$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft File: 1133679B2C104A0446FA0C3764EEE246C5D21075.mft (raw, json) Hash identifier: cIhx1oesW1rz8LbVTb9sJSUO2teYFGxEut5//rRAZV4= Subject key identifier: ED:B6:39:66:C0:AE:1E:56:37:E3:9D:60:D2:84:01:B6:8C:1B:8E:E1 Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Certificate serial: 7A0469D2B9B338AA40CCB6B7A83024448E68C6C5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft Manifest number: 014A Signing time: Wed 28 Oct 2026 10:05:43 +0000 Manifest this update: Wed 28 Oct 2026 10:00:43 +0000 Manifest next update: Sat 31 Oct 2026 14:13:43 +0000 Files and hashes: 1: 34332e3232382e3234302e302f32322d3232203d3e203535393931.roa (hash: aAK3b2YO28PMJfPm9Aj9uOiTBwmGFcaW1Dy+MYbP2/I=) 2: 1133679B2C104A0446FA0C3764EEE246C5D21075.crl (hash: 8xvM1HcPBbsAc6SPS5qZBN3mU+UxRe+tpLZPifDvobM=) 3: 3130332e35362e3130302e302f32322d3232203d3e203535393931.roa (hash: U00Rs/DfaBM8oQSZxv8Kvu4Q3MPtjO43KKG0d8r3TTQ=) 4: 3130332e34312e3131362e302f32322d3232203d3e203535393931.roa (hash: AG763JgzLnCax1h82iKqPfAHIhWbgVBR2u2s+SqTVuQ=) 5: 3130332e35362e3130342e302f32322d3232203d3e203535393931.roa (hash: Xx3438ml27BwMKWjax5Et9SPWqEU02J5BKCONck0i14=) 6: 34332e3232382e3230342e302f32322d3232203d3e203535393931.roa (hash: C3XWgFxWcqi0OOcgRWNYvHKGt6IvkEPUV44+1IA9tHk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:04:69:d2:b9:b3:38:aa:40:cc:b6:b7:a8:30:24:44:8e:68:c6:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Validity Not Before: Oct 28 10:00:43 2026 GMT Not After : Oct 31 14:13:43 2026 GMT Subject: CN=EDB63966C0AE1E5637E39D60D28401B68C1B8EE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c8:55:fb:fc:89:85:2c:64:a6:98:c4:58:e0: 5e:1a:ab:d0:64:3b:7f:07:a4:b0:7a:16:73:4a:e3: 8c:a3:ac:b2:3d:66:4c:51:45:17:50:f8:19:ee:ee: 9c:77:d1:53:9f:cb:85:8b:d8:2a:50:7b:a4:97:f2: 44:61:5d:6b:72:7f:61:cf:b2:f5:9a:db:ec:48:29: 05:18:2b:8f:d8:fe:b0:c4:72:9c:48:84:18:ba:ea: 7e:e0:fe:72:b7:ec:c4:62:9b:4d:21:ae:e2:97:1e: 46:0d:b8:f5:1f:37:86:63:1e:38:e8:b2:a7:bb:0b: 38:28:41:f1:6d:9f:c5:9a:7f:7c:5b:fe:65:b0:54: b5:2e:9a:95:a6:81:14:f6:de:5e:e8:52:f5:f1:2b: ea:96:bf:40:4a:f4:58:cf:b7:4d:90:8f:34:01:d8: 35:c7:8a:94:11:87:17:d2:b2:01:71:36:6c:d7:1c: ee:64:d8:2f:28:b5:ea:f6:ce:0a:2f:86:33:18:83: ba:ab:ca:e9:81:d7:31:60:fa:1c:76:5b:5b:a6:e9: 60:0c:d7:3a:a9:8e:85:46:89:1e:8e:e6:f2:df:d4: 0c:5f:ca:82:df:50:60:40:c6:22:6a:62:09:89:9a: 4a:c7:32:49:99:3d:ed:84:15:de:fa:02:6a:b0:ed: ff:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:B6:39:66:C0:AE:1E:56:37:E3:9D:60:D2:84:01:B6:8C:1B:8E:E1 X509v3 Authority Key Identifier: keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:0a:07:f4:63:17:02:9c:f7:b3:34:14:93:7e:19:2b:a2:41: 13:34:c2:d5:72:7b:79:63:77:60:94:ef:ee:61:e6:3b:fc:90: 96:09:78:56:a8:1c:05:67:c7:4f:f9:6a:97:17:2a:df:8a:bb: 43:3b:f8:06:43:b3:ac:e0:be:4d:ba:ae:5b:26:dd:dd:0a:a0: 55:4d:5f:9e:9b:77:29:50:da:bb:27:51:c6:dd:d1:80:ca:97: 8c:51:e6:32:6b:a2:93:8b:75:5a:94:63:af:78:d2:70:73:39: 03:3d:2d:bd:6f:8d:4d:53:c5:e2:45:17:cc:28:83:3c:79:78: 2f:f5:78:21:f4:15:37:54:b6:76:fc:e3:91:04:8f:f6:f9:28: aa:12:cd:56:6d:3d:b3:dd:0b:05:33:46:3a:05:67:73:89:ac: 20:5a:05:11:73:49:17:b3:b5:97:8d:95:f7:3e:de:99:69:35: 99:33:fd:54:42:02:53:5b:0a:17:3e:bf:0e:8e:c8:68:a2:ac: 05:8f:50:00:6d:89:c5:0f:69:59:55:76:b0:03:db:06:b5:6a: b2:27:13:53:5b:cc:2c:87:9d:7b:1f:43:9a:46:a7:81:25:20: d6:e7:f2:fe:7e:b5:f7:ba:5c:35:95:60:c4:d4:85:57:e0:dc: e7:34:18:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUegRp0rmzOKpAzLa3qDAkRI5oxsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZD NUQyMTA3NTAeFw0yNjEwMjgxMDAwNDNaFw0yNjEwMzExNDEzNDNaMDMxMTAvBgNV BAMTKEVEQjYzOTY2QzBBRTFFNTYzN0UzOUQ2MEQyODQwMUI2OEMxQjhFRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+yFX7/ImFLGSmmMRY4F4aq9Bk O38HpLB6FnNK44yjrLI9ZkxRRRdQ+Bnu7px30VOfy4WL2CpQe6SX8kRhXWtyf2HP svWa2+xIKQUYK4/Y/rDEcpxIhBi66n7g/nK37MRim00hruKXHkYNuPUfN4ZjHjjo sqe7CzgoQfFtn8Waf3xb/mWwVLUumpWmgRT23l7oUvXxK+qWv0BK9FjPt02QjzQB 2DXHipQRhxfSsgFxNmzXHO5k2C8oter2zgovhjMYg7qryumB1zFg+hx2W1um6WAM 1zqpjoVGiR6O5vLf1AxfyoLfUGBAxiJqYgmJmkrHMkmZPe2EFd76Amqw7f8TAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7bY5ZsCuHlY3451g0oQBtowbjuEwHwYDVR0j BBgwFoAUETNnmywQSgRG+gw3ZO7iRsXSEHUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQwMDMyMi8wLzExMzM2NzlCMkMxMDRBMDQ0NkZBMEMzNzY0RUVF MjQ2QzVEMjEwNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0MDAzMjIvMC8xMTMzNjc5QjJDMTA0 QTA0NDZGQTBDMzc2NEVFRTI0NkM1RDIxMDc1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAoH9GMXApz3 szQUk34ZK6JBEzTC1XJ7eWN3YJTv7mHmO/yQlgl4VqgcBWfHT/lqlxcq34q7Qzv4 BkOzrOC+TbquWybd3QqgVU1fnpt3KVDauydRxt3RgMqXjFHmMmuik4t1WpRjr3jS cHM5Az0tvW+NTVPF4kUXzCiDPHl4L/V4IfQVN1S2dvzjkQSP9vkoqhLNVm09s90L BTNGOgVnc4msIFoFEXNJF7O1l42V9z7emWk1mTP9VEICU1sKFz6/Do7IaKKsBY9Q AG2JxQ9pWVV2sAPbBrVqsicTU1vMLIedex9DmkangSUg1ufy/n6197pcNZVgxNSF V+Dc5zQYvA== -----END CERTIFICATE-----Generated at Thu Oct 29 07:12:17 2026 by rpki-client