$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft File: D850080623F8BDB006D1C2A5705B45346A8CA661.mft (raw, json) Hash identifier: D1iWWtVxu6mJQOc/ZQZTf2+xyrUkbHGwVh7Xx0bgfAQ= Subject key identifier: 90:11:8C:39:81:3A:0D:B0:00:36:B4:89:0A:E1:7D:74:5C:E4:4E:ED Authority key identifier: D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 Certificate issuer: /CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Certificate serial: 469D98FEF91091D6348B1C493CF81FB0C369DBA9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft Manifest number: 013F Signing time: Sun 18 Oct 2026 00:09:19 +0000 Manifest this update: Sun 18 Oct 2026 00:04:19 +0000 Manifest next update: Wed 21 Oct 2026 00:31:19 +0000 Files and hashes: 1: D850080623F8BDB006D1C2A5705B45346A8CA661.crl (hash: WZ9ipjnZ1BFlVpRrKa3eUPYpQWQpky19ECnpTnA/jnM=) 2: 3135372e31302e3232302e302f32342d3332203d3e203231383539.roa (hash: Rxd0o/VyuWkJ3xTShA4IwXmpRpyz089xpF8UECWdS0c=) 3: 3135372e31302e3232312e302f32342d3332203d3e203231383539.roa (hash: /TNM61t565u3SRwpcC0q9IjEYIMqSAnNTjuw6cWQXYQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 20:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:9d:98:fe:f9:10:91:d6:34:8b:1c:49:3c:f8:1f:b0:c3:69:db:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D850080623F8BDB006D1C2A5705B45346A8CA661 Validity Not Before: Oct 18 00:04:19 2026 GMT Not After : Oct 21 00:31:19 2026 GMT Subject: CN=90118C39813A0DB00036B4890AE17D745CE44EED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:18:2e:e1:1a:a3:d0:66:39:eb:f2:d8:f1:48: a7:43:81:0e:3f:77:4a:b9:ff:d5:a2:eb:8b:e0:19: 3d:23:19:b7:63:48:67:bf:4a:3a:9a:55:bd:f1:6f: d6:fa:28:93:8a:b8:d7:7f:99:67:c6:12:e2:15:03: 94:c4:3f:17:12:98:e7:69:af:a4:4b:19:97:93:23: 41:2a:21:5e:cc:73:b6:4b:78:21:8d:4b:66:d2:61: 48:de:a7:08:2a:3c:67:e1:a8:5d:81:8b:19:21:e6: 4e:90:a6:80:2a:8a:8a:30:00:be:aa:85:9d:eb:fd: 6b:3c:a5:5e:91:b6:b4:e6:e6:99:b4:b7:6a:b8:e1: dd:19:4c:8d:79:3c:c2:98:96:56:d9:8a:3e:f4:cb: 84:bb:24:dd:83:2f:3a:c8:d7:51:c9:aa:89:f1:59: 22:57:ae:78:83:9f:a9:8e:76:62:b9:c1:8e:c5:65: c1:3e:94:cd:32:4f:04:50:f0:30:7c:55:fe:a9:e7: 28:36:a3:79:95:8b:22:c2:9d:da:08:6d:b7:4f:36: dc:e9:50:cd:80:33:45:4f:b2:15:41:39:93:17:c8: 20:cd:bd:c9:0f:f0:f3:3d:9b:4b:d0:dc:ae:5e:67: c4:64:fc:86:b4:ba:65:a6:38:e2:90:39:47:0b:8e: dc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:11:8C:39:81:3A:0D:B0:00:36:B4:89:0A:E1:7D:74:5C:E4:4E:ED X509v3 Authority Key Identifier: keyid:D8:50:08:06:23:F8:BD:B0:06:D1:C2:A5:70:5B:45:34:6A:8C:A6:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D850080623F8BDB006D1C2A5705B45346A8CA661.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265747969/1/D850080623F8BDB006D1C2A5705B45346A8CA661.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:58:e2:b5:2b:1e:e0:0f:29:2e:6d:92:7c:8f:46:e9:f1:53: 36:a5:8e:0a:9d:b0:07:4c:a1:19:43:95:ae:75:ca:b3:36:72: a8:95:d9:a1:48:de:25:44:45:f9:b8:af:29:ea:ed:99:96:4d: c5:0d:73:2a:96:ee:e5:c4:2b:a1:29:9a:49:b1:c8:4c:6c:af: 42:98:45:bb:6f:c8:98:17:74:34:ec:fa:72:99:9a:6e:9d:56: 0d:54:40:f9:56:aa:cf:4e:65:0e:a3:ca:f9:5f:67:7a:5d:5b: 5d:65:7b:1d:f2:ae:cb:dd:28:84:79:25:4c:4a:99:86:f2:be: 93:41:c0:7d:74:ee:49:ed:fa:d2:55:9a:27:b2:a1:eb:3e:6a: 84:5f:99:aa:e2:46:42:60:82:23:38:d7:76:21:8e:e0:42:89: 17:8f:d7:de:ec:58:33:7f:26:67:8a:42:b8:b2:f9:2e:00:fe: e3:8b:0a:6e:36:db:18:87:89:a1:90:80:cd:9e:a7:8a:db:dc: c4:7c:9a:2f:97:29:2b:de:31:fd:a8:e6:04:ac:b3:64:13:6d: cb:1a:b2:1d:fa:c3:96:06:78:a9:b9:01:e0:ac:07:ea:43:f2: 93:a9:7e:d5:e2:99:d5:c8:9a:b7:c6:4f:59:1f:00:c1:95:5a: a7:83:86:13 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURp2Y/vkQkdY0ixxJPPgfsMNp26kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2 QThDQTY2MTAeFw0yNjEwMTgwMDA0MTlaFw0yNjEwMjEwMDMxMTlaMDMxMTAvBgNV BAMTKDkwMTE4QzM5ODEzQTBEQjAwMDM2QjQ4OTBBRTE3RDc0NUNFNDRFRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJGC7hGqPQZjnr8tjxSKdDgQ4/ d0q5/9Wi64vgGT0jGbdjSGe/SjqaVb3xb9b6KJOKuNd/mWfGEuIVA5TEPxcSmOdp r6RLGZeTI0EqIV7Mc7ZLeCGNS2bSYUjepwgqPGfhqF2Bixkh5k6QpoAqioowAL6q hZ3r/Ws8pV6RtrTm5pm0t2q44d0ZTI15PMKYllbZij70y4S7JN2DLzrI11HJqonx WSJXrniDn6mOdmK5wY7FZcE+lM0yTwRQ8DB8Vf6p5yg2o3mViyLCndoIbbdPNtzp UM2AM0VPshVBOZMXyCDNvckP8PM9m0vQ3K5eZ8Rk/Ia0umWmOOKQOUcLjtxNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkBGMOYE6DbAANrSJCuF9dFzkTu0wHwYDVR0j BBgwFoAU2FAIBiP4vbAG0cKlcFtFNGqMpmEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTc0Nzk2OS8xL0Q4NTAwODA2MjNGOEJEQjAwNkQxQzJBNTcwNUI0 NTM0NkE4Q0E2NjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDg1MDA4MDYyM0Y4QkRCMDA2RDFDMkE1NzA1QjQ1MzQ2QThDQTY2MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU3NDc5NjkvMS9EODUwMDgwNjIzRjhC REIwMDZEMUMyQTU3MDVCNDUzNDZBOENBNjYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA21jitSse4A8p Lm2SfI9G6fFTNqWOCp2wB0yhGUOVrnXKszZyqJXZoUjeJURF+bivKertmZZNxQ1z Kpbu5cQroSmaSbHITGyvQphFu2/ImBd0NOz6cpmabp1WDVRA+Vaqz05lDqPK+V9n el1bXWV7HfKuy90ohHklTEqZhvK+k0HAfXTuSe360lWaJ7Kh6z5qhF+ZquJGQmCC IzjXdiGO4EKJF4/X3uxYM38mZ4pCuLL5LgD+44sKbjbbGIeJoZCAzZ6nitvcxHya L5cpK94x/ajmBKyzZBNtyxqyHfrDlgZ4qbkB4KwH6kPyk6l+1eKZ1ciat8ZPWR8A wZVap4OGEw== -----END CERTIFICATE-----Generated at Sun Oct 18 09:25:41 2026 by rpki-client