$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft File: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft (raw, json) Hash identifier: hj0zo0lBhi2M8Ta4C8ZOoOooCZwuyr0KV/O6t0Lt5ek= Subject key identifier: 7E:82:16:FD:40:0F:D5:C7:A8:4F:AD:D1:68:B6:91:29:FB:30:AA:BB Authority key identifier: 63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63 Certificate issuer: /CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63 Certificate serial: 0F7574E70F7550D9628A8536D2B09041177294CF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft Manifest number: C7 Signing time: Mon 05 Oct 2026 04:48:41 +0000 Manifest this update: Mon 05 Oct 2026 04:43:41 +0000 Manifest next update: Thu 08 Oct 2026 10:01:41 +0000 Files and hashes: 1: 3132312e35322e3232342e302f31392d3139203d3e2034383337.roa (hash: Du8DABN3Kd+HaS5bybrAvOEm0gL7RUVR+bQMHp9DzjM=) 2: 3130312e3235312e3134342e302f32302d3230203d3e2034383337.roa (hash: xoRs3FL3HieKEqrqewNhwvKSZqMvWnRJadRDQ7hi73M=) 3: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl (hash: 00fDxsI8p1YdcgpmMq7ZRLTPdhb56O8iojS/JvrBpBc=) 4: 3130312e3235312e3134342e302f32312d3231203d3e2034383337.roa (hash: /ox/S6ojTw7NTUHT+hZP9w5PkDnUqJXtTCGiGwolLCk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 10:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:75:74:e7:0f:75:50:d9:62:8a:85:36:d2:b0:90:41:17:72:94:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63 Validity Not Before: Oct 5 04:43:41 2026 GMT Not After : Oct 8 10:01:41 2026 GMT Subject: CN=7E8216FD400FD5C7A84FADD168B69129FB30AABB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:68:86:d9:94:7c:c3:9e:53:33:1d:9a:01:c1: 99:f8:52:f0:18:f6:c7:fe:6d:3b:70:77:e7:52:d9: 1a:94:d9:5a:e5:8c:5b:e9:dc:27:a2:0f:45:98:df: 5e:1d:2f:af:f5:88:00:76:65:f0:0d:4a:af:2c:b7: 51:94:91:1e:10:e6:54:f2:60:28:c4:a0:5f:70:a6: e6:e8:9c:7e:b3:c8:d0:8d:3c:38:25:d5:18:e8:b1: 22:b1:80:8b:a7:6f:4e:38:70:10:e9:6c:bc:28:7a: 82:aa:19:95:af:47:8a:67:2c:a8:3d:cd:93:ea:f4: 4a:99:0f:9a:ed:87:a1:69:53:0c:3a:66:c0:73:4c: 62:b7:38:0c:ab:14:0a:95:5c:64:cc:af:dc:a4:29: 88:68:b9:dc:32:3c:5a:f4:bd:f2:7e:b3:dd:ae:94: 4e:37:18:1d:48:7a:e7:c6:4d:b3:a9:8d:12:34:4e: ce:94:f9:e9:d0:cc:c9:cc:5f:dc:8f:21:3b:2e:b9: c9:12:13:63:f2:d0:51:01:a0:77:e2:2e:3d:bb:ea: 1c:cd:db:14:01:33:0d:5b:88:08:72:b7:06:07:7c: 11:13:14:e3:15:e5:f3:c2:08:e9:b0:76:3f:57:f8: 0e:81:a5:73:9d:b5:07:06:18:05:ed:b3:10:c1:47: 33:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:82:16:FD:40:0F:D5:C7:A8:4F:AD:D1:68:B6:91:29:FB:30:AA:BB X509v3 Authority Key Identifier: keyid:63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1e:68:44:ed:c5:b4:0b:b5:03:69:f3:fa:7d:f1:07:11:20: e0:65:dc:c3:43:29:bb:59:1e:e1:3e:2f:f5:df:49:4a:18:f0: 66:7a:df:4c:ba:88:ed:89:4a:d4:54:66:98:3b:bd:1f:58:5b: 90:e4:6b:ca:f2:50:a8:c8:e3:49:c3:7b:8a:c7:10:23:3f:80: be:a1:4a:c6:0f:24:44:47:87:cb:4a:46:81:36:1a:2f:86:fe: a8:6e:ec:45:90:56:46:80:16:4d:bd:e6:f1:c0:5a:c7:6b:cf: 59:da:98:e4:2b:ad:36:fa:1f:5d:9a:87:b8:a8:77:b0:f5:c3: c4:ac:7d:29:19:9b:0e:c7:89:31:c4:a1:ad:c7:55:1c:d5:ef: 01:b2:d9:58:6a:64:f9:fa:4c:48:df:a7:e6:1e:1e:52:7a:a7: 48:95:f1:34:70:6c:17:97:ce:95:d3:86:72:0b:7f:5c:b1:a3: a4:4e:9b:c2:ec:76:8a:3c:9a:20:97:c4:46:a4:b4:e9:cd:c8: 83:7d:21:5b:af:2e:05:d5:12:01:2f:be:78:a6:94:0c:8d:2a: e7:31:fd:53:74:7c:24:91:22:0f:6a:6a:1f:af:eb:0a:7c:92: 3b:07:b8:25:1f:b9:67:df:10:00:62:f5:35:2f:91:ff:29:86: 12:4b:ed:f3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUD3V05w91UNliioU20rCQQRdylM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM0NTgxRjFCOTVGQkEyMDRCMUM4RDAyNzFCQjgxQzdB N0EwOEY2MzAeFw0yNjEwMDUwNDQzNDFaFw0yNjEwMDgxMDAxNDFaMDMxMTAvBgNV BAMTKDdFODIxNkZENDAwRkQ1QzdBODRGQUREMTY4QjY5MTI5RkIzMEFBQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkaIbZlHzDnlMzHZoBwZn4UvAY 9sf+bTtwd+dS2RqU2VrljFvp3CeiD0WY314dL6/1iAB2ZfANSq8st1GUkR4Q5lTy YCjEoF9wpubonH6zyNCNPDgl1RjosSKxgIunb044cBDpbLwoeoKqGZWvR4pnLKg9 zZPq9EqZD5rth6FpUww6ZsBzTGK3OAyrFAqVXGTMr9ykKYhoudwyPFr0vfJ+s92u lE43GB1IeufGTbOpjRI0Ts6U+enQzMnMX9yPITsuuckSE2Py0FEBoHfiLj276hzN 2xQBMw1biAhytwYHfBETFOMV5fPCCOmwdj9X+A6BpXOdtQcGGAXtsxDBRzNJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfoIW/UAP1ceoT63RaLaRKfswqrswHwYDVR0j BBgwFoAUY0WB8blfuiBLHI0CcbuBx6egj2MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjAwMzE5OTA0MTUzOC8wLzYzNDU4MUYxQjk1RkJBMjA0QjFDOEQwMjcxQkI4 MUM3QTdBMDhGNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjM0NTgxRjFCOTVGQkEyMDRCMUM4RDAyNzFCQjgxQzdBN0EwOEY2My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzIwMDMxOTkwNDE1MzgvMC82MzQ1ODFGMUI5NUZC QTIwNEIxQzhEMDI3MUJCODFDN0E3QTA4RjYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdB5oRO3FtAu1 A2nz+n3xBxEg4GXcw0Mpu1ke4T4v9d9JShjwZnrfTLqI7YlK1FRmmDu9H1hbkORr yvJQqMjjScN7iscQIz+AvqFKxg8kREeHy0pGgTYaL4b+qG7sRZBWRoAWTb3m8cBa x2vPWdqY5CutNvofXZqHuKh3sPXDxKx9KRmbDseJMcShrcdVHNXvAbLZWGpk+fpM SN+n5h4eUnqnSJXxNHBsF5fOldOGcgt/XLGjpE6bwux2ijyaIJfERqS06c3Ig30h W68uBdUSAS++eKaUDI0q5zH9U3R8JJEiD2pqH6/rCnySOwe4JR+5Z98QAGL1NS+R /ymGEkvt8w== -----END CERTIFICATE-----Generated at Tue Oct 6 19:12:38 2026 by rpki-client