$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft File: D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft (raw, json) Hash identifier: Y/fx8HKX6m5Lvu2B8wA/JfkDKEXAEy6MT7uPDisZuME= Subject key identifier: BD:03:6C:DD:76:4F:03:AF:8F:68:95:35:17:40:27:03:88:B3:4A:2D Authority key identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04 Certificate issuer: /CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704 Certificate serial: 6BD8C0033274F72E61DB97D81F99FEA6F374AF71 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft Manifest number: 0164 Signing time: Wed 28 Oct 2026 00:15:21 +0000 Manifest this update: Wed 28 Oct 2026 00:10:21 +0000 Manifest next update: Sat 31 Oct 2026 11:03:21 +0000 Files and hashes: 1: D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl (hash: KsyVulQNHC7UyLaLnEAbdrPy1ifdDyxFYYSE77+KqUQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 10:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d8:c0:03:32:74:f7:2e:61:db:97:d8:1f:99:fe:a6:f3:74:af:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704 Validity Not Before: Oct 28 00:10:21 2026 GMT Not After : Oct 31 11:03:21 2026 GMT Subject: CN=BD036CDD764F03AF8F6895351740270388B34A2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4b:ab:86:77:f0:7a:b1:bf:2f:7d:45:26:ca: 91:d3:04:6f:b0:3a:89:91:1c:9c:08:a3:c0:d8:37: 8f:e6:f5:28:ec:20:26:33:15:2b:1a:a8:1c:40:90: 70:b3:03:2b:a1:2b:15:3c:ef:b0:07:e8:64:07:99: 73:22:ed:3c:a6:4c:dd:ea:d2:06:d9:66:d8:fb:b6: 7d:6a:a9:7b:06:a5:c9:c9:f7:dc:ed:aa:07:e2:8d: 7b:2e:57:05:e2:fe:62:82:3b:f0:43:02:d0:e0:da: b0:0c:34:89:44:99:a5:18:a5:88:ee:a8:a5:40:80: 7d:9c:79:d0:85:46:58:6f:47:b6:5b:88:d1:d9:a3: 5e:2d:96:34:51:2f:8b:c9:49:12:c5:96:20:7c:2d: 6b:de:66:23:16:80:c4:7e:e5:50:0b:6d:81:fe:19: b4:16:15:f7:a1:2a:02:3e:a4:96:f8:8a:dd:28:1b: 90:ef:80:e0:99:7b:97:a3:6b:2e:66:d5:3c:f1:05: 07:02:a9:da:4c:96:03:d6:22:4d:f3:5d:19:b2:6e: 94:46:18:4f:42:bf:ef:f6:30:c6:0c:3c:a8:a4:53: d6:ff:02:b5:3b:b5:75:ed:9e:e8:64:7d:ce:d9:5f: 6d:55:1d:50:ad:58:21:44:65:1b:e3:9d:cb:10:59: 1a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:03:6C:DD:76:4F:03:AF:8F:68:95:35:17:40:27:03:88:B3:4A:2D X509v3 Authority Key Identifier: keyid:D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:4e:5b:2f:39:13:ab:bb:a7:07:cd:1f:3a:9c:9c:5a:fd:6b: 2e:45:44:c8:ba:be:80:a5:d2:a7:29:41:50:a4:10:a5:f4:0e: 38:81:d9:d5:8b:86:34:e0:28:dc:a1:85:7a:c1:73:a6:39:c8: c5:41:89:be:c7:c0:51:51:25:13:97:01:8a:ff:48:87:00:db: a8:c2:84:03:2e:c3:05:3f:a5:e6:7a:97:a7:d1:b4:49:bb:1a: 96:d4:49:8a:3a:04:50:ea:e6:ad:62:2a:7b:72:79:83:17:91: 11:33:5b:1c:e2:25:d1:1b:d0:91:64:14:b4:c7:8d:01:d6:2c: 80:49:82:d6:2d:45:b4:ab:86:5d:8e:62:c1:72:47:7b:d4:17: e8:b2:9d:3a:b4:34:45:b5:78:20:e7:b5:47:e4:01:fc:a1:58: 38:03:ea:6e:cd:d0:8e:99:86:8c:8e:f2:8c:ce:2c:a8:00:a1: df:0b:4f:00:6a:22:a8:d2:a9:45:db:a0:38:f6:8b:69:f2:2d: f2:81:47:c3:56:4c:2c:6e:2e:f2:92:1c:1f:4c:ed:27:58:93: 14:1e:97:ba:63:2d:2b:3a:f8:82:de:79:04:db:4a:2e:e9:1e: 21:08:2a:80:15:8c:b8:d1:d8:a7:1c:4b:c0:77:f8:27:dd:b9: 09:0d:79:05 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa9jAAzJ09y5h25fYH5n+pvN0r3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2OUY3MURGRDk2NTE5REVCNEJDQTI4QzJBN0IyMzc0 QjI0MjcwNDAeFw0yNjEwMjgwMDEwMjFaFw0yNjEwMzExMTAzMjFaMDMxMTAvBgNV BAMTKEJEMDM2Q0RENzY0RjAzQUY4RjY4OTUzNTE3NDAyNzAzODhCMzRBMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpS6uGd/B6sb8vfUUmypHTBG+w OomRHJwIo8DYN4/m9SjsICYzFSsaqBxAkHCzAyuhKxU877AH6GQHmXMi7TymTN3q 0gbZZtj7tn1qqXsGpcnJ99ztqgfijXsuVwXi/mKCO/BDAtDg2rAMNIlEmaUYpYju qKVAgH2cedCFRlhvR7ZbiNHZo14tljRRL4vJSRLFliB8LWveZiMWgMR+5VALbYH+ GbQWFfehKgI+pJb4it0oG5DvgOCZe5ejay5m1TzxBQcCqdpMlgPWIk3zXRmybpRG GE9Cv+/2MMYMPKikU9b/ArU7tXXtnuhkfc7ZX21VHVCtWCFEZRvjncsQWRrFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvQNs3XZPA6+PaJU1F0AnA4izSi0wHwYDVR0j BBgwFoAU02n3Hf2WUZ3rS8oowqeyN0skJwQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzQ1NTEwNy8xL0QzNjlGNzFERkQ5NjUxOURFQjRCQ0EyOEMyQTdC MjM3NEIyNDI3MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDM2OUY3MURGRDk2NTE5REVCNEJDQTI4QzJBN0IyMzc0QjI0MjcwNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMS9EMzY5RjcxREZEOTY1 MTlERUI0QkNBMjhDMkE3QjIzNzRCMjQyNzA0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH05bLzkTq7un B80fOpycWv1rLkVEyLq+gKXSpylBUKQQpfQOOIHZ1YuGNOAo3KGFesFzpjnIxUGJ vsfAUVElE5cBiv9IhwDbqMKEAy7DBT+l5nqXp9G0SbsaltRJijoEUOrmrWIqe3J5 gxeRETNbHOIl0RvQkWQUtMeNAdYsgEmC1i1FtKuGXY5iwXJHe9QX6LKdOrQ0RbV4 IOe1R+QB/KFYOAPqbs3QjpmGjI7yjM4sqACh3wtPAGoiqNKpRdugOPaLafIt8oFH w1ZMLG4u8pIcH0ztJ1iTFB6XumMtKzr4gt55BNtKLukeIQgqgBWMuNHYpxxLwHf4 J925CQ15BQ== -----END CERTIFICATE-----Generated at Wed Oct 28 17:12:48 2026 by rpki-client