$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft File: 3518C1E70B30D501EC0803B85E52F5905EE82052.mft (raw, json) Hash identifier: N2yyyGApttbOyib5k/R2MKRBME5nIZDQJwzzhaJV8+Q= Subject key identifier: E9:22:7A:FB:A5:A2:39:31:F6:64:5A:07:B8:47:72:79:A4:5C:D1:85 Authority key identifier: 35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 Certificate issuer: /CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Certificate serial: 047E4573603B80FA5BA4014F2BEC9D9E44F25DCC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft Manifest number: CE Signing time: Sun 11 Oct 2026 11:20:31 +0000 Manifest this update: Sun 11 Oct 2026 11:15:30 +0000 Manifest next update: Wed 14 Oct 2026 15:39:30 +0000 Files and hashes: 1: 3518C1E70B30D501EC0803B85E52F5905EE82052.crl (hash: FqmiZY3iA+BeIWrg9Dd5xYtsn0VpKLnKtgXWn0JXXsw=) 2: 3130332e3133312e3135322e302f32322d3234203d3e2034383038.roa (hash: xmJpASv6f6muagMJ4cJj94OGQ9aSvhbvGuyic71zQKQ=) 3: 3130332e34392e3137362e302f32342d3234203d3e2034383437.roa (hash: ajQJ6j9gJz58Pt34bat8WkxraIuEvfp95aG2jJ5f9t8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7e:45:73:60:3b:80:fa:5b:a4:01:4f:2b:ec:9d:9e:44:f2:5d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Validity Not Before: Oct 11 11:15:30 2026 GMT Not After : Oct 14 15:39:30 2026 GMT Subject: CN=E9227AFBA5A23931F6645A07B8477279A45CD185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:20:a3:51:27:99:6e:5b:2a:ed:db:32:5c:fe: 11:f1:02:16:44:83:69:d3:ba:68:2c:31:b1:16:b8: b1:0c:4b:04:55:ed:55:0e:5e:2b:be:f6:dd:0f:02: a2:4a:28:89:66:d8:3c:36:75:51:ec:c1:7a:8d:74: 20:3b:9e:62:a2:7d:84:d7:eb:52:7a:7f:49:84:51: 0e:9a:8d:de:a1:63:12:0f:57:65:7e:06:df:19:18: d5:a5:74:c7:30:64:5f:24:26:4d:27:d2:05:85:fb: 75:47:18:f4:04:e5:ca:2e:73:37:f6:00:05:25:1d: 73:70:e6:5b:83:aa:31:05:f6:33:13:c2:19:1f:2b: fb:7d:02:08:fc:1a:a4:ad:98:86:71:cb:c9:76:33: ca:a0:9a:83:e5:a1:7c:e8:02:52:c1:dd:b4:b2:4b: ec:d2:8a:76:23:52:b9:3d:bd:bc:0e:5d:4d:d6:2f: 22:11:8b:e8:4e:4f:c2:cc:df:1f:83:c4:3e:cd:b2: 01:75:8d:a1:e7:1c:c7:e3:03:a6:d2:78:84:d8:1e: 2b:59:32:46:47:a9:58:82:57:8d:c0:bb:d5:c1:a2: 03:c7:a8:1f:3f:3d:d6:4e:37:7e:9c:b9:b4:85:b4: 16:ea:cb:b6:f8:8f:f3:3e:72:5f:e2:75:94:a3:ca: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:22:7A:FB:A5:A2:39:31:F6:64:5A:07:B8:47:72:79:A4:5C:D1:85 X509v3 Authority Key Identifier: keyid:35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:9d:d0:a6:02:f6:d7:2e:e2:2b:e0:9a:2e:c2:a1:94:6d:b4: 6b:98:70:d2:e8:1d:5e:5d:a4:54:11:17:85:d3:59:71:d1:00: d8:0a:06:24:59:da:0c:90:35:09:a5:a7:8b:59:d6:bd:f3:f9: 95:c5:35:a9:2e:d1:8e:a4:8c:e0:c5:43:f7:1a:50:9f:ea:c5: 30:fd:66:46:16:c9:bf:43:5e:05:48:2f:7e:0a:53:c3:b1:9d: c0:4f:cc:72:34:31:32:2c:5d:6e:be:e9:17:42:26:79:c9:6e: a8:da:b5:ac:36:02:6b:7b:74:3e:32:af:ea:7f:50:43:63:25: b3:ce:c5:61:87:0b:c2:19:3a:f7:a5:1b:f6:99:5d:76:b7:a6: b0:50:df:f4:71:32:9c:71:03:3b:f2:89:e2:20:9d:3c:0b:1c: b8:cb:1d:3c:82:02:62:2c:87:89:15:62:72:27:fb:79:c4:e4: 10:16:a3:41:6c:8e:9e:9e:9b:d9:55:d5:ae:86:3c:ba:96:6d: a7:ee:20:36:e0:ef:77:cb:32:39:58:ec:83:eb:65:8d:2d:1b: 8d:1a:d3:28:1b:96:19:34:69:18:d8:06:aa:dd:82:4f:98:8d: f6:e6:9c:14:f3:03:11:27:c0:c9:0b:bc:a8:a5:a9:6f:64:2e: 46:9b:79:21 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBH5Fc2A7gPpbpAFPK+ydnkTyXcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1 RUU4MjA1MjAeFw0yNjEwMTExMTE1MzBaFw0yNjEwMTQxNTM5MzBaMDMxMTAvBgNV BAMTKEU5MjI3QUZCQTVBMjM5MzFGNjY0NUEwN0I4NDc3Mjc5QTQ1Q0QxODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChIKNRJ5luWyrt2zJc/hHxAhZE g2nTumgsMbEWuLEMSwRV7VUOXiu+9t0PAqJKKIlm2Dw2dVHswXqNdCA7nmKifYTX 61J6f0mEUQ6ajd6hYxIPV2V+Bt8ZGNWldMcwZF8kJk0n0gWF+3VHGPQE5couczf2 AAUlHXNw5luDqjEF9jMTwhkfK/t9Agj8GqStmIZxy8l2M8qgmoPloXzoAlLB3bSy S+zSinYjUrk9vbwOXU3WLyIRi+hOT8LM3x+DxD7NsgF1jaHnHMfjA6bSeITYHitZ MkZHqViCV43Au9XBogPHqB8/PdZON36cubSFtBbqy7b4j/M+cl/idZSjyvGDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6SJ6+6WiOTH2ZFoHuEdyeaRc0YUwHwYDVR0j BBgwFoAUNRjB5wsw1QHsCAO4XlL1kF7oIFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk1ODAxODE4MjM0ODgwMS8wLzM1MThDMUU3MEIzMEQ1MDFFQzA4MDNCODVFNTJG NTkwNUVFODIwNTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1RUU4MjA1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NTgwMTgxODIzNDg4MDEvMC8zNTE4QzFFNzBCMzBE NTAxRUMwODAzQjg1RTUyRjU5MDVFRTgyMDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZ3QpgL21y7i K+CaLsKhlG20a5hw0ugdXl2kVBEXhdNZcdEA2AoGJFnaDJA1CaWni1nWvfP5lcU1 qS7RjqSM4MVD9xpQn+rFMP1mRhbJv0NeBUgvfgpTw7GdwE/McjQxMixdbr7pF0Im ecluqNq1rDYCa3t0PjKv6n9QQ2Mls87FYYcLwhk696Ub9plddremsFDf9HEynHED O/KJ4iCdPAscuMsdPIICYiyHiRVicif7ecTkEBajQWyOnp6b2VXVroY8upZtp+4g NuDvd8syOVjsg+tljS0bjRrTKBuWGTRpGNgGqt2CT5iN9uacFPMDESfAyQu8qKWp b2QuRpt5IQ== -----END CERTIFICATE-----Generated at Mon Oct 12 00:41:17 2026 by rpki-client