$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.mft File: 5866E9356E16DA2DFE2BDE5D025E92E8D872B274.mft (raw, json) Hash identifier: Hy+Rt5niKsZirRhChp4PLNS3VNhi0AtXWw6KnnSOpOs= Subject key identifier: F8:43:09:91:EB:88:78:C8:2F:9F:0E:CB:DC:0C:8A:D8:E1:2B:27:B2 Authority key identifier: 58:66:E9:35:6E:16:DA:2D:FE:2B:DE:5D:02:5E:92:E8:D8:72:B2:74 Certificate issuer: /CN=5866E9356E16DA2DFE2BDE5D025E92E8D872B274 Certificate serial: 35EE9131BD4122965E30D29EA2EEC08677A098F2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.mft Manifest number: 22 Signing time: Sat 17 Oct 2026 03:13:26 +0000 Manifest this update: Sat 17 Oct 2026 03:08:25 +0000 Manifest next update: Tue 20 Oct 2026 04:44:25 +0000 Files and hashes: 1: 5866E9356E16DA2DFE2BDE5D025E92E8D872B274.crl (hash: nvcxe5e+WSNxGEvk9+c+7NNMU21Jou9Zs705AgIzVkY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.crl rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 04:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ee:91:31:bd:41:22:96:5e:30:d2:9e:a2:ee:c0:86:77:a0:98:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5866E9356E16DA2DFE2BDE5D025E92E8D872B274 Validity Not Before: Oct 17 03:08:25 2026 GMT Not After : Oct 20 04:44:25 2026 GMT Subject: CN=F8430991EB8878C82F9F0ECBDC0C8AD8E12B27B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:94:17:73:c1:76:fe:62:62:4c:28:81:ce:db: af:58:7d:43:b1:55:f7:e0:e1:d3:dc:4f:73:62:fa: ad:18:4b:10:68:a9:8b:e6:88:e0:b7:ca:48:b0:9a: 0a:53:d1:27:93:e7:b7:4b:1a:51:f6:1c:14:4a:13: bf:7d:3c:b6:67:e9:fe:1a:22:13:2d:e6:68:47:bd: 68:91:3b:a9:8c:10:ad:a3:e7:7f:88:0b:f4:21:88: 40:3f:44:f5:d5:3f:b9:5f:b8:05:1a:69:c7:f0:e1: ae:a6:20:9f:79:42:03:d5:58:04:cc:ba:4f:28:14: 7b:0b:b0:32:57:01:3f:96:01:24:08:9c:43:fa:cc: ee:91:b9:8e:57:d2:92:f2:9e:5f:dd:08:e1:e7:b3: 60:fa:5a:a0:6f:2c:21:5f:83:bc:42:67:3d:b0:ea: 55:4f:e5:ee:e6:35:70:b2:78:20:ba:16:9f:ce:64: 6d:85:56:07:38:04:10:e3:ae:ce:2d:be:ea:74:7b: d3:0e:5b:45:8a:ff:8d:94:5c:2e:53:d0:10:bf:e0: 49:d6:98:03:89:7b:e9:18:43:26:ed:45:4e:ab:44: b6:8c:86:ed:ff:7b:e3:08:28:d9:83:e0:c6:3b:f3: e2:9c:67:91:87:f8:5c:60:3a:01:90:9c:18:bd:d6: c6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:43:09:91:EB:88:78:C8:2F:9F:0E:CB:DC:0C:8A:D8:E1:2B:27:B2 X509v3 Authority Key Identifier: keyid:58:66:E9:35:6E:16:DA:2D:FE:2B:DE:5D:02:5E:92:E8:D8:72:B2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:54:4b:92:54:3c:f5:8f:5f:07:1a:a7:dc:fb:ee:c3:30:fb: 1f:b2:b4:a1:df:52:00:91:2c:9c:ca:ff:cf:f4:3b:b1:67:34: 73:d2:90:31:d4:82:67:63:49:86:c1:3c:b1:36:db:3f:dd:e9: ea:2e:ff:ed:f4:67:39:cc:5c:88:6c:1a:bb:a4:4d:7a:46:11: fd:10:a2:34:0b:bc:68:aa:d5:a1:bd:0f:02:e1:7a:72:01:d8: 82:d3:16:5f:3c:20:8b:d1:03:0e:9b:00:3f:01:5a:cb:25:0e: c3:2f:71:76:07:80:76:bb:e4:00:0b:54:17:b8:e7:37:87:7a: d3:2a:5d:30:fc:8d:a3:1e:94:9f:94:7e:8b:60:6b:f9:66:92: 99:0a:fc:b1:d9:eb:08:8f:19:b9:2d:96:0a:94:d5:83:a5:6a: 94:48:a8:35:77:14:bf:da:c4:22:5d:57:42:da:db:2d:78:49: 72:7f:93:2a:a3:05:9c:6e:1a:5f:9c:92:d1:31:3b:cc:28:bf: 14:20:43:f8:08:01:e9:0c:75:e1:f5:3a:33:41:c2:8e:88:34: eb:82:9a:d8:41:64:0d:67:58:0f:0f:f9:bd:2f:2b:ba:25:a1: 39:b2:57:b1:24:70:9d:83:06:31:4e:65:3c:4f:33:8a:56:5c: ea:8e:13:52 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNe6RMb1BIpZeMNKeou7AhnegmPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2NkU5MzU2RTE2REEyREZFMkJERTVEMDI1RTkyRThE ODcyQjI3NDAeFw0yNjEwMTcwMzA4MjVaFw0yNjEwMjAwNDQ0MjVaMDMxMTAvBgNV BAMTKEY4NDMwOTkxRUI4ODc4QzgyRjlGMEVDQkRDMEM4QUQ4RTEyQjI3QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlBdzwXb+YmJMKIHO269YfUOx Vffg4dPcT3Ni+q0YSxBoqYvmiOC3ykiwmgpT0SeT57dLGlH2HBRKE799PLZn6f4a IhMt5mhHvWiRO6mMEK2j53+IC/QhiEA/RPXVP7lfuAUaacfw4a6mIJ95QgPVWATM uk8oFHsLsDJXAT+WASQInEP6zO6RuY5X0pLynl/dCOHns2D6WqBvLCFfg7xCZz2w 6lVP5e7mNXCyeCC6Fp/OZG2FVgc4BBDjrs4tvup0e9MOW0WK/42UXC5T0BC/4EnW mAOJe+kYQybtRU6rRLaMhu3/e+MIKNmD4MY78+KcZ5GH+FxgOgGQnBi91sYHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+EMJkeuIeMgvnw7L3AyK2OErJ7IwHwYDVR0j BBgwFoAUWGbpNW4W2i3+K95dAl6S6NhysnQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTE0 MjYzNDQyMzEyMDgyMjMxNS8wLzU4NjZFOTM1NkUxNkRBMkRGRTJCREU1RDAyNUU5 MkU4RDg3MkIyNzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTg2NkU5MzU2RTE2REEyREZFMkJERTVEMDI1RTkyRThEODcyQjI3NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExNDI2MzQ0MjMxMjA4MjIzMTUvMC81ODY2RTkzNTZFMTZE QTJERkUyQkRFNUQwMjVFOTJFOEQ4NzJCMjc0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1RLklQ89Y9f Bxqn3PvuwzD7H7K0od9SAJEsnMr/z/Q7sWc0c9KQMdSCZ2NJhsE8sTbbP93p6i7/ 7fRnOcxciGwau6RNekYR/RCiNAu8aKrVob0PAuF6cgHYgtMWXzwgi9EDDpsAPwFa yyUOwy9xdgeAdrvkAAtUF7jnN4d60ypdMPyNox6Un5R+i2Br+WaSmQr8sdnrCI8Z uS2WCpTVg6VqlEioNXcUv9rEIl1XQtrbLXhJcn+TKqMFnG4aX5yS0TE7zCi/FCBD +AgB6Qx14fU6M0HCjog064Ka2EFkDWdYDw/5vS8ruiWhObJXsSRwnYMGMU5lPE8z ilZc6o4TUg== -----END CERTIFICATE-----Generated at Sun Oct 18 15:29:58 2026 by rpki-client