$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft File: D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft (raw, json) Hash identifier: vPExHYgJssZo3E9A4UR9xcQvWWLitLLkwFHc/nYxTlo= Subject key identifier: 62:90:7D:48:09:A4:82:88:DB:2D:F6:A4:B6:7C:9D:E6:83:0C:89:63 Authority key identifier: D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A Certificate issuer: /CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Certificate serial: 4337486D9A52C2D01E1611AFE88CE04352C8AA9A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft Manifest number: C7 Signing time: Sat 10 Oct 2026 06:34:24 +0000 Manifest this update: Sat 10 Oct 2026 06:29:24 +0000 Manifest next update: Tue 13 Oct 2026 18:09:24 +0000 Files and hashes: 1: D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl (hash: hB4iSLPse7MivR9Ia3X/MwJ7ie7F58tBdAg7OhIWW6U=) 2: 3136332e35332e36302e302f32322d3234203d3e2034383437.roa (hash: zCJovD2eqwILcdrWcNck/IH71jbfkBr6uE1e6yDoCn4=) 3: 3231382e3234352e34382e302f32302d3234203d3e2034383437.roa (hash: 7EQlIaV2yI/gfHucxhcFCwdlOro72lQsQV9a2/1Pvws=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:37:48:6d:9a:52:c2:d0:1e:16:11:af:e8:8c:e0:43:52:c8:aa:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8652A391E44DB4EE76BEE76A4C433F666BB507A Validity Not Before: Oct 10 06:29:24 2026 GMT Not After : Oct 13 18:09:24 2026 GMT Subject: CN=62907D4809A48288DB2DF6A4B67C9DE6830C8963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:aa:c2:2e:ff:e3:ca:8a:18:08:94:33:95: 16:a1:4c:ad:49:76:3f:0c:ab:5f:26:3a:9b:3b:44: 09:c5:bc:1b:95:fd:98:e6:b2:6d:bd:11:39:c1:99: cf:07:27:e3:f9:04:a4:e4:52:1d:11:d9:1d:72:77: b7:a2:fe:3f:b6:b1:3d:77:7f:5e:d3:8f:02:d1:a8: 8f:4b:1e:f2:e0:92:90:49:32:89:97:78:bf:74:12: 04:5f:35:3d:84:7e:04:b5:75:bd:03:bf:2a:b8:df: de:40:56:f5:b1:2d:c8:5d:13:d9:23:be:ab:2a:10: 04:60:75:00:b4:2a:a0:65:51:15:c9:1b:aa:20:11: ac:e3:fd:4c:ac:39:a5:f5:3c:89:21:e9:fe:fd:e5: 60:8b:45:4e:87:03:af:df:25:50:32:5f:4c:fa:e2: 56:f3:e4:f5:db:7e:51:01:40:1d:62:1f:b6:80:c2: 1d:ca:9f:38:d6:53:d2:bb:8c:e8:ee:fa:72:39:e4: 58:98:e5:b2:86:21:a0:f4:d2:f4:52:4d:51:fd:07: 07:f8:ea:4c:df:2d:97:22:41:71:1d:31:6c:33:90: db:13:70:29:02:18:21:04:9c:31:7d:6c:ff:6c:4c: 44:de:3b:5a:26:bb:ec:16:14:de:49:7c:74:c0:ea: c5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:90:7D:48:09:A4:82:88:DB:2D:F6:A4:B6:7C:9D:E6:83:0C:89:63 X509v3 Authority Key Identifier: keyid:D8:65:2A:39:1E:44:DB:4E:E7:6B:EE:76:A4:C4:33:F6:66:BB:50:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8652A391E44DB4EE76BEE76A4C433F666BB507A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097027706349944834/0/D8652A391E44DB4EE76BEE76A4C433F666BB507A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:02:0f:51:ca:4c:aa:e8:30:0c:8c:e6:25:82:73:d7:d6:a5: 76:50:bd:05:3b:d3:e6:35:5a:da:8c:23:5c:45:78:1c:58:43: 16:5d:9d:83:6b:b5:c1:de:08:c8:7e:23:2d:5c:c5:b2:fb:f6: e8:b0:fb:9e:09:cf:67:a4:2e:4a:63:e1:b0:b7:42:96:68:e4: 89:04:f2:ce:99:92:58:a3:e5:50:96:4c:ab:8a:a2:0f:6f:34: 38:72:e1:2f:2a:d4:22:97:ae:88:5a:27:39:96:1b:a1:1d:c3: cf:1b:42:bb:67:14:71:14:43:6c:4b:89:2d:ce:bb:2e:c4:9c: 4a:36:aa:ad:0b:b9:f9:06:45:e1:d8:63:8d:44:9b:32:64:6a: 2e:26:6a:fc:c1:e0:bc:20:6c:6b:b8:44:1e:99:6c:97:e1:76: 42:48:f4:8d:5f:8a:02:39:00:13:db:fc:0b:2d:2c:77:96:36: 9d:60:34:a7:73:d8:ab:25:0e:9a:b7:74:c1:b9:b5:95:9c:4c: df:f1:24:fa:2d:02:7c:3f:a4:65:e7:45:98:fe:cc:dc:d3:a3: 75:fa:f7:9a:d8:49:20:79:3e:f1:82:c9:af:94:8b:dc:8c:1f: 52:0d:41:f6:c7:82:08:65:85:68:aa:bf:7e:e5:4d:42:85:b1: 8b:53:ca:90 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQzdIbZpSwtAeFhGv6IzgQ1LIqpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2 NkJCNTA3QTAeFw0yNjEwMTAwNjI5MjRaFw0yNjEwMTMxODA5MjRaMDMxMTAvBgNV BAMTKDYyOTA3RDQ4MDlBNDgyODhEQjJERjZBNEI2N0M5REU2ODMwQzg5NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiZarCLv/jyooYCJQzlRahTK1J dj8Mq18mOps7RAnFvBuV/Zjmsm29ETnBmc8HJ+P5BKTkUh0R2R1yd7ei/j+2sT13 f17TjwLRqI9LHvLgkpBJMomXeL90EgRfNT2EfgS1db0Dvyq4395AVvWxLchdE9kj vqsqEARgdQC0KqBlURXJG6ogEazj/UysOaX1PIkh6f795WCLRU6HA6/fJVAyX0z6 4lbz5PXbflEBQB1iH7aAwh3KnzjWU9K7jOju+nI55FiY5bKGIaD00vRSTVH9Bwf4 6kzfLZciQXEdMWwzkNsTcCkCGCEEnDF9bP9sTETeO1omu+wWFN5JfHTA6sXhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYpB9SAmkgojbLfaktnyd5oMMiWMwHwYDVR0j BBgwFoAU2GUqOR5E207na+52pMQz9ma7UHowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAyNzcwNjM0OTk0NDgzNC8wL0Q4NjUyQTM5MUU0NERCNEVFNzZCRUU3NkE0QzQz M0Y2NjZCQjUwN0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDg2NTJBMzkxRTQ0REI0RUU3NkJFRTc2QTRDNDMzRjY2NkJCNTA3QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMjc3MDYzNDk5NDQ4MzQvMC9EODY1MkEzOTFFNDRE QjRFRTc2QkVFNzZBNEM0MzNGNjY2QkI1MDdBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgIPUcpMqugw DIzmJYJz19aldlC9BTvT5jVa2owjXEV4HFhDFl2dg2u1wd4IyH4jLVzFsvv26LD7 ngnPZ6QuSmPhsLdClmjkiQTyzpmSWKPlUJZMq4qiD280OHLhLyrUIpeuiFonOZYb oR3DzxtCu2cUcRRDbEuJLc67LsScSjaqrQu5+QZF4dhjjUSbMmRqLiZq/MHgvCBs a7hEHplsl+F2Qkj0jV+KAjkAE9v8Cy0sd5Y2nWA0p3PYqyUOmrd0wbm1lZxM3/Ek +i0CfD+kZedFmP7M3NOjdfr3mthJIHk+8YLJr5SL3IwfUg1B9seCCGWFaKq/fuVN QoWxi1PKkA== -----END CERTIFICATE-----Generated at Mon Oct 12 03:56:18 2026 by rpki-client