$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft File: 2F863C823D698CAFEC32C2822E4894974B574DD1.mft (raw, json) Hash identifier: tzcEMVwL6Wo+hUDrE0CcuswfrNkhPkBis/+vR3MiV2I= Subject key identifier: DE:D8:31:E3:F6:C3:54:A3:62:50:B5:98:05:94:7C:D5:66:D1:FA:27 Authority key identifier: 2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 Certificate issuer: /CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Certificate serial: 3965A054FADD341B0B3458619E903DBB46EC069B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft Manifest number: D3 Signing time: Wed 14 Oct 2026 01:53:25 +0000 Manifest this update: Wed 14 Oct 2026 01:48:25 +0000 Manifest next update: Sat 17 Oct 2026 08:56:25 +0000 Files and hashes: 1: 3230322e3134332e31362e302f32332d3233203d3e203137363338.roa (hash: YCgdM602V6VLFoLFEu8zRiZThrkAwsRfaFxL09iXuD0=) 2: 2F863C823D698CAFEC32C2822E4894974B574DD1.crl (hash: Xk2tp2HvO1JP72fBNqNcXdz77eyD2DtVBm9GQt+G+Vo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 08:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:65:a0:54:fa:dd:34:1b:0b:34:58:61:9e:90:3d:bb:46:ec:06:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Validity Not Before: Oct 14 01:48:25 2026 GMT Not After : Oct 17 08:56:25 2026 GMT Subject: CN=DED831E3F6C354A36250B59805947CD566D1FA27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:0b:41:e3:47:63:26:b7:6e:51:1b:21:68: 21:57:1b:87:d8:02:fb:86:28:22:fc:fd:b5:eb:be: b8:62:96:e7:0c:12:97:77:5b:2e:46:85:dc:ad:96: d4:25:25:8f:7c:ee:a0:b0:cd:9f:dc:95:90:d4:ad: 05:67:61:4c:7f:ea:46:63:a6:9c:16:7c:90:9c:16: 0d:5d:61:0f:1e:0c:ac:ca:ff:14:ef:d8:28:85:99: cc:51:4e:d6:4c:18:90:a4:fc:e9:5a:63:2e:bd:8b: 75:35:bc:42:d9:dc:51:11:ba:6a:59:b7:fe:e1:03: 31:a9:d3:c6:f4:0b:9b:63:8a:e6:16:43:29:a4:6b: 5a:35:2f:bc:29:7b:84:ea:ab:20:ac:05:e4:e5:28: 03:81:73:ab:bd:c1:f3:72:0c:4d:fe:60:6a:2f:da: 7c:e4:a4:f9:84:3d:b0:f0:38:7c:ca:0d:83:03:44: 0d:df:7c:f3:dd:f2:58:46:d7:4e:ea:0a:ea:70:5c: 41:b4:a6:b6:52:b0:7a:0e:4d:48:31:cc:a0:e9:56: b5:e9:e7:ce:25:a3:d3:dc:5a:04:25:9a:79:7e:a3: a5:66:09:65:9d:7e:31:57:1b:1c:68:d2:74:df:ef: 93:28:40:96:eb:b3:b9:00:7c:2b:6b:e0:99:64:11: 7d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D8:31:E3:F6:C3:54:A3:62:50:B5:98:05:94:7C:D5:66:D1:FA:27 X509v3 Authority Key Identifier: keyid:2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:82:34:9e:99:12:46:59:8d:49:7b:af:df:82:38:9c:8f:0b: 20:90:bd:61:3d:b8:6a:2b:3f:22:db:43:33:70:19:d7:76:03: e5:bc:fa:b7:c3:57:ae:13:4b:7d:f7:7b:78:b8:15:fc:59:fd: c8:5f:12:91:5c:85:76:0b:06:67:2e:fe:d3:a4:93:1b:10:32: 85:1f:a0:96:28:f8:cd:ed:7a:96:50:30:86:fc:0e:f2:55:ce: 81:b1:f3:d6:03:da:f5:b6:68:cf:74:72:be:65:53:4f:d2:75: b7:eb:89:29:36:b5:b3:16:97:c6:9a:80:a2:0d:92:08:59:09: 4c:0c:c3:55:0c:9b:6a:7e:c1:e1:2b:f9:81:51:f2:27:6d:56: 19:2a:81:a9:ce:d0:90:04:21:06:39:c4:72:b3:91:38:22:2d: de:0d:6b:b6:6a:06:3c:05:7d:f0:76:90:d2:31:b7:79:bd:b2: 8b:fc:62:ea:9a:52:7d:4f:c8:4c:d2:1f:65:b6:9f:71:91:ec: b0:c3:3d:fd:ab:79:ed:5a:77:57:84:17:e5:c8:55:fa:e3:70: 3d:e4:95:53:96:f1:eb:3a:48:f0:55:78:41:17:69:fc:57:df: c5:85:9f:6b:da:9a:ec:a5:bf:c2:95:31:9b:38:84:56:3d:ee: fc:2c:99:ca -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOWWgVPrdNBsLNFhhnpA9u0bsBpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0 QjU3NEREMTAeFw0yNjEwMTQwMTQ4MjVaFw0yNjEwMTcwODU2MjVaMDMxMTAvBgNV BAMTKERFRDgzMUUzRjZDMzU0QTM2MjUwQjU5ODA1OTQ3Q0Q1NjZEMUZBMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lAtB40djJrduURshaCFXG4fY AvuGKCL8/bXrvrhilucMEpd3Wy5GhdytltQlJY987qCwzZ/clZDUrQVnYUx/6kZj ppwWfJCcFg1dYQ8eDKzK/xTv2CiFmcxRTtZMGJCk/OlaYy69i3U1vELZ3FERumpZ t/7hAzGp08b0C5tjiuYWQymka1o1L7wpe4TqqyCsBeTlKAOBc6u9wfNyDE3+YGov 2nzkpPmEPbDwOHzKDYMDRA3ffPPd8lhG107qCupwXEG0prZSsHoOTUgxzKDpVrXp 584lo9PcWgQlmnl+o6VmCWWdfjFXGxxo0nTf75MoQJbrs7kAfCtr4JlkEX1BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3tgx4/bDVKNiULWYBZR81WbR+icwHwYDVR0j BBgwFoAUL4Y8gj1pjK/sMsKCLkiUl0tXTdEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MjA4ODkxMjI0ODgzNS8wLzJGODYzQzgyM0Q2OThDQUZFQzMyQzI4MjJFNDg5 NDk3NEI1NzRERDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0QjU3NEREMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTIwODg5MTIyNDg4MzUvMC8yRjg2M0M4MjNENjk4 Q0FGRUMzMkMyODIyRTQ4OTQ5NzRCNTc0REQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoI0npkSRlmN SXuv34I4nI8LIJC9YT24ais/IttDM3AZ13YD5bz6t8NXrhNLffd7eLgV/Fn9yF8S kVyFdgsGZy7+06STGxAyhR+glij4ze16llAwhvwO8lXOgbHz1gPa9bZoz3RyvmVT T9J1t+uJKTa1sxaXxpqAog2SCFkJTAzDVQyban7B4Sv5gVHyJ21WGSqBqc7QkAQh BjnEcrOROCIt3g1rtmoGPAV98HaQ0jG3eb2yi/xi6ppSfU/ITNIfZbafcZHssMM9 /at57Vp3V4QX5chV+uNwPeSVU5bx6zpI8FV4QRdp/FffxYWfa9qa7KW/wpUxmziE Vj3u/CyZyg== -----END CERTIFICATE-----Generated at Thu Oct 15 09:42:01 2026 by rpki-client