$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft File: AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft (raw, json) Hash identifier: o5+jndl83UNKIQM+CJF/8YI6akSszLVina1ueL6antI= Subject key identifier: 3B:61:E3:01:42:DF:64:70:2B:9E:00:F6:79:4A:7D:B1:B8:02:97:48 Authority key identifier: AA:70:A0:EA:BC:F6:A4:8C:19:7B:68:C8:25:54:CE:3B:68:13:92:1D Certificate issuer: /CN=AA70A0EABCF6A48C197B68C82554CE3B6813921D Certificate serial: 6843C07060529E242EAC9A8F61F7022FA1D6EAD9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft Manifest number: 66 Signing time: Mon 12 Oct 2026 21:07:21 +0000 Manifest this update: Mon 12 Oct 2026 21:02:21 +0000 Manifest next update: Fri 16 Oct 2026 00:11:21 +0000 Files and hashes: 1: AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl (hash: J2fFb0a4PpSC2FMM3L/fR7xx4zUG2Nlie3+5VjgBwZg=) 2: 34352e3131352e3136342e302f32322d3232203d3e2034383337.roa (hash: 9cMTr5aVkYXb2qvIvVsGRcoKjxYWlPZfKd7XpNYBdBQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:43:c0:70:60:52:9e:24:2e:ac:9a:8f:61:f7:02:2f:a1:d6:ea:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA70A0EABCF6A48C197B68C82554CE3B6813921D Validity Not Before: Oct 12 21:02:21 2026 GMT Not After : Oct 16 00:11:21 2026 GMT Subject: CN=3B61E30142DF64702B9E00F6794A7DB1B8029748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:95:f2:b5:00:99:a2:49:d3:9c:d2:7c:6d:02: 3b:63:36:bf:0b:61:b2:9e:92:3e:05:94:25:0c:29: ec:8b:1d:bd:49:84:a7:38:f1:b9:81:15:de:e1:11: af:a9:27:78:4a:5d:e7:f8:19:cd:dd:74:d1:35:ab: a2:8a:02:08:ae:01:21:8d:46:06:7c:c5:d6:96:2d: 4b:ea:94:96:6d:15:82:01:03:c6:80:62:d8:81:9b: ee:e1:1d:5c:48:b9:ad:ae:a1:c6:d5:16:23:c3:e1: a2:10:7e:ad:ac:dd:ef:19:26:8a:4b:78:67:6e:03: 96:e3:8b:6f:aa:2d:e9:9e:ba:6a:36:0b:fc:01:94: b8:4e:1e:94:38:9a:7f:2e:25:fc:51:60:4d:aa:4a: bd:ae:92:41:33:fb:34:7f:1d:82:de:cf:dd:e6:9f: af:42:2a:93:95:16:1e:ea:8b:93:d8:67:c1:aa:85: 67:10:c9:e7:69:39:c4:49:ae:50:97:2d:ba:d0:09: 40:a3:f1:a1:58:6d:5c:f3:8a:cc:42:59:02:be:70: 1e:82:17:86:fd:a2:b5:af:f0:55:cc:2f:ef:32:35: d6:63:ff:77:e3:38:5a:c2:8f:e7:5d:2d:7a:28:74: 42:08:23:fa:69:9e:88:f1:ca:c2:37:0f:ca:49:03: f3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:61:E3:01:42:DF:64:70:2B:9E:00:F6:79:4A:7D:B1:B8:02:97:48 X509v3 Authority Key Identifier: keyid:AA:70:A0:EA:BC:F6:A4:8C:19:7B:68:C8:25:54:CE:3B:68:13:92:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:3b:f9:08:6b:30:6d:56:9f:67:4a:70:e4:b0:ea:8a:0f:0e: 48:cd:ec:d5:6d:6d:28:3d:8d:47:b3:9d:98:dc:69:04:54:c5: 8c:d4:a8:fb:34:73:ae:8c:4c:a0:e0:a8:6f:cf:dc:aa:06:7e: d5:50:cd:47:71:ce:92:6c:83:78:88:09:0d:19:30:2b:90:15: aa:f0:ca:d5:31:5f:30:d9:2d:32:81:dd:60:5d:4b:5a:ee:ad: 23:f3:57:64:ce:e5:86:10:1e:db:41:7a:4d:2a:85:aa:11:5d: 99:c9:dc:3c:92:16:67:86:0e:da:69:58:a9:e8:1b:8a:75:ff: 0d:7f:e0:33:a2:33:e8:8d:b9:1a:86:a9:f8:90:c2:fc:07:26: ed:3b:ec:09:47:41:47:94:de:bc:38:04:05:38:f0:95:f6:6f: e6:1a:06:cb:05:09:13:ca:fa:95:48:b4:cf:9b:40:a3:5a:4b: 2c:f1:86:4a:0d:ad:97:59:2f:63:7c:92:21:c5:07:f4:e7:ad: 86:48:94:b5:f8:78:52:d1:7b:1e:67:15:ff:af:86:ae:ba:ea: 9e:98:6f:be:b0:8d:54:88:38:cb:8a:61:98:a5:59:f6:c3:d1: 2b:89:b2:55:ac:d2:2a:69:70:dd:58:3e:53:7a:c5:d9:30:a2: c5:59:ca:73 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaEPAcGBSniQurJqPYfcCL6HW6tkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3MEEwRUFCQ0Y2QTQ4QzE5N0I2OEM4MjU1NENFM0I2 ODEzOTIxRDAeFw0yNjEwMTIyMTAyMjFaFw0yNjEwMTYwMDExMjFaMDMxMTAvBgNV BAMTKDNCNjFFMzAxNDJERjY0NzAyQjlFMDBGNjc5NEE3REIxQjgwMjk3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDolfK1AJmiSdOc0nxtAjtjNr8L YbKekj4FlCUMKeyLHb1JhKc48bmBFd7hEa+pJ3hKXef4Gc3ddNE1q6KKAgiuASGN RgZ8xdaWLUvqlJZtFYIBA8aAYtiBm+7hHVxIua2uocbVFiPD4aIQfq2s3e8ZJopL eGduA5bji2+qLemeumo2C/wBlLhOHpQ4mn8uJfxRYE2qSr2ukkEz+zR/HYLez93m n69CKpOVFh7qi5PYZ8GqhWcQyedpOcRJrlCXLbrQCUCj8aFYbVzzisxCWQK+cB6C F4b9orWv8FXML+8yNdZj/3fjOFrCj+ddLXoodEIII/ppnojxysI3D8pJA/NFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUO2HjAULfZHArngD2eUp9sbgCl0gwHwYDVR0j BBgwFoAUqnCg6rz2pIwZe2jIJVTOO2gTkh0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzkwNzE2NTY4NjMzMzQ3Ny8wL0FBNzBBMEVBQkNGNkE0OEMxOTdCNjhDODI1NTRD RTNCNjgxMzkyMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUE3MEEwRUFCQ0Y2QTQ4QzE5N0I2OEM4MjU1NENFM0I2ODEzOTIxRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM5MDcxNjU2ODYzMzM0NzcvMC9BQTcwQTBFQUJDRjZB NDhDMTk3QjY4QzgyNTU0Q0UzQjY4MTM5MjFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzv5CGswbVaf Z0pw5LDqig8OSM3s1W1tKD2NR7OdmNxpBFTFjNSo+zRzroxMoOCob8/cqgZ+1VDN R3HOkmyDeIgJDRkwK5AVqvDK1TFfMNktMoHdYF1LWu6tI/NXZM7lhhAe20F6TSqF qhFdmcncPJIWZ4YO2mlYqegbinX/DX/gM6Iz6I25Goap+JDC/Acm7TvsCUdBR5Te vDgEBTjwlfZv5hoGywUJE8r6lUi0z5tAo1pLLPGGSg2tl1kvY3ySIcUH9OethkiU tfh4UtF7HmcV/6+GrrrqnphvvrCNVIg4y4phmKVZ9sPRK4myVazSKmlw3Vg+U3rF 2TCixVnKcw== -----END CERTIFICATE-----Generated at Tue Oct 13 23:49:27 2026 by rpki-client