$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft (raw, json) Hash identifier: 3EuQKsbw2aRV3lj/eb3+CukKyDsG9EypmsY41YiIIIs= Subject key identifier: 34:51:49:2E:0D:A8:04:9D:9E:44:D9:DD:03:4E:68:FD:01:89:0B:00 Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Certificate serial: 3C43CBD829EE31B694D240746AC13322CB8E0CAF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft Manifest number: 0142 Signing time: Sun 25 Oct 2026 20:27:58 +0000 Manifest this update: Sun 25 Oct 2026 20:22:58 +0000 Manifest next update: Thu 29 Oct 2026 03:53:58 +0000 Files and hashes: 1: 3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa (hash: pEBTYMTrJftrdNUF40ROyii0lYiGHrRxtoVFM1V2qCo=) 2: 36302e3234372e3132382e302f31372d3234203d3e203338323833.roa (hash: 1HttYR1/9pBaXgtPZl1e4aT5OlAZeU+pPTR2/P3A8Bw=) 3: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl (hash: mrP53GrPbSZrBFU5sRZyjOqEKCToo51J22Fy/CWt4po=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 03:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:43:cb:d8:29:ee:31:b6:94:d2:40:74:6a:c1:33:22:cb:8e:0c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Validity Not Before: Oct 25 20:22:58 2026 GMT Not After : Oct 29 03:53:58 2026 GMT Subject: CN=3451492E0DA8049D9E44D9DD034E68FD01890B00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:f5:c0:e9:3b:66:75:ad:fd:64:8f:d1:77: 74:0a:5e:dc:08:fb:f3:d1:d9:dc:aa:1c:83:25:27: 66:e4:a2:50:c2:42:e2:f0:ca:70:ae:ee:86:e3:49: 0e:92:ca:5c:12:89:04:bd:c8:02:76:c9:e3:b5:44: df:25:b2:38:83:cd:0e:ce:44:3f:86:f4:df:a3:c6: f2:28:98:09:2a:29:36:53:6e:f2:55:4d:bb:74:f8: 5f:1e:b9:71:0c:3b:c1:76:4f:d6:ca:90:28:e6:81: 1c:15:40:2b:a9:52:4e:f2:59:ab:51:cc:ac:07:9d: 23:b6:66:5b:c2:30:fc:bb:75:d3:c2:9b:f8:ad:11: 8d:36:12:eb:e0:aa:57:40:23:2c:5e:37:30:b0:3f: 93:b9:61:4d:4e:60:16:22:49:71:08:aa:cc:fd:6a: a3:26:4a:0d:9a:76:21:6a:4b:64:57:0a:70:ca:26: a5:b6:01:97:07:4e:ef:11:9d:1a:8a:b1:4a:06:a3: 1f:fa:25:f6:97:02:c9:46:c8:f8:af:f5:26:e1:cc: a4:d5:a4:ea:86:4b:7c:61:4a:aa:d9:c5:91:e4:bd: 38:c6:da:c5:86:98:95:11:5a:b3:c5:00:aa:7f:b1: c7:84:d2:ea:3a:05:42:2b:ee:16:b9:9f:45:aa:3c: de:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:51:49:2E:0D:A8:04:9D:9E:44:D9:DD:03:4E:68:FD:01:89:0B:00 X509v3 Authority Key Identifier: keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:57:8c:cc:0a:e5:67:92:82:dc:34:85:05:b8:79:bb:b0:df: 2b:65:68:4c:6a:e4:d1:73:50:7c:ff:0f:7c:a5:2c:1b:7a:a8: 7b:51:9e:a6:12:74:17:9d:44:5a:ff:9d:98:3f:54:8b:0f:5e: f7:b6:6e:1c:db:37:9e:d9:b9:f1:07:1a:59:2a:3f:b8:41:51: c9:97:50:f3:aa:a7:c8:eb:cf:5e:88:d3:12:81:24:31:c7:1c: 58:b1:12:57:e9:49:5a:78:60:a8:e2:cb:10:9a:29:8e:33:65: 4d:0a:45:ad:5a:78:66:d7:44:c4:77:12:17:aa:fe:64:d8:18: ce:6a:b6:89:01:66:bb:e3:80:b8:42:4c:22:fa:d0:cd:f2:83: da:81:f3:21:b3:a3:da:23:fe:dc:3f:09:ea:22:7d:df:3d:36: 27:d4:ce:98:ad:cf:a4:3e:27:75:9d:2d:df:f2:48:19:d1:f2: 08:c3:6c:df:5f:82:51:a9:9e:77:41:78:8b:4d:77:4d:d2:8f: 61:44:0b:1c:87:9a:fb:82:b0:ba:a6:72:6b:63:88:a7:e6:4f: c1:e8:3d:c4:be:5a:30:a0:52:b4:7f:db:b6:77:c5:24:0a:27: 5a:9f:b2:a2:99:00:26:05:1b:85:bf:de:12:51:19:9d:01:c3: 05:fb:6f:88 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPEPL2CnuMbaU0kB0asEzIsuODK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThF NTU3NURDRjAeFw0yNjEwMjUyMDIyNThaFw0yNjEwMjkwMzUzNThaMDMxMTAvBgNV BAMTKDM0NTE0OTJFMERBODA0OUQ5RTQ0RDlERDAzNEU2OEZEMDE4OTBCMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmC/XA6Ttmda39ZI/Rd3QKXtwI +/PR2dyqHIMlJ2bkolDCQuLwynCu7objSQ6SylwSiQS9yAJ2yeO1RN8lsjiDzQ7O RD+G9N+jxvIomAkqKTZTbvJVTbt0+F8euXEMO8F2T9bKkCjmgRwVQCupUk7yWatR zKwHnSO2ZlvCMPy7ddPCm/itEY02EuvgqldAIyxeNzCwP5O5YU1OYBYiSXEIqsz9 aqMmSg2adiFqS2RXCnDKJqW2AZcHTu8RnRqKsUoGox/6JfaXAslGyPiv9SbhzKTV pOqGS3xhSqrZxZHkvTjG2sWGmJURWrPFAKp/sceE0uo6BUIr7ha5n0WqPN6tAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNFFJLg2oBJ2eRNndA05o/QGJCwAwHwYDVR0j BBgwFoAUdEIX1vdOMzjEpEdids5s6OVXXc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDkwNDk2MS8wLzc0NDIxN0Q2Rjc0RTMzMzhDNEE0NDc2Mjc2Q0U2 Q0U4RTU1NzVEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5MDQ5NjEvMC83NDQyMTdENkY3NEUz MzM4QzRBNDQ3NjI3NkNFNkNFOEU1NTc1RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQleMzArlZ5KC 3DSFBbh5u7DfK2VoTGrk0XNQfP8PfKUsG3qoe1GephJ0F51EWv+dmD9Uiw9e97Zu HNs3ntm58QcaWSo/uEFRyZdQ86qnyOvPXojTEoEkMcccWLESV+lJWnhgqOLLEJop jjNlTQpFrVp4ZtdExHcSF6r+ZNgYzmq2iQFmu+OAuEJMIvrQzfKD2oHzIbOj2iP+ 3D8J6iJ93z02J9TOmK3PpD4ndZ0t3/JIGdHyCMNs31+CUamed0F4i013TdKPYUQL HIea+4KwuqZya2OIp+ZPweg9xL5aMKBStH/btnfFJAonWp+yopkAJgUbhb/eElEZ nQHDBftviA== -----END CERTIFICATE-----Generated at Wed Oct 28 00:51:15 2026 by rpki-client