$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft File: 91D3B189C67F0A1084A2B93996118237CB692F60.mft (raw, json) Hash identifier: dzSVSES843VhONpPweWdtsEZlz91ItyTS+oCOfmZCnA= Subject key identifier: 58:0D:05:61:95:EF:E6:CC:73:EE:CF:00:6D:52:AF:47:9B:B8:BB:B1 Authority key identifier: 91:D3:B1:89:C6:7F:0A:10:84:A2:B9:39:96:11:82:37:CB:69:2F:60 Certificate issuer: /CN=91D3B189C67F0A1084A2B93996118237CB692F60 Certificate serial: 39087A9B077A0542D53540E8B012237F1060D113 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft Manifest number: 5A Signing time: Mon 12 Oct 2026 09:26:50 +0000 Manifest this update: Mon 12 Oct 2026 09:21:50 +0000 Manifest next update: Thu 15 Oct 2026 11:17:50 +0000 Files and hashes: 1: 91D3B189C67F0A1084A2B93996118237CB692F60.crl (hash: sCM3Ug7bpKVCOd90MPNa8Ht8jeVyoyAI5dheK9aIMFY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.crl rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:08:7a:9b:07:7a:05:42:d5:35:40:e8:b0:12:23:7f:10:60:d1:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91D3B189C67F0A1084A2B93996118237CB692F60 Validity Not Before: Oct 12 09:21:50 2026 GMT Not After : Oct 15 11:17:50 2026 GMT Subject: CN=580D056195EFE6CC73EECF006D52AF479BB8BBB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d6:71:85:42:15:0c:fc:20:b6:3e:de:ec:f0: 33:e5:a5:01:3d:d3:4a:74:7e:ba:fa:cc:a6:39:d2: 84:55:11:7e:b3:bd:e2:53:99:84:d0:02:39:34:87: d2:9c:b3:2a:ee:84:31:b6:0c:d9:58:50:87:bf:b4: 48:27:16:0d:6f:e6:1b:0c:e7:5c:8d:e3:66:41:94: 1b:52:1b:33:bf:0d:36:b6:6b:7d:31:e1:79:9f:73: 88:a6:6f:4e:db:24:ea:1d:e6:e4:a2:df:03:4e:fc: 38:da:02:99:11:0c:95:de:c8:d8:e6:fd:0d:2c:b7: a9:91:52:59:3c:a2:cc:08:b5:78:b8:ea:e9:ae:1c: f5:de:83:96:bc:2e:2d:b3:ac:27:da:fd:bb:1e:7f: 4f:a9:bc:a1:b2:54:c5:b6:96:63:00:ed:ba:1c:54: 40:9b:d9:90:bc:85:17:29:51:db:29:74:05:5b:11: 7f:5a:61:64:97:39:45:95:48:3a:f3:f0:78:6e:58: 19:85:c0:b3:5f:3c:bf:ae:6f:26:bb:aa:dd:64:05: 33:4d:f0:93:4a:b4:f3:44:37:2c:09:6d:e0:fa:8a: 90:a1:c2:01:f9:1f:6c:30:8d:44:bd:78:12:30:ad: d7:ff:b1:c3:e2:f9:aa:78:6f:e6:68:41:13:31:26: ca:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0D:05:61:95:EF:E6:CC:73:EE:CF:00:6D:52:AF:47:9B:B8:BB:B1 X509v3 Authority Key Identifier: keyid:91:D3:B1:89:C6:7F:0A:10:84:A2:B9:39:96:11:82:37:CB:69:2F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91D3B189C67F0A1084A2B93996118237CB692F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1127045710848458789/0/91D3B189C67F0A1084A2B93996118237CB692F60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:b4:35:03:d6:0a:82:d6:3b:d9:21:5a:7e:cc:ba:05:7f:d7: 3d:83:26:0b:dc:6f:7a:79:64:b9:9b:86:d7:71:c7:23:39:01: 84:5f:b8:67:5b:ec:4a:52:f5:06:12:39:d1:03:e5:be:61:c7: a2:40:99:fc:eb:6c:90:6c:1c:57:ff:58:00:11:2b:95:a3:84: bc:a9:30:79:98:70:a3:68:31:a2:31:80:86:d5:0b:95:96:4d: 7c:ef:67:36:93:f4:d3:9d:ff:26:38:41:ae:7d:32:cb:c5:fe: 00:d6:84:1c:7d:26:06:05:a4:d9:cf:d0:71:f6:53:79:7f:2f: 39:a3:12:67:73:95:ff:cb:aa:fa:dd:d4:49:86:be:2a:c3:70: c0:30:93:48:40:7e:51:29:7e:9f:1f:a2:c4:5c:d5:49:b1:a0: 19:3e:1a:29:38:75:71:3e:d9:d3:b2:c9:75:41:5f:bf:2e:95: f9:4e:f0:f2:28:bd:5d:b5:4f:af:25:9a:f5:ba:cd:0b:7e:7e: 17:00:23:22:8e:21:85:40:4a:f7:5b:cd:30:72:dc:7a:2d:21: 88:09:21:f2:d8:80:ad:02:0b:af:86:70:00:7b:49:9d:52:2b: ae:f1:5c:8e:7f:cd:c1:77:b4:32:65:10:51:27:6a:be:48:41: 6d:ba:1f:04 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOQh6mwd6BULVNUDosBIjfxBg0RMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEM0IxODlDNjdGMEExMDg0QTJCOTM5OTYxMTgyMzdD QjY5MkY2MDAeFw0yNjEwMTIwOTIxNTBaFw0yNjEwMTUxMTE3NTBaMDMxMTAvBgNV BAMTKDU4MEQwNTYxOTVFRkU2Q0M3M0VFQ0YwMDZENTJBRjQ3OUJCOEJCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC21nGFQhUM/CC2Pt7s8DPlpQE9 00p0frr6zKY50oRVEX6zveJTmYTQAjk0h9KcsyruhDG2DNlYUIe/tEgnFg1v5hsM 51yN42ZBlBtSGzO/DTa2a30x4Xmfc4imb07bJOod5uSi3wNO/DjaApkRDJXeyNjm /Q0st6mRUlk8oswItXi46umuHPXeg5a8Li2zrCfa/bsef0+pvKGyVMW2lmMA7boc VECb2ZC8hRcpUdspdAVbEX9aYWSXOUWVSDrz8HhuWBmFwLNfPL+ubya7qt1kBTNN 8JNKtPNENywJbeD6ipChwgH5H2wwjUS9eBIwrdf/scPi+ap4b+ZoQRMxJsrbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWA0FYZXv5sxz7s8AbVKvR5u4u7EwHwYDVR0j BBgwFoAUkdOxicZ/ChCEork5lhGCN8tpL2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy NzA0NTcxMDg0ODQ1ODc4OS8wLzkxRDNCMTg5QzY3RjBBMTA4NEEyQjkzOTk2MTE4 MjM3Q0I2OTJGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFEM0IxODlDNjdGMEExMDg0QTJCOTM5OTYxMTgyMzdDQjY5MkY2MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjcwNDU3MTA4NDg0NTg3ODkvMC85MUQzQjE4OUM2N0Yw QTEwODRBMkI5Mzk5NjExODIzN0NCNjkyRjYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7Q1A9YKgtY7 2SFafsy6BX/XPYMmC9xvenlkuZuG13HHIzkBhF+4Z1vsSlL1BhI50QPlvmHHokCZ /OtskGwcV/9YABErlaOEvKkweZhwo2gxojGAhtULlZZNfO9nNpP0053/JjhBrn0y y8X+ANaEHH0mBgWk2c/QcfZTeX8vOaMSZ3OV/8uq+t3USYa+KsNwwDCTSEB+USl+ nx+ixFzVSbGgGT4aKTh1cT7Z07LJdUFfvy6V+U7w8ii9XbVPryWa9brNC35+FwAj Io4hhUBK91vNMHLcei0hiAkh8tiArQILr4ZwAHtJnVIrrvFcjn/NwXe0MmUQUSdq vkhBbbofBA== -----END CERTIFICATE-----Generated at Tue Oct 13 22:55:27 2026 by rpki-client