$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft File: 819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft (raw, json) Hash identifier: ffCOA2i7825lOdePNxfp4SDqi/y6YQ4eH281nP8TWSw= Subject key identifier: 98:3D:EB:9E:E9:AE:73:3F:C4:07:7F:11:44:9B:73:9D:84:AB:21:BE Authority key identifier: 81:90:43:52:0D:3A:1F:4E:5E:DC:D8:C0:57:62:42:5A:8A:01:F3:D9 Certificate issuer: /CN=819043520D3A1F4E5EDCD8C05762425A8A01F3D9 Certificate serial: 0C74CA77FE46213DA59A6AF2075E6D6529F32DAE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft Manifest number: 69 Signing time: Tue 13 Oct 2026 05:07:44 +0000 Manifest this update: Tue 13 Oct 2026 05:02:44 +0000 Manifest next update: Fri 16 Oct 2026 12:10:44 +0000 Files and hashes: 1: 819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl (hash: aCfgOkG8Kvrnf3umr7fiJ9AjIdy3pByA4L5xhejQQ2Y=) 2: 36302e3233322e302e302f31372d3137203d3e203234313433.roa (hash: cXD/OfZhxV2I85LOF/CmMWrUatSOUukkmst2PGONvFo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 12:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:74:ca:77:fe:46:21:3d:a5:9a:6a:f2:07:5e:6d:65:29:f3:2d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819043520D3A1F4E5EDCD8C05762425A8A01F3D9 Validity Not Before: Oct 13 05:02:44 2026 GMT Not After : Oct 16 12:10:44 2026 GMT Subject: CN=983DEB9EE9AE733FC4077F11449B739D84AB21BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f4:fe:0f:1b:66:ec:d2:bb:25:06:6c:e1:b0: 6d:b3:59:7e:9c:fa:65:95:40:68:4c:79:cd:94:7a: ea:77:c7:02:20:96:e1:76:65:9e:38:fa:ba:b0:fc: 8e:24:ee:6d:9d:1b:18:59:15:f6:be:3b:c2:37:1d: b6:34:24:c1:8a:33:86:f5:85:2a:d5:c4:b9:ce:ea: 9f:9d:a0:96:ad:b7:b5:88:57:20:e9:d3:49:be:4f: 25:9a:94:cd:28:17:5d:3a:9a:34:5d:96:ab:1f:af: ad:be:53:65:3b:8e:41:38:e7:1c:ad:b9:dc:be:92: 26:18:81:16:a4:16:79:aa:33:aa:a6:c5:c2:e9:b8: 3e:2c:36:0a:81:79:34:25:3c:dd:66:5c:14:6a:52: e8:78:e3:a1:36:42:66:09:fe:94:f3:45:57:8b:a7: 49:53:bf:59:41:ff:cb:8d:c4:d8:00:55:69:cf:00: 56:65:ee:49:21:83:05:44:eb:3e:52:e9:43:3f:20: ae:93:a0:19:c5:8e:85:af:58:b4:7e:a1:55:e3:58: 24:bb:b5:58:26:3c:ad:3d:24:61:6a:2d:60:69:9a: 32:1e:15:e8:70:d9:da:a7:3c:ab:cd:fd:0e:9d:ac: 98:52:43:6f:23:36:91:04:33:8a:71:fc:04:29:fc: f1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3D:EB:9E:E9:AE:73:3F:C4:07:7F:11:44:9B:73:9D:84:AB:21:BE X509v3 Authority Key Identifier: keyid:81:90:43:52:0D:3A:1F:4E:5E:DC:D8:C0:57:62:42:5A:8A:01:F3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:9b:f4:51:5a:28:f2:dd:28:4f:ee:a9:33:56:c9:3a:84:c4: 40:af:9d:d1:61:f0:dd:cf:a4:84:c5:52:9c:a4:15:3f:a0:19: 06:78:00:06:d4:39:67:ad:a0:20:21:ce:36:1d:3a:11:c2:8a: 8e:d4:f1:f8:5e:b5:ce:69:82:b6:e5:04:f6:73:b0:6a:c7:fd: 25:be:41:3d:fa:35:4b:e2:09:2d:07:73:f9:f6:07:73:7f:1d: e2:02:bf:dd:5b:22:86:e5:f3:71:b1:60:18:aa:9f:14:89:b3: 70:12:30:c7:3c:1e:22:8d:8d:31:b9:d5:08:07:dc:9c:40:19: 2e:56:2b:16:60:bc:9e:3d:5b:a5:12:9d:28:33:c3:a9:62:a8: 6f:63:72:4f:00:6e:44:80:8d:b5:4c:49:60:b6:49:39:11:f8: c0:9c:89:55:e3:cf:f1:4d:bb:7f:87:e9:de:26:95:2f:22:2a: 44:38:78:c4:6a:2b:cd:d4:37:63:d8:6e:df:6f:52:29:3c:cb: a3:e3:34:61:74:12:95:a1:5d:2a:11:97:65:32:52:a5:e3:d1: 24:ca:c8:8b:f5:c0:f7:c3:03:7a:1d:c8:e4:b5:fe:07:3d:33: 66:0a:57:1e:63:46:0f:64:84:12:b9:81:3c:f0:b2:b9:e7:07: e0:b8:7c:a4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDHTKd/5GIT2lmmryB15tZSnzLa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5MDQzNTIwRDNBMUY0RTVFRENEOEMwNTc2MjQyNUE4 QTAxRjNEOTAeFw0yNjEwMTMwNTAyNDRaFw0yNjEwMTYxMjEwNDRaMDMxMTAvBgNV BAMTKDk4M0RFQjlFRTlBRTczM0ZDNDA3N0YxMTQ0OUI3MzlEODRBQjIxQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCP9P4PG2bs0rslBmzhsG2zWX6c +mWVQGhMec2Ueup3xwIgluF2ZZ44+rqw/I4k7m2dGxhZFfa+O8I3HbY0JMGKM4b1 hSrVxLnO6p+doJatt7WIVyDp00m+TyWalM0oF106mjRdlqsfr62+U2U7jkE45xyt udy+kiYYgRakFnmqM6qmxcLpuD4sNgqBeTQlPN1mXBRqUuh446E2QmYJ/pTzRVeL p0lTv1lB/8uNxNgAVWnPAFZl7kkhgwVE6z5S6UM/IK6ToBnFjoWvWLR+oVXjWCS7 tVgmPK09JGFqLWBpmjIeFehw2dqnPKvN/Q6drJhSQ28jNpEEM4px/AQp/PFzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmD3rnumucz/EB38RRJtznYSrIb4wHwYDVR0j BBgwFoAUgZBDUg06H05e3NjAV2JCWooB89kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy NDE0MDc2ODcwMTcxMDM3My8wLzgxOTA0MzUyMEQzQTFGNEU1RURDRDhDMDU3NjI0 MjVBOEEwMUYzRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODE5MDQzNTIwRDNBMUY0RTVFRENEOEMwNTc2MjQyNUE4QTAxRjNEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjQxNDA3Njg3MDE3MTAzNzMvMC84MTkwNDM1MjBEM0Ex RjRFNUVEQ0Q4QzA1NzYyNDI1QThBMDFGM0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpv0UVoo8t0o T+6pM1bJOoTEQK+d0WHw3c+khMVSnKQVP6AZBngABtQ5Z62gICHONh06EcKKjtTx +F61zmmCtuUE9nOwasf9Jb5BPfo1S+IJLQdz+fYHc38d4gK/3VsihuXzcbFgGKqf FImzcBIwxzweIo2NMbnVCAfcnEAZLlYrFmC8nj1bpRKdKDPDqWKob2NyTwBuRICN tUxJYLZJORH4wJyJVePP8U27f4fp3iaVLyIqRDh4xGorzdQ3Y9hu329SKTzLo+M0 YXQSlaFdKhGXZTJSpePRJMrIi/XA98MDeh3I5LX+Bz0zZgpXHmNGD2SEErmBPPCy uecH4Lh8pA== -----END CERTIFICATE-----Generated at Wed Oct 14 11:51:01 2026 by rpki-client