$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft File: D850080623F8BDB006D1C2A5705B45346A8CA661.mft (raw, json) Hash identifier: Z/3Jp01dy+UOBbc4YflttH/u6J7xBvd83aHYd9uYvYw= Subject key identifier: C0:92:41:3B:3B:9F:0A:31:9F:9B:01:A9:63:7C:72:A9:18:AA:83:0F Authority key identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 Certificate issuer: /CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Certificate serial: 16139C8FFE7F85AA41C500438E39F53767272BAD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft Manifest number: 013D Signing time: Tue 13 Oct 2026 11:42:57 +0000 Manifest this update: Tue 13 Oct 2026 11:37:57 +0000 Manifest next update: Fri 16 Oct 2026 21:40:57 +0000 Files and hashes: 1: D850080623F8BDB006D1C2A5705B45346A8CA661.crl (hash: QomKaOzeudJoAA/vHOyShA4Hn7F98HP8slUXo1T4QRU=) 2: 3135372e31302e3232302e302f32342d3332203d3e203231383539.roa (hash: Rxd0o/VyuWkJ3xTShA4IwXmpRpyz089xpF8UECWdS0c=) 3: 3135372e31302e3232312e302f32342d3332203d3e203231383539.roa (hash: /TNM61t565u3SRwpcC0q9IjEYIMqSAnNTjuw6cWQXYQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 21:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:13:9c:8f:fe:7f:85:aa:41:c5:00:43:8e:39:f5:37:67:27:2b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Validity Not Before: Oct 13 11:37:57 2026 GMT Not After : Oct 16 21:40:57 2026 GMT Subject: CN=C092413B3B9F0A319F9B01A9637C72A918AA830F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4f:da:7d:c7:37:4d:00:e8:db:35:1c:67:c9: 81:8d:31:de:cf:c3:9b:c4:06:3c:fa:ce:ef:b8:7f: 7b:10:c2:cd:02:15:75:43:8b:9a:2b:ec:21:57:fc: 3b:50:a0:66:10:31:44:25:1e:69:b6:80:f6:c9:09: bf:73:9c:01:87:59:a1:49:93:34:7c:67:64:24:91: 32:bf:17:92:1b:25:0d:3f:f5:f4:11:a9:e3:10:b1: e8:53:78:97:8b:e7:3a:56:b3:ac:5d:4a:17:ab:d8: 7f:fe:44:79:42:37:fe:ab:57:89:32:00:2e:a5:fc: be:03:c9:5f:16:55:38:10:28:06:8a:af:e3:c8:59: 18:c0:25:e2:5e:bf:f7:e2:e5:2c:09:73:91:6b:2c: 8b:24:ec:3e:8b:10:5a:90:aa:2c:5e:2f:10:54:bb: e4:f5:63:8f:06:39:34:0b:d2:be:c8:f3:d5:88:55: 20:74:40:6c:2e:d5:62:02:26:d3:55:4e:fb:e1:04: a1:78:7b:52:ee:fd:cc:73:cd:03:6c:8e:e8:20:b3: 5e:ab:d7:4a:29:7e:c8:2b:fc:31:32:38:b6:f0:64: 29:2b:b9:6e:bf:2f:6c:0e:aa:29:81:c5:41:fe:cd: 62:88:66:fb:9c:84:66:05:ba:a3:67:b6:fb:25:d4: f3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:92:41:3B:3B:9F:0A:31:9F:9B:01:A9:63:7C:72:A9:18:AA:83:0F X509v3 Authority Key Identifier: keyid:D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d8:81:6a:8e:79:7e:5d:44:f3:03:44:1a:5d:ff:1c:ab:61: 47:4e:60:10:58:0f:ba:2d:c0:83:14:97:ed:64:a0:84:e0:74: b3:ef:13:67:77:00:8e:aa:3f:78:df:11:ad:8f:1e:4a:75:04: c6:f1:bf:d7:9b:57:f6:d2:cf:e4:ad:a8:5c:ac:b2:27:13:c1: 5b:80:55:ff:67:8b:01:ef:e5:64:5b:82:4b:92:84:b2:19:54: 33:15:4b:54:7a:d6:bf:e6:c1:28:53:21:cd:56:79:bf:a3:0c: 83:e9:61:08:8c:5e:1d:00:22:50:ee:29:8f:69:d3:0a:45:9c: ef:44:89:07:9a:e0:7b:15:9a:17:05:c0:42:fc:42:db:48:d8: b8:c0:67:dc:4b:34:44:c4:3c:98:bf:db:36:5f:71:02:c1:05: 68:4e:8d:01:e1:51:74:c8:1f:ca:57:6b:ba:71:12:46:9a:45: da:9e:9a:6a:d1:69:fc:1e:6c:84:9a:2f:b6:76:97:cd:0a:79: df:f5:9d:90:58:09:f8:94:63:7b:3d:08:33:e7:de:0d:eb:41: 6c:b1:51:ce:a0:2c:fa:c3:45:f4:ab:a8:1a:67:b1:08:22:28: b9:80:aa:85:ee:52:4a:29:f6:8c:29:84:84:3d:f9:d9:45:3a: ab:85:e9:5f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFhOcj/5/hapBxQBDjjn1N2cnK60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2 QThDQTY2MTAeFw0yNjEwMTMxMTM3NTdaFw0yNjEwMTYyMTQwNTdaMDMxMTAvBgNV BAMTKEMwOTI0MTNCM0I5RjBBMzE5RjlCMDFBOTYzN0M3MkE5MThBQTgzMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5T9p9xzdNAOjbNRxnyYGNMd7P w5vEBjz6zu+4f3sQws0CFXVDi5or7CFX/DtQoGYQMUQlHmm2gPbJCb9znAGHWaFJ kzR8Z2QkkTK/F5IbJQ0/9fQRqeMQsehTeJeL5zpWs6xdSher2H/+RHlCN/6rV4ky AC6l/L4DyV8WVTgQKAaKr+PIWRjAJeJev/fi5SwJc5FrLIsk7D6LEFqQqixeLxBU u+T1Y48GOTQL0r7I89WIVSB0QGwu1WICJtNVTvvhBKF4e1Lu/cxzzQNsjuggs16r 10opfsgr/DEyOLbwZCkruW6/L2wOqimBxUH+zWKIZvuchGYFuqNntvsl1PONAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwJJBOzufCjGfmwGpY3xyqRiqgw8wHwYDVR0j BBgwFoAU2FAIBiP4vbAG0cKlcFtFNGqMpmEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8xL0Q4NTAwODA2MjNGOEJEQjAwNkQxQzJBNTcwNUI0 NTM0NkE4Q0E2NjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2QThDQTY2MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMS9EODUwMDgwNjIzRjhC REIwMDZEMUMyQTU3MDVCNDUzNDZBOENBNjYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtiBao55fl1E 8wNEGl3/HKthR05gEFgPui3AgxSX7WSghOB0s+8TZ3cAjqo/eN8RrY8eSnUExvG/ 15tX9tLP5K2oXKyyJxPBW4BV/2eLAe/lZFuCS5KEshlUMxVLVHrWv+bBKFMhzVZ5 v6MMg+lhCIxeHQAiUO4pj2nTCkWc70SJB5rgexWaFwXAQvxC20jYuMBn3Es0RMQ8 mL/bNl9xAsEFaE6NAeFRdMgfyldrunESRppF2p6aatFp/B5shJovtnaXzQp53/Wd kFgJ+JRjez0IM+feDetBbLFRzqAs+sNF9KuoGmexCCIouYCqhe5SSin2jCmEhD35 2UU6q4XpXw== -----END CERTIFICATE-----Generated at Thu Oct 15 13:49:15 2026 by rpki-client