$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft File: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft (raw, json) Hash identifier: mAHBa3KRr6xusFOtqyKSH7gip6D02Z02Owi0faKqba0= Subject key identifier: 25:61:AB:8F:F4:74:6C:2F:8D:48:E6:55:F6:87:42:A4:77:C3:C2:C0 Authority key identifier: 63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63 Certificate issuer: /CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63 Certificate serial: 407B52733DB3F038F1D8C894CF9DC94AC5B0389A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft Manifest number: D0 Signing time: Sun 25 Oct 2026 14:02:38 +0000 Manifest this update: Sun 25 Oct 2026 13:57:38 +0000 Manifest next update: Wed 28 Oct 2026 23:12:38 +0000 Files and hashes: 1: 3132312e35322e3232342e302f31392d3139203d3e2034383337.roa (hash: Du8DABN3Kd+HaS5bybrAvOEm0gL7RUVR+bQMHp9DzjM=) 2: 3130312e3235312e3134342e302f32312d3231203d3e2034383337.roa (hash: /ox/S6ojTw7NTUHT+hZP9w5PkDnUqJXtTCGiGwolLCk=) 3: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl (hash: /9spKIXRZ1mUAvt6JmkGtFmJSMm+P8uPnA25ZRrp4SY=) 4: 3130312e3235312e3134342e302f32302d3230203d3e2034383337.roa (hash: xoRs3FL3HieKEqrqewNhwvKSZqMvWnRJadRDQ7hi73M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 23:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:7b:52:73:3d:b3:f0:38:f1:d8:c8:94:cf:9d:c9:4a:c5:b0:38:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63 Validity Not Before: Oct 25 13:57:38 2026 GMT Not After : Oct 28 23:12:38 2026 GMT Subject: CN=2561AB8FF4746C2F8D48E655F68742A477C3C2C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bc:bd:55:71:e8:cf:3d:51:c3:79:1e:12:11: a3:14:e7:31:f2:3b:08:2f:82:1f:fe:dc:ed:cb:cf: 32:f1:52:b4:55:18:e0:b1:85:f3:2f:57:7d:5b:5f: b3:94:6d:bf:89:bd:46:c0:4d:44:9d:43:60:c3:93: be:6f:bb:34:33:11:cc:d5:3d:bd:f3:e8:fb:6c:41: d5:3e:8c:b0:94:8f:bf:19:ff:f0:28:6d:c3:53:77: 99:c2:f9:5b:06:0b:24:14:44:5e:48:00:e7:9f:15: 05:be:e2:af:3a:90:cb:44:62:08:9f:56:cb:c3:52: 54:67:65:39:31:c9:dd:e0:0e:a3:eb:74:57:de:0d: a5:26:90:fb:d7:ba:bb:da:aa:ec:3f:fe:1f:6a:ca: e3:96:ee:e0:27:e3:91:e9:74:ca:91:b9:65:e3:12: c9:b0:26:a8:2a:16:7d:60:ff:d3:7b:1e:5a:40:95: fb:12:27:bc:9c:4a:e4:b8:11:30:2e:b1:fc:97:d3: 79:d1:a7:d3:81:f3:37:3a:7c:97:71:4f:d8:bc:d8: ff:d4:a0:7e:27:26:72:b7:c6:f6:dd:53:b0:3b:c9: a4:6f:1b:1a:d3:e3:ca:7d:75:40:ce:1c:55:55:e8: 1e:10:4f:17:93:ee:a6:d3:1e:26:bc:94:22:37:5a: 52:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:61:AB:8F:F4:74:6C:2F:8D:48:E6:55:F6:87:42:A4:77:C3:C2:C0 X509v3 Authority Key Identifier: keyid:63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:c1:84:f1:77:72:43:9c:8c:42:89:42:99:6c:2f:44:65:e6: 83:82:36:65:80:c4:50:01:2b:cb:28:c7:88:c3:9d:98:e2:fa: 8a:f5:eb:ab:fd:bf:96:df:b9:1d:79:06:d8:e0:03:fd:68:bc: e3:cb:db:24:02:8a:c4:4e:f8:96:a0:46:83:41:a4:07:15:65: f8:5f:ad:09:6b:ff:b5:fd:7e:b7:a8:c2:45:8e:1d:65:5b:e0: b1:f8:32:e5:28:c5:a6:27:56:27:a2:1a:9b:8e:38:99:ec:56: d0:db:25:16:85:10:64:2a:3b:aa:bc:07:87:12:dc:c0:0a:d1: f6:5b:02:7c:0f:d4:20:3b:3d:95:f4:65:47:64:2a:e4:79:04: 16:ce:f8:9a:c6:d0:11:bc:38:f5:c3:d1:8d:0b:fd:a1:30:2d: d9:08:05:36:11:42:ce:0a:84:36:bd:b2:bf:eb:3c:7b:3b:54: af:70:c6:84:8b:e0:ca:a8:c4:08:90:0c:77:91:d3:fa:bf:fd: 8d:a8:b5:6e:0b:45:86:ca:a0:bb:b9:1f:f1:8d:6c:de:c1:36: 89:09:f4:03:e9:91:5a:10:8a:b0:0d:bc:a6:f9:30:b5:01:37: 21:cf:b6:d1:d7:83:96:06:48:d2:a9:b6:b2:00:f1:06:8b:b9: ba:c9:ff:f7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQHtScz2z8Djx2MiUz53JSsWwOJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM0NTgxRjFCOTVGQkEyMDRCMUM4RDAyNzFCQjgxQzdB N0EwOEY2MzAeFw0yNjEwMjUxMzU3MzhaFw0yNjEwMjgyMzEyMzhaMDMxMTAvBgNV BAMTKDI1NjFBQjhGRjQ3NDZDMkY4RDQ4RTY1NUY2ODc0MkE0NzdDM0MyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvvL1VcejPPVHDeR4SEaMU5zHy Owgvgh/+3O3LzzLxUrRVGOCxhfMvV31bX7OUbb+JvUbATUSdQ2DDk75vuzQzEczV Pb3z6PtsQdU+jLCUj78Z//AobcNTd5nC+VsGCyQURF5IAOefFQW+4q86kMtEYgif VsvDUlRnZTkxyd3gDqPrdFfeDaUmkPvXurvaquw//h9qyuOW7uAn45HpdMqRuWXj EsmwJqgqFn1g/9N7HlpAlfsSJ7ycSuS4ETAusfyX03nRp9OB8zc6fJdxT9i82P/U oH4nJnK3xvbdU7A7yaRvGxrT48p9dUDOHFVV6B4QTxeT7qbTHia8lCI3WlL/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJWGrj/R0bC+NSOZV9odCpHfDwsAwHwYDVR0j BBgwFoAUY0WB8blfuiBLHI0CcbuBx6egj2MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjAwMzE5OTA0MTUzOC8wLzYzNDU4MUYxQjk1RkJBMjA0QjFDOEQwMjcxQkI4 MUM3QTdBMDhGNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjM0NTgxRjFCOTVGQkEyMDRCMUM4RDAyNzFCQjgxQzdBN0EwOEY2My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzIwMDMxOTkwNDE1MzgvMC82MzQ1ODFGMUI5NUZC QTIwNEIxQzhEMDI3MUJCODFDN0E3QTA4RjYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy8GE8XdyQ5yM QolCmWwvRGXmg4I2ZYDEUAEryyjHiMOdmOL6ivXrq/2/lt+5HXkG2OAD/Wi848vb JAKKxE74lqBGg0GkBxVl+F+tCWv/tf1+t6jCRY4dZVvgsfgy5SjFpidWJ6Iam444 mexW0NslFoUQZCo7qrwHhxLcwArR9lsCfA/UIDs9lfRlR2Qq5HkEFs74msbQEbw4 9cPRjQv9oTAt2QgFNhFCzgqENr2yv+s8eztUr3DGhIvgyqjECJAMd5HT+r/9jai1 bgtFhsqgu7kf8Y1s3sE2iQn0A+mRWhCKsA28pvkwtQE3Ic+20deDlgZI0qm2sgDx Bou5usn/9w== -----END CERTIFICATE-----Generated at Mon Oct 26 11:14:53 2026 by rpki-client