$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft File: 12BD80FB666E9FF3B78C5257CB80604CE466A620.mft (raw, json) Hash identifier: fXQ3t8AbDWZnl4Qy0KLmQR9ennOmXKLaAIW8igW88nc= Subject key identifier: 3D:2A:78:44:65:41:52:0B:D5:AB:30:EB:8B:A6:E4:B0:D8:4C:00:45 Authority key identifier: 12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20 Certificate issuer: /CN=12BD80FB666E9FF3B78C5257CB80604CE466A620 Certificate serial: 4BC87A1ACCAB3CCC77ECE9B44F12E9DA3CFF526A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft Manifest number: 6E Signing time: Sat 31 Oct 2026 18:24:37 +0000 Manifest this update: Sat 31 Oct 2026 18:19:37 +0000 Manifest next update: Wed 04 Nov 2026 03:09:37 +0000 Files and hashes: 1: 12BD80FB666E9FF3B78C5257CB80604CE466A620.crl (hash: LMeRUCVmPaZJIgcvTuKxLcGpoGy1L17UPtnoP2KJKIw=) 2: 323430323a366538303a3a2f33322d3332203d3e20313339313030.roa (hash: vwm0wFYdrshqVC19O/olyhuC+X7rA1oBdsrwCje/4V0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 10:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c8:7a:1a:cc:ab:3c:cc:77:ec:e9:b4:4f:12:e9:da:3c:ff:52:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12BD80FB666E9FF3B78C5257CB80604CE466A620 Validity Not Before: Oct 31 18:19:37 2026 GMT Not After : Nov 4 03:09:37 2026 GMT Subject: CN=3D2A78446541520BD5AB30EB8BA6E4B0D84C0045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:99:f8:3f:12:4c:64:7b:c1:9e:58:e4:53: d6:c6:5d:29:e3:aa:9c:53:da:94:fa:49:68:9e:d8: 24:31:96:c1:ba:dc:ea:65:36:13:e9:76:d0:22:fd: 5d:2f:99:40:eb:b7:5b:80:1c:84:84:24:14:cb:4b: 19:5b:38:f6:59:03:e9:12:86:c9:06:ca:2c:5d:54: ec:8e:7c:e9:30:4f:a4:9e:8f:23:41:a4:87:d6:94: c6:31:c6:a1:fb:60:f5:a1:8c:c2:65:cb:d1:c6:7e: 0e:ee:84:54:f0:42:47:1d:41:48:c7:90:af:06:98: ee:d5:06:3b:39:97:89:8f:b1:0b:c2:8a:a8:9d:98: a3:e0:01:bf:c1:8f:00:e2:f9:91:d1:e5:9b:20:1b: 40:b1:39:56:5f:0b:c0:4e:60:f9:5c:c9:b5:a1:d7: c2:36:b9:87:b8:0d:82:8c:f8:08:f0:20:fb:bc:83: 61:32:6b:ab:44:10:13:75:33:27:bf:84:a0:39:36: c3:ff:b6:7f:76:ed:4d:ba:13:91:07:8d:cc:0d:c1: 3f:1d:94:da:89:86:b6:05:14:1e:b6:4b:27:79:92: 28:a9:e0:6d:98:5f:36:4a:b1:4a:66:66:b2:f9:9f: 70:9e:31:89:04:fb:64:4b:54:b8:45:d2:fb:88:ab: 7e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2A:78:44:65:41:52:0B:D5:AB:30:EB:8B:A6:E4:B0:D8:4C:00:45 X509v3 Authority Key Identifier: keyid:12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:89:fe:b2:67:d2:1a:82:3d:34:c5:b8:10:cb:99:6b:28:dd: 8d:58:2b:dc:1f:9c:00:14:82:48:c4:e9:91:34:55:e3:23:a6: df:21:4d:c4:b0:c8:e2:fc:47:59:f5:cf:1e:0b:bc:ed:bc:5a: eb:75:b7:84:73:0e:95:96:30:a5:81:ca:a8:84:3a:86:66:93: ba:93:f7:f2:72:3d:34:17:5d:2a:57:c3:8c:7e:48:d2:d5:5b: 9e:59:53:30:cb:e2:89:9e:6b:db:54:e0:bf:e6:06:ad:83:98: 3f:fd:d4:8c:70:af:cd:c6:dc:7d:28:8b:81:70:46:2f:c0:01: 7b:60:1e:13:dc:44:21:ad:27:62:e7:24:fa:cb:5a:cf:97:2f: 64:3e:c3:91:24:ca:8e:9f:29:5b:b7:00:b5:0a:a0:5e:ed:c8: 6b:d0:d4:44:c5:37:d8:98:14:b5:bd:f7:19:d7:ad:ae:75:db: 34:4c:f5:6e:c1:85:4e:5b:7b:f5:51:6c:a8:6d:f0:98:74:bb: 51:05:ad:8e:10:34:b7:14:e4:da:66:d8:7e:a0:da:73:61:94: ac:a1:10:ac:68:e8:cf:9f:04:a5:24:81:9f:3c:04:32:21:b3: 35:cb:3c:f0:21:e0:43:6f:ad:0f:be:70:48:dd:10:12:4d:01: c9:f6:f2:06 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS8h6GsyrPMx37Om0TxLp2jz/UmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJCRDgwRkI2NjZFOUZGM0I3OEM1MjU3Q0I4MDYwNENF NDY2QTYyMDAeFw0yNjEwMzExODE5MzdaFw0yNjExMDQwMzA5MzdaMDMxMTAvBgNV BAMTKDNEMkE3ODQ0NjU0MTUyMEJENUFCMzBFQjhCQTZFNEIwRDg0QzAwNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBypn4PxJMZHvBnljkU9bGXSnj qpxT2pT6SWie2CQxlsG63OplNhPpdtAi/V0vmUDrt1uAHISEJBTLSxlbOPZZA+kS hskGyixdVOyOfOkwT6SejyNBpIfWlMYxxqH7YPWhjMJly9HGfg7uhFTwQkcdQUjH kK8GmO7VBjs5l4mPsQvCiqidmKPgAb/BjwDi+ZHR5ZsgG0CxOVZfC8BOYPlcybWh 18I2uYe4DYKM+AjwIPu8g2Eya6tEEBN1Mye/hKA5NsP/tn927U26E5EHjcwNwT8d lNqJhrYFFB62Syd5kiip4G2YXzZKsUpmZrL5n3CeMYkE+2RLVLhF0vuIq34hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPSp4RGVBUgvVqzDri6bksNhMAEUwHwYDVR0j BBgwFoAUEr2A+2Zun/O3jFJXy4BgTORmpiAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzkxMTM2NTk4ODI1MzczMy8wLzEyQkQ4MEZCNjY2RTlGRjNCNzhDNTI1N0NCODA2 MDRDRTQ2NkE2MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTJCRDgwRkI2NjZFOUZGM0I3OEM1MjU3Q0I4MDYwNENFNDY2QTYyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM5MTEzNjU5ODgyNTM3MzMvMC8xMkJEODBGQjY2NkU5 RkYzQjc4QzUyNTdDQjgwNjA0Q0U0NjZBNjIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA44n+smfSGoI9 NMW4EMuZayjdjVgr3B+cABSCSMTpkTRV4yOm3yFNxLDI4vxHWfXPHgu87bxa63W3 hHMOlZYwpYHKqIQ6hmaTupP38nI9NBddKlfDjH5I0tVbnllTMMviiZ5r21Tgv+YG rYOYP/3UjHCvzcbcfSiLgXBGL8ABe2AeE9xEIa0nYuck+staz5cvZD7DkSTKjp8p W7cAtQqgXu3Ia9DURMU32JgUtb33GdetrnXbNEz1bsGFTlt79VFsqG3wmHS7UQWt jhA0txTk2mbYfqDac2GUrKEQrGjoz58EpSSBnzwEMiGzNcs88CHgQ2+tD75wSN0Q Ek0ByfbyBg== -----END CERTIFICATE-----Generated at Sun Nov 1 12:03:27 2026 by rpki-client