$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft File: CAA1931F96137E124A84BFBFF4963C4475B970C7.mft (raw, json) Hash identifier: vNd19cL09KLvh2qaFvIMreyAJo2Uvff1CFISIQ9AonM= Subject key identifier: 52:76:ED:93:5F:B1:0B:B6:D2:5B:14:E7:89:53:86:44:06:82:B4:00 Authority key identifier: CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 Certificate issuer: /CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Certificate serial: 09A3F19EB324C84A7412F6DC245BC555A055AAE9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft Manifest number: 013E Signing time: Thu 15 Oct 2026 05:11:22 +0000 Manifest this update: Thu 15 Oct 2026 05:06:22 +0000 Manifest next update: Sun 18 Oct 2026 16:16:22 +0000 Files and hashes: 1: CAA1931F96137E124A84BFBFF4963C4475B970C7.crl (hash: sVcPmIlbVTY0iV+TTy+4uHFmtAQaa6DLNI0Bc9hBqC0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 16:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a3:f1:9e:b3:24:c8:4a:74:12:f6:dc:24:5b:c5:55:a0:55:aa:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAA1931F96137E124A84BFBFF4963C4475B970C7 Validity Not Before: Oct 15 05:06:22 2026 GMT Not After : Oct 18 16:16:22 2026 GMT Subject: CN=5276ED935FB10BB6D25B14E7895386440682B400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:80:15:50:58:82:bd:31:29:da:40:60:66:6d: a2:0c:c1:3b:72:2e:01:c1:ec:63:d6:69:88:f8:4c: cb:8e:e1:df:4a:ea:a7:12:c7:f7:9f:ce:db:90:f5: 7d:bc:29:84:1d:42:be:0d:a2:ff:4c:4a:28:56:59: 57:ab:9b:87:35:e6:6b:c9:6d:d3:b3:3b:ad:09:ac: 0f:dd:c4:6c:73:88:49:4e:8a:7c:74:f4:d7:f9:3b: 7a:d0:c9:06:ff:ab:d2:71:f3:dc:71:8d:b5:8e:60: d5:5c:50:ab:e3:da:e4:a7:8f:c6:ea:d6:ba:30:5e: bb:1a:7a:ff:4c:f2:4f:4e:bd:68:81:80:08:86:f2: 33:8b:ac:16:75:51:5f:54:65:c6:aa:56:12:46:a3: e2:5a:1d:79:f3:77:13:aa:0f:94:b5:28:af:fe:ec: 1d:d0:d6:fc:12:6e:7e:2f:7a:b7:cc:9c:ef:35:e4: c6:c1:77:5b:8b:f5:8a:61:23:67:32:9e:a3:ed:da: 25:3f:5f:10:8d:0a:97:67:74:ca:04:b2:91:b1:b7: 7e:22:7a:c0:c3:df:ed:8c:ce:90:b6:9b:62:58:ad: 61:5b:b8:b3:40:2a:0f:43:44:4e:6b:6b:c5:c5:34: 86:6b:04:1c:eb:de:07:59:1f:cd:99:6f:ee:ef:5c: 53:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:76:ED:93:5F:B1:0B:B6:D2:5B:14:E7:89:53:86:44:06:82:B4:00 X509v3 Authority Key Identifier: keyid:CA:A1:93:1F:96:13:7E:12:4A:84:BF:BF:F4:96:3C:44:75:B9:70:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAA1931F96137E124A84BFBFF4963C4475B970C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217651715/0/CAA1931F96137E124A84BFBFF4963C4475B970C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:4d:3a:5c:86:8e:d2:4f:20:b4:1e:1c:e5:ea:65:85:75:a2: 80:8a:af:17:a6:4f:9c:de:63:a0:b5:32:86:12:b6:09:1e:39: 41:cb:d3:8a:53:65:76:c5:c6:f7:7d:bb:c5:6c:3a:98:69:b7: 12:2d:5f:f8:df:8c:f8:fa:d3:f7:01:58:28:21:4b:a5:af:49: 51:df:fe:07:4f:03:ea:5e:78:14:1d:b5:3b:35:41:14:9b:53: c5:a0:20:b3:80:0f:75:05:34:4d:4c:19:6f:4a:dc:28:f0:e8: 48:c9:c9:aa:f8:5c:5c:1a:14:df:db:f5:38:8d:34:7f:39:2c: 0e:e7:03:03:0b:cd:a4:27:4c:53:0c:b4:07:e6:58:71:a4:d6: b6:34:6a:49:fe:a6:3b:a9:66:e2:8d:6a:b3:73:88:a8:b7:83: 57:16:a6:e4:e1:db:b9:43:a2:4d:c6:97:53:af:ef:2c:c0:cb: 0d:d9:5d:18:39:a4:2b:dc:90:ed:df:b8:f5:df:47:11:47:af: 8e:02:e3:03:50:13:43:e9:95:51:7f:c6:0b:26:36:01:d8:67: 53:74:cb:36:23:48:7f:3a:ed:ba:b2:a7:25:61:3d:88:98:bb: 81:ec:6d:e4:71:ea:1b:74:50:c8:8b:0e:d3:f2:d5:74:b3:d9: 04:47:32:52 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCaPxnrMkyEp0EvbcJFvFVaBVqukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3 NUI5NzBDNzAeFw0yNjEwMTUwNTA2MjJaFw0yNjEwMTgxNjE2MjJaMDMxMTAvBgNV BAMTKDUyNzZFRDkzNUZCMTBCQjZEMjVCMTRFNzg5NTM4NjQ0MDY4MkI0MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdgBVQWIK9MSnaQGBmbaIMwTty LgHB7GPWaYj4TMuO4d9K6qcSx/efztuQ9X28KYQdQr4Nov9MSihWWVerm4c15mvJ bdOzO60JrA/dxGxziElOinx09Nf5O3rQyQb/q9Jx89xxjbWOYNVcUKvj2uSnj8bq 1rowXrsaev9M8k9OvWiBgAiG8jOLrBZ1UV9UZcaqVhJGo+JaHXnzdxOqD5S1KK/+ 7B3Q1vwSbn4verfMnO815MbBd1uL9YphI2cynqPt2iU/XxCNCpdndMoEspGxt34i esDD3+2MzpC2m2JYrWFbuLNAKg9DRE5ra8XFNIZrBBzr3gdZH82Zb+7vXFOfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUnbtk1+xC7bSWxTniVOGRAaCtAAwHwYDVR0j BBgwFoAUyqGTH5YTfhJKhL+/9JY8RHW5cMcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzY1MTcxNS8wL0NBQTE5MzFGOTYxMzdFMTI0QTg0QkZCRkY0OTYz QzQ0NzVCOTcwQzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FBMTkzMUY5NjEzN0UxMjRBODRCRkJGRjQ5NjNDNDQ3NUI5NzBDNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc2NTE3MTUvMC9DQUExOTMxRjk2MTM3 RTEyNEE4NEJGQkZGNDk2M0M0NDc1Qjk3MEM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIk06XIaO0k8g tB4c5eplhXWigIqvF6ZPnN5joLUyhhK2CR45QcvTilNldsXG9327xWw6mGm3Ei1f +N+M+PrT9wFYKCFLpa9JUd/+B08D6l54FB21OzVBFJtTxaAgs4APdQU0TUwZb0rc KPDoSMnJqvhcXBoU39v1OI00fzksDucDAwvNpCdMUwy0B+ZYcaTWtjRqSf6mO6lm 4o1qs3OIqLeDVxam5OHbuUOiTcaXU6/vLMDLDdldGDmkK9yQ7d+49d9HEUevjgLj A1ATQ+mVUX/GCyY2AdhnU3TLNiNIfzrturKnJWE9iJi7gext5HHqG3RQyIsO0/LV dLPZBEcyUg== -----END CERTIFICATE-----Generated at Thu Oct 15 13:23:31 2026 by rpki-client