$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft File: 1133679B2C104A0446FA0C3764EEE246C5D21075.mft (raw, json) Hash identifier: jMJcC9XgbP5WL+/px9t7y7fUB99ZQSfbtPGI/b+/pVY= Subject key identifier: 88:F8:65:E1:60:46:67:6A:6D:16:45:97:AB:A1:70:12:4A:E2:66:C2 Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Certificate serial: 21DA3C31919A2C95FA94E5EB394D1590731A4B05 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft Manifest number: 0143 Signing time: Mon 12 Oct 2026 14:57:02 +0000 Manifest this update: Mon 12 Oct 2026 14:52:02 +0000 Manifest next update: Fri 16 Oct 2026 00:38:02 +0000 Files and hashes: 1: 34332e3232382e3230342e302f32322d3232203d3e203535393931.roa (hash: C3XWgFxWcqi0OOcgRWNYvHKGt6IvkEPUV44+1IA9tHk=) 2: 34332e3232382e3234302e302f32322d3232203d3e203535393931.roa (hash: aAK3b2YO28PMJfPm9Aj9uOiTBwmGFcaW1Dy+MYbP2/I=) 3: 1133679B2C104A0446FA0C3764EEE246C5D21075.crl (hash: WMZI6oypwSfZvjB7Q9YSjd9YGLXK+7Q41wJ+Uo6IDjQ=) 4: 3130332e34312e3131362e302f32322d3232203d3e203535393931.roa (hash: AG763JgzLnCax1h82iKqPfAHIhWbgVBR2u2s+SqTVuQ=) 5: 3130332e35362e3130342e302f32322d3232203d3e203535393931.roa (hash: Xx3438ml27BwMKWjax5Et9SPWqEU02J5BKCONck0i14=) 6: 3130332e35362e3130302e302f32322d3232203d3e203535393931.roa (hash: U00Rs/DfaBM8oQSZxv8Kvu4Q3MPtjO43KKG0d8r3TTQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:da:3c:31:91:9a:2c:95:fa:94:e5:eb:39:4d:15:90:73:1a:4b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Validity Not Before: Oct 12 14:52:02 2026 GMT Not After : Oct 16 00:38:02 2026 GMT Subject: CN=88F865E16046676A6D164597ABA170124AE266C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:af:cf:58:ed:fc:19:a7:28:b9:1b:90:e2:1a: 11:21:46:dc:f4:89:96:c6:34:81:42:b5:da:80:bb: 03:03:4f:be:bd:bb:55:fc:5e:eb:0a:95:fa:cc:1d: cf:d8:d5:e4:c6:e5:a4:0c:d5:77:d1:fe:39:7a:97: 4e:a0:31:d3:68:49:b8:28:be:30:b7:9a:f6:5b:74: e7:26:d6:92:cb:77:10:c6:fb:ac:35:53:65:7d:00: cb:5c:65:8d:3c:bb:80:87:bb:ef:cd:88:53:69:80: 32:72:1c:d4:43:80:c8:4c:38:16:dd:bf:4e:ce:ba: 45:cb:1b:3b:0a:df:0f:4f:ab:8b:e9:10:61:bf:ca: 2b:79:04:8e:45:36:ce:b8:d0:ba:0d:32:c2:b5:66: b5:4a:bb:ad:eb:9c:f6:30:07:ea:71:81:c1:4d:14: d3:6e:b8:af:cc:19:c3:ca:86:b3:e3:9a:79:b1:0b: 9b:e0:a1:ad:70:4f:eb:0c:13:0b:b0:ad:9a:b3:70: d5:8c:87:26:9b:34:df:4c:28:2d:3e:19:48:b6:1f: e1:3f:c6:9b:c6:e7:46:08:48:12:8d:5b:47:08:77: 91:61:05:86:9b:fb:03:67:90:b0:87:51:05:86:a6: e6:c1:d2:b8:4a:9d:1b:2d:a7:28:74:e0:36:b6:ba: 6e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F8:65:E1:60:46:67:6A:6D:16:45:97:AB:A1:70:12:4A:E2:66:C2 X509v3 Authority Key Identifier: keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f7:11:d5:6a:a0:c2:b8:2e:3a:83:63:57:8a:c8:24:09:2a: 43:e0:a3:d4:94:02:95:03:34:b2:0f:1e:19:eb:60:85:4e:19: e3:f0:8d:37:f9:65:9e:c0:0c:20:67:0e:36:be:39:4b:8a:e0: cd:9e:f7:a5:b3:7d:e6:f8:45:56:9b:13:4e:9a:8a:be:3c:5f: 4d:d9:42:97:ab:0c:f3:fa:48:f0:db:29:05:e8:e2:9d:67:3b: 3e:82:c1:06:16:6d:30:91:47:cb:fb:76:61:06:77:c2:92:80: 50:9a:cf:04:44:8e:f5:ec:93:23:fd:ea:3b:d0:b9:2b:4b:5b: dd:d6:7b:ee:4b:76:05:15:13:ad:8b:6e:07:ab:27:39:af:2a: 59:0e:f7:e6:df:86:7e:f4:79:ad:87:0e:81:48:ce:68:17:70: 18:1b:c9:37:4f:2e:7a:6b:7e:20:5f:9f:35:7a:e2:d2:f5:ef: 0a:3d:e5:94:1a:12:d8:f8:5d:d9:cb:d7:57:a5:5a:ee:ce:97: 3b:66:e6:e5:9e:77:43:59:c8:78:51:00:90:49:63:c1:2b:19: 4c:32:3c:1e:21:2c:97:61:f0:72:a8:3e:87:04:39:2c:7e:0c: 0b:b0:98:9f:99:b1:da:9d:f4:5d:78:66:c8:e0:43:bd:17:a7: 3e:5b:e0:90 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIdo8MZGaLJX6lOXrOU0VkHMaSwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZD NUQyMTA3NTAeFw0yNjEwMTIxNDUyMDJaFw0yNjEwMTYwMDM4MDJaMDMxMTAvBgNV BAMTKDg4Rjg2NUUxNjA0NjY3NkE2RDE2NDU5N0FCQTE3MDEyNEFFMjY2QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpr89Y7fwZpyi5G5DiGhEhRtz0 iZbGNIFCtdqAuwMDT769u1X8XusKlfrMHc/Y1eTG5aQM1XfR/jl6l06gMdNoSbgo vjC3mvZbdOcm1pLLdxDG+6w1U2V9AMtcZY08u4CHu+/NiFNpgDJyHNRDgMhMOBbd v07OukXLGzsK3w9Pq4vpEGG/yit5BI5FNs640LoNMsK1ZrVKu63rnPYwB+pxgcFN FNNuuK/MGcPKhrPjmnmxC5vgoa1wT+sMEwuwrZqzcNWMhyabNN9MKC0+GUi2H+E/ xpvG50YISBKNW0cId5FhBYab+wNnkLCHUQWGpubB0rhKnRstpyh04Da2um7lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiPhl4WBGZ2ptFkWXq6FwEkriZsIwHwYDVR0j BBgwFoAUETNnmywQSgRG+gw3ZO7iRsXSEHUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQwMDMyMi8wLzExMzM2NzlCMkMxMDRBMDQ0NkZBMEMzNzY0RUVF MjQ2QzVEMjEwNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0MDAzMjIvMC8xMTMzNjc5QjJDMTA0 QTA0NDZGQTBDMzc2NEVFRTI0NkM1RDIxMDc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/cR1Wqgwrgu OoNjV4rIJAkqQ+Cj1JQClQM0sg8eGetghU4Z4/CNN/llnsAMIGcONr45S4rgzZ73 pbN95vhFVpsTTpqKvjxfTdlCl6sM8/pI8NspBejinWc7PoLBBhZtMJFHy/t2YQZ3 wpKAUJrPBESO9eyTI/3qO9C5K0tb3dZ77kt2BRUTrYtuB6snOa8qWQ735t+GfvR5 rYcOgUjOaBdwGBvJN08uemt+IF+fNXri0vXvCj3llBoS2Phd2cvXV6Va7s6XO2bm 5Z53Q1nIeFEAkEljwSsZTDI8HiEsl2Hwcqg+hwQ5LH4MC7CYn5mx2p30XXhmyOBD vRenPlvgkA== -----END CERTIFICATE-----Generated at Wed Oct 14 01:32:16 2026 by rpki-client