$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft File: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft (raw, json) Hash identifier: meMqd2hI1GmlMtVv1MZBhdoUeMS+pG2utN9iqlXYxYU= Subject key identifier: 08:5D:A8:C6:F7:B5:95:D3:6C:2A:EC:5C:06:45:30:1B:28:62:9C:6B Authority key identifier: 24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B Certificate issuer: /CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Certificate serial: 204C6225527D15F93B287E9CDA5C45074B10B080 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft Manifest number: 9C Signing time: Mon 12 Oct 2026 09:51:50 +0000 Manifest this update: Mon 12 Oct 2026 09:46:50 +0000 Manifest next update: Thu 15 Oct 2026 18:42:50 +0000 Files and hashes: 1: 24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl (hash: dOqFhYI1c+hhApNVpitmC+IJlq112N8B0CvulU86qqU=) 2: 3130332e3133312e3133382e302f32332d3233203d3e20313336313937.roa (hash: zT8XBWbZQ9y9tGdKDC3b9QwRJtTXCLs9KZRJOE6nT9M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 18:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:4c:62:25:52:7d:15:f9:3b:28:7e:9c:da:5c:45:07:4b:10:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24DF5D57D3DC90C70C758DA9F83ED072FC035D6B Validity Not Before: Oct 12 09:46:50 2026 GMT Not After : Oct 15 18:42:50 2026 GMT Subject: CN=085DA8C6F7B595D36C2AEC5C0645301B28629C6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:06:de:11:0b:b9:90:9e:57:7d:02:75:bb:93: 6c:77:ad:80:25:34:f8:44:a6:08:a0:78:a9:df:20: 3f:8c:ba:b7:47:3a:73:f7:33:d8:8d:8b:1b:38:03: 0a:f4:f9:8e:0b:75:6d:18:5d:b3:ac:1a:9d:6f:d4: dd:0e:ce:be:47:30:76:0f:2e:a6:10:b5:04:84:6d: 25:72:42:a6:60:50:fa:78:cb:2d:cb:38:ef:77:78: 00:11:ef:1d:b3:86:75:5f:86:97:8e:ae:51:e0:75: 30:01:4d:12:ea:20:e6:14:a8:e5:28:b6:c8:66:b2: 47:09:b6:e8:d5:5a:48:a6:2a:b3:57:dd:d0:7b:c5: dd:de:39:ac:0c:f6:2d:51:cf:57:dd:33:34:78:81: bd:44:bd:00:a4:34:50:c7:15:91:a9:02:e5:ec:3d: 9c:4b:85:f7:6c:42:31:b6:8c:d4:d8:a3:b5:c7:fa: 8a:72:ce:da:8a:c7:4c:65:d2:35:d6:8e:05:5f:8e: 9d:f3:c0:81:a3:a0:19:6f:7d:d2:39:c3:ef:c1:0b: ac:99:02:42:a9:50:f5:7c:98:84:1b:bb:0e:c8:8a: a2:dd:7b:72:96:91:60:2a:9e:d6:7c:b5:02:1c:e7: 53:e8:6a:cf:57:5e:f8:b2:b4:73:f2:0c:8c:1e:cd: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5D:A8:C6:F7:B5:95:D3:6C:2A:EC:5C:06:45:30:1B:28:62:9C:6B X509v3 Authority Key Identifier: keyid:24:DF:5D:57:D3:DC:90:C7:0C:75:8D:A9:F8:3E:D0:72:FC:03:5D:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108935859060670483/0/24DF5D57D3DC90C70C758DA9F83ED072FC035D6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:86:92:09:6d:39:3a:3c:36:db:79:f2:de:bf:25:6d:af:ed: 69:aa:cb:2d:e7:e3:a7:2f:1e:ca:45:12:b2:4e:cb:79:d5:1f: 2d:c1:56:50:eb:9c:d5:e5:06:60:8f:fb:12:5a:5b:36:58:4a: 35:1b:e9:e6:11:9c:cd:cd:fe:dc:8e:05:a1:f8:25:76:ca:38: d0:61:af:d9:d0:20:cd:d3:84:16:18:59:fc:9b:53:38:ab:ca: c7:dc:a3:d3:3a:8b:ad:02:42:1e:49:92:e6:01:9e:2b:c7:9d: cc:e0:87:89:ad:72:79:5a:d5:e2:1f:1b:3b:87:35:ee:79:95: 2c:08:eb:c1:4f:2c:31:d4:d5:0c:4f:fe:40:34:06:a8:c4:05: 1a:fe:e3:89:4c:cd:bc:e2:ce:d0:4e:41:6a:5f:97:53:84:03: 5a:4b:8b:9d:69:6e:16:a7:86:5e:a2:06:ec:f4:f7:76:d8:eb: 92:25:2b:20:7b:cb:16:a6:ff:e0:ce:1e:de:eb:37:6c:fc:fb: 6a:19:3b:09:58:63:b8:c3:eb:14:b8:38:7d:70:8a:8c:c6:f4: ea:f8:05:82:46:a1:cb:e5:af:09:1a:58:c5:f7:01:77:ad:93: 77:70:4e:7f:c2:4c:d6:d0:57:22:2c:f1:3f:fb:ea:05:c5:37: 67:d4:8f:a3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIExiJVJ9Ffk7KH6c2lxFB0sQsIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJG QzAzNUQ2QjAeFw0yNjEwMTIwOTQ2NTBaFw0yNjEwMTUxODQyNTBaMDMxMTAvBgNV BAMTKDA4NURBOEM2RjdCNTk1RDM2QzJBRUM1QzA2NDUzMDFCMjg2MjlDNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Bt4RC7mQnld9AnW7k2x3rYAl NPhEpgigeKnfID+MurdHOnP3M9iNixs4Awr0+Y4LdW0YXbOsGp1v1N0Ozr5HMHYP LqYQtQSEbSVyQqZgUPp4yy3LOO93eAAR7x2zhnVfhpeOrlHgdTABTRLqIOYUqOUo tshmskcJtujVWkimKrNX3dB7xd3eOawM9i1Rz1fdMzR4gb1EvQCkNFDHFZGpAuXs PZxLhfdsQjG2jNTYo7XH+opyztqKx0xl0jXWjgVfjp3zwIGjoBlvfdI5w+/BC6yZ AkKpUPV8mIQbuw7IiqLde3KWkWAqntZ8tQIc51Poas9XXviytHPyDIwezcppAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCF2oxve1ldNsKuxcBkUwGyhinGswHwYDVR0j BBgwFoAUJN9dV9PckMcMdY2p+D7QcvwDXWswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODkzNTg1OTA2MDY3MDQ4My8wLzI0REY1RDU3RDNEQzkwQzcwQzc1OERBOUY4M0VE MDcyRkMwMzVENkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjRERjVENTdEM0RDOTBDNzBDNzU4REE5RjgzRUQwNzJGQzAzNUQ2Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg5MzU4NTkwNjA2NzA0ODMvMC8yNERGNUQ1N0QzREM5 MEM3MEM3NThEQTlGODNFRDA3MkZDMDM1RDZCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhoaSCW05Ojw2 23ny3r8lba/taarLLefjpy8eykUSsk7LedUfLcFWUOuc1eUGYI/7ElpbNlhKNRvp 5hGczc3+3I4Fofgldso40GGv2dAgzdOEFhhZ/JtTOKvKx9yj0zqLrQJCHkmS5gGe K8edzOCHia1yeVrV4h8bO4c17nmVLAjrwU8sMdTVDE/+QDQGqMQFGv7jiUzNvOLO 0E5Bal+XU4QDWkuLnWluFqeGXqIG7PT3dtjrkiUrIHvLFqb/4M4e3us3bPz7ahk7 CVhjuMPrFLg4fXCKjMb06vgFgkahy+WvCRpYxfcBd62Td3BOf8JM1tBXIizxP/vq BcU3Z9SPow== -----END CERTIFICATE-----Generated at Wed Oct 14 18:46:50 2026 by rpki-client