$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft File: 67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft (raw, json) Hash identifier: SlGzTO7y9VczR/abWFDua3FS+FNdPwZx1isS+LdChso= Subject key identifier: 1A:C4:D7:CD:7E:92:41:87:C6:0C:47:22:6B:DC:A4:1E:D4:0C:27:29 Authority key identifier: 67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16 Certificate issuer: /CN=67966D34EFBF4CBCFB00CF9C204539BFE0A25316 Certificate serial: 0811926FF1214699AD493E0AD7657707A1F7FD6E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft Manifest number: 012E Signing time: Tue 08 Sep 2026 23:00:10 +0000 Manifest this update: Tue 08 Sep 2026 22:55:10 +0000 Manifest next update: Sat 12 Sep 2026 09:01:10 +0000 Files and hashes: 1: 3130332e3134302e31342e302f32332d3332203d3e203137363231.roa (hash: 2cWU5UH8whnz87agI1VludkKe4lf2cSxtmFnl04vmyI=) 2: 67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl (hash: cPls5J66B6MmzGc3r+ssLPXtQw89VW3kTF6tCUcPcsU=) 3: 3130332e3134302e31342e302f32332d3332203d3e20313339303931.roa (hash: Dm1g3UjQyhGbjlFkBoWW9J4T2d5S6s8go1jP82Lkdfk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 09:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:11:92:6f:f1:21:46:99:ad:49:3e:0a:d7:65:77:07:a1:f7:fd:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67966D34EFBF4CBCFB00CF9C204539BFE0A25316 Validity Not Before: Sep 8 22:55:10 2026 GMT Not After : Sep 12 09:01:10 2026 GMT Subject: CN=1AC4D7CD7E924187C60C47226BDCA41ED40C2729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3b:c4:ab:2e:cf:a8:ca:d0:24:8f:4d:5f:e5: 00:70:b6:1d:b1:8b:30:ca:53:24:7c:19:f8:09:ce: e4:14:f1:29:45:70:2a:08:6d:d6:5c:b5:22:88:bf: ca:7e:fb:4e:b8:ed:d4:d4:5b:80:92:10:e5:c4:5e: 0b:c3:4e:5b:c7:56:64:fe:49:b3:df:b7:a0:27:ee: c7:65:d4:bf:14:35:18:e4:dc:77:8d:0d:34:e3:c5: 1e:55:f2:04:f1:9f:3b:62:df:01:50:af:f2:11:67: 14:0c:bf:fc:97:87:f4:2f:d9:2d:18:f8:2e:19:05: 5b:d7:27:29:fa:56:94:1b:9f:c8:19:d3:ff:de:92: 40:cb:8f:67:35:f5:0b:c1:38:95:eb:b7:67:9c:13: 63:2c:df:d9:b4:bb:0b:78:b4:78:54:f2:cb:18:e6: df:f3:ab:d3:2b:9a:f1:bf:60:6e:dd:3b:19:be:38: 9d:fc:67:7b:59:a7:ce:70:82:6f:1d:22:91:cd:74: f9:6a:3d:3f:1a:bd:7b:e2:b6:23:c8:8b:37:fb:cd: 57:a2:d1:13:3c:24:5c:34:81:38:1f:b4:3d:f9:5f: e8:73:0d:58:0c:24:73:4e:45:70:9d:42:7f:e0:5a: aa:ef:50:ba:01:11:74:ac:8b:40:57:4f:7d:a9:7f: d4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C4:D7:CD:7E:92:41:87:C6:0C:47:22:6B:DC:A4:1E:D4:0C:27:29 X509v3 Authority Key Identifier: keyid:67:96:6D:34:EF:BF:4C:BC:FB:00:CF:9C:20:45:39:BF:E0:A2:53:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577859074/0/67966D34EFBF4CBCFB00CF9C204539BFE0A25316.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:34:9c:4a:2f:b6:b9:7d:d4:28:a4:2e:c9:27:e3:f5:ce:11: da:95:6b:bf:39:2a:c3:25:d0:6a:df:be:69:74:ef:56:a6:b9: 92:72:f8:f9:be:8a:cc:a7:86:23:f2:63:7b:a9:03:61:6c:fc: b2:68:b2:99:cf:23:71:8a:0b:33:ff:13:53:3e:56:4f:96:13: 5f:a2:c8:0e:2e:4e:e6:0a:5f:f6:eb:7a:6e:de:dc:7f:21:14: ed:41:69:eb:95:45:00:06:2f:88:36:ad:93:dd:f3:d1:c9:b1: 77:26:80:66:66:a5:39:f4:3a:ca:8c:06:31:03:b7:6b:5e:ba: 3a:fa:ba:1b:00:4e:b3:9d:ca:71:52:28:37:4a:d6:47:3c:b8: 9b:19:55:bc:6a:e8:00:29:1c:2f:12:7c:6f:bf:12:f3:85:ae: 81:d1:8a:bc:66:ae:85:5b:9c:a7:4a:d0:6e:75:6d:ca:d4:e9: a7:ae:ac:91:b7:63:49:03:cd:c5:a5:c5:cc:17:e6:59:58:ce: c2:2d:0d:13:01:a6:42:2a:b4:a6:f7:c4:d1:4c:eb:e5:37:4b: c7:18:6a:9f:7c:b0:17:e4:c7:5c:e2:59:fe:db:ad:00:92:bf: 73:fc:5f:ad:a6:96:ca:d2:68:e6:55:0f:6e:80:d2:d5:97:87: f6:af:b9:52 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCBGSb/EhRpmtST4K12V3B6H3/W4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjc5NjZEMzRFRkJGNENCQ0ZCMDBDRjlDMjA0NTM5QkZF MEEyNTMxNjAeFw0yNjA5MDgyMjU1MTBaFw0yNjA5MTIwOTAxMTBaMDMxMTAvBgNV BAMTKDFBQzREN0NEN0U5MjQxODdDNjBDNDcyMjZCRENBNDFFRDQwQzI3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiO8SrLs+oytAkj01f5QBwth2x izDKUyR8GfgJzuQU8SlFcCoIbdZctSKIv8p++0647dTUW4CSEOXEXgvDTlvHVmT+ SbPft6An7sdl1L8UNRjk3HeNDTTjxR5V8gTxnzti3wFQr/IRZxQMv/yXh/Qv2S0Y +C4ZBVvXJyn6VpQbn8gZ0//ekkDLj2c19QvBOJXrt2ecE2Ms39m0uwt4tHhU8ssY 5t/zq9MrmvG/YG7dOxm+OJ38Z3tZp85wgm8dIpHNdPlqPT8avXvitiPIizf7zVei 0RM8JFw0gTgftD35X+hzDVgMJHNORXCdQn/gWqrvULoBEXSsi0BXT32pf9SVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGsTXzX6SQYfGDEcia9ykHtQMJykwHwYDVR0j BBgwFoAUZ5ZtNO+/TLz7AM+cIEU5v+CiUxYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzg1OTA3NC8wLzY3OTY2RDM0RUZCRjRDQkNGQjAwQ0Y5QzIwNDUz OUJGRTBBMjUzMTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjc5NjZEMzRFRkJGNENCQ0ZCMDBDRjlDMjA0NTM5QkZFMEEyNTMxNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc4NTkwNzQvMC82Nzk2NkQzNEVGQkY0 Q0JDRkIwMENGOUMyMDQ1MzlCRkUwQTI1MzE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTScSi+2uX3U KKQuySfj9c4R2pVrvzkqwyXQat++aXTvVqa5knL4+b6KzKeGI/Jje6kDYWz8smiy mc8jcYoLM/8TUz5WT5YTX6LIDi5O5gpf9ut6bt7cfyEU7UFp65VFAAYviDatk93z 0cmxdyaAZmalOfQ6yowGMQO3a166Ovq6GwBOs53KcVIoN0rWRzy4mxlVvGroACkc LxJ8b78S84WugdGKvGauhVucp0rQbnVtytTpp66skbdjSQPNxaXFzBfmWVjOwi0N EwGmQiq0pvfE0Uzr5TdLxxhqn3ywF+THXOJZ/tutAJK/c/xfraaWytJo5lUPboDS 1ZeH9q+5Ug== -----END CERTIFICATE-----Generated at Thu Sep 10 15:38:24 2026 by rpki-client