$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft File: D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft (raw, json) Hash identifier: iQs3aeiGhXyReabInLQ9fCfLuipwlUfaZTsZsf11/T8= Subject key identifier: 31:FF:B7:82:F1:0A:C8:AE:F2:8C:55:C2:5A:80:6D:EB:1E:FD:69:5A Authority key identifier: D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04 Certificate issuer: /CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704 Certificate serial: 781704705944ACB9D1B53F28A94270B3162663E9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft Manifest number: 0163 Signing time: Sun 25 Oct 2026 20:37:59 +0000 Manifest this update: Sun 25 Oct 2026 20:32:59 +0000 Manifest next update: Thu 29 Oct 2026 00:12:59 +0000 Files and hashes: 1: D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl (hash: E8KukdigMcAgZWyXy6HX5GjKhXVTkf0t2dx7suWCKX8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 00:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:17:04:70:59:44:ac:b9:d1:b5:3f:28:a9:42:70:b3:16:26:63:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D369F71DFD96519DEB4BCA28C2A7B2374B242704 Validity Not Before: Oct 25 20:32:59 2026 GMT Not After : Oct 29 00:12:59 2026 GMT Subject: CN=31FFB782F10AC8AEF28C55C25A806DEB1EFD695A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:60:b0:12:04:c6:c6:51:80:2c:8d:43:d4:a5: e5:50:3b:92:9f:19:4e:e0:9b:24:f8:e1:ce:5f:64: 82:43:c4:59:7a:27:73:b0:b2:a6:d9:56:be:fb:85: f9:ef:05:46:28:b2:38:93:a7:03:0c:47:d8:e4:91: c3:9c:e3:02:a8:20:b0:98:e0:a4:e4:ee:a7:46:1a: e5:56:4f:af:15:a1:4e:22:be:f5:32:ba:3d:58:c8: 61:62:f3:5d:36:fa:66:32:f2:3b:bf:97:d1:75:a9: b4:58:4b:64:b3:4f:b5:54:e6:99:aa:32:86:d7:c2: 51:7f:af:3c:e0:0f:5e:d6:58:60:2a:d8:0f:07:3c: e6:05:99:c3:b9:b6:4a:ec:b5:ff:a4:7d:e1:da:f2: 5e:c7:d1:89:36:15:23:b3:43:ea:cf:51:68:dd:d3: a5:42:2f:b2:25:74:2d:b8:0b:56:01:4b:55:00:5b: 27:5d:8d:e8:b3:cf:e4:20:ea:b2:c8:42:7e:45:b5: f5:05:72:a3:ab:b4:21:b1:06:ae:d3:fc:77:df:21: 1d:49:24:96:54:1c:a6:f8:57:82:f4:88:c3:d9:fc: 70:bc:c6:68:d6:73:5d:b2:90:f5:62:c0:98:8e:f3: 4a:63:48:54:7a:df:57:0f:0c:49:12:8b:ba:5f:9e: d9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:FF:B7:82:F1:0A:C8:AE:F2:8C:55:C2:5A:80:6D:EB:1E:FD:69:5A X509v3 Authority Key Identifier: keyid:D3:69:F7:1D:FD:96:51:9D:EB:4B:CA:28:C2:A7:B2:37:4B:24:27:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D369F71DFD96519DEB4BCA28C2A7B2374B242704.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/1/D369F71DFD96519DEB4BCA28C2A7B2374B242704.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:60:6c:2a:a6:b9:95:ad:f9:01:7f:72:94:c0:99:8e:1f:f3: d9:29:9d:58:85:96:c4:b4:95:fb:75:b2:71:a5:f1:df:e5:ce: 2e:5b:c2:6b:76:44:c6:5b:67:9d:e6:f4:e1:84:ab:fb:fc:30: 8e:07:53:ae:eb:2c:39:c5:c5:6d:b7:6f:f1:79:75:15:f8:0a: 00:92:8d:63:95:d5:68:9e:a7:9e:6b:6e:86:9b:7e:95:8c:bd: db:ef:9c:c5:fd:3a:a6:1d:82:3b:ae:07:d9:04:12:9d:03:3e: f1:a2:af:82:1c:cc:a8:3e:b9:e6:f8:93:b6:5a:96:f9:6a:99: 3d:49:17:3b:53:34:1d:4c:0d:05:6d:1c:ca:60:45:c7:dd:c1: 05:16:b7:00:b4:d9:2e:28:a1:d7:9b:fc:8e:4b:31:4a:8b:75: ac:bd:5d:b9:4c:03:a8:cf:39:44:04:9e:67:a0:9e:5b:c1:83: 57:93:26:30:f8:0b:ff:a8:3a:5e:0b:e2:52:bd:24:3d:86:2c: 59:f0:8f:76:0d:7d:7c:43:fa:2a:ba:12:30:60:c7:b6:f0:21: c0:71:98:39:c1:8e:57:02:5c:64:81:16:73:f5:16:e9:09:f9: 24:92:0d:95:ee:52:88:42:2c:25:75:29:0a:89:c4:0c:76:17: cc:da:67:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeBcEcFlErLnRtT8oqUJwsxYmY+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM2OUY3MURGRDk2NTE5REVCNEJDQTI4QzJBN0IyMzc0 QjI0MjcwNDAeFw0yNjEwMjUyMDMyNTlaFw0yNjEwMjkwMDEyNTlaMDMxMTAvBgNV BAMTKDMxRkZCNzgyRjEwQUM4QUVGMjhDNTVDMjVBODA2REVCMUVGRDY5NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFYLASBMbGUYAsjUPUpeVQO5Kf GU7gmyT44c5fZIJDxFl6J3OwsqbZVr77hfnvBUYosjiTpwMMR9jkkcOc4wKoILCY 4KTk7qdGGuVWT68VoU4ivvUyuj1YyGFi8102+mYy8ju/l9F1qbRYS2SzT7VU5pmq MobXwlF/rzzgD17WWGAq2A8HPOYFmcO5tkrstf+kfeHa8l7H0Yk2FSOzQ+rPUWjd 06VCL7IldC24C1YBS1UAWyddjeizz+Qg6rLIQn5FtfUFcqOrtCGxBq7T/HffIR1J JJZUHKb4V4L0iMPZ/HC8xmjWc12ykPViwJiO80pjSFR631cPDEkSi7pfntlpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMf+3gvEKyK7yjFXCWoBt6x79aVowHwYDVR0j BBgwFoAU02n3Hf2WUZ3rS8oowqeyN0skJwQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzQ1NTEwNy8xL0QzNjlGNzFERkQ5NjUxOURFQjRCQ0EyOEMyQTdC MjM3NEIyNDI3MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDM2OUY3MURGRDk2NTE5REVCNEJDQTI4QzJBN0IyMzc0QjI0MjcwNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMS9EMzY5RjcxREZEOTY1 MTlERUI0QkNBMjhDMkE3QjIzNzRCMjQyNzA0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWBsKqa5la35 AX9ylMCZjh/z2SmdWIWWxLSV+3WycaXx3+XOLlvCa3ZExltnneb04YSr+/wwjgdT russOcXFbbdv8Xl1FfgKAJKNY5XVaJ6nnmtuhpt+lYy92++cxf06ph2CO64H2QQS nQM+8aKvghzMqD655viTtlqW+WqZPUkXO1M0HUwNBW0cymBFx93BBRa3ALTZLiih 15v8jksxSot1rL1duUwDqM85RASeZ6CeW8GDV5MmMPgL/6g6XgviUr0kPYYsWfCP dg19fEP6KroSMGDHtvAhwHGYOcGOVwJcZIEWc/UW6Qn5JJINle5SiEIsJXUpConE DHYXzNpnMQ== -----END CERTIFICATE-----Generated at Tue Oct 27 09:20:20 2026 by rpki-client