$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft File: C979A435EE505D2600A38B057A1D127AADD915A7.mft (raw, json) Hash identifier: N7Q5LejLESKJVPdg/wKwRu8RpC/YEEI80IKY8YApurk= Subject key identifier: 2B:11:F9:AA:66:D1:C2:2E:77:B5:14:1E:03:CD:BD:A8:66:A5:87:90 Authority key identifier: C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7 Certificate issuer: /CN=C979A435EE505D2600A38B057A1D127AADD915A7 Certificate serial: 4A799F81B8D16AB616546104ADDAD4DD27864A0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft Manifest number: CC Signing time: Sat 10 Oct 2026 14:14:45 +0000 Manifest this update: Sat 10 Oct 2026 14:09:45 +0000 Manifest next update: Wed 14 Oct 2026 00:07:45 +0000 Files and hashes: 1: 3130332e37362e36302e302f32342d3234203d3e2034383038.roa (hash: /xosB0TsalVA+/g/evhLN/MlZ9E8k9vk5vIHiIct5vs=) 2: 3130332e37362e36312e302f32342d3234203d3e2034383038.roa (hash: qHJ8SjuvP/L0FU1ZBFGW45FTPNVLPsl6rSF7Z151E0Y=) 3: 3130332e37362e36322e302f32342d3234203d3e2034383038.roa (hash: VrPCCEa9ouGYNn5oJQcrMRBIma1uSJAfNKk550Y6VWw=) 4: C979A435EE505D2600A38B057A1D127AADD915A7.crl (hash: Cd7cuD6LWd7avkl+Xom/M352MCQxULBmUOAdp0/DJ0c=) 5: 3130332e37362e36332e302f32342d3234203d3e2034383038.roa (hash: ZTMv3No6G4Zfxi018iFJfqQZ3eR7To+7x4M04JylFww=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:79:9f:81:b8:d1:6a:b6:16:54:61:04:ad:da:d4:dd:27:86:4a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C979A435EE505D2600A38B057A1D127AADD915A7 Validity Not Before: Oct 10 14:09:45 2026 GMT Not After : Oct 14 00:07:45 2026 GMT Subject: CN=2B11F9AA66D1C22E77B5141E03CDBDA866A58790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:42:7a:75:72:c7:f4:e2:b6:e6:a7:27:51:8c: 61:6e:6a:7e:d4:f3:65:a9:ed:63:9b:e5:bb:ba:be: 7c:14:37:25:8b:29:13:7a:84:79:5d:16:1f:10:21: 1c:0a:9e:70:b5:1e:05:c3:58:be:26:a5:d9:10:0d: f1:c7:ac:9e:d6:85:1e:d0:79:04:99:50:52:86:af: 6f:74:a8:64:a7:90:b0:63:38:99:2b:f7:e7:d2:61: ce:b1:cb:2b:06:7f:f3:48:16:3b:53:cd:f3:cf:b0: ad:7d:6c:00:03:d8:50:da:bf:a2:89:96:eb:e6:35: 25:de:21:2f:96:c8:1c:6c:0b:6a:8a:ff:96:2a:ee: a6:22:40:02:5d:b1:fe:54:23:96:ef:82:a3:86:e0: a1:c6:1e:84:87:a1:93:9a:62:55:68:68:eb:1a:33: 37:13:3c:c0:27:e9:42:4a:90:01:d8:a1:04:2e:23: 90:e7:9e:93:ea:8f:d8:56:60:3d:f5:18:55:46:9e: 9e:0c:50:88:b0:e4:f1:8e:3a:4e:9d:72:6b:91:5f: ae:ed:52:1c:2a:d4:af:59:b3:7f:c2:ab:bd:ea:3d: 8b:8b:15:f4:cd:b3:a6:22:1e:96:fa:55:95:f0:a1: 66:93:98:ea:bd:30:3d:b3:39:e0:47:ad:58:57:5f: fa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:11:F9:AA:66:D1:C2:2E:77:B5:14:1E:03:CD:BD:A8:66:A5:87:90 X509v3 Authority Key Identifier: keyid:C9:79:A4:35:EE:50:5D:26:00:A3:8B:05:7A:1D:12:7A:AD:D9:15:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C979A435EE505D2600A38B057A1D127AADD915A7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096002718172053505/0/C979A435EE505D2600A38B057A1D127AADD915A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:7e:7b:c1:c8:dc:af:73:78:e7:83:62:4a:c6:2f:53:b2:ec: ce:e7:a0:35:0b:2a:02:9f:80:69:f9:61:c7:77:b0:ea:02:8b: 2f:b4:61:3a:0d:60:d9:5e:ab:ee:a9:73:d6:11:e0:2a:b4:f6: 50:dd:ee:a9:d1:86:6a:f6:a0:98:45:61:68:6b:9b:93:6a:7a: 2a:97:f9:1b:45:78:47:19:dc:e8:41:22:00:18:ba:24:35:79: 4b:1a:7f:fd:92:fe:27:27:0a:9c:37:7a:5c:a5:5f:30:19:b2: 91:6e:79:81:4f:35:67:5c:2a:ef:e1:30:54:b2:b1:bf:43:60: 2a:50:b3:7e:ea:69:ba:d0:0b:63:29:92:87:1a:b7:24:08:00: 2c:b5:57:60:ab:c6:e1:d5:38:75:06:14:8d:b5:22:0a:74:f3: a2:f6:37:9b:1a:f3:a0:e5:d9:8b:e4:95:62:fe:85:90:dd:7c: 58:f1:3f:04:26:78:db:c5:93:ff:b8:bf:64:50:03:bf:fc:1b: a2:59:e9:f1:2a:bb:1e:37:c2:62:2c:81:69:1e:53:27:a2:49: 38:98:ea:c7:37:ae:7b:88:eb:46:97:eb:ed:29:10:02:ff:56: ff:ec:cb:24:fb:71:80:99:a3:ae:0e:ce:71:9f:11:ed:94:11: ec:50:46:cd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSnmfgbjRarYWVGEErdrU3SeGSgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk3OUE0MzVFRTUwNUQyNjAwQTM4QjA1N0ExRDEyN0FB REQ5MTVBNzAeFw0yNjEwMTAxNDA5NDVaFw0yNjEwMTQwMDA3NDVaMDMxMTAvBgNV BAMTKDJCMTFGOUFBNjZEMUMyMkU3N0I1MTQxRTAzQ0RCREE4NjZBNTg3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEQnp1csf04rbmpydRjGFuan7U 82Wp7WOb5bu6vnwUNyWLKRN6hHldFh8QIRwKnnC1HgXDWL4mpdkQDfHHrJ7WhR7Q eQSZUFKGr290qGSnkLBjOJkr9+fSYc6xyysGf/NIFjtTzfPPsK19bAAD2FDav6KJ luvmNSXeIS+WyBxsC2qK/5Yq7qYiQAJdsf5UI5bvgqOG4KHGHoSHoZOaYlVoaOsa MzcTPMAn6UJKkAHYoQQuI5DnnpPqj9hWYD31GFVGnp4MUIiw5PGOOk6dcmuRX67t Uhwq1K9Zs3/Cq73qPYuLFfTNs6YiHpb6VZXwoWaTmOq9MD2zOeBHrVhXX/pnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKxH5qmbRwi53tRQeA829qGalh5AwHwYDVR0j BBgwFoAUyXmkNe5QXSYAo4sFeh0Seq3ZFacwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjAwMjcxODE3MjA1MzUwNS8wL0M5NzlBNDM1RUU1MDVEMjYwMEEzOEIwNTdBMUQx MjdBQUREOTE1QTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzk3OUE0MzVFRTUwNUQyNjAwQTM4QjA1N0ExRDEyN0FBREQ5MTVBNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYwMDI3MTgxNzIwNTM1MDUvMC9DOTc5QTQzNUVFNTA1 RDI2MDBBMzhCMDU3QTFEMTI3QUFERDkxNUE3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFH57wcjcr3N4 54NiSsYvU7LszuegNQsqAp+Aaflhx3ew6gKLL7RhOg1g2V6r7qlz1hHgKrT2UN3u qdGGavagmEVhaGubk2p6Kpf5G0V4Rxnc6EEiABi6JDV5Sxp//ZL+JycKnDd6XKVf MBmykW55gU81Z1wq7+EwVLKxv0NgKlCzfupputALYymShxq3JAgALLVXYKvG4dU4 dQYUjbUiCnTzovY3mxrzoOXZi+SVYv6FkN18WPE/BCZ428WT/7i/ZFADv/wbolnp 8Sq7HjfCYiyBaR5TJ6JJOJjqxzeue4jrRpfr7SkQAv9W/+zLJPtxgJmjrg7OcZ8R 7ZQR7FBGzQ== -----END CERTIFICATE-----Generated at Sun Oct 11 21:13:16 2026 by rpki-client