$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft File: 0503C0DCF2359A63935CA42978F7E95CF29425AD.mft (raw, json) Hash identifier: vmFB9utpynZFgi7VUFW+4lLcAxNyZ8I8cdEvjzQfi0w= Subject key identifier: BC:E6:16:DC:94:04:26:37:A6:5A:B8:9F:48:62:9C:36:1B:2B:9F:53 Authority key identifier: 05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD Certificate issuer: /CN=0503C0DCF2359A63935CA42978F7E95CF29425AD Certificate serial: 7B4A52A6259E6CC79E06E276D0806E14F7521FB4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft Manifest number: D8 Signing time: Mon 02 Nov 2026 14:11:52 +0000 Manifest this update: Mon 02 Nov 2026 14:06:52 +0000 Manifest next update: Thu 05 Nov 2026 23:17:52 +0000 Files and hashes: 1: 0503C0DCF2359A63935CA42978F7E95CF29425AD.crl (hash: PkPhuJB1Qu+eydfgjCZget76aBQ4fUsum5yl7m+b9P4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 21:24:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:4a:52:a6:25:9e:6c:c7:9e:06:e2:76:d0:80:6e:14:f7:52:1f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0503C0DCF2359A63935CA42978F7E95CF29425AD Validity Not Before: Nov 2 14:06:52 2026 GMT Not After : Nov 5 23:17:52 2026 GMT Subject: CN=BCE616DC94042637A65AB89F48629C361B2B9F53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ce:c9:06:d8:86:c1:5d:3b:0a:73:37:76:bd: 4c:b2:7f:5b:82:87:48:5a:44:ec:e6:a6:f3:43:1d: 5b:36:ab:75:d2:7f:cf:f7:e1:44:8d:93:ae:a6:aa: 92:72:48:63:b8:25:74:3c:ba:a3:cb:f0:83:ee:54: 81:28:e4:84:74:39:0d:3b:25:57:59:e7:9a:a9:0f: 49:56:8b:fa:5f:d2:2a:f3:52:f9:53:a8:d0:09:f7: 73:61:fd:8f:ee:e3:3f:10:9f:30:b2:bd:f6:ea:e4: 60:80:68:65:ff:df:ec:d9:1f:eb:55:54:1b:da:49: 30:1e:34:68:25:9f:83:4a:57:e2:ba:80:3c:e5:1e: 0f:ef:ab:3a:ba:21:6c:0f:4e:c9:44:98:4e:0e:60: e6:8b:8d:d1:14:d1:87:0e:3c:59:69:fd:47:9d:a5: 69:6a:62:68:df:b8:c2:fd:24:27:51:9f:b4:cc:3b: 31:2c:0e:64:e8:2c:53:ae:b3:b4:59:88:09:67:11: 17:d6:5d:63:a7:b4:60:18:11:14:64:b4:6f:c7:bd: e0:be:2a:9c:3b:17:cc:a1:5a:d0:a7:54:98:02:de: 2c:f7:37:b3:e9:47:eb:a1:25:ca:eb:c9:f9:83:6c: 8c:14:00:8d:fd:ab:16:1e:c8:5a:41:9e:28:0b:c6: 0f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E6:16:DC:94:04:26:37:A6:5A:B8:9F:48:62:9C:36:1B:2B:9F:53 X509v3 Authority Key Identifier: keyid:05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:89:56:b5:8b:d3:75:04:ca:e6:ce:3d:07:d4:8d:d3:7f:be: cd:dd:68:75:1c:4f:dc:ea:b4:fc:2f:b3:dd:cb:35:e7:f1:62: df:36:95:9a:d5:66:98:85:96:75:48:15:76:2c:6b:e7:80:9c: 35:7a:6a:1b:55:d5:0a:0c:a4:27:67:d4:27:2c:a3:dc:8c:07: 73:fd:f0:c3:2d:ff:e9:e2:9c:5e:e4:db:8e:43:58:f4:b5:93: 6f:77:39:b4:23:08:09:74:8c:e7:1d:b5:07:ee:e0:18:56:39: 2f:39:5a:21:b9:e1:d1:6f:5b:1e:89:b4:08:fe:37:7d:ee:53: d8:e4:d5:9d:06:37:e3:51:a8:ed:ed:1a:46:ac:03:a3:23:23: 3e:dd:f2:88:9e:a4:33:a4:f8:65:1a:e2:43:97:30:c0:56:1a: e9:0f:9e:a5:89:08:83:57:28:f1:05:cd:bc:b8:36:e5:87:5a: 0c:82:7c:cf:c0:5f:5f:59:c6:25:27:24:ee:94:3c:f7:5a:8a: 22:59:62:97:e8:28:2a:59:75:65:52:a2:bd:04:31:d5:2b:2b: 3b:2b:67:28:57:4f:04:66:ad:9e:82:ab:23:61:7d:c0:ff:f6: 9a:9c:42:d3:3b:65:40:71:45:c7:76:78:ab:3f:9a:f8:13:6c: bc:eb:16:bd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe0pSpiWebMeeBuJ20IBuFPdSH7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNG Mjk0MjVBRDAeFw0yNjExMDIxNDA2NTJaFw0yNjExMDUyMzE3NTJaMDMxMTAvBgNV BAMTKEJDRTYxNkRDOTQwNDI2MzdBNjVBQjg5RjQ4NjI5QzM2MUIyQjlGNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCczskG2IbBXTsKczd2vUyyf1uC h0haROzmpvNDHVs2q3XSf8/34USNk66mqpJySGO4JXQ8uqPL8IPuVIEo5IR0OQ07 JVdZ55qpD0lWi/pf0irzUvlTqNAJ93Nh/Y/u4z8QnzCyvfbq5GCAaGX/3+zZH+tV VBvaSTAeNGgln4NKV+K6gDzlHg/vqzq6IWwPTslEmE4OYOaLjdEU0YcOPFlp/Ued pWlqYmjfuML9JCdRn7TMOzEsDmToLFOus7RZiAlnERfWXWOntGAYERRktG/HveC+ Kpw7F8yhWtCnVJgC3iz3N7PpR+uhJcrryfmDbIwUAI39qxYeyFpBnigLxg9jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvOYW3JQEJjemWrifSGKcNhsrn1MwHwYDVR0j BBgwFoAUBQPA3PI1mmOTXKQpePfpXPKUJa0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMwMTE0OTM3MzM5OTA0MS8wLzA1MDNDMERDRjIzNTlBNjM5MzVDQTQyOTc4RjdF OTVDRjI5NDI1QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNGMjk0MjVBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMDExNDkzNzMzOTkwNDEvMC8wNTAzQzBEQ0YyMzU5 QTYzOTM1Q0E0Mjk3OEY3RTk1Q0YyOTQyNUFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARolWtYvTdQTK 5s49B9SN03++zd1odRxP3Oq0/C+z3cs15/Fi3zaVmtVmmIWWdUgVdixr54CcNXpq G1XVCgykJ2fUJyyj3IwHc/3wwy3/6eKcXuTbjkNY9LWTb3c5tCMICXSM5x21B+7g GFY5LzlaIbnh0W9bHom0CP43fe5T2OTVnQY341Go7e0aRqwDoyMjPt3yiJ6kM6T4 ZRriQ5cwwFYa6Q+epYkIg1co8QXNvLg25YdaDIJ8z8BfX1nGJSck7pQ891qKIlli l+goKll1ZVKivQQx1SsrOytnKFdPBGatnoKrI2F9wP/2mpxC0ztlQHFFx3Z4qz+a +BNsvOsWvQ== -----END CERTIFICATE-----Generated at Tue Nov 3 23:59:52 2026 by rpki-client