$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.mft File: 5866E9356E16DA2DFE2BDE5D025E92E8D872B274.mft (raw, json) Hash identifier: 7ecx5i2UPPv/g+QPtQkMziqNSUZoqqQS7tfJavYV/aE= Subject key identifier: EB:89:BD:F8:F6:4D:0C:F6:62:48:9F:37:F3:27:04:DF:BF:D5:CB:6C Authority key identifier: 58:66:E9:35:6E:16:DA:2D:FE:2B:DE:5D:02:5E:92:E8:D8:72:B2:74 Certificate issuer: /CN=5866E9356E16DA2DFE2BDE5D025E92E8D872B274 Certificate serial: 7284B589CE9C91A4C090EDC5DAE6962CD461E34A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.mft Manifest number: 20 Signing time: Mon 12 Oct 2026 22:42:28 +0000 Manifest this update: Mon 12 Oct 2026 22:37:28 +0000 Manifest next update: Thu 15 Oct 2026 23:13:28 +0000 Files and hashes: 1: 5866E9356E16DA2DFE2BDE5D025E92E8D872B274.crl (hash: YqKPmYVSW24CNDC0Vf9umf4rN21HkQCgYuMpCZ9GcKU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.crl rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:84:b5:89:ce:9c:91:a4:c0:90:ed:c5:da:e6:96:2c:d4:61:e3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5866E9356E16DA2DFE2BDE5D025E92E8D872B274 Validity Not Before: Oct 12 22:37:28 2026 GMT Not After : Oct 15 23:13:28 2026 GMT Subject: CN=EB89BDF8F64D0CF662489F37F32704DFBFD5CB6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:73:9f:c5:cf:6e:17:82:37:bd:bf:6d:b2: 06:59:f3:c1:10:9e:ae:8f:02:67:8e:16:25:9a:79: 6e:17:9d:2b:5a:e0:64:18:9c:e6:0f:7c:62:c9:75: 79:b2:c4:24:a9:17:dc:ec:9a:c0:fb:63:19:0d:6f: fe:b5:ba:30:3b:3d:53:ae:a3:8f:6d:c4:46:63:9c: 0c:eb:bb:4b:6f:71:be:b5:6f:1b:2b:d9:35:e4:dc: e8:12:68:d0:5d:ec:1c:64:71:c0:23:91:03:da:01: d9:19:ad:ce:89:8b:45:d1:50:67:68:3a:c4:42:e9: 63:7d:69:d7:1d:ba:0f:99:a3:8a:e8:f4:54:ab:15: cb:65:9b:19:5e:ad:1f:a1:dd:74:29:b9:c5:b2:5e: c3:57:77:bc:64:34:e1:35:96:24:13:c1:3c:5a:81: b6:3a:29:91:9a:e9:3e:84:77:ea:aa:9a:d4:70:e6: 60:b6:12:d9:58:25:d5:21:49:34:91:c8:81:4a:c2: a3:e7:6a:be:5b:f2:a4:96:98:97:16:7a:7e:31:98: d2:79:ff:69:b3:c1:44:95:6c:af:cd:e6:a0:be:63: 07:e0:b8:ab:3c:bd:e0:75:e6:c0:5c:5f:a8:45:fc: cf:2a:d0:a2:2f:b2:bc:36:75:d9:d1:a5:f4:65:92: 9a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:89:BD:F8:F6:4D:0C:F6:62:48:9F:37:F3:27:04:DF:BF:D5:CB:6C X509v3 Authority Key Identifier: keyid:58:66:E9:35:6E:16:DA:2D:FE:2B:DE:5D:02:5E:92:E8:D8:72:B2:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1142634423120822315/0/5866E9356E16DA2DFE2BDE5D025E92E8D872B274.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:b1:d9:60:96:8d:a9:92:b9:b3:8d:be:37:bd:03:5b:81:d1: 2b:27:e7:93:ff:da:ba:14:c4:06:b2:53:0d:b7:fb:1f:d7:67: 7f:55:7d:7f:53:8e:22:30:ac:2a:b8:83:6a:2c:88:4f:2d:12: 08:6a:d9:c4:1e:9f:7c:51:f3:87:a8:9c:3a:f2:e9:a9:cd:4d: 95:e0:69:ee:40:c3:d9:15:b2:4b:ed:60:c8:52:5b:e8:f2:54: 8b:dc:d5:c2:11:2b:d5:e7:b9:f2:64:16:e6:fc:bb:60:56:6c: 7e:51:14:f3:70:2a:51:35:18:4c:f0:d2:48:3c:67:3f:97:e4: 64:e7:de:e4:6f:23:1d:0f:9a:6b:20:80:bd:49:83:a2:77:91: dd:f1:0a:ee:9c:91:8a:7d:ac:45:0c:63:bc:82:ba:ba:b8:24: 77:bc:51:9c:2b:1a:5b:53:6b:96:d9:57:93:69:a9:e5:9a:20: 15:22:ec:6e:6d:5c:f6:91:48:c9:de:11:8f:36:3a:cf:4c:c5: 44:6c:b3:54:ef:29:dd:15:9a:9b:f8:1c:e8:b4:73:70:7f:19: 9f:f2:75:2f:89:07:79:2f:b9:ae:ed:3c:0b:78:c0:09:90:1e: f5:2a:90:a2:b4:db:f8:1a:a1:96:fb:0d:d3:25:0f:69:e5:c9: 4b:37:42:de -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcoS1ic6ckaTAkO3F2uaWLNRh40owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTg2NkU5MzU2RTE2REEyREZFMkJERTVEMDI1RTkyRThE ODcyQjI3NDAeFw0yNjEwMTIyMjM3MjhaFw0yNjEwMTUyMzEzMjhaMDMxMTAvBgNV BAMTKEVCODlCREY4RjY0RDBDRjY2MjQ4OUYzN0YzMjcwNERGQkZENUNCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCixnOfxc9uF4I3vb9tsgZZ88EQ nq6PAmeOFiWaeW4XnSta4GQYnOYPfGLJdXmyxCSpF9zsmsD7YxkNb/61ujA7PVOu o49txEZjnAzru0tvcb61bxsr2TXk3OgSaNBd7BxkccAjkQPaAdkZrc6Ji0XRUGdo OsRC6WN9adcdug+Zo4ro9FSrFctlmxlerR+h3XQpucWyXsNXd7xkNOE1liQTwTxa gbY6KZGa6T6Ed+qqmtRw5mC2EtlYJdUhSTSRyIFKwqPnar5b8qSWmJcWen4xmNJ5 /2mzwUSVbK/N5qC+YwfguKs8veB15sBcX6hF/M8q0KIvsrw2ddnRpfRlkpoNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU64m9+PZNDPZiSJ838ycE37/Vy2wwHwYDVR0j BBgwFoAUWGbpNW4W2i3+K95dAl6S6NhysnQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTE0 MjYzNDQyMzEyMDgyMjMxNS8wLzU4NjZFOTM1NkUxNkRBMkRGRTJCREU1RDAyNUU5 MkU4RDg3MkIyNzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTg2NkU5MzU2RTE2REEyREZFMkJERTVEMDI1RTkyRThEODcyQjI3NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExNDI2MzQ0MjMxMjA4MjIzMTUvMC81ODY2RTkzNTZFMTZE QTJERkUyQkRFNUQwMjVFOTJFOEQ4NzJCMjc0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7HZYJaNqZK5 s42+N70DW4HRKyfnk//auhTEBrJTDbf7H9dnf1V9f1OOIjCsKriDaiyITy0SCGrZ xB6ffFHzh6icOvLpqc1NleBp7kDD2RWyS+1gyFJb6PJUi9zVwhEr1ee58mQW5vy7 YFZsflEU83AqUTUYTPDSSDxnP5fkZOfe5G8jHQ+aayCAvUmDoneR3fEK7pyRin2s RQxjvIK6urgkd7xRnCsaW1NrltlXk2mp5ZogFSLsbm1c9pFIyd4RjzY6z0zFRGyz VO8p3RWam/gc6LRzcH8Zn/J1L4kHeS+5ru08C3jACZAe9SqQorTb+BqhlvsN0yUP aeXJSzdC3g== -----END CERTIFICATE-----Generated at Tue Oct 13 22:07:36 2026 by rpki-client