$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft File: 91D3B189C67F0A1084A2B93996118237CB692F60.mft (raw, json) Hash identifier: TJYuAgtxbC9PmaGcX6her53jb5u7tMVs2nUjDmOFXJw= Subject key identifier: 59:8F:9D:14:2B:96:6B:73:CD:E8:B1:80:57:92:96:DE:4F:FA:73:EE Authority key identifier: 91:D3:B1:89:C6:7F:0A:10:84:A2:B9:39:96:11:82:37:CB:69:2F:60 Certificate issuer: /CN=91D3B189C67F0A1084A2B93996118237CB692F60 Certificate serial: 4D0D70676A035689641BDE34A800BF264E824833 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft Manifest number: 5B Signing time: Wed 14 Oct 2026 11:19:01 +0000 Manifest this update: Wed 14 Oct 2026 11:14:01 +0000 Manifest next update: Sat 17 Oct 2026 20:54:01 +0000 Files and hashes: 1: 91D3B189C67F0A1084A2B93996118237CB692F60.crl (hash: HB1Id/lIyxib9lp9dfP57a+rGZ667I2ObZhidgkEmHQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.crl rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:0d:70:67:6a:03:56:89:64:1b:de:34:a8:00:bf:26:4e:82:48:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91D3B189C67F0A1084A2B93996118237CB692F60 Validity Not Before: Oct 14 11:14:01 2026 GMT Not After : Oct 17 20:54:01 2026 GMT Subject: CN=598F9D142B966B73CDE8B180579296DE4FFA73EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1c:bb:c9:05:3b:52:47:82:36:e5:50:00:3e: 72:df:5a:08:f6:fa:18:5d:13:94:68:c7:dc:2f:b8: 62:f1:ca:ec:ef:7e:03:ae:35:55:c8:39:04:95:9c: 02:3e:84:a7:fd:90:bd:b1:6d:42:82:3c:36:58:2b: d7:92:10:7d:38:ca:e8:81:0b:b5:71:be:0b:15:de: b9:06:62:94:2d:63:a8:d2:42:c8:fc:1c:ba:65:a9: 85:eb:3a:13:04:6a:37:ac:a0:a3:7b:9b:e7:a9:de: c4:fa:f2:57:46:2d:e2:a9:c8:06:e4:ad:4f:9f:b2: 0b:97:44:99:65:90:68:d9:9b:38:fc:04:54:9f:20: b7:f1:df:2c:05:89:40:a7:81:3a:86:35:7a:df:8d: 50:81:20:c5:42:a5:84:ba:ca:e4:f9:e7:2b:33:d4: 7b:15:2e:b8:95:dc:a0:3f:13:73:e0:b4:40:b5:13: 3f:9d:e8:0a:76:e0:f8:8f:fc:2f:4d:dc:ad:d5:77: 84:9d:dc:db:09:f6:44:83:1c:dc:68:44:b3:16:87: 3c:b7:6e:32:3c:5d:54:fd:39:97:f3:b5:37:b9:f1: f9:86:24:50:8a:7f:cd:ac:5e:d6:71:f0:2c:02:bd: 76:46:c2:e7:d5:2a:96:c6:82:22:15:5d:8c:9a:a9: cf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8F:9D:14:2B:96:6B:73:CD:E8:B1:80:57:92:96:DE:4F:FA:73:EE X509v3 Authority Key Identifier: keyid:91:D3:B1:89:C6:7F:0A:10:84:A2:B9:39:96:11:82:37:CB:69:2F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b1:a2:4f:a5:5d:f5:46:ce:32:86:1b:d8:c5:e5:1e:8c:bf: ba:f5:3d:36:2c:64:61:a1:65:57:4f:1c:49:2f:82:84:f0:89: ba:3d:b6:d8:32:0b:f6:7e:7f:b6:e7:e5:d8:c7:81:2d:20:58: 48:5f:71:64:12:d2:cc:82:1b:b7:8d:4d:79:85:f3:23:c0:41: 63:b9:7e:3e:3c:14:11:5a:dc:ff:d0:82:4f:94:70:52:79:b2: 05:c6:c7:01:3e:b1:3e:37:22:5d:c7:fd:5c:ad:39:b5:00:5d: d6:ec:98:88:4d:d4:94:96:72:f7:46:b6:09:e2:ff:14:a0:da: c9:d3:32:5c:5e:e3:51:0e:6c:90:c1:2a:7c:d7:a3:19:28:21: 9f:31:28:d1:ec:50:fc:2a:ac:26:d9:94:62:34:2f:db:04:ab: 26:bf:ec:c5:7f:7d:cf:a5:46:1c:e7:00:3b:4e:3d:f1:b1:61: 64:bb:08:36:b4:ff:8f:d2:a6:ac:6a:9c:8c:ac:cc:97:10:3c: 11:28:fb:24:ce:41:4d:25:44:15:7a:21:26:ec:b1:b2:74:14: 60:ec:f9:0c:fb:44:2f:1c:e0:3c:51:52:10:89:7a:35:7a:fa: 51:af:5c:c8:71:57:a7:cd:9b:99:75:66:6a:5e:20:a4:ab:76: ba:22:9b:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTQ1wZ2oDVolkG940qAC/Jk6CSDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEM0IxODlDNjdGMEExMDg0QTJCOTM5OTYxMTgyMzdD QjY5MkY2MDAeFw0yNjEwMTQxMTE0MDFaFw0yNjEwMTcyMDU0MDFaMDMxMTAvBgNV BAMTKDU5OEY5RDE0MkI5NjZCNzNDREU4QjE4MDU3OTI5NkRFNEZGQTczRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKHLvJBTtSR4I25VAAPnLfWgj2 +hhdE5Rox9wvuGLxyuzvfgOuNVXIOQSVnAI+hKf9kL2xbUKCPDZYK9eSEH04yuiB C7VxvgsV3rkGYpQtY6jSQsj8HLplqYXrOhMEajesoKN7m+ep3sT68ldGLeKpyAbk rU+fsguXRJllkGjZmzj8BFSfILfx3ywFiUCngTqGNXrfjVCBIMVCpYS6yuT55ysz 1HsVLriV3KA/E3PgtEC1Ez+d6Ap24PiP/C9N3K3Vd4Sd3NsJ9kSDHNxoRLMWhzy3 bjI8XVT9OZfztTe58fmGJFCKf82sXtZx8CwCvXZGwufVKpbGgiIVXYyaqc/VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWY+dFCuWa3PN6LGAV5KW3k/6c+4wHwYDVR0j BBgwFoAUkdOxicZ/ChCEork5lhGCN8tpL2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy NzA0NTcxMDg0ODQ1ODc4OS8wLzkxRDNCMTg5QzY3RjBBMTA4NEEyQjkzOTk2MTE4 MjM3Q0I2OTJGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFEM0IxODlDNjdGMEExMDg0QTJCOTM5OTYxMTgyMzdDQjY5MkY2MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjcwNDU3MTA4NDg0NTg3ODkvMC85MUQzQjE4OUM2N0Yw QTEwODRBMkI5Mzk5NjExODIzN0NCNjkyRjYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7GiT6Vd9UbO MoYb2MXlHoy/uvU9NixkYaFlV08cSS+ChPCJuj222DIL9n5/tufl2MeBLSBYSF9x ZBLSzIIbt41NeYXzI8BBY7l+PjwUEVrc/9CCT5RwUnmyBcbHAT6xPjciXcf9XK05 tQBd1uyYiE3UlJZy90a2CeL/FKDaydMyXF7jUQ5skMEqfNejGSghnzEo0exQ/Cqs JtmUYjQv2wSrJr/sxX99z6VGHOcAO0498bFhZLsINrT/j9KmrGqcjKzMlxA8ESj7 JM5BTSVEFXohJuyxsnQUYOz5DPtELxzgPFFSEIl6NXr6Ua9cyHFXp82bmXVmal4g pKt2uiKbiQ== -----END CERTIFICATE-----Generated at Wed Oct 14 16:41:46 2026 by rpki-client