$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft File: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft (raw, json) Hash identifier: PKn5vJAeHlERG5lqNjHgJn8vkr71kLCId9zbawAVk24= Subject key identifier: F7:F9:2B:6B:75:96:0D:65:27:ED:5E:22:F9:6C:C9:C7:04:45:B8:DC Authority key identifier: AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 Certificate issuer: /CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Certificate serial: 66E4B3185CDC599B571B479FC928C831A44DBDB7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft Manifest number: 0133 Signing time: Tue 20 Oct 2026 21:37:25 +0000 Manifest this update: Tue 20 Oct 2026 21:32:25 +0000 Manifest next update: Sat 24 Oct 2026 04:09:25 +0000 Files and hashes: 1: AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl (hash: TSX8j5l6Ztc9ZdaW2q1DVwTkS19mMFrHnrVQNXilY6U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 18:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e4:b3:18:5c:dc:59:9b:57:1b:47:9f:c9:28:c8:31:a4:4d:bd:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341 Validity Not Before: Oct 20 21:32:25 2026 GMT Not After : Oct 24 04:09:25 2026 GMT Subject: CN=F7F92B6B75960D6527ED5E22F96CC9C70445B8DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b3:57:47:2b:0d:c3:1c:3c:a0:cc:18:a4:a7: 36:5f:79:08:7e:b4:19:c6:fd:2e:4c:9d:b9:24:16: b0:c6:38:f1:c5:e9:39:6c:e6:44:7e:c0:65:2c:72: 7b:71:7a:3b:30:5c:df:8b:ca:0c:67:6f:73:22:7a: 88:36:2b:72:0b:cd:a1:d6:d2:b1:cb:85:66:cf:d0: 5d:ad:85:73:1c:15:c5:07:3d:3d:dd:7b:d6:a9:f8: bd:79:7f:ed:c2:09:f9:51:c7:1d:fe:81:d0:5b:1b: f5:7d:93:64:18:0a:d2:75:36:c6:24:b9:d5:39:37: 71:27:67:6f:79:cb:c1:a7:1b:5d:e4:eb:5e:82:e8: 16:87:ef:33:da:a8:dd:68:89:98:2d:54:b3:18:be: 4f:62:b0:81:06:ac:ee:57:3f:8d:18:f5:70:5e:04: e7:07:41:4c:f7:e4:78:28:ca:d7:8c:65:e1:c4:c1: d2:81:a8:fd:11:21:c2:7e:76:0f:28:11:73:51:2a: 67:65:f4:d7:f6:c5:2f:02:16:6c:27:28:2d:dc:30: ca:af:7b:15:24:6e:ad:fb:40:77:a8:8c:51:db:34: 47:66:d8:91:7a:96:62:30:27:82:49:fc:d8:91:a9: d8:0f:a5:ff:86:3f:e4:98:34:e6:60:da:e2:53:49: 3f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F9:2B:6B:75:96:0D:65:27:ED:5E:22:F9:6C:C9:C7:04:45:B8:DC X509v3 Authority Key Identifier: keyid:AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e0:89:21:9b:14:58:3f:4d:f7:25:d9:ac:91:e8:56:fe:44: ad:23:0d:e0:7c:75:6e:ed:29:2e:27:55:53:3f:d8:c5:be:a7: 26:31:53:34:ec:40:8c:c6:48:83:8f:ca:eb:1c:db:b4:ee:12: 7f:93:c6:1e:80:bc:dd:57:ea:ff:25:c4:f8:ad:12:fb:7f:6d: 4a:c3:16:6b:f4:ca:7f:29:f2:cc:e7:e7:bd:81:7e:2a:e1:88: fd:eb:5b:96:50:96:eb:01:cb:f6:78:e6:bd:18:1e:a0:8a:b5: c2:ad:22:ea:15:a5:90:5a:72:cb:e4:96:41:7d:0c:c6:3c:0a: 0f:45:4e:36:18:3d:ae:a7:e3:ad:1e:7a:9e:3c:9c:25:bb:03: 08:1d:0e:f9:1a:74:40:83:b0:49:cb:3e:b7:74:66:d0:ce:13: 3e:5d:19:4e:57:db:e2:cc:84:58:72:ab:c6:67:ef:31:82:78: e7:d5:13:af:69:a8:7f:8b:62:65:24:c0:2e:5a:0c:a2:56:d2: 99:2b:ae:c8:49:67:a6:95:33:9b:ac:09:54:74:21:5e:23:0a: 8a:e8:6e:48:38:f1:4d:12:91:d4:47:7b:64:7f:50:ca:59:c2: 97:cc:52:ad:cb:2c:7d:e1:ef:dd:aa:44:f9:a3:63:82:0a:48: 3f:38:8d:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZuSzGFzcWZtXG0efySjIMaRNvbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJD QUI5QTM0MTAeFw0yNjEwMjAyMTMyMjVaFw0yNjEwMjQwNDA5MjVaMDMxMTAvBgNV BAMTKEY3RjkyQjZCNzU5NjBENjUyN0VENUUyMkY5NkNDOUM3MDQ0NUI4REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMs1dHKw3DHDygzBikpzZfeQh+ tBnG/S5MnbkkFrDGOPHF6Tls5kR+wGUscntxejswXN+Lygxnb3Mieog2K3ILzaHW 0rHLhWbP0F2thXMcFcUHPT3de9ap+L15f+3CCflRxx3+gdBbG/V9k2QYCtJ1NsYk udU5N3EnZ295y8GnG13k616C6BaH7zPaqN1oiZgtVLMYvk9isIEGrO5XP40Y9XBe BOcHQUz35HgoyteMZeHEwdKBqP0RIcJ+dg8oEXNRKmdl9Nf2xS8CFmwnKC3cMMqv exUkbq37QHeojFHbNEdm2JF6lmIwJ4JJ/NiRqdgPpf+GP+SYNOZg2uJTST85AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9/kra3WWDWUn7V4i+WzJxwRFuNwwHwYDVR0j BBgwFoAUq0qsgEm/oPTyeKwiOFypq8q5o0EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE5NTcwMDExOTUzNTYxOC8wL0FCNEFBQzgwNDlCRkEwRjRGMjc4QUMyMjM4NUNB OUFCQ0FCOUEzNDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUI0QUFDODA0OUJGQTBGNEYyNzhBQzIyMzg1Q0E5QUJDQUI5QTM0MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjkxOTU3MDAxMTk1MzU2MTgvMC9BQjRBQUM4MDQ5QkZB MEY0RjI3OEFDMjIzODVDQTlBQkNBQjlBMzQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOCJIZsUWD9N 9yXZrJHoVv5ErSMN4Hx1bu0pLidVUz/Yxb6nJjFTNOxAjMZIg4/K6xzbtO4Sf5PG HoC83Vfq/yXE+K0S+39tSsMWa/TKfynyzOfnvYF+KuGI/etbllCW6wHL9njmvRge oIq1wq0i6hWlkFpyy+SWQX0MxjwKD0VONhg9rqfjrR56njycJbsDCB0O+Rp0QIOw Scs+t3Rm0M4TPl0ZTlfb4syEWHKrxmfvMYJ459UTr2mof4tiZSTALloMolbSmSuu yElnppUzm6wJVHQhXiMKiuhuSDjxTRKR1Ed7ZH9QylnCl8xSrcssfeHv3apE+aNj ggpIPziN1w== -----END CERTIFICATE-----Generated at Wed Oct 21 18:14:24 2026 by rpki-client