$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft File: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft (raw, json) Hash identifier: vrFovdFy5A5fAFcVqLI2iV+raUmYIQy3iCmp7eA5NAQ= Subject key identifier: 3E:BF:28:64:58:63:45:97:0E:64:C3:D0:31:CE:47:E3:74:B0:0E:99 Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 Certificate issuer: /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Certificate serial: 52465998B5CB15FCDF7183F90406DE7C4B5960A5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft Manifest number: 013C Signing time: Mon 12 Oct 2026 00:26:15 +0000 Manifest this update: Mon 12 Oct 2026 00:21:15 +0000 Manifest next update: Thu 15 Oct 2026 01:43:15 +0000 Files and hashes: 1: 323430333a6663303a3a2f33322d3338203d3e20313331353330.roa (hash: FxdZOlHBNNosbbc+VM2SsDSEtGaPa7cJThwHgjf0PW4=) 2: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl (hash: J/6pmcgYSeGR1dK+nNYRZq3ObD/xhwWZCTbxLO+gCd8=) 3: 3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa (hash: LracsMaC+QrvCPKnHymzdJ0n+YFbpzw1xlf+RpV37Dg=) 4: 3130332e39382e3136342e302f32322d3234203d3e20313331353330.roa (hash: SUIM7Q/gKTRbtCC89bx/1rAOcJbC24/HcLWuMZ3Rb58=) 5: 323430333a6663303a3a2f33382d3338203d3e20313331353330.roa (hash: OWdg73kfq+IxC9cdjoFN1n6gGcBVxQM28yQqP4AzCnE=) 6: 3130332e39382e3136342e302f32322d3234203d3e20333938373034.roa (hash: QF2+Jk348dEsMNNKX7v8nbsQSCZY3RPWr+U+z5ykE6Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:46:59:98:b5:cb:15:fc:df:71:83:f9:04:06:de:7c:4b:59:60:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Validity Not Before: Oct 12 00:21:15 2026 GMT Not After : Oct 15 01:43:15 2026 GMT Subject: CN=3EBF2864586345970E64C3D031CE47E374B00E99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:32:0f:86:63:d3:e3:60:38:cc:9f:f4:96:f3: fd:36:31:2b:da:ed:b0:11:ec:28:be:5e:34:c6:7d: e3:96:85:86:0c:3a:29:79:13:94:03:0e:4b:34:c9: 90:f5:d1:d6:bd:5b:25:2a:a5:3a:aa:f8:aa:ad:7d: 46:1d:41:a8:ee:a5:2c:5f:11:18:ee:b3:3e:5e:98: 18:96:8e:9b:57:fe:34:e3:46:90:24:97:f7:9a:ff: 73:ea:2b:3c:69:dc:5b:c2:98:f8:2a:e4:b3:48:eb: 5a:ba:ad:16:58:73:be:4a:f9:ab:f7:05:7b:3e:d2: c1:41:58:9f:9b:9d:20:0b:70:2b:c3:ee:ca:a5:6f: f4:3c:bc:d3:f6:f5:46:0d:aa:40:c5:86:d0:99:7c: c6:e3:e5:be:ee:ea:32:85:13:4e:26:d5:2b:56:21: 8f:57:ed:05:91:ac:71:97:3a:a9:98:5d:86:75:23: b7:cc:bf:bf:f7:33:b6:6e:f4:00:3b:40:e6:ff:f0: 1f:99:98:f7:b2:22:9a:11:ba:a1:09:70:9c:1d:a4: cd:a1:f9:18:78:24:22:c6:71:99:ac:6e:dd:40:cd: 4a:3f:72:11:fc:c4:b0:0d:58:24:7d:bd:e7:7b:69: e1:6f:48:26:de:33:cc:01:a4:9d:5b:5b:96:93:0c: a2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BF:28:64:58:63:45:97:0E:64:C3:D0:31:CE:47:E3:74:B0:0E:99 X509v3 Authority Key Identifier: keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:2e:63:73:b3:64:14:99:ba:9c:92:41:39:d6:aa:09:39:41: 56:21:f9:a3:b8:58:79:d5:19:f1:e4:ae:9f:bb:75:a3:0b:03: 51:80:96:cb:47:87:c5:61:a8:75:ff:23:e1:40:48:23:28:da: 7f:87:f4:15:d7:e6:ea:a7:7d:92:35:bb:a4:a8:70:5f:a4:04: 03:39:26:ba:91:f1:62:d9:b4:b7:12:76:eb:82:fd:2b:14:ba: 65:49:e6:99:ed:45:af:22:33:a1:40:fe:54:fa:c0:55:53:e2: a4:23:00:f4:df:f9:89:b7:65:6d:1c:5d:2e:16:ec:3c:c9:06: 8d:6c:56:99:1f:3c:df:22:26:57:ba:93:bc:44:e7:49:18:a8: 97:60:5e:d2:1c:d4:08:37:26:36:85:37:1d:5b:91:4e:0c:f5: 58:cc:b4:c3:c1:e8:5c:e3:63:0c:da:77:ee:76:07:a8:0c:bc: 18:25:e3:6d:fd:49:1f:c4:96:59:68:5f:18:c1:f5:fd:c3:35: c9:8d:fe:03:b2:d8:c6:fe:d4:4a:3c:a2:89:b9:28:76:fa:b1: b8:78:db:d3:df:6e:7e:ba:52:90:16:f8:a0:ad:01:72:29:8b: 68:55:20:3c:a9:52:13:0a:c2:9e:7a:e5:f5:33:23:3b:0f:bb: 06:fa:73:fe -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUkZZmLXLFfzfcYP5BAbefEtZYKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEw NkNFQzE0MDAeFw0yNjEwMTIwMDIxMTVaFw0yNjEwMTUwMTQzMTVaMDMxMTAvBgNV BAMTKDNFQkYyODY0NTg2MzQ1OTcwRTY0QzNEMDMxQ0U0N0UzNzRCMDBFOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHMg+GY9PjYDjMn/SW8/02MSva 7bAR7Ci+XjTGfeOWhYYMOil5E5QDDks0yZD10da9WyUqpTqq+KqtfUYdQajupSxf ERjusz5emBiWjptX/jTjRpAkl/ea/3PqKzxp3FvCmPgq5LNI61q6rRZYc75K+av3 BXs+0sFBWJ+bnSALcCvD7sqlb/Q8vNP29UYNqkDFhtCZfMbj5b7u6jKFE04m1StW IY9X7QWRrHGXOqmYXYZ1I7fMv7/3M7Zu9AA7QOb/8B+ZmPeyIpoRuqEJcJwdpM2h +Rh4JCLGcZmsbt1AzUo/chH8xLANWCR9ved7aeFvSCbeM8wBpJ1bW5aTDKLBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPr8oZFhjRZcOZMPQMc5H43SwDpkwHwYDVR0j BBgwFoAUX8ntQsDGXhMlCJrmE4ZKagbOwUAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzUzMTM5NC8wLzVGQzlFRDQyQzBDNjVFMTMyNTA4OUFFNjEzODY0 QTZBMDZDRUMxNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEwNkNFQzE0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1MzEzOTQvMC81RkM5RUQ0MkMwQzY1 RTEzMjUwODlBRTYxMzg2NEE2QTA2Q0VDMTQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJS5jc7NkFJm6 nJJBOdaqCTlBViH5o7hYedUZ8eSun7t1owsDUYCWy0eHxWGodf8j4UBIIyjaf4f0 Fdfm6qd9kjW7pKhwX6QEAzkmupHxYtm0txJ264L9KxS6ZUnmme1FryIzoUD+VPrA VVPipCMA9N/5ibdlbRxdLhbsPMkGjWxWmR883yImV7qTvETnSRiol2Be0hzUCDcm NoU3HVuRTgz1WMy0w8HoXONjDNp37nYHqAy8GCXjbf1JH8SWWWhfGMH1/cM1yY3+ A7LYxv7USjyiibkodvqxuHjb099ufrpSkBb4oK0BcimLaFUgPKlSEwrCnnrl9TMj Ow+7Bvpz/g== -----END CERTIFICATE-----Generated at Tue Oct 13 13:16:30 2026 by rpki-client