$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft File: 70B456FF624C0476CE9E190A89C23B97291210A4.mft (raw, json) Hash identifier: osDccODPZAus2Lq2HTXXHpuI8ITRdis+acv0S5JqQzQ= Subject key identifier: 59:E8:7B:8A:4F:8A:96:1D:F7:1E:E6:97:D2:3D:BC:6D:30:1F:18:01 Authority key identifier: 70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4 Certificate issuer: /CN=70B456FF624C0476CE9E190A89C23B97291210A4 Certificate serial: 1832D86F3E86D4D4B68691C678BCB15992B3CF7A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft Manifest number: 91 Signing time: Mon 12 Oct 2026 19:02:18 +0000 Manifest this update: Mon 12 Oct 2026 18:57:18 +0000 Manifest next update: Thu 15 Oct 2026 23:24:18 +0000 Files and hashes: 1: 3130332e3133382e31332e302f32342d3234203d3e20313338313935.roa (hash: F0BqGnGIAKFQY9pv/Haa5DSbUQETz7j11TZ8gm6LF3I=) 2: 70B456FF624C0476CE9E190A89C23B97291210A4.crl (hash: C3JpPNcFeFZo1KeBhVKUxUKgT1qA3G2bRW7ECc6y3jE=) 3: 3130332e3133382e31322e302f32342d3234203d3e20343030363139.roa (hash: bEH2bShlh//cZbtMb/m90zHRKZFjWC4M0DjyYPWcWas=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 23:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:32:d8:6f:3e:86:d4:d4:b6:86:91:c6:78:bc:b1:59:92:b3:cf:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70B456FF624C0476CE9E190A89C23B97291210A4 Validity Not Before: Oct 12 18:57:18 2026 GMT Not After : Oct 15 23:24:18 2026 GMT Subject: CN=59E87B8A4F8A961DF71EE697D23DBC6D301F1801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:72:fe:46:e8:f7:27:6c:63:37:28:f9:6c:ae: 53:d5:ea:b8:4d:fb:7f:e5:ba:be:9d:f7:4a:0c:f0: 98:e1:c4:1c:fc:1c:78:00:2e:4e:80:cb:3e:1a:28: ba:5b:3e:73:50:1a:53:f0:0e:b5:de:68:34:8a:f4: 25:83:c5:cf:14:d2:d7:35:a8:91:0a:f8:f6:8d:e8: c9:84:d1:fd:6a:f8:9e:86:55:e7:29:b2:4b:05:e4: b5:62:4b:8d:3c:6c:6a:ce:58:8d:da:0a:45:23:01: 41:e7:2f:de:60:1b:34:6e:c6:73:27:97:d0:37:35: 34:21:0d:05:da:c6:d9:14:d6:bb:99:b2:fa:33:08: 83:ff:a1:d5:d7:02:37:8f:43:d9:65:09:9a:38:af: d5:d0:4d:ff:81:d6:19:4a:b6:f2:64:80:f3:61:91: 04:a9:70:a2:52:6f:68:dd:54:54:fa:94:77:c5:de: c4:3b:f5:df:7e:34:49:60:dc:5d:90:e0:f3:af:d0: fd:f1:8e:6e:70:a5:c5:95:22:a3:da:d1:5a:84:65: fe:86:88:3b:ae:fa:0c:b7:d7:32:03:d0:49:20:ac: 26:f1:a2:0d:e3:80:92:fd:c6:ae:07:d6:62:bd:69: bf:72:f0:a5:e8:43:11:ad:1b:87:e7:e1:a3:de:64: b5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E8:7B:8A:4F:8A:96:1D:F7:1E:E6:97:D2:3D:BC:6D:30:1F:18:01 X509v3 Authority Key Identifier: keyid:70:B4:56:FF:62:4C:04:76:CE:9E:19:0A:89:C2:3B:97:29:12:10:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/70B456FF624C0476CE9E190A89C23B97291210A4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112582991609069589/0/70B456FF624C0476CE9E190A89C23B97291210A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:18:60:99:9d:79:b2:c8:06:89:cd:90:4a:e8:0a:16:78:c2: 36:5e:fe:1f:e0:3b:dd:aa:f5:9e:9b:ae:a1:b9:af:47:00:a4: fa:e3:28:40:d0:eb:ed:a1:50:d4:aa:23:74:aa:ba:cf:69:ea: d8:7f:ba:41:8c:10:43:15:9f:d3:0f:6f:b7:d8:ce:d6:cb:33: 45:c6:13:c2:ed:4d:e2:dd:20:a2:33:17:be:26:6b:4c:76:28: 9e:e6:9c:61:aa:89:a3:43:08:04:60:68:0a:f3:3e:c3:3b:28: c2:fc:43:4a:40:26:3a:a9:2c:d7:aa:f5:d3:22:0d:ed:51:27: 6f:7f:29:ab:49:5c:cf:c2:64:51:59:4f:42:f1:4e:25:6b:4b: be:b6:58:84:43:ba:84:f7:8d:32:10:7b:cb:73:ec:62:0d:d2: 2d:90:af:8d:59:5e:dc:58:e8:08:a5:ee:5b:7a:f2:45:0f:a5: 00:6f:82:d1:26:2d:38:08:ee:e2:22:7a:78:1f:ef:e4:19:88: 6a:b1:6e:f8:4c:03:06:4b:5b:45:df:a8:04:e7:4c:9f:7a:2e: 7c:e0:fa:ab:80:7e:e1:8c:11:c4:27:8d:a4:9c:5e:32:ce:49: fa:25:12:40:f6:f4:7d:b7:be:72:2e:c2:5f:d7:38:33:e9:d9: 9c:a6:5f:16 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGDLYbz6G1NS2hpHGeLyxWZKzz3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBCNDU2RkY2MjRDMDQ3NkNFOUUxOTBBODlDMjNCOTcy OTEyMTBBNDAeFw0yNjEwMTIxODU3MThaFw0yNjEwMTUyMzI0MThaMDMxMTAvBgNV BAMTKDU5RTg3QjhBNEY4QTk2MURGNzFFRTY5N0QyM0RCQzZEMzAxRjE4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRcv5G6PcnbGM3KPlsrlPV6rhN +3/lur6d90oM8JjhxBz8HHgALk6Ayz4aKLpbPnNQGlPwDrXeaDSK9CWDxc8U0tc1 qJEK+PaN6MmE0f1q+J6GVecpsksF5LViS408bGrOWI3aCkUjAUHnL95gGzRuxnMn l9A3NTQhDQXaxtkU1ruZsvozCIP/odXXAjePQ9llCZo4r9XQTf+B1hlKtvJkgPNh kQSpcKJSb2jdVFT6lHfF3sQ79d9+NElg3F2Q4POv0P3xjm5wpcWVIqPa0VqEZf6G iDuu+gy31zID0EkgrCbxog3jgJL9xq4H1mK9ab9y8KXoQxGtG4fn4aPeZLVhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWeh7ik+Klh33HuaX0j28bTAfGAEwHwYDVR0j BBgwFoAUcLRW/2JMBHbOnhkKicI7lykSEKQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU4Mjk5MTYwOTA2OTU4OS8wLzcwQjQ1NkZGNjI0QzA0NzZDRTlFMTkwQTg5QzIz Qjk3MjkxMjEwQTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzBCNDU2RkY2MjRDMDQ3NkNFOUUxOTBBODlDMjNCOTcyOTEyMTBBNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI1ODI5OTE2MDkwNjk1ODkvMC83MEI0NTZGRjYyNEMw NDc2Q0U5RTE5MEE4OUMyM0I5NzI5MTIxMEE0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRhgmZ15ssgG ic2QSugKFnjCNl7+H+A73ar1npuuobmvRwCk+uMoQNDr7aFQ1KojdKq6z2nq2H+6 QYwQQxWf0w9vt9jO1sszRcYTwu1N4t0gojMXviZrTHYonuacYaqJo0MIBGBoCvM+ wzsowvxDSkAmOqks16r10yIN7VEnb38pq0lcz8JkUVlPQvFOJWtLvrZYhEO6hPeN MhB7y3PsYg3SLZCvjVle3FjoCKXuW3ryRQ+lAG+C0SYtOAju4iJ6eB/v5BmIarFu +EwDBktbRd+oBOdMn3oufOD6q4B+4YwRxCeNpJxeMs5J+iUSQPb0fbe+ci7CX9c4 M+nZnKZfFg== -----END CERTIFICATE-----Generated at Wed Oct 14 10:29:16 2026 by rpki-client