$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft File: 74280C847DD28C691A500655BD81B3F019C5FCF7.mft (raw, json) Hash identifier: mbLIyjkpp4c4XbjYNNFtdqyBugq51w0zhjJgmcHeh+A= Subject key identifier: D9:C0:00:37:4E:9E:4D:AA:4F:B8:C6:49:C4:5D:C9:B7:07:EA:9A:18 Authority key identifier: 74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 Certificate issuer: /CN=74280C847DD28C691A500655BD81B3F019C5FCF7 Certificate serial: 68041C536E9461C499A1780F3AFB6615605B3E61 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft Manifest number: D5 Signing time: Fri 16 Oct 2026 19:33:03 +0000 Manifest this update: Fri 16 Oct 2026 19:28:03 +0000 Manifest next update: Mon 19 Oct 2026 20:51:03 +0000 Files and hashes: 1: 74280C847DD28C691A500655BD81B3F019C5FCF7.crl (hash: Czbxg5b09GZ+yKLocVt7qWzgx+XFfy25ZSfojhjcvec=) 2: 3130332e3138362e3130382e302f32332d3234203d3e203538353433.roa (hash: OcoevkYBZMWLQg+hvAPBGYan1zQFD9QLG6yATABRCBQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:04:1c:53:6e:94:61:c4:99:a1:78:0f:3a:fb:66:15:60:5b:3e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74280C847DD28C691A500655BD81B3F019C5FCF7 Validity Not Before: Oct 16 19:28:03 2026 GMT Not After : Oct 19 20:51:03 2026 GMT Subject: CN=D9C000374E9E4DAA4FB8C649C45DC9B707EA9A18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:86:48:a0:2a:60:9a:79:21:f6:d9:a3:d4:3f: ed:f9:ff:be:d5:f3:b1:43:a5:2a:3a:76:27:dd:2f: a9:b4:42:68:d5:4a:28:0a:ac:10:bc:fb:af:11:66: f5:7c:1d:2c:21:9b:f0:ab:b2:e3:bd:40:69:df:56: 1f:3c:4e:e5:07:46:0b:bd:94:9e:95:b0:6d:92:b1: 27:5e:a4:a8:e3:b6:11:1a:eb:6b:01:52:0a:88:c8: 95:06:ea:7b:17:ae:ee:78:6f:33:7a:15:54:1d:92: ff:b2:a0:ff:37:da:eb:99:05:c2:b3:50:cc:ce:3c: b5:83:b0:1e:fe:a2:c4:c2:c0:19:7d:7c:4c:6c:52: ce:b1:3a:b6:91:a9:d6:50:8d:25:44:8a:4f:8f:a0: cc:ee:ea:7a:35:53:f5:e9:77:44:f4:eb:4a:80:25: f2:71:f1:d3:81:38:32:16:0d:41:01:1e:5b:ce:75: 0d:6c:51:93:e8:30:02:28:d1:ea:67:77:42:a8:13: 2b:68:aa:ef:29:91:20:16:ce:75:61:4c:3f:5c:9d: 8a:5f:70:68:36:95:49:da:c3:fc:8a:51:0a:f6:bd: 84:2d:c9:1d:54:1d:03:bc:56:34:50:97:bf:2f:a7: 12:8d:dc:10:06:79:cc:dd:c3:f3:1a:20:bc:93:d4: 17:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C0:00:37:4E:9E:4D:AA:4F:B8:C6:49:C4:5D:C9:B7:07:EA:9A:18 X509v3 Authority Key Identifier: keyid:74:28:0C:84:7D:D2:8C:69:1A:50:06:55:BD:81:B3:F0:19:C5:FC:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/74280C847DD28C691A500655BD81B3F019C5FCF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094559728064790531/0/74280C847DD28C691A500655BD81B3F019C5FCF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:77:2a:c8:b3:21:a5:a0:23:e3:c5:64:b4:67:23:8e:0c:d4: d1:8b:d6:e1:9d:07:59:bf:c0:c9:7d:4a:e3:69:e6:da:9d:e4: d8:bc:f2:6d:6b:1a:e1:ec:6c:73:94:34:f4:95:f5:b6:fb:c0: 4e:30:e3:fe:2e:42:0f:dd:7e:d9:db:d1:7e:69:61:5e:56:55: e4:5c:d8:d6:b9:3e:b1:fc:f1:0d:16:51:89:80:ea:5d:2b:62: 07:de:9e:de:58:66:65:3b:db:d3:16:21:9c:0c:42:59:16:f0: 67:43:48:ff:d6:17:cc:a1:74:22:8e:72:33:5b:b1:fd:fd:8f: 43:a4:8f:4d:8e:3a:31:8e:58:e1:25:a9:3b:02:a0:22:01:1e: 8c:fe:de:a1:06:ad:b0:e2:00:36:49:bb:e2:41:c6:f7:22:c9: 7b:73:87:eb:b3:ae:67:fc:bd:ec:93:1a:13:45:11:29:8c:15: bb:fd:8f:2f:c5:23:51:ee:dd:b0:6b:45:14:60:0a:a2:ef:44: 54:20:ff:42:bf:1f:d3:1d:a3:5a:1d:b1:47:b4:d5:7f:17:5c: e5:05:e8:f4:28:f4:78:7d:b7:eb:72:ce:af:44:55:5f:09:c4: 6b:b9:88:91:c7:76:9d:c0:98:64:ba:1c:8b:37:dd:82:53:c6: aa:9b:04:24 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaAQcU26UYcSZoXgPOvtmFWBbPmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAx OUM1RkNGNzAeFw0yNjEwMTYxOTI4MDNaFw0yNjEwMTkyMDUxMDNaMDMxMTAvBgNV BAMTKEQ5QzAwMDM3NEU5RTREQUE0RkI4QzY0OUM0NURDOUI3MDdFQTlBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZhkigKmCaeSH22aPUP+35/77V 87FDpSo6difdL6m0QmjVSigKrBC8+68RZvV8HSwhm/CrsuO9QGnfVh88TuUHRgu9 lJ6VsG2SsSdepKjjthEa62sBUgqIyJUG6nsXru54bzN6FVQdkv+yoP832uuZBcKz UMzOPLWDsB7+osTCwBl9fExsUs6xOraRqdZQjSVEik+PoMzu6no1U/Xpd0T060qA JfJx8dOBODIWDUEBHlvOdQ1sUZPoMAIo0epnd0KoEytoqu8pkSAWznVhTD9cnYpf cGg2lUnaw/yKUQr2vYQtyR1UHQO8VjRQl78vpxKN3BAGeczdw/MaILyT1BefAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2cAAN06eTapPuMZJxF3JtwfqmhgwHwYDVR0j BBgwFoAUdCgMhH3SjGkaUAZVvYGz8BnF/PcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU1OTcyODA2NDc5MDUzMS8wLzc0MjgwQzg0N0REMjhDNjkxQTUwMDY1NUJEODFC M0YwMTlDNUZDRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzQyODBDODQ3REQyOEM2OTFBNTAwNjU1QkQ4MUIzRjAxOUM1RkNGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NTk3MjgwNjQ3OTA1MzEvMC83NDI4MEM4NDdERDI4 QzY5MUE1MDA2NTVCRDgxQjNGMDE5QzVGQ0Y3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHcqyLMhpaAj 48VktGcjjgzU0YvW4Z0HWb/AyX1K42nm2p3k2LzybWsa4exsc5Q09JX1tvvATjDj /i5CD91+2dvRfmlhXlZV5FzY1rk+sfzxDRZRiYDqXStiB96e3lhmZTvb0xYhnAxC WRbwZ0NI/9YXzKF0Io5yM1ux/f2PQ6SPTY46MY5Y4SWpOwKgIgEejP7eoQatsOIA Nkm74kHG9yLJe3OH67OuZ/y97JMaE0URKYwVu/2PL8UjUe7dsGtFFGAKou9EVCD/ Qr8f0x2jWh2xR7TVfxdc5QXo9Cj0eH2363LOr0RVXwnEa7mIkcd2ncCYZLocizfd glPGqpsEJA== -----END CERTIFICATE-----Generated at Sat Oct 17 12:41:57 2026 by rpki-client