$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft File: 1332FF90625961F264C4C1697510C8D39E9865D7.mft (raw, json) Hash identifier: OpRgJKD396sFirv1PXSDm6ETWpjNpqYQ5TXXsCvJ1Fc= Subject key identifier: 59:88:92:CE:5F:76:C0:C8:4D:55:82:DA:4C:0F:AA:33:4E:FE:09:0C Authority key identifier: 13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7 Certificate issuer: /CN=1332FF90625961F264C4C1697510C8D39E9865D7 Certificate serial: 207D77B417A1D20EB7AD4FFB268F6C9BA23C3E52 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft Manifest number: D4 Signing time: Fri 16 Oct 2026 13:27:36 +0000 Manifest this update: Fri 16 Oct 2026 13:22:36 +0000 Manifest next update: Mon 19 Oct 2026 19:30:36 +0000 Files and hashes: 1: 3130332e3132322e34382e302f32322d3232203d3e20313337373838.roa (hash: SbHyx5JcXCPgWqbXvh1lU44U3Nytrtx2FQt2UAWIA9Q=) 2: 3130332e3131372e3232302e302f32322d3232203d3e20313337373838.roa (hash: +BUcGZOQFiD6PT+iLY28PJeBHvjqy0X2J6YfTJqs3Lc=) 3: 1332FF90625961F264C4C1697510C8D39E9865D7.crl (hash: t0mB7lRiFPnEhlNt1ThG5UCv6zXibCdbU47bS1cafj0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.crl rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:7d:77:b4:17:a1:d2:0e:b7:ad:4f:fb:26:8f:6c:9b:a2:3c:3e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1332FF90625961F264C4C1697510C8D39E9865D7 Validity Not Before: Oct 16 13:22:36 2026 GMT Not After : Oct 19 19:30:36 2026 GMT Subject: CN=598892CE5F76C0C84D5582DA4C0FAA334EFE090C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:15:a4:86:a4:fe:56:e2:1d:1a:81:29:70:9a: 8a:3f:be:49:15:a1:b5:33:4c:ba:b1:47:1f:16:8a: d7:78:06:b1:35:93:d9:2c:31:5b:d7:17:ee:ec:25: dd:d2:eb:1b:67:12:ea:1f:53:36:14:ee:c8:1d:58: e3:bb:a2:18:ca:b8:79:db:5f:dc:b2:fa:51:06:50: 79:d7:2b:a4:6b:7d:39:b5:35:d2:b4:e5:12:48:2e: c3:90:b8:99:2c:28:af:1f:e1:45:1b:5b:f9:f1:9a: b6:b2:5c:54:eb:ac:75:2a:2c:d1:3e:db:4f:b0:be: 02:ac:4b:a2:d0:ae:56:4c:96:fd:90:1d:64:e4:cd: 1b:c1:c8:d5:79:15:9c:76:1f:f7:ed:d1:34:28:8c: b4:c2:46:b3:dd:31:a6:43:c3:b7:ed:2f:36:a6:91: e8:90:ae:e0:a4:54:4b:93:73:9b:4f:b8:62:c8:4a: da:f8:a8:00:99:1b:f7:90:0a:40:e6:6e:46:a3:d6: fd:9e:ea:ca:32:f1:2d:f5:25:61:2b:3f:18:ec:87: 71:68:e7:86:87:17:77:9f:18:56:2e:1a:51:8d:c9: 59:90:cc:90:7b:02:5e:77:f9:94:27:b5:56:43:f6: 97:db:9e:ed:55:b6:1b:64:65:25:9f:61:30:1d:84: 5c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:88:92:CE:5F:76:C0:C8:4D:55:82:DA:4C:0F:AA:33:4E:FE:09:0C X509v3 Authority Key Identifier: keyid:13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:69:8c:f6:2d:82:93:c8:4a:79:78:52:7a:ff:80:19:4f:c5: 4a:2a:d6:63:44:8e:8a:f2:e7:c1:33:2e:f8:e8:b1:58:4c:bf: 1a:27:25:fd:c1:28:65:91:36:11:ed:39:6d:30:e1:3d:85:1c: 20:f4:8c:c8:bb:9e:a1:6d:7d:3e:11:4e:e3:9d:4b:ce:4b:d3: 08:de:16:e5:cc:fb:24:7f:d5:45:87:f3:39:45:df:41:39:9f: 8e:33:68:9b:b2:c9:30:0c:53:67:8c:5d:54:81:82:f3:d6:73: 7b:75:e6:2f:cc:ed:28:2b:77:92:4d:3e:b2:60:63:fd:90:27: a7:20:a7:ba:4d:f9:da:0a:19:f1:01:63:a8:b0:7a:5b:33:3e: b2:fc:55:9b:5b:ee:b3:55:03:fa:96:40:d5:06:4d:d4:c0:bb: d7:3d:ee:46:70:b4:a6:ee:f5:c0:09:b5:09:ba:e2:8d:37:e7: 09:bc:e1:9e:f4:02:29:e0:43:29:b1:2e:5f:50:6c:90:70:4b: 52:0f:07:98:18:46:93:66:fb:ca:1a:56:c4:62:dd:7b:44:b9: 25:7c:2b:85:89:a6:9c:1d:d8:81:ad:e6:2b:38:04:94:6a:45: 02:b2:1e:b6:8d:e4:39:ab:ae:e4:94:5c:43:53:e9:7f:92:41: 5c:45:b8:9d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIH13tBeh0g63rU/7Jo9sm6I8PlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMzMkZGOTA2MjU5NjFGMjY0QzRDMTY5NzUxMEM4RDM5 RTk4NjVENzAeFw0yNjEwMTYxMzIyMzZaFw0yNjEwMTkxOTMwMzZaMDMxMTAvBgNV BAMTKDU5ODg5MkNFNUY3NkMwQzg0RDU1ODJEQTRDMEZBQTMzNEVGRTA5MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkFaSGpP5W4h0agSlwmoo/vkkV obUzTLqxRx8Witd4BrE1k9ksMVvXF+7sJd3S6xtnEuofUzYU7sgdWOO7ohjKuHnb X9yy+lEGUHnXK6RrfTm1NdK05RJILsOQuJksKK8f4UUbW/nxmrayXFTrrHUqLNE+ 20+wvgKsS6LQrlZMlv2QHWTkzRvByNV5FZx2H/ft0TQojLTCRrPdMaZDw7ftLzam keiQruCkVEuTc5tPuGLIStr4qACZG/eQCkDmbkaj1v2e6soy8S31JWErPxjsh3Fo 54aHF3efGFYuGlGNyVmQzJB7Al53+ZQntVZD9pfbnu1VthtkZSWfYTAdhFxZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWYiSzl92wMhNVYLaTA+qM07+CQwwHwYDVR0j BBgwFoAUEzL/kGJZYfJkxMFpdRDI056YZdcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDkxMzU2MzUwMTI2NDg5OS8wLzEzMzJGRjkwNjI1OTYxRjI2NEM0QzE2OTc1MTBD OEQzOUU5ODY1RDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTMzMkZGOTA2MjU5NjFGMjY0QzRDMTY5NzUxMEM4RDM5RTk4NjVENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ5MTM1NjM1MDEyNjQ4OTkvMC8xMzMyRkY5MDYyNTk2 MUYyNjRDNEMxNjk3NTEwQzhEMzlFOTg2NUQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWmM9i2Ck8hK eXhSev+AGU/FSirWY0SOivLnwTMu+OixWEy/Gicl/cEoZZE2Ee05bTDhPYUcIPSM yLueoW19PhFO451LzkvTCN4W5cz7JH/VRYfzOUXfQTmfjjNom7LJMAxTZ4xdVIGC 89Zze3XmL8ztKCt3kk0+smBj/ZAnpyCnuk352goZ8QFjqLB6WzM+svxVm1vus1UD +pZA1QZN1MC71z3uRnC0pu71wAm1CbrijTfnCbzhnvQCKeBDKbEuX1BskHBLUg8H mBhGk2b7yhpWxGLde0S5JXwrhYmmnB3Yga3mKzgElGpFArIeto3kOauu5JRcQ1Pp f5JBXEW4nQ== -----END CERTIFICATE-----Generated at Sat Oct 17 12:57:05 2026 by rpki-client