$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.mft File: 1968876B21FE15E288B0923B17E385B487979161.mft (raw, json) Hash identifier: 1C5DIVbB1kTcFHjy+3e4NX5SaBLO4U5X4HR7hIllp6c= Subject key identifier: CD:98:5F:34:2B:B5:CF:77:E6:AD:88:3B:CB:23:E4:D1:53:8B:EE:51 Authority key identifier: 19:68:87:6B:21:FE:15:E2:88:B0:92:3B:17:E3:85:B4:87:97:91:61 Certificate issuer: /CN=1968876B21FE15E288B0923B17E385B487979161 Certificate serial: 5E8399606BEDDBAADF8ABC3CFB48C14B073B811D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.mft Manifest number: 31 Signing time: Wed 07 Oct 2026 23:16:58 +0000 Manifest this update: Wed 07 Oct 2026 23:11:58 +0000 Manifest next update: Sun 11 Oct 2026 08:05:58 +0000 Files and hashes: 1: 3232302e3135342e38352e302f32342d3234203d3e203538373732.roa (hash: IBP0xdDOyiOgq5Eci2DK92c7gb9KM+knsIqLW4CamSo=) 2: 3232302e3135342e3131342e302f32332d3233203d3e203633383338.roa (hash: ivGXMKZ3j/SM+VplsuPp05w4vpAs8N9xajLe22gGV00=) 3: 1968876B21FE15E288B0923B17E385B487979161.crl (hash: HMF5gfq9By82jR1HHCemtkBzGlXVAthlEAC2FIql8Ok=) 4: 3232302e3135342e38342e302f32342d3234203d3e203538373732.roa (hash: giu9S36zcVfJKSHZbr5yoNMgbWhG/13q35tjFSu28YA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.crl rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 03:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:83:99:60:6b:ed:db:aa:df:8a:bc:3c:fb:48:c1:4b:07:3b:81:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1968876B21FE15E288B0923B17E385B487979161 Validity Not Before: Oct 7 23:11:58 2026 GMT Not After : Oct 11 08:05:58 2026 GMT Subject: CN=CD985F342BB5CF77E6AD883BCB23E4D1538BEE51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:31:47:02:5d:47:9b:4b:d7:e8:7a:e3:fb: d9:e1:b7:7f:33:8e:a8:99:f5:0c:7e:a5:18:f2:c3: 91:de:94:83:19:6d:1a:3d:20:0b:2c:8a:5d:0f:02: 51:81:f1:07:34:e5:15:9f:a6:d4:dc:12:e6:f9:9e: de:21:10:da:87:ff:82:03:68:68:a6:41:2a:04:70: 73:90:f5:2f:66:7a:c4:7e:d3:6b:c9:43:be:72:93: ee:b2:1c:24:c4:22:10:4c:29:bd:76:72:71:66:95: 74:68:92:b2:dc:2b:b5:df:bc:d6:bf:64:40:d9:a5: f4:13:29:b1:e0:5a:eb:3d:ba:02:5d:69:49:7d:38: 8e:ae:b9:37:8f:b4:ff:08:8d:7b:36:e2:a1:6b:3b: b7:f3:af:db:df:bc:a4:a8:b0:51:ad:46:e9:7c:ac: 79:70:2b:15:7f:28:28:07:ab:8f:dc:c6:9c:65:26: 25:49:8f:91:64:b0:10:82:75:ce:dd:7f:1d:76:8b: 12:3c:f6:8d:f7:2a:08:ab:0a:6e:7a:4f:81:58:6a: f8:8c:0a:9d:b3:f8:0a:5c:c1:ff:7d:d3:8a:ab:f3: 92:d4:ef:d0:17:ee:df:10:b4:56:7a:0f:1a:17:6a: b7:58:2a:20:db:7a:da:6b:b9:f2:41:99:c6:1f:32: 9b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:98:5F:34:2B:B5:CF:77:E6:AD:88:3B:CB:23:E4:D1:53:8B:EE:51 X509v3 Authority Key Identifier: keyid:19:68:87:6B:21:FE:15:E2:88:B0:92:3B:17:E3:85:B4:87:97:91:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a8:25:c8:82:00:43:1d:5c:ac:92:02:00:fd:b3:d4:1b:94: 06:5a:96:4f:cf:b0:55:a3:97:a7:55:ee:86:53:c2:2c:0e:90: 86:04:e6:55:74:91:76:d4:88:88:0f:bc:f2:bc:9d:c5:a8:29: 7a:c7:f4:d1:7b:6f:cf:ad:6f:c7:c8:52:d9:d2:f1:2c:85:69: 7d:c3:f1:f3:fb:9e:a6:10:1e:f5:51:ad:f3:10:0a:64:08:6c: b5:6f:17:7f:dd:58:9e:fd:c0:c2:7a:62:21:f7:c5:02:3c:f4: 0f:7d:73:9d:64:b0:29:b7:d5:25:19:51:e6:e1:06:10:10:c2: ea:61:e8:13:78:bd:f5:35:80:30:13:b1:57:48:a8:26:fd:04: 57:54:0a:61:77:07:ac:65:8a:c6:d1:f1:71:b4:5d:d6:d8:b5: c1:0e:9c:9c:ea:7a:5a:09:52:c2:d1:ba:3e:ee:75:93:a3:6a: b7:9d:04:5e:5b:b2:8e:f3:7e:3e:a5:99:60:21:2f:8b:04:19: 4a:99:3c:16:fe:d1:0c:3a:2d:a8:de:d0:33:5f:1a:0e:0c:6d: b0:d3:ca:17:2f:c9:89:27:44:a5:b6:a4:e8:95:f3:26:94:f5: c6:bf:1f:fd:f2:21:51:ba:64:f4:1e:82:7f:83:11:c3:04:21: fb:c4:67:84 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXoOZYGvt26rfirw8+0jBSwc7gR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2ODg3NkIyMUZFMTVFMjg4QjA5MjNCMTdFMzg1QjQ4 Nzk3OTE2MTAeFw0yNjEwMDcyMzExNThaFw0yNjEwMTEwODA1NThaMDMxMTAvBgNV BAMTKENEOTg1RjM0MkJCNUNGNzdFNkFEODgzQkNCMjNFNEQxNTM4QkVFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrzFHAl1Hm0vX6Hrj+9nht38z jqiZ9Qx+pRjyw5HelIMZbRo9IAssil0PAlGB8Qc05RWfptTcEub5nt4hENqH/4ID aGimQSoEcHOQ9S9mesR+02vJQ75yk+6yHCTEIhBMKb12cnFmlXRokrLcK7XfvNa/ ZEDZpfQTKbHgWus9ugJdaUl9OI6uuTePtP8IjXs24qFrO7fzr9vfvKSosFGtRul8 rHlwKxV/KCgHq4/cxpxlJiVJj5FksBCCdc7dfx12ixI89o33KgirCm56T4FYaviM Cp2z+Apcwf9904qr85LU79AX7t8QtFZ6DxoXardYKiDbetprufJBmcYfMptLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzZhfNCu1z3fmrYg7yyPk0VOL7lEwHwYDVR0j BBgwFoAUGWiHayH+FeKIsJI7F+OFtIeXkWEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz Nzk1NzA4MjAwODM4NzYyNS8wLzE5Njg4NzZCMjFGRTE1RTI4OEIwOTIzQjE3RTM4 NUI0ODc5NzkxNjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTk2ODg3NkIyMUZFMTVFMjg4QjA5MjNCMTdFMzg1QjQ4Nzk3OTE2MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzc5NTcwODIwMDgzODc2MjUvMC8xOTY4ODc2QjIxRkUx NUUyODhCMDkyM0IxN0UzODVCNDg3OTc5MTYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANaglyIIAQx1c rJICAP2z1BuUBlqWT8+wVaOXp1XuhlPCLA6QhgTmVXSRdtSIiA+88rydxagpesf0 0Xtvz61vx8hS2dLxLIVpfcPx8/uephAe9VGt8xAKZAhstW8Xf91Ynv3AwnpiIffF Ajz0D31znWSwKbfVJRlR5uEGEBDC6mHoE3i99TWAMBOxV0ioJv0EV1QKYXcHrGWK xtHxcbRd1ti1wQ6cnOp6WglSwtG6Pu51k6Nqt50EXluyjvN+PqWZYCEviwQZSpk8 Fv7RDDotqN7QM18aDgxtsNPKFy/JiSdEpbak6JXzJpT1xr8f/fIhUbpk9B6Cf4MR wwQh+8RnhA== -----END CERTIFICATE-----Generated at Thu Oct 8 12:19:36 2026 by rpki-client