$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft File: 1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft (raw, json) Hash identifier: hc2B/vXdM+w/8ai+MBXfb4iUsa459BpimAp9zCXQR8A= Subject key identifier: AF:3F:C5:10:B0:69:DC:19:88:31:D1:3A:5F:48:A9:76:7B:18:B6:5A Authority key identifier: 18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8 Certificate issuer: /CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8 Certificate serial: 3118CE2278DA774D49E44CB9F64031B3747A6908 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft Manifest number: 7A Signing time: Fri 16 Oct 2026 18:48:01 +0000 Manifest this update: Fri 16 Oct 2026 18:43:01 +0000 Manifest next update: Tue 20 Oct 2026 06:38:01 +0000 Files and hashes: 1: 3230322e33382e3132382e302f32332d3233203d3e2037343937.roa (hash: 3KN0MikBInjR2AE42lOEjDcp6hhwhQEE2fCSsY3rvnk=) 2: 3230322e3132322e33322e302f32312d3231203d3e2037343937.roa (hash: mS1TYURsC1rJOd4t7iMX5ACFJtFx79PgFQvXC5HulAU=) 3: 323430313a646530303a3a2f33322d3332203d3e2037343937.roa (hash: rj+xhwjSRL8r9RnI2hIan5czVYkPPTC00QgifmSjB34=) 4: 1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl (hash: 5QGpcbN9EYn2UhBvq/f8z6WdgrrM0ltvTdRaNIbIvY0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:18:ce:22:78:da:77:4d:49:e4:4c:b9:f6:40:31:b3:74:7a:69:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8 Validity Not Before: Oct 16 18:43:01 2026 GMT Not After : Oct 20 06:38:01 2026 GMT Subject: CN=AF3FC510B069DC198831D13A5F48A9767B18B65A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fd:a6:1a:e3:78:ad:5a:b7:d6:43:16:71:13: 80:1e:5f:d4:99:5b:fc:4a:63:90:48:7f:94:22:54: 15:2b:86:0d:ca:a3:c2:ef:1f:c8:7b:7b:88:b9:fa: be:cd:5d:c1:fb:e5:1e:d7:c3:60:9f:0b:5f:ed:15: 5f:8c:80:2a:86:a1:e0:4b:2d:2c:f4:a6:0b:62:c5: 9b:56:ed:94:89:3c:f0:cc:ce:ac:7b:92:4a:a4:8d: 4c:fe:4d:03:8c:fb:61:d9:9c:a3:72:26:3a:ed:53: 92:a3:0e:e3:52:6f:ac:bf:4d:40:3b:c7:a6:e6:c9: 5f:3e:4b:1f:bb:29:6f:26:1c:b1:10:86:7c:84:32: c0:22:dd:01:15:de:cd:c9:83:db:5e:23:61:e5:8b: 4a:c2:f8:30:40:7b:fd:76:a4:6b:94:48:77:24:39: 2b:00:6d:6e:9e:1e:df:cb:0b:c4:b0:73:d0:ea:ea: 0b:dc:35:42:db:5b:46:0a:20:ca:3b:bb:c5:21:88: d8:50:f7:8d:0a:0f:93:00:5e:af:44:5d:83:66:ea: 16:87:72:45:0a:0a:2c:df:02:ca:7d:cf:7b:98:8c: 5d:0d:99:42:1c:05:0e:4c:f9:6a:9d:8b:29:1b:08: d4:ac:ff:6f:68:01:7d:c5:ca:ff:1b:1a:02:39:53: b9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3F:C5:10:B0:69:DC:19:88:31:D1:3A:5F:48:A9:76:7B:18:B6:5A X509v3 Authority Key Identifier: keyid:18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:34:3d:6e:a2:4a:d2:2f:f8:df:e4:8b:7d:f0:93:39:1b:13: f0:8d:bf:af:7a:fb:aa:7e:b0:37:93:e2:63:f6:2a:39:5e:58: 81:7e:d4:12:52:32:91:e9:86:e1:11:9a:33:07:73:9a:1c:28: e8:b0:d9:01:17:93:f5:ca:dd:0d:f8:7a:0c:7c:44:c0:e6:da: e7:fa:1e:91:4b:83:f6:24:91:09:62:6b:0f:57:a6:b8:d6:a3: ea:8e:3d:2f:32:23:0c:89:c6:db:4a:7e:c5:e7:25:db:85:83: 84:85:ad:8d:90:a6:ab:99:08:a4:5c:30:fe:dc:ad:71:f7:50: c8:2e:29:7f:41:f1:c9:b8:b9:b4:f5:e4:0e:84:73:66:2a:27: 88:cf:d2:e6:9d:5a:54:29:cd:d0:7d:0d:65:51:8b:22:5d:ac: 39:ef:ee:74:a0:43:7e:4a:27:65:28:2b:b9:fe:58:4c:3f:8c: ba:d6:6d:8b:f1:09:d8:cc:fe:60:0d:1e:70:fd:58:9b:69:bf: 14:c7:5e:7e:35:8f:85:36:d2:0a:4a:c1:d7:a2:62:83:87:65: b6:bf:35:17:ed:0d:9e:dd:04:47:55:f1:1b:8d:04:2a:30:b5: 43:38:cd:51:9d:7c:e7:be:15:f1:24:d5:8f:a2:de:05:9f:27: 10:87:b3:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMRjOInjad01J5Ey59kAxs3R6aQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg2NjkzM0IzNDI3RDlCRUZFNTdFM0YyMEE3MDQ5QkQx RDU0RTdEODAeFw0yNjEwMTYxODQzMDFaFw0yNjEwMjAwNjM4MDFaMDMxMTAvBgNV BAMTKEFGM0ZDNTEwQjA2OURDMTk4ODMxRDEzQTVGNDhBOTc2N0IxOEI2NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe/aYa43itWrfWQxZxE4AeX9SZ W/xKY5BIf5QiVBUrhg3Ko8LvH8h7e4i5+r7NXcH75R7Xw2CfC1/tFV+MgCqGoeBL LSz0pgtixZtW7ZSJPPDMzqx7kkqkjUz+TQOM+2HZnKNyJjrtU5KjDuNSb6y/TUA7 x6bmyV8+Sx+7KW8mHLEQhnyEMsAi3QEV3s3Jg9teI2Hli0rC+DBAe/12pGuUSHck OSsAbW6eHt/LC8Swc9Dq6gvcNULbW0YKIMo7u8UhiNhQ940KD5MAXq9EXYNm6haH ckUKCizfAsp9z3uYjF0NmUIcBQ5M+WqdiykbCNSs/29oAX3Fyv8bGgI5U7mnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrz/FELBp3BmIMdE6X0ipdnsYtlowHwYDVR0j BBgwFoAUGGaTOzQn2b7+V+PyCnBJvR1U59gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx OTE1MjY4NDU5MTQ4MDg2My8wLzE4NjY5MzNCMzQyN0Q5QkVGRTU3RTNGMjBBNzA0 OUJEMUQ1NEU3RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg2NjkzM0IzNDI3RDlCRUZFNTdFM0YyMEE3MDQ5QkQxRDU0RTdEOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTkxNTI2ODQ1OTE0ODA4NjMvMC8xODY2OTMzQjM0MjdE OUJFRkU1N0UzRjIwQTcwNDlCRDFENTRFN0Q4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjQ9bqJK0i/4 3+SLffCTORsT8I2/r3r7qn6wN5PiY/YqOV5YgX7UElIykemG4RGaMwdzmhwo6LDZ AReT9crdDfh6DHxEwOba5/oekUuD9iSRCWJrD1emuNaj6o49LzIjDInG20p+xecl 24WDhIWtjZCmq5kIpFww/tytcfdQyC4pf0Hxybi5tPXkDoRzZioniM/S5p1aVCnN 0H0NZVGLIl2sOe/udKBDfkonZSgruf5YTD+MutZti/EJ2Mz+YA0ecP1Ym2m/FMde fjWPhTbSCkrB16Jig4dltr81F+0Nnt0ER1XxG40EKjC1QzjNUZ18574V8STVj6Le BZ8nEIezxA== -----END CERTIFICATE-----Generated at Sun Oct 18 09:21:26 2026 by rpki-client