$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft File: AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft (raw, json) Hash identifier: LooJmuXOQgBYWoXQ/i1SlC/RxkMO1gcRM55VU/BytDQ= Subject key identifier: 7A:20:5D:3D:37:A5:28:41:F2:78:DB:DA:4E:9E:92:75:C0:0C:19:F1 Authority key identifier: AA:70:A0:EA:BC:F6:A4:8C:19:7B:68:C8:25:54:CE:3B:68:13:92:1D Certificate issuer: /CN=AA70A0EABCF6A48C197B68C82554CE3B6813921D Certificate serial: 24C9A3580F7F4277ABB2B9107FCC53E93DCF3E33 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft Manifest number: 67 Signing time: Thu 15 Oct 2026 00:15:54 +0000 Manifest this update: Thu 15 Oct 2026 00:10:54 +0000 Manifest next update: Sun 18 Oct 2026 03:42:54 +0000 Files and hashes: 1: AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl (hash: 7mpUs7FSJDo+aekp9GVCpiG3eRL0+Y720xtehp90SDs=) 2: 34352e3131352e3136342e302f32322d3232203d3e2034383337.roa (hash: 9cMTr5aVkYXb2qvIvVsGRcoKjxYWlPZfKd7XpNYBdBQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c9:a3:58:0f:7f:42:77:ab:b2:b9:10:7f:cc:53:e9:3d:cf:3e:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA70A0EABCF6A48C197B68C82554CE3B6813921D Validity Not Before: Oct 15 00:10:54 2026 GMT Not After : Oct 18 03:42:54 2026 GMT Subject: CN=7A205D3D37A52841F278DBDA4E9E9275C00C19F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:cf:a7:29:51:90:d9:d4:df:46:9d:ab:fc: 10:28:21:38:bd:cf:be:da:2f:b1:ac:fd:21:e4:ad: b1:f1:18:ba:58:68:55:18:9b:21:8e:61:73:e1:1a: 14:89:6e:5a:a2:29:01:a9:28:3c:0d:fc:b6:a0:0a: 96:b2:f0:72:48:76:1d:6f:e0:12:e7:ba:81:fe:21: 54:86:50:88:5d:55:fa:79:a3:10:8f:41:c6:3d:6b: 50:a7:9f:1d:4f:d9:83:56:7b:b0:33:7c:de:89:c4: c2:06:36:42:da:e8:4f:be:67:57:70:a1:76:c5:e3: af:8e:9a:e6:33:82:61:b2:e2:a4:98:3b:b0:04:92: aa:fc:e9:2e:e9:e6:e1:41:c6:fa:8d:83:d7:b3:ea: 60:6d:a4:e7:2c:98:01:98:c4:6f:6d:8e:5d:52:5b: 10:25:25:85:31:96:71:10:b4:7a:5f:71:19:25:cc: 32:47:0c:36:1e:93:e8:6d:f2:d3:96:1e:a9:a2:b5: 1d:56:8c:f4:dd:89:e1:66:66:f5:dd:70:79:37:fd: 93:3e:e1:1b:b1:a3:0b:f3:5f:ba:b6:5e:ee:5c:fc: f0:39:ad:fe:1e:e6:55:4e:e5:2e:c4:62:4b:52:e4: 83:87:7e:c1:52:c3:43:77:87:24:3b:f1:74:06:fb: 10:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:20:5D:3D:37:A5:28:41:F2:78:DB:DA:4E:9E:92:75:C0:0C:19:F1 X509v3 Authority Key Identifier: keyid:AA:70:A0:EA:BC:F6:A4:8C:19:7B:68:C8:25:54:CE:3B:68:13:92:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA70A0EABCF6A48C197B68C82554CE3B6813921D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123907165686333477/0/AA70A0EABCF6A48C197B68C82554CE3B6813921D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:36:29:f9:1a:b2:53:9f:a2:7c:9b:f3:8c:d2:63:64:4d:63: db:a3:5a:0b:c7:dc:04:84:74:b4:d9:f4:49:90:46:64:c3:52: af:0a:87:ef:87:37:26:df:e5:68:dd:71:47:e3:88:8a:f7:da: 42:73:8a:95:70:02:2b:8a:71:7e:e6:58:79:9f:3d:77:66:ad: 7f:cd:53:81:a2:e7:7d:f8:fd:9d:ff:d9:ee:85:8d:07:e7:7f: 65:54:bf:76:4e:6e:0e:c9:6f:1d:56:cd:b4:d0:d7:b5:df:41: 51:b5:f2:04:68:e4:ac:f9:9f:fa:2b:5f:9a:3f:44:af:54:16: 53:8b:92:40:20:9c:2a:5b:3d:e1:1d:6c:72:2f:d0:28:1f:22: a9:bf:f6:58:40:d9:bc:5e:a0:ce:93:fe:ff:73:02:fa:6b:15: 92:f3:ae:a2:29:43:bc:b3:93:09:0b:88:8d:b7:ba:a8:9c:55: d0:45:cf:c3:8d:83:b8:d4:3c:b1:ef:6f:63:bb:5e:ae:ff:4a: a5:d9:84:5a:b2:c4:cc:9d:b5:8a:83:55:47:38:01:6f:99:9f: 38:ac:4a:03:ca:2b:97:c0:32:82:81:0f:df:c7:4b:0b:ac:4f: ee:97:8e:6c:1f:7d:2b:cd:0b:3e:35:64:95:04:0c:df:99:0a: dd:3d:2f:c9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJMmjWA9/QnersrkQf8xT6T3PPjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3MEEwRUFCQ0Y2QTQ4QzE5N0I2OEM4MjU1NENFM0I2 ODEzOTIxRDAeFw0yNjEwMTUwMDEwNTRaFw0yNjEwMTgwMzQyNTRaMDMxMTAvBgNV BAMTKDdBMjA1RDNEMzdBNTI4NDFGMjc4REJEQTRFOUU5Mjc1QzAwQzE5RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Y8+nKVGQ2dTfRp2r/BAoITi9 z77aL7Gs/SHkrbHxGLpYaFUYmyGOYXPhGhSJblqiKQGpKDwN/LagCpay8HJIdh1v 4BLnuoH+IVSGUIhdVfp5oxCPQcY9a1Cnnx1P2YNWe7AzfN6JxMIGNkLa6E++Z1dw oXbF46+OmuYzgmGy4qSYO7AEkqr86S7p5uFBxvqNg9ez6mBtpOcsmAGYxG9tjl1S WxAlJYUxlnEQtHpfcRklzDJHDDYek+ht8tOWHqmitR1WjPTdieFmZvXdcHk3/ZM+ 4RuxowvzX7q2Xu5c/PA5rf4e5lVO5S7EYktS5IOHfsFSw0N3hyQ78XQG+xDNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeiBdPTelKEHyeNvaTp6SdcAMGfEwHwYDVR0j BBgwFoAUqnCg6rz2pIwZe2jIJVTOO2gTkh0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzkwNzE2NTY4NjMzMzQ3Ny8wL0FBNzBBMEVBQkNGNkE0OEMxOTdCNjhDODI1NTRD RTNCNjgxMzkyMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUE3MEEwRUFCQ0Y2QTQ4QzE5N0I2OEM4MjU1NENFM0I2ODEzOTIxRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM5MDcxNjU2ODYzMzM0NzcvMC9BQTcwQTBFQUJDRjZB NDhDMTk3QjY4QzgyNTU0Q0UzQjY4MTM5MjFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDYp+RqyU5+i fJvzjNJjZE1j26NaC8fcBIR0tNn0SZBGZMNSrwqH74c3Jt/laN1xR+OIivfaQnOK lXACK4pxfuZYeZ89d2atf81TgaLnffj9nf/Z7oWNB+d/ZVS/dk5uDslvHVbNtNDX td9BUbXyBGjkrPmf+itfmj9Er1QWU4uSQCCcKls94R1sci/QKB8iqb/2WEDZvF6g zpP+/3MC+msVkvOuoilDvLOTCQuIjbe6qJxV0EXPw42DuNQ8se9vY7terv9KpdmE WrLEzJ21ioNVRzgBb5mfOKxKA8orl8AygoEP38dLC6xP7peObB99K80LPjVklQQM 35kK3T0vyQ== -----END CERTIFICATE-----Generated at Thu Oct 15 03:30:59 2026 by rpki-client