$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft File: 74280C847DD28C691A500655BD81B3F019C5FCF7.mft (raw, json) Hash identifier: EqswrrRtBR3LvRnbk9RXzmHT6VFaixz6WIAgAlsHOsM= Subject key identifier: 59:8F:68:9E:C8:AD:8E:03:F4:E7:F0:C0:F8:96:52:76:2F:3D:BC:5A Authority key identifier: 74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 Certificate issuer: /CN=74280C847DD28C691A500655BD81B3F019C5FCF7 Certificate serial: 4EFA5EC38A71DC9B41BA800F0FB45A02F9590064 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft Manifest number: D4 Signing time: Wed 14 Oct 2026 12:24:07 +0000 Manifest this update: Wed 14 Oct 2026 12:19:07 +0000 Manifest next update: Sat 17 Oct 2026 19:32:07 +0000 Files and hashes: 1: 74280C847DD28C691A500655BD81B3F019C5FCF7.crl (hash: dDdM5epirUviP1qWg2YS13vXg5e2AFsIb0IxxauEqUo=) 2: 3130332e3138362e3130382e302f32332d3234203d3e203538353433.roa (hash: OcoevkYBZMWLQg+hvAPBGYan1zQFD9QLG6yATABRCBQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:fa:5e:c3:8a:71:dc:9b:41:ba:80:0f:0f:b4:5a:02:f9:59:00:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74280C847DD28C691A500655BD81B3F019C5FCF7 Validity Not Before: Oct 14 12:19:07 2026 GMT Not After : Oct 17 19:32:07 2026 GMT Subject: CN=598F689EC8AD8E03F4E7F0C0F89652762F3DBC5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:95:8c:63:1d:fe:fe:4c:d0:d8:11:ed:b7:d8: f2:6e:d4:70:65:da:3f:50:d7:83:88:21:f4:fe:33: c7:25:3e:36:ac:75:97:4c:ba:50:68:cd:12:f2:19: 2b:60:ee:30:82:71:45:ba:8b:67:58:c1:bd:42:11: 47:6d:87:63:b4:c8:b1:eb:fd:15:e2:05:1f:a1:5e: 2e:40:53:2c:ac:d0:50:ff:2e:e8:45:94:fe:56:c7: 0f:ec:56:8b:20:45:bd:49:8b:73:7a:7d:41:8b:d0: 99:67:11:6b:8e:d4:1c:e6:c5:bd:08:30:3e:ad:a8: 98:9e:80:ee:a5:e3:35:62:8f:6f:f5:07:11:82:0a: 0a:72:44:fb:f1:cf:7c:1f:68:64:5d:6d:d7:99:70: 24:76:f2:5a:1a:b6:31:f7:b6:55:0f:f8:d6:95:50: d8:99:82:c7:b5:ff:99:3e:de:80:a2:cd:9f:6b:77: 56:67:47:65:23:0d:03:e0:a3:87:13:4e:47:9e:64: 34:1b:34:19:0b:d5:5a:b3:49:ac:55:36:a6:5d:45: c8:37:cf:fc:65:f9:f4:ed:3f:5b:d6:40:c9:4f:de: 7d:d6:90:a5:bf:f6:41:14:5e:9a:c7:69:94:da:d2: 1d:1d:2d:af:94:2a:b5:a4:8d:a6:56:c3:f8:fa:05: 3c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8F:68:9E:C8:AD:8E:03:F4:E7:F0:C0:F8:96:52:76:2F:3D:BC:5A X509v3 Authority Key Identifier: keyid:74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:fe:b9:7c:33:c1:b3:d1:46:79:b1:da:ce:58:b1:b0:8f:cf: cc:3a:75:b0:22:80:72:2e:23:58:3f:89:9f:d8:83:9a:32:ea: fd:a9:f5:c8:70:d8:91:2a:a7:5a:d4:d0:f4:f0:9e:e2:f9:77: 05:e1:08:41:ea:ba:cb:fe:12:7f:05:85:fc:42:23:1f:50:ad: 32:88:d0:92:13:26:d2:e5:a1:28:43:f6:dd:78:ca:43:4b:7a: 42:b7:3d:72:50:3a:49:fe:24:1a:3e:b4:ce:e9:b8:cf:13:a3: 80:03:01:b0:c0:6c:d1:a1:8b:1e:cb:bb:39:00:08:a9:99:75: 39:2e:bb:fc:6c:af:7a:6a:4c:f0:0c:16:f5:11:61:1a:5d:11: 19:56:69:30:33:eb:5c:0f:c3:2f:54:f5:f5:be:fa:b0:94:aa: 69:70:27:87:68:05:ee:56:8a:4c:f1:3b:f4:3f:f9:29:5f:c7: ee:01:d1:d8:30:a0:38:00:ba:c1:26:28:92:45:c1:f5:15:c4: e9:94:8a:f1:80:65:4e:1f:97:fd:bd:8f:f4:b4:39:fd:9e:10: 1f:7d:8d:f6:d4:8a:ed:04:ef:a5:c4:ba:8b:3d:27:20:46:6d: 49:eb:66:d4:bf:dd:2a:21:50:10:50:72:e3:f0:d8:fe:cb:e4: a6:91:8d:08 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTvpew4px3JtBuoAPD7RaAvlZAGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAx OUM1RkNGNzAeFw0yNjEwMTQxMjE5MDdaFw0yNjEwMTcxOTMyMDdaMDMxMTAvBgNV BAMTKDU5OEY2ODlFQzhBRDhFMDNGNEU3RjBDMEY4OTY1Mjc2MkYzREJDNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYlYxjHf7+TNDYEe232PJu1HBl 2j9Q14OIIfT+M8clPjasdZdMulBozRLyGStg7jCCcUW6i2dYwb1CEUdth2O0yLHr /RXiBR+hXi5AUyys0FD/LuhFlP5Wxw/sVosgRb1Ji3N6fUGL0JlnEWuO1Bzmxb0I MD6tqJiegO6l4zVij2/1BxGCCgpyRPvxz3wfaGRdbdeZcCR28loatjH3tlUP+NaV UNiZgse1/5k+3oCizZ9rd1ZnR2UjDQPgo4cTTkeeZDQbNBkL1VqzSaxVNqZdRcg3 z/xl+fTtP1vWQMlP3n3WkKW/9kEUXprHaZTa0h0dLa+UKrWkjaZWw/j6BTynAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWY9onsitjgP05/DA+JZSdi89vFowHwYDVR0j BBgwFoAUdCgMhH3SjGkaUAZVvYGz8BnF/PcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1OTcyODA2NDc5MDUzMS8wLzc0MjgwQzg0N0REMjhDNjkxQTUwMDY1NUJEODFC M0YwMTlDNUZDRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAxOUM1RkNGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTk3MjgwNjQ3OTA1MzEvMC83NDI4MEM4NDdERDI4 QzY5MUE1MDA2NTVCRDgxQjNGMDE5QzVGQ0Y3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/65fDPBs9FG ebHazlixsI/PzDp1sCKAci4jWD+Jn9iDmjLq/an1yHDYkSqnWtTQ9PCe4vl3BeEI Qeq6y/4SfwWF/EIjH1CtMojQkhMm0uWhKEP23XjKQ0t6Qrc9clA6Sf4kGj60zum4 zxOjgAMBsMBs0aGLHsu7OQAIqZl1OS67/GyvempM8AwW9RFhGl0RGVZpMDPrXA/D L1T19b76sJSqaXAnh2gF7laKTPE79D/5KV/H7gHR2DCgOAC6wSYokkXB9RXE6ZSK 8YBlTh+X/b2P9LQ5/Z4QH32N9tSK7QTvpcS6iz0nIEZtSetm1L/dKiFQEFBy4/DY /svkppGNCA== -----END CERTIFICATE-----Generated at Thu Oct 15 00:24:51 2026 by rpki-client