$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft File: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft (raw, json) Hash identifier: Xhr6AfxvMvoAhGXsks67beQnOyFzCV0QN18uMEUxdco= Subject key identifier: 69:2F:0B:03:73:FC:F1:45:13:04:6F:79:A8:AE:BB:9D:59:BC:B3:2B Authority key identifier: 74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF Certificate issuer: /CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Certificate serial: 64FD4FD0CD0D795EC4CE46CD9EB548FC12C0FFF3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft Manifest number: 012E Signing time: Thu 10 Sep 2026 16:01:52 +0000 Manifest this update: Thu 10 Sep 2026 15:56:52 +0000 Manifest next update: Sun 13 Sep 2026 22:05:52 +0000 Files and hashes: 1: 744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl (hash: o8bitfxmbfkmp5/RQsMQHcZGVxh1NLHsunxKCMfXWjc=) 2: 36302e3234372e3132382e302f31372d3234203d3e203338323833.roa (hash: 1HttYR1/9pBaXgtPZl1e4aT5OlAZeU+pPTR2/P3A8Bw=) 3: 3231312e3134392e3132382e302f31372d3234203d3e203338323833.roa (hash: pEBTYMTrJftrdNUF40ROyii0lYiGHrRxtoVFM1V2qCo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:fd:4f:d0:cd:0d:79:5e:c4:ce:46:cd:9e:b5:48:fc:12:c0:ff:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744217D6F74E3338C4A4476276CE6CE8E5575DCF Validity Not Before: Sep 10 15:56:52 2026 GMT Not After : Sep 13 22:05:52 2026 GMT Subject: CN=692F0B0373FCF14513046F79A8AEBB9D59BCB32B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:cd:83:49:99:03:f0:30:d8:87:3c:63:c4: d6:69:e4:46:88:9e:9a:9c:07:5d:e0:3b:86:e2:76: 97:5c:e3:67:07:17:2c:96:74:29:fd:57:37:25:ee: 91:a1:ef:63:8e:9f:38:52:91:f6:c6:3f:9d:4a:c9: 27:6b:c1:7d:a8:de:c4:c6:0a:0b:46:8e:a0:8b:7e: b2:c5:71:13:d0:11:ff:ab:33:25:4b:a9:c2:67:14: 98:ed:9f:ef:f4:7f:7a:93:85:05:56:3f:c0:c4:89: 70:37:d6:42:a3:c4:2c:67:79:6a:f6:06:28:c2:e2: 5a:65:f9:47:ad:e2:65:31:ad:f5:75:a6:70:f8:28: 65:f1:1b:b6:e1:04:1d:78:a0:26:4d:c5:a0:d5:cb: 1f:9e:47:27:3b:a0:8e:66:bc:aa:28:18:a6:30:08: 13:ae:d9:2b:81:d5:1d:12:c2:79:72:64:83:d3:19: 51:82:d1:63:17:d2:a4:8b:3a:f5:d3:54:03:a9:70: 5f:0d:50:84:dc:d3:32:bb:b7:36:4a:75:4a:fc:f9: 3d:08:7c:57:c0:12:4a:82:3d:da:66:12:6e:4d:e1: 46:20:c6:34:c3:01:99:e0:3d:13:3c:39:b7:0c:67: 03:f9:5c:c8:9d:ba:59:3b:24:21:cb:99:1b:34:96: f4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2F:0B:03:73:FC:F1:45:13:04:6F:79:A8:AE:BB:9D:59:BC:B3:2B X509v3 Authority Key Identifier: keyid:74:42:17:D6:F7:4E:33:38:C4:A4:47:62:76:CE:6C:E8:E5:57:5D:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/744217D6F74E3338C4A4476276CE6CE8E5575DCF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524904961/0/744217D6F74E3338C4A4476276CE6CE8E5575DCF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:12:80:e3:c6:2c:e9:bf:a0:b6:b8:02:1d:41:1c:70:9f:62: 8d:ef:de:4b:3a:56:3d:0d:32:07:81:b4:2e:e2:98:1e:b3:11: f1:3d:c2:c5:eb:3b:d4:29:8e:0d:85:d1:ad:a6:96:91:5e:a6: 86:09:3c:0b:cf:4c:33:3e:8f:09:22:23:35:75:75:c6:8e:60: 2d:44:65:20:8a:0e:e1:ab:ff:56:27:3d:b1:c4:7a:4d:61:5e: 17:71:90:83:c1:94:c9:4a:d9:8c:17:11:22:a1:b0:cc:13:51: 44:29:a1:bb:16:96:ba:fe:3c:76:da:e6:a7:af:42:de:99:6a: e3:f1:d9:4a:b8:ff:7b:4a:e0:cd:55:17:1e:cd:a9:9b:83:24: b4:11:2f:fd:1a:6c:24:2e:f0:13:87:2c:78:40:a9:66:59:f0: 84:7d:41:55:d0:73:06:f5:f4:c4:2a:24:28:4a:af:68:f3:cf: d8:9a:14:bf:02:a7:95:56:a6:a7:a3:17:31:96:bc:0e:a5:51: ec:53:4c:a1:05:24:a4:e0:73:43:ba:b7:50:d6:ea:4d:19:ae: 7d:4c:00:d6:ec:36:b2:51:22:34:9a:b0:aa:60:2a:b9:ae:b3: 0f:c8:f3:7c:fe:78:e8:c4:f0:e2:83:4d:7e:51:fe:e5:1a:5a: 48:f7:0e:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZP1P0M0NeV7EzkbNnrVI/BLA//MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThF NTU3NURDRjAeFw0yNjA5MTAxNTU2NTJaFw0yNjA5MTMyMjA1NTJaMDMxMTAvBgNV BAMTKDY5MkYwQjAzNzNGQ0YxNDUxMzA0NkY3OUE4QUVCQjlENTlCQ0IzMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdM2DSZkD8DDYhzxjxNZp5EaI npqcB13gO4bidpdc42cHFyyWdCn9Vzcl7pGh72OOnzhSkfbGP51KySdrwX2o3sTG CgtGjqCLfrLFcRPQEf+rMyVLqcJnFJjtn+/0f3qThQVWP8DEiXA31kKjxCxneWr2 BijC4lpl+Uet4mUxrfV1pnD4KGXxG7bhBB14oCZNxaDVyx+eRyc7oI5mvKooGKYw CBOu2SuB1R0SwnlyZIPTGVGC0WMX0qSLOvXTVAOpcF8NUITc0zK7tzZKdUr8+T0I fFfAEkqCPdpmEm5N4UYgxjTDAZngPRM8ObcMZwP5XMidulk7JCHLmRs0lvRRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaS8LA3P88UUTBG95qK67nVm8syswHwYDVR0j BBgwFoAUdEIX1vdOMzjEpEdids5s6OVXXc8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDkwNDk2MS8wLzc0NDIxN0Q2Rjc0RTMzMzhDNEE0NDc2Mjc2Q0U2 Q0U4RTU1NzVEQ0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQ0MjE3RDZGNzRFMzMzOEM0QTQ0NzYyNzZDRTZDRThFNTU3NURDRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ5MDQ5NjEvMC83NDQyMTdENkY3NEUz MzM4QzRBNDQ3NjI3NkNFNkNFOEU1NTc1RENGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRKA48Ys6b+g trgCHUEccJ9ije/eSzpWPQ0yB4G0LuKYHrMR8T3Cxes71CmODYXRraaWkV6mhgk8 C89MMz6PCSIjNXV1xo5gLURlIIoO4av/Vic9scR6TWFeF3GQg8GUyUrZjBcRIqGw zBNRRCmhuxaWuv48dtrmp69C3plq4/HZSrj/e0rgzVUXHs2pm4MktBEv/RpsJC7w E4cseECpZlnwhH1BVdBzBvX0xCokKEqvaPPP2JoUvwKnlVamp6MXMZa8DqVR7FNM oQUkpOBzQ7q3UNbqTRmufUwA1uw2slEiNJqwqmAqua6zD8jzfP546MTw4oNNflH+ 5RpaSPcOzg== -----END CERTIFICATE-----Generated at Fri Sep 11 01:13:51 2026 by rpki-client