$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft File: 67B1959E3870485E7CC0C0360949F51B41A758A3.mft (raw, json) Hash identifier: 9wOK6Hn1dJov+t9EgBiF7TlHjdSkljNNnFvmoATOkGI= Subject key identifier: AE:21:06:8C:21:72:0E:21:40:A2:52:1C:43:0B:77:A6:D1:F9:CC:06 Authority key identifier: 67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 Certificate issuer: /CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Certificate serial: 764435C5366AB8C9483FA53DAEE5262723FE12B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft Manifest number: D4 Signing time: Wed 14 Oct 2026 07:23:48 +0000 Manifest this update: Wed 14 Oct 2026 07:18:48 +0000 Manifest next update: Sat 17 Oct 2026 12:59:48 +0000 Files and hashes: 1: 3130332e34352e3136342e302f32322d3234203d3e2030.roa (hash: qFy9a+PvPMMBUAWhb0lNvREvdLvM/JaKv22h6OsAR6Y=) 2: 34332e3232362e3131362e302f32322d3234203d3e2034383337.roa (hash: NDaSIXQdg9kzL5++BXp0DBrYDW4X7HPrqiDp2q88qJE=) 3: 67B1959E3870485E7CC0C0360949F51B41A758A3.crl (hash: EQM2NO2FxgpMQ8EUFobG5cvMsRm6ORL5B8RfXOhl88Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:44:35:c5:36:6a:b8:c9:48:3f:a5:3d:ae:e5:26:27:23:fe:12:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67B1959E3870485E7CC0C0360949F51B41A758A3 Validity Not Before: Oct 14 07:18:48 2026 GMT Not After : Oct 17 12:59:48 2026 GMT Subject: CN=AE21068C21720E2140A2521C430B77A6D1F9CC06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:53:a4:15:09:50:e6:77:06:a5:a9:09:63:3f: a0:d8:ea:6d:b6:c4:3f:62:f5:b2:81:80:72:9b:59: 0d:fa:40:1c:04:ec:cd:c3:95:d1:22:6e:d4:5e:93: 79:f8:2c:dd:4b:63:50:8a:5f:09:4c:60:cd:3f:f3: 1d:d8:fb:d8:8a:7d:e0:3c:41:c8:a1:36:d0:82:1b: f6:16:03:a5:20:ce:04:81:c0:0b:a6:3a:17:9d:02: 26:d2:f2:b4:71:79:3f:45:31:0b:2f:dc:3e:c0:7d: 36:1c:cd:43:c0:c3:fb:4e:c6:84:81:85:96:39:e5: 89:bd:72:ad:14:a6:13:44:d4:3f:f3:7c:b4:bc:03: f8:42:d1:13:23:e7:16:e4:49:89:00:86:06:bf:17: 04:09:dc:b5:49:cb:1d:6f:fa:19:52:3e:ee:45:da: 3d:cc:dd:38:04:7e:21:c5:0a:c1:ad:78:46:ae:e9: 3b:30:9f:0d:d2:df:26:c9:30:2c:84:48:c2:a1:92: c1:03:78:42:ba:32:59:94:71:80:da:63:6c:10:89: 68:f9:f1:ef:b6:60:bc:11:02:f8:4e:7f:81:85:88: 0a:c6:26:5e:e4:7c:a3:4b:f8:1c:15:ed:ca:0b:7b: 51:77:8d:8b:76:82:6d:e0:7e:ff:30:94:c3:59:3d: 80:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:21:06:8C:21:72:0E:21:40:A2:52:1C:43:0B:77:A6:D1:F9:CC:06 X509v3 Authority Key Identifier: keyid:67:B1:95:9E:38:70:48:5E:7C:C0:C0:36:09:49:F5:1B:41:A7:58:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/67B1959E3870485E7CC0C0360949F51B41A758A3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094119304137277443/0/67B1959E3870485E7CC0C0360949F51B41A758A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:3b:10:22:3d:37:73:34:c0:76:a9:0f:4d:04:e3:c3:37:b2: 72:ff:fb:60:ce:25:17:73:d2:14:85:29:f8:e7:ec:12:89:68: 43:b4:f2:14:7e:f6:d3:bd:10:d8:ae:e5:b0:4d:41:86:e7:26: 06:d4:38:83:9b:78:72:68:0f:d8:b5:4e:73:d8:5d:cb:d3:fe: 15:5b:fc:55:58:a1:ca:77:f9:4e:df:69:fe:a3:bd:ab:e0:91: c3:fb:80:e6:a3:31:fd:87:d7:c1:19:99:31:52:58:04:e1:b6: aa:15:55:81:fd:58:f8:91:ed:8c:5f:13:5f:6a:0d:6e:10:a8: 41:dc:ea:48:a3:d1:5f:51:43:f2:49:dd:48:2c:b5:a1:22:2c: c4:fe:0b:e9:b0:be:95:ae:87:c8:d2:43:ed:e4:63:4d:37:ee: 84:5f:cb:60:e8:53:ce:fc:df:df:db:8b:ee:3a:69:0f:b4:74: bd:c0:5a:35:03:3f:21:1e:55:80:0d:69:29:80:ab:cb:cc:6b: 2a:0d:4a:02:a1:49:7f:b4:8b:21:01:2b:0f:0f:29:da:ef:d3: 3f:2e:3b:02:2a:a8:32:2e:9c:76:b2:3e:81:3a:a9:44:06:08: 8d:b9:99:c5:43:f1:d4:c8:b1:4c:78:23:09:cc:87:6b:ee:fe: e0:16:17:06 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdkQ1xTZquMlIP6U9ruUmJyP+ErcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0 MUE3NThBMzAeFw0yNjEwMTQwNzE4NDhaFw0yNjEwMTcxMjU5NDhaMDMxMTAvBgNV BAMTKEFFMjEwNjhDMjE3MjBFMjE0MEEyNTIxQzQzMEI3N0E2RDFGOUNDMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEU6QVCVDmdwalqQljP6DY6m22 xD9i9bKBgHKbWQ36QBwE7M3DldEibtRek3n4LN1LY1CKXwlMYM0/8x3Y+9iKfeA8 QcihNtCCG/YWA6UgzgSBwAumOhedAibS8rRxeT9FMQsv3D7AfTYczUPAw/tOxoSB hZY55Ym9cq0UphNE1D/zfLS8A/hC0RMj5xbkSYkAhga/FwQJ3LVJyx1v+hlSPu5F 2j3M3TgEfiHFCsGteEau6Tswnw3S3ybJMCyESMKhksEDeEK6MlmUcYDaY2wQiWj5 8e+2YLwRAvhOf4GFiArGJl7kfKNL+BwV7coLe1F3jYt2gm3gfv8wlMNZPYATAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUriEGjCFyDiFAolIcQwt3ptH5zAYwHwYDVR0j BBgwFoAUZ7GVnjhwSF58wMA2CUn1G0GnWKMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDExOTMwNDEzNzI3NzQ0My8wLzY3QjE5NTlFMzg3MDQ4NUU3Q0MwQzAzNjA5NDlG NTFCNDFBNzU4QTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjdCMTk1OUUzODcwNDg1RTdDQzBDMDM2MDk0OUY1MUI0MUE3NThBMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQxMTkzMDQxMzcyNzc0NDMvMC82N0IxOTU5RTM4NzA0 ODVFN0NDMEMwMzYwOTQ5RjUxQjQxQTc1OEEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwzsQIj03czTA dqkPTQTjwzeycv/7YM4lF3PSFIUp+OfsEoloQ7TyFH72070Q2K7lsE1BhucmBtQ4 g5t4cmgP2LVOc9hdy9P+FVv8VVihynf5Tt9p/qO9q+CRw/uA5qMx/YfXwRmZMVJY BOG2qhVVgf1Y+JHtjF8TX2oNbhCoQdzqSKPRX1FD8kndSCy1oSIsxP4L6bC+la6H yNJD7eRjTTfuhF/LYOhTzvzf39uL7jppD7R0vcBaNQM/IR5VgA1pKYCry8xrKg1K AqFJf7SLIQErDw8p2u/TPy47AiqoMi6cdrI+gTqpRAYIjbmZxUPx1MixTHgjCcyH a+7+4BYXBg== -----END CERTIFICATE-----Generated at Wed Oct 14 17:29:37 2026 by rpki-client