$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft File: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft (raw, json) Hash identifier: B7HhWH8uwXtKrdaaXqI4H2YeNLkmRL112DX+JQQSMug= Subject key identifier: 5F:D3:71:69:21:B8:80:39:F0:18:2C:01:9A:DD:56:BF:C5:BF:0A:E9 Authority key identifier: 24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B Certificate issuer: /CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Certificate serial: 488523BC62D9170C9227C1DC7D8BC12C82B61335 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft Manifest number: 9D Signing time: Wed 14 Oct 2026 18:44:24 +0000 Manifest this update: Wed 14 Oct 2026 18:39:24 +0000 Manifest next update: Sun 18 Oct 2026 02:37:24 +0000 Files and hashes: 1: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl (hash: sI8p71MkAFipqJWYdMufytqbQMgbkRZjndS+buFmcQI=) 2: 3130332e3133312e3133382e302f32332d3233203d3e20313336313937.roa (hash: zT8XBWbZQ9y9tGdKDC3b9QwRJtTXCLs9KZRJOE6nT9M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 02:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:85:23:bc:62:d9:17:0c:92:27:c1:dc:7d:8b:c1:2c:82:b6:13:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Validity Not Before: Oct 14 18:39:24 2026 GMT Not After : Oct 18 02:37:24 2026 GMT Subject: CN=5FD3716921B88039F0182C019ADD56BFC5BF0AE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fa:31:2b:f3:22:d2:49:a2:d4:d0:f7:13:be: 74:01:16:ae:b8:a8:97:8d:e9:ae:69:dd:66:e2:02: 62:0e:23:ec:c4:c7:67:db:cb:5b:91:b4:0b:19:4c: f1:74:89:d7:14:86:c0:8f:49:b2:ec:ec:82:46:16: 03:65:65:3f:08:1d:94:e3:db:df:dd:96:3a:1e:fb: 6f:13:ca:6b:1d:41:82:ff:2e:1c:90:2b:44:d9:10: cc:e0:2a:82:65:dc:3c:03:91:8d:7b:7e:86:09:e3: 98:36:a2:d7:61:5e:bc:a7:a1:5b:40:07:3c:3f:57: f2:af:d2:35:6a:f4:16:9a:95:86:ad:76:dd:ea:64: ba:86:65:eb:1e:3b:d9:19:b8:a7:fd:da:6b:62:04: 2a:e6:20:af:7d:48:1b:3e:88:03:ca:18:26:1f:82: 6b:a9:e7:63:ac:92:a5:2a:d3:e1:de:02:df:de:71: b2:34:1c:88:94:2e:f6:81:b1:0f:9f:68:cf:df:8a: 34:fe:ec:6c:bc:f8:f6:c8:d6:d3:86:a6:ea:34:f5: c8:84:c4:0f:dd:22:5f:84:cf:01:8e:a7:85:af:70: 6e:ca:98:15:ef:c1:17:f0:50:7d:7b:c9:6c:78:2e: 0a:c6:87:ee:0a:e4:58:fb:ed:d7:85:30:44:c6:ea: 1c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D3:71:69:21:B8:80:39:F0:18:2C:01:9A:DD:56:BF:C5:BF:0A:E9 X509v3 Authority Key Identifier: keyid:24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:39:d2:f2:0b:d9:5f:90:f0:87:f9:4f:c3:3f:8a:d3:01:f4: 7f:f5:47:de:33:b3:aa:3f:96:35:b0:6c:3a:80:9e:47:8b:2a: 1b:ef:f0:ef:a6:2a:6f:f1:78:7a:e3:a1:7b:ee:db:ac:9a:d4: 0a:4c:c1:46:38:17:d3:25:e3:38:f6:50:78:82:2c:ff:6f:45: 55:e5:15:40:43:ec:41:ed:08:99:4b:62:49:9f:32:fa:16:ac: 84:11:50:a5:86:62:e9:a8:2d:be:86:d2:d2:81:49:80:b9:18: ab:f3:28:e8:36:9e:c1:be:f1:3a:38:5e:b6:b3:f1:2b:d6:d3: 84:e8:48:16:2e:bc:45:68:b4:75:a0:c9:04:84:58:13:a3:b8: 1f:2b:6a:c1:fd:7e:8a:a9:91:f2:be:4a:31:a7:17:3c:83:30: 69:ff:b4:f0:89:34:4c:0a:00:4f:3e:8c:14:bd:52:e2:dc:8f: 13:81:95:97:54:f8:47:af:74:5d:f7:27:1a:33:13:3d:29:1c: 03:79:48:03:57:4d:b9:95:6a:b8:b8:d6:50:17:98:b6:40:dc: 17:a9:64:84:fa:57:a5:20:d3:aa:f8:c1:a7:75:90:5f:f6:15: ea:3c:38:12:65:69:c4:4a:a9:a7:9e:5c:21:c3:47:39:77:22: d3:b5:53:f2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSIUjvGLZFwySJ8HcfYvBLIK2EzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJG QzAzNUQ2QjAeFw0yNjEwMTQxODM5MjRaFw0yNjEwMTgwMjM3MjRaMDMxMTAvBgNV BAMTKDVGRDM3MTY5MjFCODgwMzlGMDE4MkMwMTlBREQ1NkJGQzVCRjBBRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO+jEr8yLSSaLU0PcTvnQBFq64 qJeN6a5p3WbiAmIOI+zEx2fby1uRtAsZTPF0idcUhsCPSbLs7IJGFgNlZT8IHZTj 29/dljoe+28TymsdQYL/LhyQK0TZEMzgKoJl3DwDkY17foYJ45g2otdhXrynoVtA Bzw/V/Kv0jVq9BaalYatdt3qZLqGZeseO9kZuKf92mtiBCrmIK99SBs+iAPKGCYf gmup52OskqUq0+HeAt/ecbI0HIiULvaBsQ+faM/fijT+7Gy8+PbI1tOGpuo09ciE xA/dIl+EzwGOp4WvcG7KmBXvwRfwUH17yWx4LgrGh+4K5Fj77deFMETG6hz5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUX9NxaSG4gDnwGCwBmt1Wv8W/CukwHwYDVR0j BBgwFoAUJN9dV9PckMcMdY2p+D7QcvwDXWswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODkzNTg1OTA2MDY3MDQ4My8wLzI0REY1RDU3RDNEQzkwQzcwQzc1OERBOUY4M0VE MDcyRkMwMzVENkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJGQzAzNUQ2Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg5MzU4NTkwNjA2NzA0ODMvMC8yNERGNUQ1N0QzREM5 MEM3MEM3NThEQTlGODNFRDA3MkZDMDM1RDZCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMznS8gvZX5Dw h/lPwz+K0wH0f/VH3jOzqj+WNbBsOoCeR4sqG+/w76Yqb/F4euOhe+7brJrUCkzB RjgX0yXjOPZQeIIs/29FVeUVQEPsQe0ImUtiSZ8y+hashBFQpYZi6agtvobS0oFJ gLkYq/Mo6Daewb7xOjhetrPxK9bThOhIFi68RWi0daDJBIRYE6O4Hytqwf1+iqmR 8r5KMacXPIMwaf+08Ik0TAoATz6MFL1S4tyPE4GVl1T4R690XfcnGjMTPSkcA3lI A1dNuZVquLjWUBeYtkDcF6lkhPpXpSDTqvjBp3WQX/YV6jw4EmVpxEqpp55cIcNH OXci07VT8g== -----END CERTIFICATE-----Generated at Thu Oct 15 10:37:11 2026 by rpki-client