$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft File: 67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft (raw, json) Hash identifier: ug/yPzla5ZZGAB/F4nRG1vnL9memEj+yqCDtRoBkjOg= Subject key identifier: 3A:6E:72:BA:97:D9:CA:B1:46:E9:E5:F9:AF:6F:CD:AD:0E:69:26:85 Authority key identifier: 67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16 Certificate issuer: /CN=67966D34EFBF4CBCFB00CF9C204539BFE0A25316 Certificate serial: 261899A648AA62572FF0DDE86ED3660069230B65 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft Manifest number: 013B Signing time: Thu 08 Oct 2026 11:42:32 +0000 Manifest this update: Thu 08 Oct 2026 11:37:32 +0000 Manifest next update: Sun 11 Oct 2026 15:31:32 +0000 Files and hashes: 1: 3130332e3134302e31342e302f32332d3332203d3e203137363231.roa (hash: 2cWU5UH8whnz87agI1VludkKe4lf2cSxtmFnl04vmyI=) 2: 67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl (hash: 5UiONIV6G3lsJAeCG75xhIOwNglgUUidtFh81Bw9yRc=) 3: 3130332e3134302e31342e302f32332d3332203d3e20313339303931.roa (hash: Dm1g3UjQyhGbjlFkBoWW9J4T2d5S6s8go1jP82Lkdfk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 15:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:18:99:a6:48:aa:62:57:2f:f0:dd:e8:6e:d3:66:00:69:23:0b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67966D34EFBF4CBCFB00CF9C204539BFE0A25316 Validity Not Before: Oct 8 11:37:32 2026 GMT Not After : Oct 11 15:31:32 2026 GMT Subject: CN=3A6E72BA97D9CAB146E9E5F9AF6FCDAD0E692685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:cb:6f:f4:9f:ac:f0:b5:69:95:53:99:77: e6:ce:38:7d:ae:89:06:30:6e:66:98:4d:37:c9:64: 03:52:cc:6a:cd:2a:35:e0:85:42:74:f0:8c:60:95: 11:e7:c0:69:88:f9:33:c3:5c:b4:d8:58:d3:77:43: d2:0e:87:16:c3:4f:c5:bd:e6:26:a7:40:fa:fe:82: 41:a3:73:18:f6:68:c9:4c:ff:7c:a1:81:a5:bc:4f: c5:0e:e7:68:44:4d:12:05:64:1a:cc:0c:06:06:92: 54:81:7d:6c:b4:5d:76:e7:24:b5:ef:27:1e:44:c5: 3e:68:10:26:83:ec:a5:64:53:bb:4f:29:ca:63:f2: 98:12:dc:a1:75:b3:46:f2:61:f0:43:66:ff:5d:6b: 4a:75:26:65:83:45:af:f9:ee:cd:37:d4:6e:09:49: a3:1c:5c:e6:76:aa:92:29:4d:58:d7:82:0c:90:9a: f1:84:fc:85:cd:f5:ad:08:42:4e:64:7f:6d:f3:c0: 1f:d4:eb:1e:2d:4a:9c:02:5c:27:9b:43:61:c0:e2: 1f:63:ec:0b:6a:c3:71:ba:f2:9e:0f:ad:69:e4:13: 35:76:4a:0f:27:4f:e0:ce:cf:8f:7a:7f:39:66:e0: 58:5a:ee:15:8e:dd:92:69:c7:34:87:98:c3:b1:af: 30:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6E:72:BA:97:D9:CA:B1:46:E9:E5:F9:AF:6F:CD:AD:0E:69:26:85 X509v3 Authority Key Identifier: keyid:67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8a:05:ad:3b:45:fc:8e:54:9d:d6:27:88:c2:f8:dc:e2:f6: c4:1d:5a:c5:97:c1:c4:48:3a:06:07:cf:c9:64:38:93:3a:81: e8:68:ec:85:a5:f4:0a:35:56:84:f6:f9:20:56:d7:5b:ed:e3: bc:2f:1e:89:57:28:8a:9e:18:06:e9:a3:4a:0d:fd:09:c5:da: 7a:d3:6a:72:26:70:a0:73:6a:94:4f:04:00:76:07:37:74:95: 25:00:4b:19:d2:1b:2c:0f:e1:8b:fa:5c:07:be:e7:4a:05:ef: 45:45:92:16:79:47:8a:14:3d:7e:5a:d4:d9:59:81:4f:a6:21: 05:96:aa:a5:2a:45:48:c3:c6:ce:14:3a:a6:f3:dd:ff:1e:5b: 43:b1:72:35:a7:56:c6:4c:3f:4e:fa:73:9c:8d:06:3a:9a:35: e6:05:6d:1b:b8:43:3a:19:11:20:e6:07:86:b1:db:44:58:f8: f0:bc:48:c4:36:c0:cb:1f:85:76:ed:80:de:e6:3f:5d:30:b3: 3a:0f:88:d1:58:5e:89:cf:5c:d7:b8:a7:24:ff:9d:57:b0:34: 17:ed:0a:dd:54:c5:71:b2:91:bf:4b:40:a5:f9:f1:8e:41:c6: e1:2b:d3:be:cb:d9:72:51:02:22:f9:49:0a:25:c7:f5:79:92: 58:01:06:82 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJhiZpkiqYlcv8N3obtNmAGkjC2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc5NjZEMzRFRkJGNENCQ0ZCMDBDRjlDMjA0NTM5QkZF MEEyNTMxNjAeFw0yNjEwMDgxMTM3MzJaFw0yNjEwMTExNTMxMzJaMDMxMTAvBgNV BAMTKDNBNkU3MkJBOTdEOUNBQjE0NkU5RTVGOUFGNkZDREFEMEU2OTI2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDv8tv9J+s8LVplVOZd+bOOH2u iQYwbmaYTTfJZANSzGrNKjXghUJ08IxglRHnwGmI+TPDXLTYWNN3Q9IOhxbDT8W9 5ianQPr+gkGjcxj2aMlM/3yhgaW8T8UO52hETRIFZBrMDAYGklSBfWy0XXbnJLXv Jx5ExT5oECaD7KVkU7tPKcpj8pgS3KF1s0byYfBDZv9da0p1JmWDRa/57s031G4J SaMcXOZ2qpIpTVjXggyQmvGE/IXN9a0IQk5kf23zwB/U6x4tSpwCXCebQ2HA4h9j 7Atqw3G68p4PrWnkEzV2Sg8nT+DOz496fzlm4Fha7hWO3ZJpxzSHmMOxrzDjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOm5yupfZyrFG6eX5r2/NrQ5pJoUwHwYDVR0j BBgwFoAUZ5ZtNO+/TLz7AM+cIEU5v+CiUxYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzg1OTA3NC8wLzY3OTY2RDM0RUZCRjRDQkNGQjAwQ0Y5QzIwNDUz OUJGRTBBMjUzMTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjc5NjZEMzRFRkJGNENCQ0ZCMDBDRjlDMjA0NTM5QkZFMEEyNTMxNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc4NTkwNzQvMC82Nzk2NkQzNEVGQkY0 Q0JDRkIwMENGOUMyMDQ1MzlCRkUwQTI1MzE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbooFrTtF/I5U ndYniML43OL2xB1axZfBxEg6BgfPyWQ4kzqB6GjshaX0CjVWhPb5IFbXW+3jvC8e iVcoip4YBumjSg39CcXaetNqciZwoHNqlE8EAHYHN3SVJQBLGdIbLA/hi/pcB77n SgXvRUWSFnlHihQ9flrU2VmBT6YhBZaqpSpFSMPGzhQ6pvPd/x5bQ7FyNadWxkw/ TvpznI0GOpo15gVtG7hDOhkRIOYHhrHbRFj48LxIxDbAyx+Fdu2A3uY/XTCzOg+I 0Vheic9c17inJP+dV7A0F+0K3VTFcbKRv0tApfnxjkHG4SvTvsvZclECIvlJCiXH 9XmSWAEGgg== -----END CERTIFICATE-----Generated at Sat Oct 10 16:20:13 2026 by rpki-client