$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft File: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft (raw, json) Hash identifier: NOzYn1qh0+JdO3wAN5PbtnLjuLGxFwmQEeXdaTBRAIs= Subject key identifier: 3C:70:CF:C9:68:57:30:B3:A3:28:2D:A1:11:F7:B4:C7:68:74:19:4C Authority key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Certificate issuer: /CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Certificate serial: 43B0D03B4C0F702720D7CA57F8D555028116555E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft Manifest number: 013D Signing time: Mon 19 Oct 2026 02:20:27 +0000 Manifest this update: Mon 19 Oct 2026 02:15:27 +0000 Manifest next update: Thu 22 Oct 2026 02:31:27 +0000 Files and hashes: 1: 3135372e31352e39342e302f32332d3233203d3e203337393639.roa (hash: xi57IaG20Q9lgyCnw9kCjAN7XuJqs+bzVV2E/QZAECQ=) 2: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl (hash: aEAdArw7zZvMArop24GmmoFbUMTM2DM5NkshqHWtPQk=) 3: 3135372e31352e39352e302f32342d3234203d3e203337393639.roa (hash: Z8olTvrbXQ/Gw+3ew2y9r3mBODl7LZP3VLoihjF5Wfw=) 4: 3135372e31352e39342e302f32342d3234203d3e203337393639.roa (hash: DhLKxdD6+JtBAxIoW2O1rxJ1dCIOqNoLXBMH3eZqPU0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 02:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b0:d0:3b:4c:0f:70:27:20:d7:ca:57:f8:d5:55:02:81:16:55:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Validity Not Before: Oct 19 02:15:27 2026 GMT Not After : Oct 22 02:31:27 2026 GMT Subject: CN=3C70CFC9685730B3A3282DA111F7B4C76874194C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:21:09:14:2a:51:62:78:83:e1:62:02:9d:e7: aa:37:ea:89:6a:93:f9:0a:f3:b3:d2:61:af:db:5d: 51:01:cf:51:0d:c6:fb:e1:bf:59:85:6f:ac:97:70: ee:fa:12:e3:36:e3:9a:a2:f0:03:47:9f:fb:fc:6d: 61:48:18:31:2a:fa:b1:ac:34:8c:e3:7a:0a:75:55: 0c:94:34:c9:35:4f:df:41:81:99:6f:5a:3e:0f:93: b1:ed:e1:05:67:97:55:a1:64:74:a8:7c:e9:2b:7f: 1d:29:f0:97:f8:4e:ff:a4:8f:0e:e4:f4:29:0b:17: a1:7d:d2:ce:4a:32:f8:03:71:16:9b:f6:90:ba:dc: b8:d7:55:1b:c4:58:8c:2f:a4:d0:78:67:80:17:ef: 33:37:4d:5b:a1:2e:98:57:c1:37:d5:c4:b8:90:a4: ce:43:b4:a2:89:a9:e6:01:60:62:25:6a:e3:3a:8e: c0:52:2b:55:f3:da:29:d8:75:a6:03:d1:5f:38:b7: 03:50:80:4c:8a:ca:77:f4:af:37:df:b0:cc:12:75: 76:a8:e3:10:85:36:b2:77:a6:0e:e6:8a:c6:36:a9: 39:6f:08:8f:2e:80:4b:44:b1:5f:ec:87:21:17:37: c8:96:bb:80:e7:76:38:8d:6f:fd:6b:44:e9:04:7e: 13:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:70:CF:C9:68:57:30:B3:A3:28:2D:A1:11:F7:B4:C7:68:74:19:4C X509v3 Authority Key Identifier: keyid:1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c4:33:d9:69:3f:89:4b:96:e4:6d:da:9f:39:8f:7e:d0:a8: eb:7e:58:cf:27:22:5e:4f:39:71:0f:36:9e:d9:93:58:48:92: e5:e5:48:11:41:c2:3b:51:25:03:cb:d4:4f:4c:7d:7e:6d:b9: f4:7f:6b:fc:98:db:4c:e8:25:5f:53:6c:cf:41:d7:a0:e7:ec: ff:18:eb:bd:6c:da:bc:be:9e:e1:2f:8c:7d:bc:ed:2a:9f:6f: 7d:7d:a8:a9:2e:26:29:85:3a:85:f9:bc:78:89:f7:42:e5:40: dc:87:02:a9:df:36:0f:94:66:29:a3:e9:28:a8:90:d1:41:de: 23:77:a7:4e:fa:6b:a8:04:1a:d1:86:23:ad:75:5d:a5:d6:53: e2:1c:cd:10:d9:25:c3:3a:83:93:92:5b:a2:7a:52:48:d8:0f: e7:00:22:5d:7c:6a:7d:12:43:23:a7:d9:63:0d:d6:70:36:43: 69:63:b3:36:cb:d3:5f:0f:32:9c:bb:9e:b8:16:bb:ce:a5:4a: 44:35:99:80:0a:7f:f5:97:d4:d0:cd:7c:e8:bc:ba:c8:e5:2b: 28:65:63:c6:bb:a6:33:14:fa:36:a3:b7:5e:a6:39:86:15:47: be:59:72:68:ce:a3:3f:78:b6:79:18:7a:c5:8f:4b:57:f1:5d: ce:c2:1d:54 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ7DQO0wPcCcg18pX+NVVAoEWVV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMy MzI2MURGNDAeFw0yNjEwMTkwMjE1MjdaFw0yNjEwMjIwMjMxMjdaMDMxMTAvBgNV BAMTKDNDNzBDRkM5Njg1NzMwQjNBMzI4MkRBMTExRjdCNEM3Njg3NDE5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMIQkUKlFieIPhYgKd56o36olq k/kK87PSYa/bXVEBz1ENxvvhv1mFb6yXcO76EuM245qi8ANHn/v8bWFIGDEq+rGs NIzjegp1VQyUNMk1T99BgZlvWj4Pk7Ht4QVnl1WhZHSofOkrfx0p8Jf4Tv+kjw7k 9CkLF6F90s5KMvgDcRab9pC63LjXVRvEWIwvpNB4Z4AX7zM3TVuhLphXwTfVxLiQ pM5DtKKJqeYBYGIlauM6jsBSK1Xz2inYdaYD0V84twNQgEyKynf0rzffsMwSdXao 4xCFNrJ3pg7misY2qTlvCI8ugEtEsV/shyEXN8iWu4DndjiNb/1rROkEfhNBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPHDPyWhXMLOjKC2hEfe0x2h0GUwwHwYDVR0j BBgwFoAUHPcJ7Z4LAzlLn5vrV+2NLCMmHfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8xLzFDRjcwOUVEOUUwQjAzMzk0QjlGOUJFQjU3RUQ4 RDJDMjMyNjFERjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMyMzI2MURGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwODQ4NjYvMS8xQ0Y3MDlFRDlFMEIw MzM5NEI5RjlCRUI1N0VEOEQyQzIzMjYxREY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8Qz2Wk/iUuW 5G3anzmPftCo635YzyciXk85cQ82ntmTWEiS5eVIEUHCO1ElA8vUT0x9fm259H9r /JjbTOglX1Nsz0HXoOfs/xjrvWzavL6e4S+MfbztKp9vfX2oqS4mKYU6hfm8eIn3 QuVA3IcCqd82D5RmKaPpKKiQ0UHeI3enTvprqAQa0YYjrXVdpdZT4hzNENklwzqD k5JbonpSSNgP5wAiXXxqfRJDI6fZYw3WcDZDaWOzNsvTXw8ynLueuBa7zqVKRDWZ gAp/9ZfU0M186Ly6yOUrKGVjxrumMxT6NqO3XqY5hhVHvllyaM6jP3i2eRh6xY9L V/FdzsIdVA== -----END CERTIFICATE-----Generated at Mon Oct 19 22:12:24 2026 by rpki-client