$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1157515100865691695/0/1D7C1D5DF3229DAA149B7131A6A20D011481DCB7.mft File: 1D7C1D5DF3229DAA149B7131A6A20D011481DCB7.mft (raw, json) Hash identifier: kI2+VUpa2X9gvu/+9bRppjXYdnRXMaady9Y0bEbcPbs= Subject key identifier: 91:6F:4B:7A:22:A2:6E:7D:E3:EE:BA:95:9E:9A:0F:FC:8C:04:2A:04 Authority key identifier: 1D:7C:1D:5D:F3:22:9D:AA:14:9B:71:31:A6:A2:0D:01:14:81:DC:B7 Certificate issuer: /CN=1D7C1D5DF3229DAA149B7131A6A20D011481DCB7 Certificate serial: 2334A28B383A460694A1F17577C1927049C5AF88 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1D7C1D5DF3229DAA149B7131A6A20D011481DCB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1157515100865691695/0/1D7C1D5DF3229DAA149B7131A6A20D011481DCB7.mft Manifest number: 07 Signing time: Tue 13 Oct 2026 17:48:12 +0000 Manifest this update: Tue 13 Oct 2026 17:43:12 +0000 Manifest next update: Sat 17 Oct 2026 01:09:12 +0000 Files and hashes: 1: 1D7C1D5DF3229DAA149B7131A6A20D011481DCB7.crl (hash: ee2T71GmHram1hz7p1DREUf47QXn9w1v+hqS79bkMhM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1157515100865691695/0/1D7C1D5DF3229DAA149B7131A6A20D011481DCB7.crl rsync://rpki-rps.cnnic.cn/repo/A1157515100865691695/0/1D7C1D5DF3229DAA149B7131A6A20D011481DCB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1D7C1D5DF3229DAA149B7131A6A20D011481DCB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 01:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:34:a2:8b:38:3a:46:06:94:a1:f1:75:77:c1:92:70:49:c5:af:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D7C1D5DF3229DAA149B7131A6A20D011481DCB7 Validity Not Before: Oct 13 17:43:12 2026 GMT Not After : Oct 17 01:09:12 2026 GMT Subject: CN=916F4B7A22A26E7DE3EEBA959E9A0FFC8C042A04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9d:99:82:32:25:48:40:98:ed:15:1d:1a:12: 16:0f:ea:47:29:73:7f:54:24:76:c7:da:20:c7:5c: 28:09:b6:ee:e8:1a:8b:20:67:d7:c9:fc:b8:4c:92: 31:5d:5c:2c:ac:7d:6f:51:7b:57:14:d8:e1:9b:8b: 87:17:57:d9:79:6b:9e:ce:c7:6d:b3:c9:a1:4f:43: 52:2b:18:e6:66:19:a4:ea:75:14:de:d2:15:0b:a4: 16:e2:37:f6:45:df:49:99:e8:1e:b3:df:c9:d1:72: c3:cf:e0:f4:26:ea:fe:1b:fb:f1:ba:d5:e6:59:9c: d4:0d:53:44:94:34:c5:ab:a2:df:fb:2a:74:3a:c4: 2e:64:df:18:09:9c:86:28:20:7f:20:32:3e:db:33: 13:10:5a:86:72:cc:a9:d8:73:0a:3b:1b:50:61:e6: dc:8c:6f:a5:26:30:66:b0:07:7b:f7:2d:70:76:1b: 42:27:f4:5d:e7:b1:e4:0c:41:ed:71:ab:d8:ad:de: 8f:11:4c:86:04:a8:09:24:36:bc:4f:68:e7:81:95: dc:49:e6:c9:b3:5d:b2:5c:23:96:5d:e9:ac:53:e5: bf:09:0f:be:16:c1:5e:de:ed:46:77:af:32:2e:f8: 4e:a3:7d:8c:fb:d3:eb:46:3f:e9:74:17:fb:18:7d: 55:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6F:4B:7A:22:A2:6E:7D:E3:EE:BA:95:9E:9A:0F:FC:8C:04:2A:04 X509v3 Authority Key Identifier: keyid:1D:7C:1D:5D:F3:22:9D:AA:14:9B:71:31:A6:A2:0D:01:14:81:DC:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1157515100865691695/0/1D7C1D5DF3229DAA149B7131A6A20D011481DCB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1D7C1D5DF3229DAA149B7131A6A20D011481DCB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1157515100865691695/0/1D7C1D5DF3229DAA149B7131A6A20D011481DCB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f7:b2:ac:be:5f:63:71:61:79:ec:3e:f6:3a:5b:ca:14:b3: 5c:df:45:7c:61:62:c7:b9:3d:1c:23:32:70:1d:fc:e2:47:91: 1b:de:06:3a:5d:bb:14:8e:89:62:30:2d:ff:0b:6f:d4:d5:64: 16:8c:37:ef:67:f1:f5:30:e5:83:4d:2f:ae:62:91:cc:f0:4d: 69:b2:51:c2:eb:b4:aa:76:16:a5:31:b1:03:51:a0:a4:0a:d3: 4c:a2:da:60:17:ff:09:b8:33:fc:d3:50:c1:85:56:ee:8d:76: ec:dc:bc:34:8b:c1:14:c6:4f:55:95:da:30:06:37:eb:2b:03: 80:1d:44:c9:2c:93:24:80:81:29:97:0b:3b:99:46:08:f6:f9: 77:f1:5f:36:2d:1f:5d:f9:84:33:be:39:b7:5d:83:33:7c:78: 90:b2:e2:3a:60:d6:28:9a:4d:aa:ef:7b:33:b9:e0:99:35:5c: 3f:33:05:bf:5b:ec:80:f2:bc:5a:83:c3:2a:cd:e1:9b:4d:3f: 80:3a:d5:86:5c:fa:b8:18:44:89:c8:6b:63:82:1a:32:1d:e7: 41:3b:93:8c:1d:75:6e:86:32:61:61:c8:f4:78:fd:09:c3:f9: 0e:4b:92:01:2f:58:c7:60:73:bd:b1:8c:19:c0:88:18:17:10: 6d:ed:19:2b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIzSiizg6RgaUofF1d8GScEnFr4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ3QzFENURGMzIyOURBQTE0OUI3MTMxQTZBMjBEMDEx NDgxRENCNzAeFw0yNjEwMTMxNzQzMTJaFw0yNjEwMTcwMTA5MTJaMDMxMTAvBgNV BAMTKDkxNkY0QjdBMjJBMjZFN0RFM0VFQkE5NTlFOUEwRkZDOEMwNDJBMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9nZmCMiVIQJjtFR0aEhYP6kcp c39UJHbH2iDHXCgJtu7oGosgZ9fJ/LhMkjFdXCysfW9Re1cU2OGbi4cXV9l5a57O x22zyaFPQ1IrGOZmGaTqdRTe0hULpBbiN/ZF30mZ6B6z38nRcsPP4PQm6v4b+/G6 1eZZnNQNU0SUNMWrot/7KnQ6xC5k3xgJnIYoIH8gMj7bMxMQWoZyzKnYcwo7G1Bh 5tyMb6UmMGawB3v3LXB2G0In9F3nseQMQe1xq9it3o8RTIYEqAkkNrxPaOeBldxJ 5smzXbJcI5Zd6axT5b8JD74WwV7e7UZ3rzIu+E6jfYz70+tGP+l0F/sYfVUPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkW9LeiKibn3j7rqVnpoP/IwEKgQwHwYDVR0j BBgwFoAUHXwdXfMinaoUm3ExpqINARSB3LcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTE1 NzUxNTEwMDg2NTY5MTY5NS8wLzFEN0MxRDVERjMyMjlEQUExNDlCNzEzMUE2QTIw RDAxMTQ4MURDQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUQ3QzFENURGMzIyOURBQTE0OUI3MTMxQTZBMjBEMDExNDgxRENCNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExNTc1MTUxMDA4NjU2OTE2OTUvMC8xRDdDMUQ1REYzMjI5 REFBMTQ5QjcxMzFBNkEyMEQwMTE0ODFEQ0I3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfeyrL5fY3Fh eew+9jpbyhSzXN9FfGFix7k9HCMycB384keRG94GOl27FI6JYjAt/wtv1NVkFow3 72fx9TDlg00vrmKRzPBNabJRwuu0qnYWpTGxA1GgpArTTKLaYBf/Cbgz/NNQwYVW 7o127Ny8NIvBFMZPVZXaMAY36ysDgB1EySyTJICBKZcLO5lGCPb5d/FfNi0fXfmE M745t12DM3x4kLLiOmDWKJpNqu97M7ngmTVcPzMFv1vsgPK8WoPDKs3hm00/gDrV hlz6uBhEichrY4IaMh3nQTuTjB11boYyYWHI9Hj9CcP5DkuSAS9Yx2BzvbGMGcCI GBcQbe0ZKw== -----END CERTIFICATE-----Generated at Thu Oct 15 11:54:53 2026 by rpki-client