$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft File: 7168563389D6040E01C75892D6228B15ABD8EFB5.mft (raw, json) Hash identifier: zNeKQxKY6GfZ4o2POr+OYUJnufifa/0Kxm7p/KzU55E= Subject key identifier: 4D:6B:D3:FE:E1:D6:5E:D3:14:7F:A4:BA:79:C4:5C:B8:58:60:A7:FC Authority key identifier: 71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5 Certificate issuer: /CN=7168563389D6040E01C75892D6228B15ABD8EFB5 Certificate serial: 150D190077CF473A978A13D12ACC7B5CCD5F5C88 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft Manifest number: 92 Signing time: Mon 26 Oct 2026 19:49:01 +0000 Manifest this update: Mon 26 Oct 2026 19:44:01 +0000 Manifest next update: Fri 30 Oct 2026 02:32:01 +0000 Files and hashes: 1: 3131332e3231332e302e302f31372d3234203d3e2034383337.roa (hash: +zAP5aFxL10/g48mE7Oa0YEfc4ycN0QP1g5VQIhlHKI=) 2: 3131382e38382e33322e302f31392d3234203d3e2034383337.roa (hash: TYx6QeiRsLOAejvNSfiVPfPCkn7kPFVKHFk57lz5XhI=) 3: 7168563389D6040E01C75892D6228B15ABD8EFB5.crl (hash: v7ExcmnwwDTy810CJIMcTPTFuNDSazaactT3dI+UfmM=) 4: 323430303a353630303a3a2f33322d3332203d3e2030.roa (hash: zGb7Zsse87+3NFzLKF7yLfU1v86czgJhpYgEwog+lFc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 02:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:0d:19:00:77:cf:47:3a:97:8a:13:d1:2a:cc:7b:5c:cd:5f:5c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7168563389D6040E01C75892D6228B15ABD8EFB5 Validity Not Before: Oct 26 19:44:01 2026 GMT Not After : Oct 30 02:32:01 2026 GMT Subject: CN=4D6BD3FEE1D65ED3147FA4BA79C45CB85860A7FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f9:63:4c:8b:d9:fd:92:2f:32:e2:71:91:ae: a9:44:39:63:b7:89:8d:b8:32:fb:a5:63:21:c2:f8: f3:b3:d7:c1:34:82:ee:69:10:a9:63:0c:27:b8:8f: 48:bc:18:e9:e8:1f:4e:e6:d4:4b:f2:73:e6:34:51: 32:67:fd:7b:1a:61:ca:e0:bb:c0:0f:69:84:f6:47: 5d:16:41:dc:71:6c:d1:c8:72:ad:57:63:93:39:95: 02:8d:61:10:f6:89:7c:d6:20:f5:9a:47:ab:bf:85: 73:86:51:c8:59:ef:df:5d:11:bb:cc:33:23:77:9b: f2:3e:7d:e0:37:d5:19:9a:ce:2b:88:ca:41:1d:0e: 44:be:a1:c4:63:ee:2e:d6:4b:cb:76:4a:27:11:ad: 8c:2b:e9:b5:3c:c6:af:03:d0:7d:f9:ff:4c:ed:19: cf:4c:b6:c9:8e:4f:19:2d:c8:41:b6:19:06:af:5a: fb:e7:40:75:65:df:ce:9c:aa:49:00:35:ff:e0:94: 3e:85:9f:5e:e3:ae:54:72:b6:1e:77:7a:c3:24:eb: d3:74:3e:73:f5:a1:a4:24:42:3f:10:cf:b7:f8:20: 50:c6:04:ca:b8:4f:1f:87:1a:c7:8f:ad:d4:96:17: f4:41:69:95:7d:f6:58:8d:a7:fc:9e:82:67:f1:b1: 4b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6B:D3:FE:E1:D6:5E:D3:14:7F:A4:BA:79:C4:5C:B8:58:60:A7:FC X509v3 Authority Key Identifier: keyid:71:68:56:33:89:D6:04:0E:01:C7:58:92:D6:22:8B:15:AB:D8:EF:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7168563389D6040E01C75892D6228B15ABD8EFB5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114728285448699927/0/7168563389D6040E01C75892D6228B15ABD8EFB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:4e:15:a3:4e:9a:af:17:2c:5f:31:96:8a:89:49:58:f7:d9: be:ef:09:de:d3:00:ae:61:4c:7e:ac:e8:67:fe:87:75:16:3b: 23:ac:20:01:29:76:5a:4b:e2:da:e4:12:47:b2:6a:a8:81:ef: 0b:ae:b8:72:99:6d:82:66:77:dc:c8:83:fe:fc:4a:4b:76:7f: 9d:51:87:62:c2:8a:bb:d1:a9:21:ec:e2:ab:c5:bf:34:6e:32: 87:09:4d:64:d1:a7:05:fc:3c:8d:c3:c4:81:de:23:45:cd:3c: 42:d2:6f:72:84:6d:91:6e:a6:74:32:14:9f:30:3b:0e:57:3a: 33:37:a5:fd:7e:63:e0:94:b1:e4:db:77:e1:ba:50:25:39:26: b3:8b:27:0c:e1:bb:50:9b:07:de:7e:3e:9e:fe:f3:1a:e6:03: f8:74:b8:f0:3a:41:99:78:5c:09:84:76:20:87:f4:0c:22:26: 41:06:69:96:59:25:47:c5:21:c7:88:c4:55:01:69:0f:fc:9c: c8:bc:a1:8f:77:ed:d5:7c:99:03:8a:4e:32:6b:1f:98:82:d3: 94:51:09:43:96:28:f5:d5:da:7f:a3:33:7b:78:9a:ec:29:7b: 43:a3:40:37:6a:ed:a6:c9:d7:26:24:c6:71:25:6b:0a:d9:51: 75:da:8c:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFQ0ZAHfPRzqXihPRKsx7XM1fXIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE2ODU2MzM4OUQ2MDQwRTAxQzc1ODkyRDYyMjhCMTVB QkQ4RUZCNTAeFw0yNjEwMjYxOTQ0MDFaFw0yNjEwMzAwMjMyMDFaMDMxMTAvBgNV BAMTKDRENkJEM0ZFRTFENjVFRDMxNDdGQTRCQTc5QzQ1Q0I4NTg2MEE3RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4+WNMi9n9ki8y4nGRrqlEOWO3 iY24MvulYyHC+POz18E0gu5pEKljDCe4j0i8GOnoH07m1Evyc+Y0UTJn/XsaYcrg u8APaYT2R10WQdxxbNHIcq1XY5M5lQKNYRD2iXzWIPWaR6u/hXOGUchZ799dEbvM MyN3m/I+feA31RmaziuIykEdDkS+ocRj7i7WS8t2SicRrYwr6bU8xq8D0H35/0zt Gc9MtsmOTxktyEG2GQavWvvnQHVl386cqkkANf/glD6Fn17jrlRyth53esMk69N0 PnP1oaQkQj8Qz7f4IFDGBMq4Tx+HGsePrdSWF/RBaZV99liNp/yegmfxsUvrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTWvT/uHWXtMUf6S6ecRcuFhgp/wwHwYDVR0j BBgwFoAUcWhWM4nWBA4Bx1iS1iKLFavY77UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDcyODI4NTQ0ODY5OTkyNy8wLzcxNjg1NjMzODlENjA0MEUwMUM3NTg5MkQ2MjI4 QjE1QUJEOEVGQjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE2ODU2MzM4OUQ2MDQwRTAxQzc1ODkyRDYyMjhCMTVBQkQ4RUZCNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ3MjgyODU0NDg2OTk5MjcvMC83MTY4NTYzMzg5RDYw NDBFMDFDNzU4OTJENjIyOEIxNUFCRDhFRkI1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzE4Vo06arxcs XzGWiolJWPfZvu8J3tMArmFMfqzoZ/6HdRY7I6wgASl2Wkvi2uQSR7JqqIHvC664 cpltgmZ33MiD/vxKS3Z/nVGHYsKKu9GpIeziq8W/NG4yhwlNZNGnBfw8jcPEgd4j Rc08QtJvcoRtkW6mdDIUnzA7Dlc6Mzel/X5j4JSx5Nt34bpQJTkms4snDOG7UJsH 3n4+nv7zGuYD+HS48DpBmXhcCYR2IIf0DCImQQZpllklR8Uhx4jEVQFpD/ycyLyh j3ft1XyZA4pOMmsfmILTlFEJQ5Yo9dXaf6Mze3ia7Cl7Q6NAN2rtpsnXJiTGcSVr CtlRddqMpg== -----END CERTIFICATE-----Generated at Wed Oct 28 19:57:32 2026 by rpki-client