$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.mft File: 1968876B21FE15E288B0923B17E385B487979161.mft (raw, json) Hash identifier: 1dxDRvWx6pH6ofdU8df+BxdkH5j/Vvu57Y6JysiH79c= Subject key identifier: 14:17:8A:BB:AA:73:87:78:70:DD:F0:D5:EB:7E:8D:0B:83:73:E4:38 Authority key identifier: 19:68:87:6B:21:FE:15:E2:88:B0:92:3B:17:E3:85:B4:87:97:91:61 Certificate issuer: /CN=1968876B21FE15E288B0923B17E385B487979161 Certificate serial: 19E415F480A7B03EDDC2179CBD4F63BBDD5611D6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.mft Manifest number: 33 Signing time: Mon 12 Oct 2026 14:32:02 +0000 Manifest this update: Mon 12 Oct 2026 14:27:02 +0000 Manifest next update: Thu 15 Oct 2026 18:53:02 +0000 Files and hashes: 1: 1968876B21FE15E288B0923B17E385B487979161.crl (hash: YE6B3X6xR6zQhfGj/kevVumxuz0XSsDBNAbM5e1zN54=) 2: 3232302e3135342e38342e302f32342d3234203d3e203538373732.roa (hash: giu9S36zcVfJKSHZbr5yoNMgbWhG/13q35tjFSu28YA=) 3: 3232302e3135342e3131342e302f32332d3233203d3e203633383338.roa (hash: ivGXMKZ3j/SM+VplsuPp05w4vpAs8N9xajLe22gGV00=) 4: 3232302e3135342e38352e302f32342d3234203d3e203538373732.roa (hash: IBP0xdDOyiOgq5Eci2DK92c7gb9KM+knsIqLW4CamSo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.crl rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 18:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e4:15:f4:80:a7:b0:3e:dd:c2:17:9c:bd:4f:63:bb:dd:56:11:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1968876B21FE15E288B0923B17E385B487979161 Validity Not Before: Oct 12 14:27:02 2026 GMT Not After : Oct 15 18:53:02 2026 GMT Subject: CN=14178ABBAA73877870DDF0D5EB7E8D0B8373E438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c8:9c:4c:91:32:ac:44:67:23:8d:7e:da:51: bb:85:bb:da:87:27:1e:94:4a:9e:61:47:9b:54:20: 88:92:98:3d:f9:70:96:51:f6:d9:d4:ac:64:87:9a: 40:a9:cb:02:fe:70:63:df:ef:9f:7e:e6:f0:22:ca: a4:dd:8d:b1:ab:c2:d2:d1:ca:5e:a0:0b:79:38:a1: e8:69:aa:2a:97:52:7e:84:75:f8:e9:0c:98:0d:8e: 4f:b7:30:c7:2b:d7:e5:f7:fb:a1:22:e7:47:1e:99: 6d:c3:56:16:f7:d7:1d:e5:5b:1a:85:fd:b0:e3:dc: 04:83:7c:65:ac:f6:ee:71:bf:29:e9:23:72:50:14: 95:25:29:c0:75:2b:79:d6:d5:d9:0a:3c:49:ba:a3: 82:c0:5b:4f:ca:19:5e:dc:2f:58:f8:9d:66:55:c2: a8:89:53:24:c1:d0:54:b3:3a:8d:80:04:64:f9:c9: fc:a7:ad:e3:51:37:b1:f3:dd:04:41:23:4d:21:26: 51:8f:85:42:44:89:4a:e7:79:09:95:fb:7b:e1:4a: 52:f8:89:b8:50:99:59:3f:91:6b:83:32:ff:47:ad: b4:fb:12:ac:d9:02:d7:f9:2a:a8:fc:bb:ed:bb:ab: c0:27:92:1f:98:e0:62:44:02:4a:b4:78:46:33:6b: c2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:17:8A:BB:AA:73:87:78:70:DD:F0:D5:EB:7E:8D:0B:83:73:E4:38 X509v3 Authority Key Identifier: keyid:19:68:87:6B:21:FE:15:E2:88:B0:92:3B:17:E3:85:B4:87:97:91:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:3a:73:c8:70:36:f9:bc:a3:fa:b3:9c:d4:49:c4:95:57:41: 00:86:11:1d:fa:ed:fc:a8:74:2a:02:96:a8:63:4f:4c:d1:d0: d9:5d:65:0b:32:37:bf:69:4f:7f:57:7b:05:40:3a:42:c9:f2: f5:41:96:d4:ec:eb:9a:80:32:4c:a2:a7:2d:ed:8d:a6:95:cf: 09:ab:c2:fb:3a:a8:47:95:1f:05:99:c7:cb:99:78:81:90:70: 10:ba:44:7c:2e:d1:cb:60:83:db:bf:d2:b8:f0:e9:08:c2:11: b3:a8:f3:75:7b:48:65:cc:89:7c:f0:9b:c7:dc:5f:3c:b0:a5: b3:ba:75:21:0e:76:63:b8:61:53:77:58:47:6c:f2:c8:b8:2b: 16:86:09:1b:ab:0b:e1:ac:89:d0:79:15:b8:f4:46:62:37:e9: 81:79:40:aa:b1:24:89:c6:65:77:b0:a8:02:a8:83:d4:83:d7: 49:e6:f0:a8:3a:a8:98:14:ed:86:01:2f:e8:2e:be:83:92:67: bd:41:41:10:1f:45:6b:33:e5:30:d0:12:a9:d7:db:06:ea:f1: 9c:88:25:f9:7e:c1:bd:7e:27:e3:82:e0:40:18:b1:7e:ec:6c: e7:ba:2a:3a:53:51:5e:09:ec:85:05:5c:04:c2:84:64:61:a2: 2d:34:b8:bb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGeQV9ICnsD7dwhecvU9ju91WEdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2ODg3NkIyMUZFMTVFMjg4QjA5MjNCMTdFMzg1QjQ4 Nzk3OTE2MTAeFw0yNjEwMTIxNDI3MDJaFw0yNjEwMTUxODUzMDJaMDMxMTAvBgNV BAMTKDE0MTc4QUJCQUE3Mzg3Nzg3MERERjBENUVCN0U4RDBCODM3M0U0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmyJxMkTKsRGcjjX7aUbuFu9qH Jx6USp5hR5tUIIiSmD35cJZR9tnUrGSHmkCpywL+cGPf759+5vAiyqTdjbGrwtLR yl6gC3k4oehpqiqXUn6EdfjpDJgNjk+3MMcr1+X3+6Ei50cemW3DVhb31x3lWxqF /bDj3ASDfGWs9u5xvynpI3JQFJUlKcB1K3nW1dkKPEm6o4LAW0/KGV7cL1j4nWZV wqiJUyTB0FSzOo2ABGT5yfynreNRN7Hz3QRBI00hJlGPhUJEiUrneQmV+3vhSlL4 ibhQmVk/kWuDMv9HrbT7EqzZAtf5Kqj8u+27q8Ankh+Y4GJEAkq0eEYza8LPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFBeKu6pzh3hw3fDV636NC4Nz5DgwHwYDVR0j BBgwFoAUGWiHayH+FeKIsJI7F+OFtIeXkWEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz Nzk1NzA4MjAwODM4NzYyNS8wLzE5Njg4NzZCMjFGRTE1RTI4OEIwOTIzQjE3RTM4 NUI0ODc5NzkxNjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTk2ODg3NkIyMUZFMTVFMjg4QjA5MjNCMTdFMzg1QjQ4Nzk3OTE2MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzc5NTcwODIwMDgzODc2MjUvMC8xOTY4ODc2QjIxRkUx NUUyODhCMDkyM0IxN0UzODVCNDg3OTc5MTYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTpzyHA2+byj +rOc1EnElVdBAIYRHfrt/Kh0KgKWqGNPTNHQ2V1lCzI3v2lPf1d7BUA6Qsny9UGW 1OzrmoAyTKKnLe2NppXPCavC+zqoR5UfBZnHy5l4gZBwELpEfC7Ry2CD27/SuPDp CMIRs6jzdXtIZcyJfPCbx9xfPLCls7p1IQ52Y7hhU3dYR2zyyLgrFoYJG6sL4ayJ 0HkVuPRGYjfpgXlAqrEkicZld7CoAqiD1IPXSebwqDqomBTthgEv6C6+g5JnvUFB EB9FazPlMNASqdfbBurxnIgl+X7BvX4n44LgQBixfuxs57oqOlNRXgnshQVcBMKE ZGGiLTS4uw== -----END CERTIFICATE-----Generated at Wed Oct 14 04:06:53 2026 by rpki-client