$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft File: 67B1959E3870485E7CC0C0360949F51B41A758A3.mft (raw, json) Hash identifier: uTOGxm7Lq7KEGcqwsKl2UR9hCcpgrDgVpzDbBZMFV7A= Subject key identifier: B6:80:AA:22:DD:1B:98:14:01:B6:69:B2:D1:27:5D:AD:22:7A:EB:67 Authority key identifier: 67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 Certificate issuer: /CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Certificate serial: 3CC48966339C586D36F73DE1AC1D9340FE4E788B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft Manifest number: D3 Signing time: Sun 11 Oct 2026 20:26:00 +0000 Manifest this update: Sun 11 Oct 2026 20:21:00 +0000 Manifest next update: Thu 15 Oct 2026 07:20:00 +0000 Files and hashes: 1: 67B1959E3870485E7CC0C0360949F51B41A758A3.crl (hash: OT2bPW6fBimu7dJmU4KLgpXN2X12EQteqhxbTNj+P1A=) 2: 3130332e34352e3136342e302f32322d3234203d3e2030.roa (hash: qFy9a+PvPMMBUAWhb0lNvREvdLvM/JaKv22h6OsAR6Y=) 3: 34332e3232362e3131362e302f32322d3234203d3e2034383337.roa (hash: NDaSIXQdg9kzL5++BXp0DBrYDW4X7HPrqiDp2q88qJE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c4:89:66:33:9c:58:6d:36:f7:3d:e1:ac:1d:93:40:fe:4e:78:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Validity Not Before: Oct 11 20:21:00 2026 GMT Not After : Oct 15 07:20:00 2026 GMT Subject: CN=B680AA22DD1B981401B669B2D1275DAD227AEB67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e7:27:d2:21:38:23:17:9c:f2:92:c3:5f:e1: ab:b0:51:29:63:06:1e:1a:65:11:33:20:20:11:7d: 40:bc:98:c5:0f:fa:19:70:e7:97:7e:40:2a:aa:71: 4b:88:99:53:af:07:db:50:69:56:c7:9f:56:58:f9: 9a:57:18:36:9d:cf:44:52:fc:09:98:1f:d6:df:85: 8d:ad:f4:50:08:50:b9:45:6e:19:15:f8:d9:97:db: 1e:f0:c6:f4:c1:38:c4:42:31:f3:f9:33:42:aa:f8: 90:76:30:d9:fe:25:ba:57:ff:f4:8a:87:61:08:ce: 3d:da:08:cb:06:97:58:20:28:20:9a:0a:87:16:7f: 1a:81:6e:68:d7:d3:cb:7d:93:68:cd:8e:26:54:33: a8:58:52:6a:b0:76:a7:9d:f8:38:36:29:d2:d9:4b: d7:c7:0a:40:63:07:78:9b:cb:4d:05:a2:67:5c:16: e9:33:b4:6e:ff:d1:d5:a4:28:7f:95:75:c3:fb:95: cd:99:31:6d:69:b3:09:13:b7:6c:1a:70:cf:fa:22: 69:d9:ba:eb:61:d7:77:31:52:f6:93:92:dd:90:62: 5f:fb:7a:53:e6:5d:c1:98:97:91:49:8f:54:bb:9a: c2:5f:79:7d:51:59:08:90:59:12:4b:86:fc:02:b3: c3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:80:AA:22:DD:1B:98:14:01:B6:69:B2:D1:27:5D:AD:22:7A:EB:67 X509v3 Authority Key Identifier: keyid:67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:16:92:12:72:06:16:7d:67:a6:99:c5:49:80:23:83:fb:a6: 94:05:c1:69:28:a6:c8:41:b4:ca:24:77:29:f3:be:f3:51:28: c5:45:72:88:c7:eb:2e:4d:19:75:02:c1:5e:f3:42:b3:02:4f: 17:d5:66:59:90:4b:b4:6e:77:1a:00:98:2c:a0:37:d3:2e:0e: 2a:77:59:a5:cb:92:ee:d6:d7:96:8a:04:d0:e5:7c:82:59:3b: 9d:9c:4a:14:80:a7:5b:33:7f:be:6c:6d:5f:4c:e8:fb:91:f9: 3f:17:8f:43:65:cd:db:77:55:f4:0a:62:fd:a8:5e:cc:5c:e9: 08:3d:1b:14:dc:04:c2:5a:56:b3:c3:59:97:98:66:0e:86:9f: a3:6c:18:5f:6e:8e:77:3c:d2:ba:ab:b1:25:5e:c1:0f:69:cc: 06:99:37:29:b2:4f:b5:88:9b:e5:f6:e3:41:08:6d:f2:9d:cc: b7:cf:a0:5c:1e:87:f6:05:2a:5f:13:1b:9f:53:d8:46:c4:6e: 50:6f:07:d7:e2:af:75:00:f0:55:4c:81:ee:c8:32:8b:b2:71: 07:8a:76:dd:77:9a:52:3f:d3:92:5c:78:81:36:fa:e9:f8:95: 5c:e8:7d:e1:2b:4e:71:aa:79:a1:2c:2c:2b:39:c4:cd:c4:7e: ce:d9:4d:8a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPMSJZjOcWG029z3hrB2TQP5OeIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0 MUE3NThBMzAeFw0yNjEwMTEyMDIxMDBaFw0yNjEwMTUwNzIwMDBaMDMxMTAvBgNV BAMTKEI2ODBBQTIyREQxQjk4MTQwMUI2NjlCMkQxMjc1REFEMjI3QUVCNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC45yfSITgjF5zyksNf4auwUSlj Bh4aZREzICARfUC8mMUP+hlw55d+QCqqcUuImVOvB9tQaVbHn1ZY+ZpXGDadz0RS /AmYH9bfhY2t9FAIULlFbhkV+NmX2x7wxvTBOMRCMfP5M0Kq+JB2MNn+JbpX//SK h2EIzj3aCMsGl1ggKCCaCocWfxqBbmjX08t9k2jNjiZUM6hYUmqwdqed+Dg2KdLZ S9fHCkBjB3iby00FomdcFukztG7/0dWkKH+VdcP7lc2ZMW1pswkTt2wacM/6ImnZ uuth13cxUvaTkt2QYl/7elPmXcGYl5FJj1S7msJfeX1RWQiQWRJLhvwCs8NpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtoCqIt0bmBQBtmmy0SddrSJ662cwHwYDVR0j BBgwFoAUZ7GVnjhwSF58wMA2CUn1G0GnWKMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDExOTMwNDEzNzI3NzQ0My8wLzY3QjE5NTlFMzg3MDQ4NUU3Q0MwQzAzNjA5NDlG NTFCNDFBNzU4QTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0MUE3NThBMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQxMTkzMDQxMzcyNzc0NDMvMC82N0IxOTU5RTM4NzA0 ODVFN0NDMEMwMzYwOTQ5RjUxQjQxQTc1OEEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRaSEnIGFn1n ppnFSYAjg/umlAXBaSimyEG0yiR3KfO+81EoxUVyiMfrLk0ZdQLBXvNCswJPF9Vm WZBLtG53GgCYLKA30y4OKndZpcuS7tbXlooE0OV8glk7nZxKFICnWzN/vmxtX0zo +5H5PxePQ2XN23dV9Api/ahezFzpCD0bFNwEwlpWs8NZl5hmDoafo2wYX26OdzzS uquxJV7BD2nMBpk3KbJPtYib5fbjQQht8p3Mt8+gXB6H9gUqXxMbn1PYRsRuUG8H 1+KvdQDwVUyB7sgyi7JxB4p23XeaUj/Tklx4gTb66fiVXOh94StOcap5oSwsKznE zcR+ztlNig== -----END CERTIFICATE-----Generated at Tue Oct 13 08:50:11 2026 by rpki-client