$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft File: 5F00140F672D031D0607493A021A46F1A9475AE8.mft (raw, json) Hash identifier: cH1BBBYJYlqMuJk3uSOJ5aBXYntzTrTnSaOJlAmg5ro= Subject key identifier: 80:22:4B:0A:70:F3:03:3C:C5:51:31:38:E4:28:84:BB:F8:5A:A0:2B Authority key identifier: 5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8 Certificate issuer: /CN=5F00140F672D031D0607493A021A46F1A9475AE8 Certificate serial: 10C54E7BCB09108D436792E36B03EF5536099C5A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft Manifest number: D2 Signing time: Sat 17 Oct 2026 15:04:00 +0000 Manifest this update: Sat 17 Oct 2026 14:59:00 +0000 Manifest next update: Tue 20 Oct 2026 18:34:00 +0000 Files and hashes: 1: 5F00140F672D031D0607493A021A46F1A9475AE8.crl (hash: Gowhu54b/dCixTqqn+2j4AkREg4EWeJa4uLszkluYTg=) 2: 3130332e3133322e3231342e302f32342d3234203d3e20313337373539.roa (hash: U7ZbArWBWfu8/5lcAVKldcUla2gFMo1Yu6PSfWaHzL8=) 3: 3130332e3133322e3231322e302f32342d3234203d3e20313337373539.roa (hash: 26nl4bikGp2Ci9HCEbZJ7fOjhWzaLL4wYwu2l9/Jgao=) 4: 3130332e3133322e3231352e302f32342d3234203d3e20313337373539.roa (hash: hBscGvJr4AnNB3Ne2DqjxOugixWWQhpfuAEh32znKV0=) 5: 3130332e3133322e3231332e302f32342d3234203d3e20313337373539.roa (hash: CKziFNu0LqXNWZ/lBrbX59kZ+YgYSz+Zo35FHCpodYY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c5:4e:7b:cb:09:10:8d:43:67:92:e3:6b:03:ef:55:36:09:9c:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F00140F672D031D0607493A021A46F1A9475AE8 Validity Not Before: Oct 17 14:59:00 2026 GMT Not After : Oct 20 18:34:00 2026 GMT Subject: CN=80224B0A70F3033CC5513138E42884BBF85AA02B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:34:91:36:45:1d:2b:6c:ce:b4:12:70:60:87: be:ce:e8:d2:99:11:d5:76:38:97:c7:5d:6d:53:1d: a6:48:27:e0:3e:5f:f5:e0:55:82:bf:a2:24:df:68: 6c:a5:c2:3f:d2:70:c7:76:6e:cf:db:e2:7e:0d:17: 4d:a6:8e:0e:50:a9:f5:12:9c:ea:7a:88:5a:2c:65: 61:36:fc:0f:98:f9:1d:fb:67:60:4b:e7:e8:67:d3: 41:f6:85:df:6b:69:54:2e:c6:ac:83:f4:92:f6:67: 05:90:68:64:a2:11:10:81:68:58:19:5d:ca:ec:fa: 88:04:01:b2:7f:96:c0:d7:06:63:c8:ac:3b:e9:1d: f2:8d:84:c5:8a:85:58:0c:42:92:89:dd:f6:a7:42: 1f:37:0a:e8:7b:5e:52:93:c9:1a:23:7e:e0:2f:48: f9:a6:97:6a:08:f4:8e:17:fd:b9:0a:06:d7:2f:83: d7:69:75:4e:46:cf:03:de:28:26:b6:cd:94:95:7a: 15:a1:21:25:59:4a:48:49:25:da:b5:f9:89:20:cd: 91:7f:60:87:6b:ea:3c:b3:3d:34:52:27:bd:aa:d0: d6:cc:3b:47:b3:47:01:41:84:ea:9e:36:e2:98:e5: c4:b9:b7:a9:c1:6a:52:1f:bf:41:77:6f:a6:ce:25: 75:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:22:4B:0A:70:F3:03:3C:C5:51:31:38:E4:28:84:BB:F8:5A:A0:2B X509v3 Authority Key Identifier: keyid:5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:34:b7:56:51:ec:8a:55:d7:ab:31:57:7e:4e:d6:84:95:09: cf:15:79:bb:7d:fe:3c:5e:48:f2:36:f3:ac:70:a5:57:63:54: 92:25:f0:b5:5b:cf:3c:4e:1c:c7:14:19:62:48:40:90:bb:7d: fd:8c:9f:d6:28:65:f3:1b:2e:2e:96:fa:b8:bb:e6:17:8b:a4: 05:96:d9:1f:d7:9e:9f:2e:8b:37:f4:09:e2:59:76:0a:c8:b7: 7e:ab:ee:4c:35:46:ae:3a:c1:4d:34:c9:83:c6:de:ed:cc:35: cb:79:3d:91:7a:4c:0d:cd:25:01:cd:b2:ae:ef:01:78:c9:0d: 6e:0c:2e:fa:92:ab:c1:87:18:2e:40:05:63:46:ca:ab:9c:6f: 44:b0:ec:82:51:1b:de:0c:73:03:b1:1f:55:69:a8:c8:bd:2b: 2b:0d:98:9f:15:1b:e2:77:0e:10:4e:c6:7b:33:4b:1c:bb:37: 32:ee:ec:26:dd:90:88:d2:ba:3c:87:df:bf:9b:e8:67:a4:fd: 67:0c:7e:e9:85:97:07:7d:41:5f:ed:cf:9e:9f:d0:f9:92:ed: 1a:08:50:a8:71:91:10:62:03:8f:72:39:28:ee:2d:7c:ce:0b: 91:aa:7c:51:f0:ef:a6:a3:2b:e2:f5:92:89:a2:15:ba:96:18: c9:67:1d:5c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEMVOe8sJEI1DZ5LjawPvVTYJnFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYwMDE0MEY2NzJEMDMxRDA2MDc0OTNBMDIxQTQ2RjFB OTQ3NUFFODAeFw0yNjEwMTcxNDU5MDBaFw0yNjEwMjAxODM0MDBaMDMxMTAvBgNV BAMTKDgwMjI0QjBBNzBGMzAzM0NDNTUxMzEzOEU0Mjg4NEJCRjg1QUEwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfNJE2RR0rbM60EnBgh77O6NKZ EdV2OJfHXW1THaZIJ+A+X/XgVYK/oiTfaGylwj/ScMd2bs/b4n4NF02mjg5QqfUS nOp6iFosZWE2/A+Y+R37Z2BL5+hn00H2hd9raVQuxqyD9JL2ZwWQaGSiERCBaFgZ Xcrs+ogEAbJ/lsDXBmPIrDvpHfKNhMWKhVgMQpKJ3fanQh83Cuh7XlKTyRojfuAv SPmml2oI9I4X/bkKBtcvg9dpdU5GzwPeKCa2zZSVehWhISVZSkhJJdq1+YkgzZF/ YIdr6jyzPTRSJ72q0NbMO0ezRwFBhOqeNuKY5cS5t6nBalIfv0F3b6bOJXU9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgCJLCnDzAzzFUTE45CiEu/haoCswHwYDVR0j BBgwFoAUXwAUD2ctAx0GB0k6AhpG8alHWugwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4MTIxNTA2NTQ1NjY0Mi8wLzVGMDAxNDBGNjcyRDAzMUQwNjA3NDkzQTAyMUE0 NkYxQTk0NzVBRTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUYwMDE0MEY2NzJEMDMxRDA2MDc0OTNBMDIxQTQ2RjFBOTQ3NUFFOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4ODEyMTUwNjU0NTY2NDIvMC81RjAwMTQwRjY3MkQw MzFEMDYwNzQ5M0EwMjFBNDZGMUE5NDc1QUU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuTS3VlHsilXX qzFXfk7WhJUJzxV5u33+PF5I8jbzrHClV2NUkiXwtVvPPE4cxxQZYkhAkLt9/Yyf 1ihl8xsuLpb6uLvmF4ukBZbZH9eeny6LN/QJ4ll2Csi3fqvuTDVGrjrBTTTJg8be 7cw1y3k9kXpMDc0lAc2yru8BeMkNbgwu+pKrwYcYLkAFY0bKq5xvRLDsglEb3gxz A7EfVWmoyL0rKw2YnxUb4ncOEE7GezNLHLs3Mu7sJt2QiNK6PIffv5voZ6T9Zwx+ 6YWXB31BX+3Pnp/Q+ZLtGghQqHGREGIDj3I5KO4tfM4Lkap8UfDvpqMr4vWSiaIV upYYyWcdXA== -----END CERTIFICATE-----Generated at Sun Oct 18 09:23:48 2026 by rpki-client