$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft File: 7C1507F087228AEDCBF33768752874E09F57729C.mft (raw, json) Hash identifier: wcOo85ncWvXTq/zdAZcHkHyY4Wu0tAx8z1P45vmA9Wc= Subject key identifier: D7:D8:51:2E:70:2C:5B:50:12:70:D1:D5:47:76:11:88:2B:58:D1:DC Authority key identifier: 7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C Certificate issuer: /CN=7C1507F087228AEDCBF33768752874E09F57729C Certificate serial: 255A657EFEA9B5BBA869D11DCD54C50B7B210E36 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft Manifest number: 0137 Signing time: Tue 06 Oct 2026 12:30:10 +0000 Manifest this update: Tue 06 Oct 2026 12:25:10 +0000 Manifest next update: Fri 09 Oct 2026 23:19:10 +0000 Files and hashes: 1: 7C1507F087228AEDCBF33768752874E09F57729C.crl (hash: lKjNChZ6MkbB53JZgI1guOr9ZMkuHGwi5hJ3/K7UoEA=) 2: 34332e3234372e342e302f32342d3234203d3e2034383337.roa (hash: 9MCxElaWDbu4EGRFRrCyVbS4X338Aq+ilmHIKXfSzWc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 23:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:5a:65:7e:fe:a9:b5:bb:a8:69:d1:1d:cd:54:c5:0b:7b:21:0e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C1507F087228AEDCBF33768752874E09F57729C Validity Not Before: Oct 6 12:25:10 2026 GMT Not After : Oct 9 23:19:10 2026 GMT Subject: CN=D7D8512E702C5B501270D1D5477611882B58D1DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3b:e7:26:c9:cc:8e:44:0b:a4:cc:db:33:8b: c6:72:2c:b3:b7:ab:9f:a6:c9:e9:c7:d5:6b:42:b2: 79:24:90:ab:b6:34:27:3f:b7:39:5a:17:49:78:4f: a4:5a:3e:83:c8:61:85:c5:d5:7c:e2:5d:8e:a0:68: d0:ac:fa:c1:ba:5c:09:86:c7:43:0e:46:0f:31:6f: ad:80:7a:5d:36:d5:c4:b7:94:ce:a2:e8:58:ea:73: c8:22:b8:00:0c:60:c8:9d:a5:42:33:2e:39:e1:ae: df:26:d2:b0:47:6a:93:4d:db:e1:22:0f:0c:86:91: b6:f8:96:0b:f6:40:50:c3:97:75:c8:8f:78:3c:22: 6c:b7:12:10:cc:15:0c:8b:20:dd:54:0a:66:ce:fa: 0a:f7:b1:4c:b6:40:70:a4:b4:98:be:4f:33:4d:b4: 38:2e:ae:d2:36:de:dc:32:8c:20:0a:28:59:b8:82: 92:a2:d9:fd:ae:ef:d0:4e:01:49:b9:86:55:ce:f9: 2a:8b:8b:7c:17:2d:1c:97:70:3c:ea:94:19:bc:65: 9d:c2:8d:31:48:09:eb:82:85:7f:f7:a4:0b:79:03: 5d:0f:3a:e6:34:53:8e:e1:36:5f:19:d2:ee:8f:01: e0:f4:74:d6:b6:b1:c4:36:ce:f1:de:4a:64:0c:20: 15:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D8:51:2E:70:2C:5B:50:12:70:D1:D5:47:76:11:88:2B:58:D1:DC X509v3 Authority Key Identifier: keyid:7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:83:05:ff:49:70:f9:4d:a7:54:60:c2:d5:c0:f6:61:bd:0e: da:f2:c7:74:41:b4:66:da:da:5a:71:f8:03:2d:2b:e2:45:a7: 53:1e:eb:a5:61:35:56:a3:9e:00:3f:2a:a7:7d:0f:de:d3:e1: 26:df:50:40:14:91:e9:84:d8:7c:9c:30:18:a1:0c:9b:ff:71: c1:dd:3e:4d:c1:6f:5b:4c:ee:17:ef:ac:96:bb:a2:99:e4:58: 12:46:5e:f0:3d:68:65:86:06:b6:de:36:8e:8a:24:19:2a:1a: 6a:51:8a:90:14:6b:4f:3f:ee:89:2a:2d:37:f2:7a:e1:ba:33: 89:99:36:ea:e2:56:cc:b7:3a:08:b0:93:7d:92:78:57:21:c1: c7:05:c1:fc:4e:eb:77:52:f7:b2:91:68:61:9c:ee:d3:c1:9d: 00:28:02:1d:79:07:21:e8:4a:c1:d2:24:83:29:b4:88:58:16: 27:fa:c8:76:85:98:19:8f:f9:8b:51:6a:d9:94:15:44:17:5f: 3e:e4:76:df:ca:53:49:63:bb:fe:88:21:37:79:a6:06:89:a1: e6:d7:4c:8d:da:fa:29:37:0e:1f:99:05:bc:45:79:07:04:6b: 0f:2d:0a:16:c7:26:09:5b:80:32:30:01:f7:c2:a7:7d:78:8a: d1:46:9b:25 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJVplfv6ptbuoadEdzVTFC3shDjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MxNTA3RjA4NzIyOEFFRENCRjMzNzY4NzUyODc0RTA5 RjU3NzI5QzAeFw0yNjEwMDYxMjI1MTBaFw0yNjEwMDkyMzE5MTBaMDMxMTAvBgNV BAMTKEQ3RDg1MTJFNzAyQzVCNTAxMjcwRDFENTQ3NzYxMTg4MkI1OEQxREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgO+cmycyORAukzNszi8ZyLLO3 q5+myenH1WtCsnkkkKu2NCc/tzlaF0l4T6RaPoPIYYXF1XziXY6gaNCs+sG6XAmG x0MORg8xb62Ael021cS3lM6i6Fjqc8giuAAMYMidpUIzLjnhrt8m0rBHapNN2+Ei DwyGkbb4lgv2QFDDl3XIj3g8Imy3EhDMFQyLIN1UCmbO+gr3sUy2QHCktJi+TzNN tDgurtI23twyjCAKKFm4gpKi2f2u79BOAUm5hlXO+SqLi3wXLRyXcDzqlBm8ZZ3C jTFICeuChX/3pAt5A10POuY0U47hNl8Z0u6PAeD0dNa2scQ2zvHeSmQMIBWlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU19hRLnAsW1AScNHVR3YRiCtY0dwwHwYDVR0j BBgwFoAUfBUH8Iciiu3L8zdodSh04J9XcpwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NjkyOTk2MzY4NjQyODY3NS8wLzdDMTUwN0YwODcyMjhBRURDQkYzMzc2ODc1Mjg3 NEUwOUY1NzcyOUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0MxNTA3RjA4NzIyOEFFRENCRjMzNzY4NzUyODc0RTA5RjU3NzI5Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjY5Mjk5NjM2ODY0Mjg2NzUvMC83QzE1MDdGMDg3MjI4 QUVEQ0JGMzM3Njg3NTI4NzRFMDlGNTc3MjlDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4MF/0lw+U2n VGDC1cD2Yb0O2vLHdEG0ZtraWnH4Ay0r4kWnUx7rpWE1VqOeAD8qp30P3tPhJt9Q QBSR6YTYfJwwGKEMm/9xwd0+TcFvW0zuF++slruimeRYEkZe8D1oZYYGtt42jook GSoaalGKkBRrTz/uiSotN/J64boziZk26uJWzLc6CLCTfZJ4VyHBxwXB/E7rd1L3 spFoYZzu08GdACgCHXkHIehKwdIkgym0iFgWJ/rIdoWYGY/5i1Fq2ZQVRBdfPuR2 38pTSWO7/oghN3mmBomh5tdMjdr6KTcOH5kFvEV5BwRrDy0KFscmCVuAMjAB98Kn fXiK0UabJQ== -----END CERTIFICATE-----Generated at Thu Oct 8 22:59:35 2026 by rpki-client