$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft File: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft (raw, json) Hash identifier: ByoXTBV9opB/qAtQQq9NPdVUMVU6qwMUf2z7qkL1GNw= Subject key identifier: 1C:C4:2A:5D:14:45:47:0B:9C:16:3D:63:DE:B1:88:E9:B9:7C:D8:3E Authority key identifier: 39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B Certificate issuer: /CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Certificate serial: 649CB553D67BB9065B10663260FC95EC645AFAED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft Manifest number: 013D Signing time: Wed 14 Oct 2026 15:59:20 +0000 Manifest this update: Wed 14 Oct 2026 15:54:20 +0000 Manifest next update: Sun 18 Oct 2026 01:26:20 +0000 Files and hashes: 1: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl (hash: l2sC0CmUc/+RG6CvQIugCObhyI25mPtyxla/Z5+iyXY=) 2: 323430323a373734303a3a2f33322d3332203d3e20313531323532.roa (hash: xjYvA9DRxUqGQxnlDXmqrpquoSry4d1r5+lluE63kzU=) 3: 3130332e3130392e38382e302f32322d3232203d3e20313531323532.roa (hash: UzrNcj85nq6S4JL6UgoFrAEyZtLfoknYga9JtSYLFpw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 01:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9c:b5:53:d6:7b:b9:06:5b:10:66:32:60:fc:95:ec:64:5a:fa:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Validity Not Before: Oct 14 15:54:20 2026 GMT Not After : Oct 18 01:26:20 2026 GMT Subject: CN=1CC42A5D1445470B9C163D63DEB188E9B97CD83E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:cf:6a:d5:31:e8:53:fa:3c:a8:41:66:ac: ac:47:ee:1c:96:ea:c9:9e:86:92:01:de:81:be:5c: 63:9a:f9:4f:a6:75:a5:58:e4:d8:ef:b4:fd:98:9f: f3:ec:27:f5:b9:62:28:2f:37:24:8d:77:a6:21:72: 8b:86:0e:17:0c:72:f4:45:25:8a:b3:31:d7:ef:3c: c5:33:63:da:1c:f8:a0:83:cd:35:ad:d6:2a:2f:f3: ec:5b:70:16:e9:8f:8e:e2:16:bf:4e:34:97:b7:26: 46:e6:d3:ba:d1:3e:1e:b8:78:97:f2:b9:f3:04:07: 24:ee:c2:ac:51:fb:b1:eb:5c:fe:dd:ee:6b:1c:51: 77:71:e2:07:07:e4:5c:9f:d6:af:64:32:3c:2a:54: 37:41:8f:02:c4:7f:2a:82:bc:13:1e:df:06:4b:2c: 43:ac:9e:3c:5c:f5:48:b1:f2:39:b7:a3:64:3b:42: 60:84:24:1b:0a:f3:cb:be:1a:d7:28:29:bc:b9:0e: 3a:6e:2f:d4:75:7a:f6:cf:a4:e2:c6:58:fb:10:40: 91:a1:b9:8c:af:c2:27:d1:c3:41:a0:ca:a3:c0:28: 9e:99:72:b5:32:53:2e:57:6c:f7:f7:41:78:07:e1: 4e:80:32:fa:c3:de:93:7d:03:7e:9d:bc:5c:8a:a1: b3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C4:2A:5D:14:45:47:0B:9C:16:3D:63:DE:B1:88:E9:B9:7C:D8:3E X509v3 Authority Key Identifier: keyid:39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:31:88:c8:8a:32:0d:e3:eb:9e:d7:86:f2:26:8a:b7:27:a5: f1:1d:10:b5:ad:1c:f0:dc:e3:bd:50:b9:a2:47:08:89:3f:91: 28:7c:c2:9b:75:1d:d3:45:03:41:0d:22:1f:98:38:eb:cc:fe: 88:26:50:1f:c1:14:6c:f8:89:50:f5:94:08:98:f3:5b:f6:34: c7:7e:3e:c6:d2:1a:3d:ec:da:a4:64:97:0f:dd:cd:30:db:7f: 54:ab:51:5c:8d:3d:9f:35:fd:63:0b:48:28:41:13:ba:23:94: 16:f0:81:8a:f0:bd:1d:e0:b0:63:d7:09:40:7d:43:98:ba:57: a3:d6:f9:6b:4d:24:f0:e9:fb:bc:26:e8:8a:de:b2:9b:1a:e4: 50:29:00:f3:7a:8d:dc:5e:cc:a3:ed:07:30:5e:e0:35:e5:43: cc:a6:ff:99:0b:81:5b:f6:1e:6f:ef:9c:b3:95:01:07:0a:0b: 7c:b1:ca:8e:d8:d2:b7:2d:84:7a:78:51:47:d7:d7:df:d9:24: fd:9e:a8:93:39:19:f4:bc:9d:91:29:12:77:a4:3c:59:91:f2: 50:c1:43:b3:a8:85:f2:4f:e0:20:16:0a:ec:9c:a5:2c:05:c7: 71:61:c2:43:21:c9:30:6a:cd:48:00:57:89:18:78:b8:45:7d: 69:54:71:f4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZJy1U9Z7uQZbEGYyYPyV7GRa+u0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFG RDI1QjM3QjAeFw0yNjEwMTQxNTU0MjBaFw0yNjEwMTgwMTI2MjBaMDMxMTAvBgNV BAMTKDFDQzQyQTVEMTQ0NTQ3MEI5QzE2M0Q2M0RFQjE4OEU5Qjk3Q0Q4M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyrs9q1THoU/o8qEFmrKxH7hyW 6smehpIB3oG+XGOa+U+mdaVY5NjvtP2Yn/PsJ/W5YigvNySNd6YhcouGDhcMcvRF JYqzMdfvPMUzY9oc+KCDzTWt1iov8+xbcBbpj47iFr9ONJe3Jkbm07rRPh64eJfy ufMEByTuwqxR+7HrXP7d7mscUXdx4gcH5Fyf1q9kMjwqVDdBjwLEfyqCvBMe3wZL LEOsnjxc9Uix8jm3o2Q7QmCEJBsK88u+GtcoKby5DjpuL9R1evbPpOLGWPsQQJGh uYyvwifRw0GgyqPAKJ6ZcrUyUy5XbPf3QXgH4U6AMvrD3pN9A36dvFyKobNzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHMQqXRRFRwucFj1j3rGI6bl82D4wHwYDVR0j BBgwFoAUOdYOXQPAfkB5G3nZ4EXe4f0ls3swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjA3NDQ5OS8wLzM5RDYwRTVEMDNDMDdFNDA3OTFCNzlEOUUwNDVE RUUxRkQyNUIzN0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFGRDI1QjM3Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwNzQ0OTkvMC8zOUQ2MEU1RDAzQzA3 RTQwNzkxQjc5RDlFMDQ1REVFMUZEMjVCMzdCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjGIyIoyDePr nteG8iaKtyel8R0Qta0c8NzjvVC5okcIiT+RKHzCm3Ud00UDQQ0iH5g468z+iCZQ H8EUbPiJUPWUCJjzW/Y0x34+xtIaPezapGSXD93NMNt/VKtRXI09nzX9YwtIKEET uiOUFvCBivC9HeCwY9cJQH1DmLpXo9b5a00k8On7vCboit6ymxrkUCkA83qN3F7M o+0HMF7gNeVDzKb/mQuBW/Yeb++cs5UBBwoLfLHKjtjSty2EenhRR9fX39kk/Z6o kzkZ9LydkSkSd6Q8WZHyUMFDs6iF8k/gIBYK7JylLAXHcWHCQyHJMGrNSABXiRh4 uEV9aVRx9A== -----END CERTIFICATE-----Generated at Fri Oct 16 22:41:15 2026 by rpki-client