$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft File: 12BD80FB666E9FF3B78C5257CB80604CE466A620.mft (raw, json) Hash identifier: yGJ5DSw+ugudTOsgJMDuIEu11qx21N+MYjZp9BRfdNk= Subject key identifier: 2E:31:5D:05:57:E8:76:63:5D:7E:9E:56:AF:EA:52:E1:C8:51:A9:26 Authority key identifier: 12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20 Certificate issuer: /CN=12BD80FB666E9FF3B78C5257CB80604CE466A620 Certificate serial: 0BD482C5FB61CCBAFCF5E12B6345E7E811F84436 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft Manifest number: 67 Signing time: Thu 15 Oct 2026 20:06:56 +0000 Manifest this update: Thu 15 Oct 2026 20:01:56 +0000 Manifest next update: Mon 19 Oct 2026 02:05:56 +0000 Files and hashes: 1: 323430323a366538303a3a2f33322d3332203d3e20313339313030.roa (hash: vwm0wFYdrshqVC19O/olyhuC+X7rA1oBdsrwCje/4V0=) 2: 12BD80FB666E9FF3B78C5257CB80604CE466A620.crl (hash: u24ovM0eILA2KfRAYv5xILF21dS03U4taUXcWtpEi+o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 02:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d4:82:c5:fb:61:cc:ba:fc:f5:e1:2b:63:45:e7:e8:11:f8:44:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12BD80FB666E9FF3B78C5257CB80604CE466A620 Validity Not Before: Oct 15 20:01:56 2026 GMT Not After : Oct 19 02:05:56 2026 GMT Subject: CN=2E315D0557E876635D7E9E56AFEA52E1C851A926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:ce:d9:91:47:f8:aa:52:2e:9a:57:70:e6: e8:52:f1:33:b5:33:2f:71:36:3d:d8:48:c5:59:13: d5:08:fd:8a:8f:77:6e:00:4f:c6:43:4d:fe:9d:ff: 4f:1a:2c:19:75:a4:45:aa:8c:6f:b0:32:39:5f:bf: 05:b0:f1:6d:d5:f0:c1:6c:75:7a:2b:75:a6:42:2a: 81:aa:5d:fd:4f:09:be:bb:65:1d:5c:73:39:3a:b4: 6a:30:9c:a8:20:06:c3:89:d7:e2:21:13:56:b5:16: d8:1a:87:12:29:50:ae:2f:d4:97:b7:62:a9:d5:83: 7b:e8:b6:24:e2:30:97:a3:f3:ad:ed:67:9c:36:91: d5:3b:2b:95:f7:09:da:8e:d9:bd:73:3e:11:07:e6: 6c:db:83:23:e8:e8:e5:8c:8b:b3:7c:ce:80:12:f7: 6e:bf:ef:81:75:be:3d:a0:32:6b:07:31:f9:d1:11: c5:df:d9:78:8a:85:c2:64:28:2f:ba:04:ab:26:0a: 87:ce:44:da:9c:46:75:b0:39:9f:13:39:e7:06:66: 2d:dd:9d:70:72:18:57:2c:c9:a0:95:7b:64:02:fb: 3a:26:6f:41:15:43:0b:41:0b:e0:e2:ce:96:f8:18: 57:d7:66:0a:f5:d8:18:bb:18:7e:7f:0a:41:00:7d: 24:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:31:5D:05:57:E8:76:63:5D:7E:9E:56:AF:EA:52:E1:C8:51:A9:26 X509v3 Authority Key Identifier: keyid:12:BD:80:FB:66:6E:9F:F3:B7:8C:52:57:CB:80:60:4C:E4:66:A6:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/12BD80FB666E9FF3B78C5257CB80604CE466A620.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123911365988253733/0/12BD80FB666E9FF3B78C5257CB80604CE466A620.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6e:75:97:6e:a4:7b:f4:a0:0f:f3:a6:a8:86:3d:d5:ce:90: f7:20:10:7a:0b:88:d7:08:e3:73:1f:da:04:59:93:fc:3f:3b: 69:fc:83:5a:75:c9:9c:ad:80:2f:9c:66:b8:89:bf:08:95:46: 7c:af:89:c6:6a:b2:6f:53:33:fd:5e:f7:2d:ea:3d:69:fe:cb: 87:2c:22:aa:69:7b:a7:47:3b:b8:bb:b9:f6:bc:9f:b3:a9:1c: af:47:3a:0c:93:8c:b8:f9:83:a4:22:f0:08:08:64:6e:2e:3c: 95:06:fc:3c:40:0d:14:5a:ca:db:7f:f2:6b:2d:01:42:7e:6d: a6:4c:a9:5c:a5:20:37:c4:76:d4:7f:3b:e1:9e:9d:09:a7:3f: 8f:fc:40:76:3e:cc:38:ea:cc:25:a9:ea:e3:52:9b:68:10:7c: b3:06:8e:1a:fc:13:e2:e7:20:b8:91:81:db:d4:84:da:bc:f5: 70:ca:b1:5b:80:c8:5b:9a:f8:c7:95:7a:0d:7e:d7:d2:40:54: 75:c9:aa:de:9f:1f:24:09:98:f5:96:7f:32:5a:d4:a6:ee:a7: 36:2a:a5:18:b8:83:cf:0e:b7:05:3d:1b:81:11:ed:9a:4b:53: ab:35:06:b1:da:4d:bd:60:df:95:8d:18:9e:5a:f2:08:4e:98: de:09:04:a9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUC9SCxfthzLr89eErY0Xn6BH4RDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTJCRDgwRkI2NjZFOUZGM0I3OEM1MjU3Q0I4MDYwNENF NDY2QTYyMDAeFw0yNjEwMTUyMDAxNTZaFw0yNjEwMTkwMjA1NTZaMDMxMTAvBgNV BAMTKDJFMzE1RDA1NTdFODc2NjM1RDdFOUU1NkFGRUE1MkUxQzg1MUE5MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJPM7ZkUf4qlIumldw5uhS8TO1 My9xNj3YSMVZE9UI/YqPd24AT8ZDTf6d/08aLBl1pEWqjG+wMjlfvwWw8W3V8MFs dXordaZCKoGqXf1PCb67ZR1cczk6tGownKggBsOJ1+IhE1a1FtgahxIpUK4v1Je3 YqnVg3votiTiMJej863tZ5w2kdU7K5X3CdqO2b1zPhEH5mzbgyPo6OWMi7N8zoAS 926/74F1vj2gMmsHMfnREcXf2XiKhcJkKC+6BKsmCofORNqcRnWwOZ8TOecGZi3d nXByGFcsyaCVe2QC+zomb0EVQwtBC+Dizpb4GFfXZgr12Bi7GH5/CkEAfSSRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULjFdBVfodmNdfp5Wr+pS4chRqSYwHwYDVR0j BBgwFoAUEr2A+2Zun/O3jFJXy4BgTORmpiAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzkxMTM2NTk4ODI1MzczMy8wLzEyQkQ4MEZCNjY2RTlGRjNCNzhDNTI1N0NCODA2 MDRDRTQ2NkE2MjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTJCRDgwRkI2NjZFOUZGM0I3OEM1MjU3Q0I4MDYwNENFNDY2QTYyMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM5MTEzNjU5ODgyNTM3MzMvMC8xMkJEODBGQjY2NkU5 RkYzQjc4QzUyNTdDQjgwNjA0Q0U0NjZBNjIwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjm51l26ke/Sg D/OmqIY91c6Q9yAQeguI1wjjcx/aBFmT/D87afyDWnXJnK2AL5xmuIm/CJVGfK+J xmqyb1Mz/V73Leo9af7Lhywiqml7p0c7uLu59ryfs6kcr0c6DJOMuPmDpCLwCAhk bi48lQb8PEANFFrK23/yay0BQn5tpkypXKUgN8R21H874Z6dCac/j/xAdj7MOOrM Janq41KbaBB8swaOGvwT4ucguJGB29SE2rz1cMqxW4DIW5r4x5V6DX7X0kBUdcmq 3p8fJAmY9ZZ/MlrUpu6nNiqlGLiDzw63BT0bgRHtmktTqzUGsdpNvWDflY0Ynlry CE6Y3gkEqQ== -----END CERTIFICATE-----Generated at Sat Oct 17 15:06:32 2026 by rpki-client