$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft File: 67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft (raw, json) Hash identifier: 6uU3XK+xi9pI4ZoVKyMaK8959WlpC+PeWkLZ6qWpL4g= Subject key identifier: 53:BF:3D:93:0A:E3:9F:1C:DC:DE:DF:49:02:1E:57:D1:06:4F:8F:74 Authority key identifier: 67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16 Certificate issuer: /CN=67966D34EFBF4CBCFB00CF9C204539BFE0A25316 Certificate serial: 0633F2A73FDC896244C436AA2B03A53731077C88 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft Manifest number: 0143 Signing time: Mon 26 Oct 2026 09:33:37 +0000 Manifest this update: Mon 26 Oct 2026 09:28:37 +0000 Manifest next update: Thu 29 Oct 2026 13:59:37 +0000 Files and hashes: 1: 3130332e3134302e31342e302f32332d3332203d3e203137363231.roa (hash: 2cWU5UH8whnz87agI1VludkKe4lf2cSxtmFnl04vmyI=) 2: 3130332e3134302e31342e302f32332d3332203d3e20313339303931.roa (hash: Dm1g3UjQyhGbjlFkBoWW9J4T2d5S6s8go1jP82Lkdfk=) 3: 67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl (hash: vVD7h6Hjh6dxgfs9rFD145onHxCwuJWVqTmq81HZp/Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 13:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:33:f2:a7:3f:dc:89:62:44:c4:36:aa:2b:03:a5:37:31:07:7c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67966D34EFBF4CBCFB00CF9C204539BFE0A25316 Validity Not Before: Oct 26 09:28:37 2026 GMT Not After : Oct 29 13:59:37 2026 GMT Subject: CN=53BF3D930AE39F1CDCDEDF49021E57D1064F8F74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:83:d4:2f:89:d7:26:a1:61:e3:c5:9e:10: 53:1a:14:57:62:d8:18:99:03:8d:ce:a6:f1:e9:ef: b1:00:dd:df:b7:d8:a9:8d:6d:b3:35:ec:a7:3c:9e: e4:7f:5f:0f:2e:24:cd:9b:21:b6:c0:dc:2c:6d:a8: d9:3a:bf:ab:44:a4:67:3b:d7:a1:11:93:8b:36:bd: 2a:ed:95:d8:cc:45:13:24:00:f7:75:16:37:57:50: 78:26:84:40:93:95:eb:f9:2b:3d:94:db:c7:ae:6d: 9a:10:d0:ce:2d:7e:65:5c:4f:12:a1:23:d4:af:aa: fc:47:e1:25:6f:e1:3e:54:db:d0:06:0c:6e:55:cb: 12:8e:d2:94:17:be:1c:d7:38:89:9d:cf:2b:55:84: 63:45:e6:78:ee:a3:e1:c5:38:9d:47:1a:61:30:37: 99:3d:46:87:49:f4:d6:61:7e:4d:23:3f:ec:75:95: ba:3c:66:ae:4a:0e:85:55:a2:f6:2e:18:d7:61:eb: bc:e8:0b:fc:cd:e5:0c:6f:d4:40:ab:16:f9:d4:06: dc:90:bd:b1:02:b5:97:a7:fd:5a:dd:46:f1:cc:af: 13:87:ea:03:b9:a2:86:d8:a5:56:f5:31:c8:77:58: e1:31:d1:4b:6c:02:ac:d1:e0:65:55:a0:4c:99:e8: 6a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BF:3D:93:0A:E3:9F:1C:DC:DE:DF:49:02:1E:57:D1:06:4F:8F:74 X509v3 Authority Key Identifier: keyid:67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:a0:f7:44:d8:5f:80:71:ec:70:46:e8:d8:4a:1e:ec:03:58: 73:d3:a0:f3:1f:e3:89:87:9a:f8:54:8c:91:de:75:a5:fb:d2: 09:6e:23:d7:7b:80:0f:68:6f:07:e0:a8:34:f8:cb:3d:83:10: f0:dd:06:f5:8c:15:7c:46:2e:f1:a1:e7:cb:6b:89:15:9d:c0: a3:72:23:58:c2:f2:f3:17:34:54:e2:df:8b:18:c6:9d:0d:3a: c0:dd:89:9d:3d:95:bc:6e:19:c2:92:10:ec:f6:a0:f8:a3:7f: ad:71:d0:36:40:e4:c8:ee:37:43:e9:62:21:c5:22:d2:13:64: de:22:82:20:39:cc:77:14:0c:73:7e:6e:ae:94:63:d6:20:88: d4:1e:f4:70:7b:02:f6:50:54:34:57:a9:af:aa:d2:b6:2e:15: ed:9e:38:5b:8c:04:7b:44:57:7b:fc:90:0a:a5:ab:13:ad:be: 92:80:bc:c9:2d:f7:f2:1d:e7:16:2c:a3:bb:ef:23:f9:36:7b: a5:c9:47:a4:5e:c5:d8:b3:c7:50:8d:17:db:14:c2:0e:5d:23: 38:82:4d:76:1f:8c:e3:0e:e3:c7:65:c0:fa:d8:7d:ab:b9:53: 0f:31:e4:48:4b:39:89:06:69:c4:7c:6c:fd:d1:ae:b8:f5:7a: b2:74:21:8e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBjPypz/ciWJExDaqKwOlNzEHfIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc5NjZEMzRFRkJGNENCQ0ZCMDBDRjlDMjA0NTM5QkZF MEEyNTMxNjAeFw0yNjEwMjYwOTI4MzdaFw0yNjEwMjkxMzU5MzdaMDMxMTAvBgNV BAMTKDUzQkYzRDkzMEFFMzlGMUNEQ0RFREY0OTAyMUU1N0QxMDY0RjhGNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiz4PUL4nXJqFh48WeEFMaFFdi 2BiZA43OpvHp77EA3d+32KmNbbM17Kc8nuR/Xw8uJM2bIbbA3CxtqNk6v6tEpGc7 16ERk4s2vSrtldjMRRMkAPd1FjdXUHgmhECTlev5Kz2U28eubZoQ0M4tfmVcTxKh I9SvqvxH4SVv4T5U29AGDG5VyxKO0pQXvhzXOImdzytVhGNF5njuo+HFOJ1HGmEw N5k9RodJ9NZhfk0jP+x1lbo8Zq5KDoVVovYuGNdh67zoC/zN5Qxv1ECrFvnUBtyQ vbECtZen/VrdRvHMrxOH6gO5oobYpVb1Mch3WOEx0UtsAqzR4GVVoEyZ6GrxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUU789kwrjnxzc3t9JAh5X0QZPj3QwHwYDVR0j BBgwFoAUZ5ZtNO+/TLz7AM+cIEU5v+CiUxYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzg1OTA3NC8wLzY3OTY2RDM0RUZCRjRDQkNGQjAwQ0Y5QzIwNDUz OUJGRTBBMjUzMTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjc5NjZEMzRFRkJGNENCQ0ZCMDBDRjlDMjA0NTM5QkZFMEEyNTMxNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc4NTkwNzQvMC82Nzk2NkQzNEVGQkY0 Q0JDRkIwMENGOUMyMDQ1MzlCRkUwQTI1MzE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqD3RNhfgHHs cEbo2Eoe7ANYc9Og8x/jiYea+FSMkd51pfvSCW4j13uAD2hvB+CoNPjLPYMQ8N0G 9YwVfEYu8aHny2uJFZ3Ao3IjWMLy8xc0VOLfixjGnQ06wN2JnT2VvG4ZwpIQ7Pag +KN/rXHQNkDkyO43Q+liIcUi0hNk3iKCIDnMdxQMc35urpRj1iCI1B70cHsC9lBU NFepr6rSti4V7Z44W4wEe0RXe/yQCqWrE62+koC8yS338h3nFiyju+8j+TZ7pclH pF7F2LPHUI0X2xTCDl0jOIJNdh+M4w7jx2XA+th9q7lTDzHkSEs5iQZpxHxs/dGu uPV6snQhjg== -----END CERTIFICATE-----Generated at Tue Oct 27 17:26:21 2026 by rpki-client