$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft File: D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft (raw, json) Hash identifier: FbXJERol35mqZRjOjxb/r8WZqnQyaXKRz+4tjHadhlM= Subject key identifier: D2:F2:20:78:45:53:28:BD:5F:EE:49:AA:5E:71:D3:7B:D3:31:98:B5 Authority key identifier: D4:72:FA:CE:17:8D:8D:5E:B1:CD:9E:C9:6B:16:35:49:4E:3C:AB:C6 Certificate issuer: /CN=D472FACE178D8D5EB1CD9EC96B1635494E3CABC6 Certificate serial: 1D69F380AD0C8B114CFE22231E4AA3A28E6C0E65 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft Manifest number: 6C Signing time: Tue 13 Oct 2026 09:57:55 +0000 Manifest this update: Tue 13 Oct 2026 09:52:55 +0000 Manifest next update: Fri 16 Oct 2026 18:13:55 +0000 Files and hashes: 1: 3130332e3138312e3233342e302f32342d3234203d3e20313436383232.roa (hash: QK9k+iBnpWkrV2/3ZU9si10LOiRiqqoBfz0NDNoWe6I=) 2: D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.crl (hash: riCDvOE/8Yfu3TAR5Qhw8qEEgYPkdpJ03w7jUiPDx5E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.crl rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:69:f3:80:ad:0c:8b:11:4c:fe:22:23:1e:4a:a3:a2:8e:6c:0e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D472FACE178D8D5EB1CD9EC96B1635494E3CABC6 Validity Not Before: Oct 13 09:52:55 2026 GMT Not After : Oct 16 18:13:55 2026 GMT Subject: CN=D2F22078455328BD5FEE49AA5E71D37BD33198B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:6a:1e:58:57:b4:a8:48:15:96:a8:f9:19: 45:5f:1c:b5:26:81:31:fe:18:c7:f9:28:12:71:f6: de:1e:e0:00:29:78:7c:ac:36:76:81:7f:1b:09:75: 2b:c5:6e:2a:f9:b7:97:d3:56:9e:ef:2f:38:59:91: 00:ec:99:55:e8:1d:44:e5:c3:59:00:1b:d0:bf:93: 9e:43:f9:e7:cc:d3:3b:fa:c7:86:2c:20:bf:92:7e: a4:fc:74:dc:6b:da:33:93:a7:96:6c:63:c5:02:6e: ec:32:0a:44:28:a3:2c:7f:33:62:b3:10:2a:5b:bc: ed:6d:7d:8f:d4:cd:8f:d2:51:2a:d2:32:26:8a:9d: 05:ca:b2:93:b8:94:95:32:4c:6e:f7:f7:d4:a0:b2: 67:2d:4c:08:22:8c:70:c6:5c:83:4e:db:13:77:be: 24:fe:82:4f:af:75:a0:91:74:7a:77:8c:f0:7d:ec: eb:f8:32:c3:0f:c2:99:ee:dc:2d:7a:6a:f1:62:9c: b5:e9:3e:7b:03:20:f1:77:ac:bc:c2:f9:78:29:fe: 41:a7:de:21:ab:e9:f5:60:7d:f2:39:d6:99:58:9b: 29:cf:ba:4e:0e:92:65:d5:6e:94:b0:06:6a:d6:a7: 26:bc:48:43:aa:c4:ce:9a:34:f6:5b:4e:9e:57:8b: e6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F2:20:78:45:53:28:BD:5F:EE:49:AA:5E:71:D3:7B:D3:31:98:B5 X509v3 Authority Key Identifier: keyid:D4:72:FA:CE:17:8D:8D:5E:B1:CD:9E:C9:6B:16:35:49:4E:3C:AB:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122502309020958757/0/D472FACE178D8D5EB1CD9EC96B1635494E3CABC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:cc:72:72:71:fc:ea:63:13:35:11:e0:61:b8:40:7a:ac:63: 8f:9b:ae:44:e0:36:13:5a:b1:fe:42:ce:9d:28:e0:d3:ef:a1: 35:31:a7:4b:61:f1:d5:b4:8d:1b:15:2f:1b:4b:fe:f1:1d:3f: e4:e6:8a:35:56:84:1a:6c:69:bb:c5:05:9a:98:99:8a:43:71: be:06:81:6b:67:17:08:a8:03:8d:c5:bc:15:f9:da:72:7b:ed: 79:77:26:6e:55:54:77:f3:90:1e:34:9b:1c:a7:31:d2:ca:1d: a0:ee:93:3c:ac:a4:34:89:5a:72:6f:67:0c:cf:89:44:e1:87: 37:e6:21:d8:6b:4c:dc:6a:f6:3b:62:8e:ad:47:56:7d:c6:d2: 23:31:d0:8d:26:9c:71:71:cf:f0:18:c3:45:16:df:cb:47:47: 47:be:0d:ab:a4:5f:b3:26:68:e8:d9:08:a4:85:35:9f:fd:52: 7f:41:ca:ff:23:96:c7:54:8a:08:e9:5c:fc:2b:6f:ad:7e:13: 60:12:d6:9c:2d:8b:77:a0:df:32:33:2e:54:5f:d3:28:f7:99: 41:6f:b5:65:a6:83:a4:d4:38:97:ea:5d:d4:bf:e7:e6:47:ec: 27:24:4c:25:bc:a5:bb:16:0d:48:7a:04:44:0c:e5:bb:92:8d: 35:28:76:54 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHWnzgK0MixFM/iIjHkqjoo5sDmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ3MkZBQ0UxNzhEOEQ1RUIxQ0Q5RUM5NkIxNjM1NDk0 RTNDQUJDNjAeFw0yNjEwMTMwOTUyNTVaFw0yNjEwMTYxODEzNTVaMDMxMTAvBgNV BAMTKEQyRjIyMDc4NDU1MzI4QkQ1RkVFNDlBQTVFNzFEMzdCRDMzMTk4QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Z2oeWFe0qEgVlqj5GUVfHLUm gTH+GMf5KBJx9t4e4AApeHysNnaBfxsJdSvFbir5t5fTVp7vLzhZkQDsmVXoHUTl w1kAG9C/k55D+efM0zv6x4YsIL+SfqT8dNxr2jOTp5ZsY8UCbuwyCkQooyx/M2Kz ECpbvO1tfY/UzY/SUSrSMiaKnQXKspO4lJUyTG7399SgsmctTAgijHDGXINO2xN3 viT+gk+vdaCRdHp3jPB97Ov4MsMPwpnu3C16avFinLXpPnsDIPF3rLzC+Xgp/kGn 3iGr6fVgffI51plYmynPuk4OkmXVbpSwBmrWpya8SEOqxM6aNPZbTp5Xi+ahAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0vIgeEVTKL1f7kmqXnHTe9MxmLUwHwYDVR0j BBgwFoAU1HL6zheNjV6xzZ7JaxY1SU48q8YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjUwMjMwOTAyMDk1ODc1Ny8wL0Q0NzJGQUNFMTc4RDhENUVCMUNEOUVDOTZCMTYz NTQ5NEUzQ0FCQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDQ3MkZBQ0UxNzhEOEQ1RUIxQ0Q5RUM5NkIxNjM1NDk0RTNDQUJDNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjI1MDIzMDkwMjA5NTg3NTcvMC9ENDcyRkFDRTE3OEQ4 RDVFQjFDRDlFQzk2QjE2MzU0OTRFM0NBQkM2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosxycnH86mMT NRHgYbhAeqxjj5uuROA2E1qx/kLOnSjg0++hNTGnS2Hx1bSNGxUvG0v+8R0/5OaK NVaEGmxpu8UFmpiZikNxvgaBa2cXCKgDjcW8FfnacnvteXcmblVUd/OQHjSbHKcx 0sodoO6TPKykNIlacm9nDM+JROGHN+Yh2GtM3Gr2O2KOrUdWfcbSIzHQjSaccXHP 8BjDRRbfy0dHR74Nq6RfsyZo6NkIpIU1n/1Sf0HK/yOWx1SKCOlc/CtvrX4TYBLW nC2Ld6DfMjMuVF/TKPeZQW+1ZaaDpNQ4l+pd1L/n5kfsJyRMJbyluxYNSHoERAzl u5KNNSh2VA== -----END CERTIFICATE-----Generated at Tue Oct 13 18:48:39 2026 by rpki-client