$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.mft File: E597742A070B0180FE28980755EF35753C45FA58.mft (raw, json) Hash identifier: lLEeUdXTljMzmWFPKQ6cH0sXCqJNMscSZkKKfDQJdqM= Subject key identifier: F1:95:4E:D4:B5:60:71:29:D9:6C:BE:CB:94:B0:5A:D9:12:73:93:8C Authority key identifier: E5:97:74:2A:07:0B:01:80:FE:28:98:07:55:EF:35:75:3C:45:FA:58 Certificate issuer: /CN=E597742A070B0180FE28980755EF35753C45FA58 Certificate serial: 23E565B356F657068E103C22278A0396AD32CE56 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E597742A070B0180FE28980755EF35753C45FA58.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.mft Manifest number: 92 Signing time: Mon 26 Oct 2026 19:39:01 +0000 Manifest this update: Mon 26 Oct 2026 19:34:01 +0000 Manifest next update: Thu 29 Oct 2026 23:11:01 +0000 Files and hashes: 1: E597742A070B0180FE28980755EF35753C45FA58.crl (hash: 3wAiLq15kHmgyHuFgYIAgtMTY0s9J8/vJkLpI6fYkEo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.crl rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E597742A070B0180FE28980755EF35753C45FA58.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 23:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e5:65:b3:56:f6:57:06:8e:10:3c:22:27:8a:03:96:ad:32:ce:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E597742A070B0180FE28980755EF35753C45FA58 Validity Not Before: Oct 26 19:34:01 2026 GMT Not After : Oct 29 23:11:01 2026 GMT Subject: CN=F1954ED4B5607129D96CBECB94B05AD91273938C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4d:e9:b4:26:9f:a4:dc:8b:79:c4:5a:64:47: de:2f:09:a8:8f:0c:bf:38:96:dd:88:fe:5a:f0:85: 71:61:94:ba:14:5d:cc:e2:b5:be:b1:f1:89:c0:ec: b5:0a:4c:eb:df:82:71:67:08:e5:b1:9c:2a:80:5d: 66:bd:ba:97:b0:89:43:be:91:4e:61:27:e7:e2:49: 57:13:e4:e6:91:85:50:11:da:90:6f:50:8d:85:db: 9a:ef:5d:b0:0d:8d:09:22:ee:e4:e5:3d:dd:84:fe: 41:b3:5a:21:cd:68:fb:5a:51:34:3b:4d:b8:b4:53: 86:be:84:d3:a2:31:99:88:58:95:84:f1:cc:0b:ea: 7d:54:6e:c2:fd:df:ab:b8:15:b6:e2:3f:32:86:db: 45:65:44:56:04:7a:6e:aa:90:c6:27:c6:57:93:17: 6d:c7:21:3b:13:53:ad:d9:3f:47:82:14:54:82:60: fd:05:1b:35:0b:e8:d2:6d:4c:8f:40:50:0e:ff:92: 3e:b1:35:81:aa:6d:0b:dc:2b:60:c1:95:36:2d:d3: 47:d3:8f:04:f5:70:58:15:02:99:3b:ca:1f:00:f7: e3:bf:6d:f0:42:48:eb:bc:c9:a7:ad:b8:6f:26:3a: 28:59:0c:c7:f0:2d:a0:d5:15:23:54:af:a5:36:3a: 7f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:95:4E:D4:B5:60:71:29:D9:6C:BE:CB:94:B0:5A:D9:12:73:93:8C X509v3 Authority Key Identifier: keyid:E5:97:74:2A:07:0B:01:80:FE:28:98:07:55:EF:35:75:3C:45:FA:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E597742A070B0180FE28980755EF35753C45FA58.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113648026729054227/0/E597742A070B0180FE28980755EF35753C45FA58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:0d:e0:e2:0f:b3:2a:e3:50:a9:06:a3:61:b3:c9:9b:e0:0b: dd:f5:bd:28:89:95:d7:b3:37:70:1f:d6:1e:f8:d8:1f:54:4e: 08:81:ad:a0:c4:cb:9e:e5:91:ff:dc:9d:50:6d:51:ce:60:ba: 6e:bf:0a:ab:59:4c:01:59:06:18:2d:9d:2f:70:ed:38:c1:56: 73:6e:99:3e:f8:60:26:78:e9:36:a4:8d:71:eb:ee:32:23:dd: 40:93:24:11:4b:0b:4a:95:29:4b:e7:09:05:03:be:06:bd:77: 3f:2b:58:5c:41:3e:e6:0d:5f:37:46:4b:6a:9a:d7:09:b2:51: 72:3d:fd:9d:48:bf:10:27:c6:3a:4d:89:66:94:03:df:82:0b: ed:01:e9:75:d5:15:e3:41:99:82:58:9c:d3:71:f7:b2:bf:79: f1:c1:3f:e2:8a:8a:73:bb:d9:58:77:1f:ea:b3:5a:db:6e:3c: 1c:63:f3:51:3d:03:8e:88:9c:79:2f:63:0b:01:c6:03:e4:1e: bf:1f:21:17:a9:43:e2:08:6a:e1:a9:37:e7:c4:2b:6b:d3:4c: 83:ca:c3:5e:1f:e5:c2:11:9d:34:d4:09:27:5a:8f:fd:86:eb: c9:bf:c7:79:a4:71:b1:87:ae:49:7c:c8:ee:7a:27:b8:13:5e: dd:b2:1a:da -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUI+Vls1b2VwaOEDwiJ4oDlq0yzlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTU5Nzc0MkEwNzBCMDE4MEZFMjg5ODA3NTVFRjM1NzUz QzQ1RkE1ODAeFw0yNjEwMjYxOTM0MDFaFw0yNjEwMjkyMzExMDFaMDMxMTAvBgNV BAMTKEYxOTU0RUQ0QjU2MDcxMjlEOTZDQkVDQjk0QjA1QUQ5MTI3MzkzOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMTem0Jp+k3It5xFpkR94vCaiP DL84lt2I/lrwhXFhlLoUXczitb6x8YnA7LUKTOvfgnFnCOWxnCqAXWa9upewiUO+ kU5hJ+fiSVcT5OaRhVAR2pBvUI2F25rvXbANjQki7uTlPd2E/kGzWiHNaPtaUTQ7 Tbi0U4a+hNOiMZmIWJWE8cwL6n1UbsL936u4FbbiPzKG20VlRFYEem6qkMYnxleT F23HITsTU63ZP0eCFFSCYP0FGzUL6NJtTI9AUA7/kj6xNYGqbQvcK2DBlTYt00fT jwT1cFgVApk7yh8A9+O/bfBCSOu8yaetuG8mOihZDMfwLaDVFSNUr6U2On+9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8ZVO1LVgcSnZbL7LlLBa2RJzk4wwHwYDVR0j BBgwFoAU5Zd0KgcLAYD+KJgHVe81dTxF+lgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MzY0ODAyNjcyOTA1NDIyNy8wL0U1OTc3NDJBMDcwQjAxODBGRTI4OTgwNzU1RUYz NTc1M0M0NUZBNTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRTU5Nzc0MkEwNzBCMDE4MEZFMjg5ODA3NTVFRjM1NzUzQzQ1RkE1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTM2NDgwMjY3MjkwNTQyMjcvMC9FNTk3NzQyQTA3MEIw MTgwRkUyODk4MDc1NUVGMzU3NTNDNDVGQTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUA3g4g+zKuNQ qQajYbPJm+AL3fW9KImV17M3cB/WHvjYH1ROCIGtoMTLnuWR/9ydUG1RzmC6br8K q1lMAVkGGC2dL3DtOMFWc26ZPvhgJnjpNqSNcevuMiPdQJMkEUsLSpUpS+cJBQO+ Br13PytYXEE+5g1fN0ZLaprXCbJRcj39nUi/ECfGOk2JZpQD34IL7QHpddUV40GZ glic03H3sr958cE/4oqKc7vZWHcf6rNa2248HGPzUT0DjoiceS9jCwHGA+Qevx8h F6lD4ghq4ak358Qra9NMg8rDXh/lwhGdNNQJJ1qP/Ybryb/HeaRxsYeuSXzI7non uBNe3bIa2g== -----END CERTIFICATE-----Generated at Tue Oct 27 15:07:17 2026 by rpki-client