$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft File: CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft (raw, json) Hash identifier: kwzGTSY5oVT0MSG+Jr4do3Qs4Gt8la+4T9iY3sGEdwU= Subject key identifier: B8:E4:AB:F5:55:C1:67:BD:CE:6E:7B:26:94:16:EB:2A:52:55:B5:D4 Authority key identifier: CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 Certificate issuer: /CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Certificate serial: 1E39DFF9B5C76BD3328CF6CA98B0A4BF00700045 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft Manifest number: A7 Signing time: Thu 15 Oct 2026 00:10:53 +0000 Manifest this update: Thu 15 Oct 2026 00:05:53 +0000 Manifest next update: Sun 18 Oct 2026 05:03:53 +0000 Files and hashes: 1: CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl (hash: 50hhx/eorG7GacQQkJ/5Bui4o7zbl0Xus954YRPfSBI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 05:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:39:df:f9:b5:c7:6b:d3:32:8c:f6:ca:98:b0:a4:bf:00:70:00:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Validity Not Before: Oct 15 00:05:53 2026 GMT Not After : Oct 18 05:03:53 2026 GMT Subject: CN=B8E4ABF555C167BDCE6E7B269416EB2A5255B5D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a1:57:3b:91:c1:5b:15:71:7c:de:35:0a:03: e0:bc:d7:d3:41:71:fe:c7:13:ab:a7:fb:43:31:1f: e3:73:48:c5:6a:82:e3:c7:18:02:a4:a3:0a:17:c9: 46:2e:9d:18:bc:47:a8:48:7f:f3:ff:ff:a5:58:1b: dd:ef:eb:98:55:f3:c4:a4:03:05:df:fb:1e:51:35: 7f:75:e0:ea:7a:62:fd:d4:bf:e8:fe:96:f8:87:0f: 80:a2:ab:75:de:8c:59:23:05:22:2b:a8:54:31:69: cd:d7:7e:af:b3:12:42:fb:a5:8a:ab:de:27:f9:d0: 25:63:d7:03:db:d8:fa:9a:0f:14:af:27:1b:d2:43: 8a:e3:20:2a:11:a0:95:39:0c:1c:49:5b:9b:00:36: 7f:ac:0d:16:f7:be:ae:22:9b:da:a4:15:5d:40:90: c5:0f:c8:38:b6:a1:f0:bc:81:90:b3:27:98:ba:01: 9e:41:29:30:a7:2d:89:81:d4:b1:c9:cb:b3:03:9d: 4d:74:10:65:58:78:43:21:35:9c:8e:e2:09:0e:19: 63:d6:43:fd:8c:2c:a5:ee:57:b2:f7:b5:35:98:e3: 3c:c0:58:eb:c4:e0:fe:13:5f:58:05:31:98:12:0e: d1:6f:82:a3:be:1f:49:ef:b1:b2:0c:e2:2e:1d:5c: d4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E4:AB:F5:55:C1:67:BD:CE:6E:7B:26:94:16:EB:2A:52:55:B5:D4 X509v3 Authority Key Identifier: keyid:CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:22:95:70:36:28:01:18:80:66:fc:de:51:aa:ec:7a:af:50: 8f:e3:d3:43:75:83:41:8f:c2:e3:21:35:dc:bf:55:b3:8f:31: 7a:6a:14:e1:88:48:2c:be:22:0b:fc:9c:27:c1:21:d5:4c:e0: 3c:79:df:80:7a:01:e0:2a:44:fe:c4:17:fe:0d:3a:65:b5:87: 7e:b2:37:28:cc:c8:fa:55:fd:44:38:e8:f0:f9:5c:c6:2d:43: 38:d4:de:a0:1f:89:e2:6b:e5:88:5f:23:5e:eb:62:59:c9:84: 19:32:ad:14:26:9e:a3:5d:bd:e1:fd:6e:9c:97:2e:61:ed:c5: 80:0e:58:8d:f7:33:71:54:bc:65:a9:c7:e8:88:81:43:13:07: 93:7d:bf:84:5a:b7:d1:3f:82:4e:ef:e8:9d:45:22:3c:7c:12: 86:43:59:19:01:18:1d:28:07:d8:f0:03:ea:2f:d8:f9:2e:bd: 09:93:60:dd:58:84:43:08:a2:94:b4:95:1d:20:03:3d:42:20: a9:10:21:2d:33:4c:51:25:5f:b8:55:80:af:85:95:f3:c5:f0: 31:f4:65:c7:1d:d2:04:2c:42:47:a0:9f:e7:c1:ca:c0:18:28: 8a:ea:2b:4a:c7:51:7d:c8:06:3d:ea:67:35:27:d8:2c:b6:10: 08:7a:75:9d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHjnf+bXHa9MyjPbKmLCkvwBwAEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0Uw RDEwREFDNDAeFw0yNjEwMTUwMDA1NTNaFw0yNjEwMTgwNTAzNTNaMDMxMTAvBgNV BAMTKEI4RTRBQkY1NTVDMTY3QkRDRTZFN0IyNjk0MTZFQjJBNTI1NUI1RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFoVc7kcFbFXF83jUKA+C819NB cf7HE6un+0MxH+NzSMVqguPHGAKkowoXyUYunRi8R6hIf/P//6VYG93v65hV88Sk AwXf+x5RNX914Op6Yv3Uv+j+lviHD4Ciq3XejFkjBSIrqFQxac3Xfq+zEkL7pYqr 3if50CVj1wPb2PqaDxSvJxvSQ4rjICoRoJU5DBxJW5sANn+sDRb3vq4im9qkFV1A kMUPyDi2ofC8gZCzJ5i6AZ5BKTCnLYmB1LHJy7MDnU10EGVYeEMhNZyO4gkOGWPW Q/2MLKXuV7L3tTWY4zzAWOvE4P4TX1gFMZgSDtFvgqO+H0nvsbIM4i4dXNTLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuOSr9VXBZ73ObnsmlBbrKlJVtdQwHwYDVR0j BBgwFoAUzqzme4xvJFW/65XKl/Tvzg0Q2sQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTAwNDc5NjQ1MjQwNTI2Ny8wL0NFQUNFNjdCOEM2RjI0NTVCRkVCOTVDQTk3RjRF RkNFMEQxMERBQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0UwRDEwREFDNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDkwMDQ3OTY0NTI0MDUyNjcvMC9DRUFDRTY3QjhDNkYy NDU1QkZFQjk1Q0E5N0Y0RUZDRTBEMTBEQUM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCKVcDYoARiA ZvzeUarseq9Qj+PTQ3WDQY/C4yE13L9Vs48xemoU4YhILL4iC/ycJ8Eh1UzgPHnf gHoB4CpE/sQX/g06ZbWHfrI3KMzI+lX9RDjo8Plcxi1DONTeoB+J4mvliF8jXuti WcmEGTKtFCaeo1294f1unJcuYe3FgA5YjfczcVS8ZanH6IiBQxMHk32/hFq30T+C Tu/onUUiPHwShkNZGQEYHSgH2PAD6i/Y+S69CZNg3ViEQwiilLSVHSADPUIgqRAh LTNMUSVfuFWAr4WV88XwMfRlxx3SBCxCR6Cf58HKwBgoiuorSsdRfcgGPepnNSfY LLYQCHp1nQ== -----END CERTIFICATE-----Generated at Thu Oct 15 16:27:27 2026 by rpki-client