:52:ce:bd:26:6b:5e:e3:16: 6a:3a:7a:48:ca:a7:3e:66:e6:43:05:c3:94:92:6d: 2f:2f:6a:c4:95:f6:03:ab:0d:86:35:4b:79:c6:82: 5c:7f:5e:d5:74:fc:35:1b:10:5d:97:57:24:4f:ea: 36:e9:e6:ba:51:30:3d:d9:b0:a5:05:70:65:66:98: 46:69:66:d7:6e:28:80:8a:84:c1:49:7c:a1:52:b2: ed:b6:24:44:e3:24:2e:60:42:b4:a6:78:d7:80:8c: 99:11:d5:08:bc:38:22:65:bf:76:3b:3c:1e:91:c0: b2:54:74:28:95:04:d9:a6:6e:53:41:1c:7c:5d:12: c2:32:6a:e8:71:e4:29:e0:5d:44:14:17:3d:92:c9: a5:0b:3b:b3:46:71:c3:7d:29:41:7b:9b:68:ee:b0: c5:58:a5:61:6b:a8:b0:9d:fe:78:f2:00:5b:71:e8: 38:f8:98:40:0d:f8:54:bc:53:dc:f8:4e:69:ca:86: b1:e2:bc:aa:e7:46:a1:f2:a9:07:7c:bc:31:b2:34: cf:79:3f:ad:84:c4:4d:2c:d4:45:68:c1:2e:d9:ec: 44:72:61:9b:62:15:a2:50:51:62:a0:d3:a7:67:00: 4e:c1:e5:01:d5:fe:01:b1:e6:72:04:b0:25:92:74: d3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:95:B0:EE:17:4F:A5:22:E4:1B:4E:93:E3:F5:4D:9B:CE:F3:BD:B0 X509v3 Authority Key Identifier: keyid:81:90:43:52:0D:3A:1F:4E:5E:DC:D8:C0:57:62:42:5A:8A:01:F3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d7:07:08:03:51:cc:18:35:4e:2e:ae:84:1e:cc:0e:c6:c6: 63:ba:fe:52:94:6b:81:15:c0:a6:66:af:db:74:01:91:48:5a: 9d:70:b0:b1:d3:3c:4a:43:81:10:17:ff:d5:b0:96:a2:f0:13: 23:6b:10:9b:35:af:01:e9:d3:c4:c8:54:8e:86:01:1a:fa:64: 53:85:4d:40:09:3d:4a:f6:8e:db:fb:1b:e4:a1:90:c3:d6:a1: 4b:2a:cd:61:63:1c:9d:02:cb:e4:aa:0f:56:79:e5:dd:f1:b2: c3:0f:5a:46:0d:99:a0:f2:43:42:ae:97:f5:ab:64:ab:3c:db: 31:a1:39:5e:77:c7:a6:53:55:75:22:0f:62:02:bd:7b:ec:18: 2f:15:a6:18:f8:f7:f6:6e:1f:8d:fa:12:3a:e0:37:59:ae:b9: 2c:74:db:be:76:40:d9:0f:fa:16:8f:15:62:4b:85:25:41:5c: c3:fe:b3:d1:07:e6:af:b3:f8:15:ca:ba:53:6d:11:61:fe:d4: 3a:14:f7:54:6e:fe:75:83:94:be:40:93:01:a2:b3:0a:8f:13: df:b0:41:a6:ad:6e:7c:06:3d:bb:2f:98:19:95:24:20:67:d6: c2:b5:f3:ff:12:b9:a5:da:c7:d4:ac:c9:af:2c:00:0e:59:ef: 6c:e0:6b:61 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMX+E5UsSkEEy/QD0LxaFC+fvwlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5MDQzNTIwRDNBMUY0RTVFRENEOEMwNTc2MjQyNUE4 QTAxRjNEOTAeFw0yNjEwMTAyMjM1MDRaFw0yNjEwMTQwNTA3MDRaMDMxMTAvBgNV BAMTKDdGOTVCMEVFMTc0RkE1MjJFNDFCNEU5M0UzRjU0RDlCQ0VGM0JEQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBFgeIyNSzr0ma17jFmo6ekjK pz5m5kMFw5SSbS8vasSV9gOrDYY1S3nGglx/XtV0/DUbEF2XVyRP6jbp5rpRMD3Z sKUFcGVmmEZpZtduKICKhMFJfKFSsu22JETjJC5gQrSmeNeAjJkR1Qi8OCJlv3Y7 PB6RwLJUdCiVBNmmblNBHHxdEsIyauhx5CngXUQUFz2SyaULO7NGccN9KUF7m2ju sMVYpWFrqLCd/njyAFtx6Dj4mEAN+FS8U9z4TmnKhrHivKrnRqHyqQd8vDGyNM95 P62ExE0s1EVowS7Z7ERyYZtiFaJQUWKg06dnAE7B5QHV/gGx5nIEsCWSdNOpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUf5Ww7hdPpSLkG06T4/VNm87zvbAwHwYDVR0j BBgwFoAUgZBDUg06H05e3NjAV2JCWooB89kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy NDE0MDc2ODcwMTcxMDM3My8wLzgxOTA0MzUyMEQzQTFGNEU1RURDRDhDMDU3NjI0 MjVBOEEwMUYzRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODE5MDQzNTIwRDNBMUY0RTVFRENEOEMwNTc2MjQyNUE4QTAxRjNEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjQxNDA3Njg3MDE3MTAzNzMvMC84MTkwNDM1MjBEM0Ex RjRFNUVEQ0Q4QzA1NzYyNDI1QThBMDFGM0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdcHCANRzBg1 Ti6uhB7MDsbGY7r+UpRrgRXApmav23QBkUhanXCwsdM8SkOBEBf/1bCWovATI2sQ mzWvAenTxMhUjoYBGvpkU4VNQAk9SvaO2/sb5KGQw9ahSyrNYWMcnQLL5KoPVnnl 3fGyww9aRg2ZoPJDQq6X9atkqzzbMaE5XnfHplNVdSIPYgK9e+wYLxWmGPj39m4f jfoSOuA3Wa65LHTbvnZA2Q/6Fo8VYkuFJUFcw/6z0Qfmr7P4Fcq6U20RYf7UOhT3 VG7+dYOUvkCTAaKzCo8T37BBpq1ufAY9uy+YGZUkIGfWwrXz/xK5pdrH1KzJrywA DlnvbOBrYQ== -----END CERTIFICATE-----Generated at Sun Oct 11 10:46:00 2026 by rpki-client