$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft File: D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft (raw, json) Hash identifier: JrWuXHloQ24Iz1sizJvnFKA1TrTc2rKCUR2D+p9v09I= Subject key identifier: F0:81:B6:D7:A5:4E:17:00:3B:DB:90:4F:2B:5C:6D:88:C3:0E:53:A6 Authority key identifier: D2:FF:1D:7C:6D:F1:DD:77:5A:61:06:97:0D:05:FF:44:BC:AD:19:43 Certificate issuer: /CN=D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943 Certificate serial: 79A743C53770C2DA65F082EB84D0DE7CFC81424E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft Manifest number: 013F Signing time: Mon 19 Oct 2026 12:15:42 +0000 Manifest this update: Mon 19 Oct 2026 12:10:42 +0000 Manifest next update: Thu 22 Oct 2026 14:26:42 +0000 Files and hashes: 1: D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.crl (hash: Ctn3TYObDPMu134JiUqWFbcaSF0MKFWsnoxTqdHoXaY=) 2: 323430623a613030303a6663333a3a2f34382d3438203d3e20313531333033.roa (hash: TiSdjmUDUZ7Io/2Ke/Pu2qkV+pzBX0aVcs8lYCtTick=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 14:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a7:43:c5:37:70:c2:da:65:f0:82:eb:84:d0:de:7c:fc:81:42:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943 Validity Not Before: Oct 19 12:10:42 2026 GMT Not After : Oct 22 14:26:42 2026 GMT Subject: CN=F081B6D7A54E17003BDB904F2B5C6D88C30E53A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:ad:7e:1a:61:2c:c0:c4:c1:47:84:9f:3c: 9e:33:05:60:d9:42:ff:af:20:c7:67:47:75:ca:28: 49:6e:ba:b2:6e:1a:f0:03:3c:26:6a:78:a5:c7:9c: 35:c8:d0:ec:b3:5f:92:ee:ee:79:2a:63:ad:38:4e: 02:40:64:02:2a:fc:13:40:fc:35:c9:e6:79:93:c3: 01:8e:8b:e3:2e:56:03:15:e9:8b:30:bc:04:31:bd: 20:5b:1a:70:79:f6:5d:17:0e:7c:15:ae:90:63:65: 92:27:9e:f6:3f:f9:10:6b:19:91:36:d7:9c:a0:ab: f5:d2:7c:b3:42:73:ce:c9:e6:c6:23:c2:8d:72:56: 16:60:ed:17:a6:3c:8c:fa:29:f3:76:13:92:c8:29: 87:22:e2:14:87:8d:83:69:59:cb:09:b1:79:e5:08: 09:79:e2:e3:19:04:17:80:db:85:94:63:a4:b5:54: 58:5e:08:04:d8:29:e2:2c:8c:86:8a:80:5c:b9:9b: f5:0b:ac:3d:4e:8d:e7:ff:1a:b9:95:ec:07:3e:4d: cf:86:84:60:b2:ec:4c:45:29:62:3b:65:67:28:e4: 80:08:63:cd:92:8d:e9:43:c2:e8:4a:34:d6:4c:03: e5:a3:7b:18:03:f4:09:ed:6d:3c:fa:58:39:72:14: c2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:81:B6:D7:A5:4E:17:00:3B:DB:90:4F:2B:5C:6D:88:C3:0E:53:A6 X509v3 Authority Key Identifier: keyid:D2:FF:1D:7C:6D:F1:DD:77:5A:61:06:97:0D:05:FF:44:BC:AD:19:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5e:84:04:95:2c:d7:f4:b8:3b:3a:1e:6e:c2:9b:ae:4e:d4: 98:ed:16:f7:5e:ac:f0:82:07:bc:e3:be:82:fc:47:c0:32:fc: 00:9d:eb:2b:b2:be:97:21:ec:cd:92:ba:90:ba:1b:ba:ef:c2: 82:ca:3a:fd:b2:d1:75:76:36:94:1f:eb:da:ed:f3:af:73:cb: b4:5e:82:3f:b5:b5:21:0a:2e:b4:76:d4:2c:d5:7f:83:d5:4f: 2e:1b:0a:8a:ae:3a:e2:5f:4e:70:31:56:73:30:e4:ee:2a:1c: e9:02:0f:f6:4e:29:d7:88:06:55:3c:ff:42:3e:c4:57:66:48: df:03:c3:a1:59:7c:a6:49:06:34:db:d9:1e:f5:78:9c:00:fb: 84:d9:55:e9:f4:c3:ae:be:3e:cc:a5:dc:63:8b:ba:42:a6:4e: 0f:e9:29:f1:7b:f7:aa:9c:39:a2:c5:28:91:16:81:19:8a:d2: b1:9b:ea:5d:1c:b3:52:3e:20:9f:ac:9e:47:98:e0:1f:1f:e0: 12:94:24:91:9c:9c:e4:b5:30:29:33:d7:bf:5b:a4:0f:49:44: fd:ab:72:b4:a8:e0:9f:cc:a2:97:f9:d3:9e:87:b6:4c:c0:39: 0d:ff:c7:29:50:88:af:21:ef:32:12:83:ec:35:2a:6b:10:72: 0d:02:95:d0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeadDxTdwwtpl8ILrhNDefPyBQk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJGRjFEN0M2REYxREQ3NzVBNjEwNjk3MEQwNUZGNDRC Q0FEMTk0MzAeFw0yNjEwMTkxMjEwNDJaFw0yNjEwMjIxNDI2NDJaMDMxMTAvBgNV BAMTKEYwODFCNkQ3QTU0RTE3MDAzQkRCOTA0RjJCNUM2RDg4QzMwRTUzQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBq1+GmEswMTBR4SfPJ4zBWDZ Qv+vIMdnR3XKKEluurJuGvADPCZqeKXHnDXI0OyzX5Lu7nkqY604TgJAZAIq/BNA /DXJ5nmTwwGOi+MuVgMV6YswvAQxvSBbGnB59l0XDnwVrpBjZZInnvY/+RBrGZE2 15ygq/XSfLNCc87J5sYjwo1yVhZg7RemPIz6KfN2E5LIKYci4hSHjYNpWcsJsXnl CAl54uMZBBeA24WUY6S1VFheCATYKeIsjIaKgFy5m/ULrD1Ojef/GrmV7Ac+Tc+G hGCy7ExFKWI7ZWco5IAIY82SjelDwuhKNNZMA+WjexgD9AntbTz6WDlyFMLTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8IG216VOFwA725BPK1xtiMMOU6YwHwYDVR0j BBgwFoAU0v8dfG3x3XdaYQaXDQX/RLytGUMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTU1MTM2MS8wL0QyRkYxRDdDNkRGMURENzc1QTYxMDY5NzBEMDVG RjQ0QkNBRDE5NDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDJGRjFEN0M2REYxREQ3NzVBNjEwNjk3MEQwNUZGNDRCQ0FEMTk0My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU1NTEzNjEvMC9EMkZGMUQ3QzZERjFE RDc3NUE2MTA2OTcwRDA1RkY0NEJDQUQxOTQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALl6EBJUs1/S4 OzoebsKbrk7UmO0W916s8IIHvOO+gvxHwDL8AJ3rK7K+lyHszZK6kLobuu/Cgso6 /bLRdXY2lB/r2u3zr3PLtF6CP7W1IQoutHbULNV/g9VPLhsKiq464l9OcDFWczDk 7ioc6QIP9k4p14gGVTz/Qj7EV2ZI3wPDoVl8pkkGNNvZHvV4nAD7hNlV6fTDrr4+ zKXcY4u6QqZOD+kp8Xv3qpw5osUokRaBGYrSsZvqXRyzUj4gn6yeR5jgHx/gEpQk kZyc5LUwKTPXv1ukD0lE/atytKjgn8yil/nTnoe2TMA5Df/HKVCIryHvMhKD7DUq axByDQKV0A== -----END CERTIFICATE-----Generated at Mon Oct 19 23:48:07 2026 by rpki-client