$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft File: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft (raw, json) Hash identifier: IqaUZ9EoW5poXtgIl33JoYrehtCaVaytV2728Kujk30= Subject key identifier: E4:F5:E6:2B:05:8F:0D:BE:D7:99:8D:B3:DD:A8:7D:3B:BE:D6:99:C3 Authority key identifier: 87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B Certificate issuer: /CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Certificate serial: 03DB96863A0D428EC64ED64F0ECE7B9B0AE1272E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft Manifest number: D0 Signing time: Sun 25 Oct 2026 18:02:52 +0000 Manifest this update: Sun 25 Oct 2026 17:57:52 +0000 Manifest next update: Thu 29 Oct 2026 00:56:52 +0000 Files and hashes: 1: 874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl (hash: 2agSXxesJDpF5iFVk7o8Gq+ZBOIfvIOmgR1YdOfJmBc=) 2: 3231312e3135352e3136302e302f32312d3332203d3e2034383038.roa (hash: hPusrnjhYJm8+TZ/gEk8IBFbZqCjOYQH0MPwt972ygo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 00:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:db:96:86:3a:0d:42:8e:c6:4e:d6:4f:0e:ce:7b:9b:0a:e1:27:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874FA1B711DC9AFDC5C0CFC20E6E74499209C59B Validity Not Before: Oct 25 17:57:52 2026 GMT Not After : Oct 29 00:56:52 2026 GMT Subject: CN=E4F5E62B058F0DBED7998DB3DDA87D3BBED699C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e5:61:9c:db:63:0f:f5:07:02:48:59:a1:de: 5d:f7:b1:26:96:42:bf:d6:a4:4b:41:28:d1:49:fd: a7:9c:98:7d:bd:e0:d2:26:c6:27:e0:ec:db:91:0a: 68:7b:cf:70:4d:c9:6b:66:7c:2d:79:91:bc:28:48: 01:fb:a1:0f:6a:55:8f:48:c1:fd:fb:ca:54:a3:44: da:ac:75:36:46:16:86:ac:ad:6f:c4:03:00:ed:4d: a6:dd:30:91:4c:fa:7f:93:e7:9c:38:e3:86:c1:8a: a1:83:d0:4a:3d:a6:37:3f:ed:8d:a8:4b:f2:38:ef: dd:6a:2b:58:f0:55:18:11:dd:ee:db:8b:9d:22:fb: 8c:57:02:dd:a8:f7:4f:7d:76:c2:17:1c:b8:aa:cc: a1:54:05:5b:e9:bd:dc:0a:57:51:1b:2e:0a:5e:cb: 7c:51:6c:74:fe:1b:d2:91:64:5a:8f:66:da:5c:d3: f5:2d:0a:5e:8e:4e:44:db:c6:fa:9f:fa:e0:ef:f5: 6c:7e:f9:ce:a7:18:64:f6:ad:39:e2:16:5b:72:a2: c1:d3:6b:db:31:57:07:e4:9b:4f:87:ee:bb:5d:bc: bf:7e:c7:a8:39:7c:3c:0f:c3:be:79:3c:99:55:c6: 27:b8:6a:b5:4e:8f:87:ec:e0:36:3f:08:87:0b:c9: dd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F5:E6:2B:05:8F:0D:BE:D7:99:8D:B3:DD:A8:7D:3B:BE:D6:99:C3 X509v3 Authority Key Identifier: keyid:87:4F:A1:B7:11:DC:9A:FD:C5:C0:CF:C2:0E:6E:74:49:92:09:C5:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096996979474432002/0/874FA1B711DC9AFDC5C0CFC20E6E74499209C59B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:53:9e:64:f8:7b:8b:e9:2e:ae:e5:65:8c:7a:e9:1f:85:88: 55:5e:60:4d:71:df:57:25:1e:72:0d:af:a6:fc:d6:94:38:86: 1f:bb:21:2d:de:f9:fa:5e:0d:e5:ce:53:04:85:ca:6e:4c:3e: c8:8e:01:4e:6b:ef:8c:91:b4:5f:a5:03:61:df:5d:88:c3:9c: 1b:a4:37:27:a0:5e:c2:ce:65:26:04:48:aa:a7:4a:88:dd:4f: f6:ff:e2:44:36:cb:6a:38:86:5a:13:0e:b9:2e:c9:de:fe:df: e7:81:e4:cb:de:54:cc:93:28:e7:da:4e:e8:14:f8:41:84:14: 91:c9:68:41:81:78:2f:30:11:d8:ca:dd:e2:e8:55:e7:f1:ad: 4d:a8:cf:81:97:f7:f8:16:84:c0:1b:f0:b1:b7:6a:ba:f5:a3: 4c:07:8b:08:22:59:c5:4a:4f:b2:17:6a:85:2a:b5:a9:cf:74: f0:2e:10:21:66:6d:9b:9c:e0:7c:66:59:8b:a5:0a:57:e0:fa: b8:b9:2f:a0:f9:a9:89:2d:28:d0:b2:d3:45:4b:67:7c:ea:ac: ed:0e:37:8d:ef:9b:d9:50:fb:d7:dd:06:ab:14:d8:cd:92:2e: 98:e9:9f:60:4e:61:77:f3:8d:40:a3:33:ef:53:6c:20:7c:47: f5:06:e1:38 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA9uWhjoNQo7GTtZPDs57mwrhJy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5 MjA5QzU5QjAeFw0yNjEwMjUxNzU3NTJaFw0yNjEwMjkwMDU2NTJaMDMxMTAvBgNV BAMTKEU0RjVFNjJCMDU4RjBEQkVENzk5OERCM0REQTg3RDNCQkVENjk5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE5WGc22MP9QcCSFmh3l33sSaW Qr/WpEtBKNFJ/aecmH294NImxifg7NuRCmh7z3BNyWtmfC15kbwoSAH7oQ9qVY9I wf37ylSjRNqsdTZGFoasrW/EAwDtTabdMJFM+n+T55w444bBiqGD0Eo9pjc/7Y2o S/I4791qK1jwVRgR3e7bi50i+4xXAt2o9099dsIXHLiqzKFUBVvpvdwKV1EbLgpe y3xRbHT+G9KRZFqPZtpc0/UtCl6OTkTbxvqf+uDv9Wx++c6nGGT2rTniFltyosHT a9sxVwfkm0+H7rtdvL9+x6g5fDwPw755PJlVxie4arVOj4fs4DY/CIcLyd0/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5PXmKwWPDb7XmY2z3ah9O77WmcMwHwYDVR0j BBgwFoAUh0+htxHcmv3FwM/CDm50SZIJxZswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5Njk3OTQ3NDQzMjAwMi8wLzg3NEZBMUI3MTFEQzlBRkRDNUMwQ0ZDMjBFNkU3 NDQ5OTIwOUM1OUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODc0RkExQjcxMURDOUFGREM1QzBDRkMyMEU2RTc0NDk5MjA5QzU5Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTY5Nzk0NzQ0MzIwMDIvMC84NzRGQTFCNzExREM5 QUZEQzVDMENGQzIwRTZFNzQ0OTkyMDlDNTlCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxlOeZPh7i+ku ruVljHrpH4WIVV5gTXHfVyUecg2vpvzWlDiGH7shLd75+l4N5c5TBIXKbkw+yI4B TmvvjJG0X6UDYd9diMOcG6Q3J6Bews5lJgRIqqdKiN1P9v/iRDbLajiGWhMOuS7J 3v7f54Hky95UzJMo59pO6BT4QYQUkcloQYF4LzAR2Mrd4uhV5/GtTajPgZf3+BaE wBvwsbdquvWjTAeLCCJZxUpPshdqhSq1qc908C4QIWZtm5zgfGZZi6UKV+D6uLkv oPmpiS0o0LLTRUtnfOqs7Q43je+b2VD7190GqxTYzZIumOmfYE5hd/ONQKMz71Ns IHxH9QbhOA== -----END CERTIFICATE-----Generated at Tue Oct 27 16:34:05 2026 by rpki-client