$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft File: D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft (raw, json) Hash identifier: b405GXSTQ30keQb0FtZRk999D7rUUaKnJfcb2FoclCo= Subject key identifier: 85:07:F1:C3:FA:C2:16:8E:D1:BB:66:73:E8:19:C7:1F:F5:66:37:2E Authority key identifier: D4:72:FA:CE:17:8D:8D:5E:B1:CD:9E:C9:6B:16:35:49:4E:3C:AB:C6 Certificate issuer: /CN=D472FACE178D8D5EB1CD9EC96B1635494E3CABC6 Certificate serial: 1874FDB67289E9442024DB1C7BD4ECC69789F3D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft Manifest number: 6D Signing time: Thu 15 Oct 2026 18:16:53 +0000 Manifest this update: Thu 15 Oct 2026 18:11:53 +0000 Manifest next update: Mon 19 Oct 2026 06:08:53 +0000 Files and hashes: 1: 3130332e3138312e3233342e302f32342d3234203d3e20313436383232.roa (hash: QK9k+iBnpWkrV2/3ZU9si10LOiRiqqoBfz0NDNoWe6I=) 2: D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.crl (hash: 6o/qoqpJnreyVjR7pRLWDQVViA3dn9hR0TPrH9rgKDk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.crl rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 06:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:74:fd:b6:72:89:e9:44:20:24:db:1c:7b:d4:ec:c6:97:89:f3:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D472FACE178D8D5EB1CD9EC96B1635494E3CABC6 Validity Not Before: Oct 15 18:11:53 2026 GMT Not After : Oct 19 06:08:53 2026 GMT Subject: CN=8507F1C3FAC2168ED1BB6673E819C71FF566372E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ca:c6:85:13:ca:6b:8a:27:c6:74:2e:34:1b: a3:1d:e3:5a:4f:21:c2:82:73:39:ce:15:e4:99:c1: a4:f2:45:c1:eb:14:8d:3f:98:44:ad:86:5b:7c:01: 68:bb:b9:be:3e:a1:44:28:12:65:2e:92:e4:1f:50: 31:73:13:de:59:3a:74:32:c5:4d:52:79:bc:bb:16: f1:19:47:61:01:71:74:32:86:77:51:50:7b:ba:08: 82:dd:24:65:1d:48:8a:84:05:e7:f6:aa:38:cd:a4: 12:b7:b6:43:ad:37:bb:2f:57:15:1e:4a:23:c7:ef: 4a:8f:9e:c4:aa:56:dd:e4:b4:3c:ab:4d:70:bb:d1: 65:01:6e:69:7f:63:69:e1:13:7c:b4:dd:b2:fd:d1: fa:cf:c8:78:3b:58:fa:aa:bb:53:86:ab:bf:2f:74: 82:84:2b:87:2d:a7:bc:e6:9d:0f:9a:ad:b3:3a:01: ee:b4:89:58:11:fb:65:55:fb:49:51:0f:17:ff:75: 96:19:ae:39:8a:65:48:75:3a:19:58:4e:1b:f6:d0: c1:47:79:61:9d:84:42:93:c8:df:9c:8c:fb:75:b8: 66:22:e1:fb:21:ff:a6:f2:6a:45:b7:fc:65:86:7b: f6:9e:8a:b6:de:9b:35:f6:01:f4:b0:67:82:6e:ab: 33:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:07:F1:C3:FA:C2:16:8E:D1:BB:66:73:E8:19:C7:1F:F5:66:37:2E X509v3 Authority Key Identifier: keyid:D4:72:FA:CE:17:8D:8D:5E:B1:CD:9E:C9:6B:16:35:49:4E:3C:AB:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:37:9c:77:38:f3:91:e5:c3:30:9d:20:77:dc:a7:48:b0:06: 58:74:97:11:c2:af:cc:89:55:29:7b:63:49:ad:46:7b:ad:6b: 99:ce:a0:a0:33:4c:6f:eb:9e:e1:6c:26:dc:07:cb:0b:e6:22: 31:8e:2f:6f:92:5e:5e:af:f6:d9:91:3d:b4:99:9d:29:96:a1: 1c:15:f5:8a:b6:dc:3c:ba:cc:0c:5c:e1:70:b6:f8:c3:1e:f9: 20:8f:34:ad:8b:3a:23:a5:5c:24:bb:de:eb:74:2e:e9:34:71: 6c:0a:a8:34:24:8f:09:48:90:d8:cc:fc:d8:bc:e9:63:e5:e4: b1:e6:ae:35:3a:bb:02:ea:9c:f0:37:fc:70:66:84:8d:a3:8f: 9b:49:78:1f:3c:05:57:70:06:d1:58:e0:f7:76:7f:0e:46:30: 10:0e:b9:ca:94:a9:35:54:08:c6:39:ec:cd:cb:cd:e9:6e:57: ce:94:d5:fb:98:3b:c4:2d:1c:7e:62:f8:64:c7:3b:20:ae:61: cf:95:6b:6c:eb:c2:12:0f:42:cc:0a:17:8d:e3:f0:7b:87:c3: 32:38:c8:e2:db:22:b1:72:e5:6a:93:bb:39:c6:71:c0:3f:ef: 9c:11:0a:95:a8:e7:7b:95:53:ef:5f:36:b9:21:b9:7f:af:d7: c4:ed:5e:81 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGHT9tnKJ6UQgJNsce9TsxpeJ89UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ3MkZBQ0UxNzhEOEQ1RUIxQ0Q5RUM5NkIxNjM1NDk0 RTNDQUJDNjAeFw0yNjEwMTUxODExNTNaFw0yNjEwMTkwNjA4NTNaMDMxMTAvBgNV BAMTKDg1MDdGMUMzRkFDMjE2OEVEMUJCNjY3M0U4MTlDNzFGRjU2NjM3MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfysaFE8priifGdC40G6Md41pP IcKCcznOFeSZwaTyRcHrFI0/mESthlt8AWi7ub4+oUQoEmUukuQfUDFzE95ZOnQy xU1Seby7FvEZR2EBcXQyhndRUHu6CILdJGUdSIqEBef2qjjNpBK3tkOtN7svVxUe SiPH70qPnsSqVt3ktDyrTXC70WUBbml/Y2nhE3y03bL90frPyHg7WPqqu1OGq78v dIKEK4ctp7zmnQ+arbM6Ae60iVgR+2VV+0lRDxf/dZYZrjmKZUh1OhlYThv20MFH eWGdhEKTyN+cjPt1uGYi4fsh/6byakW3/GWGe/aeirbemzX2AfSwZ4JuqzNlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhQfxw/rCFo7Ru2Zz6BnHH/VmNy4wHwYDVR0j BBgwFoAU1HL6zheNjV6xzZ7JaxY1SU48q8YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjUwMjMwOTAyMDk1ODc1Ny8wL0Q0NzJGQUNFMTc4RDhENUVCMUNEOUVDOTZCMTYz NTQ5NEUzQ0FCQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDQ3MkZBQ0UxNzhEOEQ1RUIxQ0Q5RUM5NkIxNjM1NDk0RTNDQUJDNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjI1MDIzMDkwMjA5NTg3NTcvMC9ENDcyRkFDRTE3OEQ4 RDVFQjFDRDlFQzk2QjE2MzU0OTRFM0NBQkM2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTecdzjzkeXD MJ0gd9ynSLAGWHSXEcKvzIlVKXtjSa1Ge61rmc6goDNMb+ue4Wwm3AfLC+YiMY4v b5JeXq/22ZE9tJmdKZahHBX1irbcPLrMDFzhcLb4wx75II80rYs6I6VcJLve63Qu 6TRxbAqoNCSPCUiQ2Mz82LzpY+XkseauNTq7Auqc8Df8cGaEjaOPm0l4HzwFV3AG 0Vjg93Z/DkYwEA65ypSpNVQIxjnszcvN6W5XzpTV+5g7xC0cfmL4ZMc7IK5hz5Vr bOvCEg9CzAoXjePwe4fDMjjI4tsisXLlapO7OcZxwD/vnBEKlajne5VT7182uSG5 f6/XxO1egQ== -----END CERTIFICATE-----Generated at Sat Oct 17 06:07:40 2026 by rpki-client