$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft File: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft (raw, json) Hash identifier: GDYXLwAaF8lJuL1s5FFvfg4zfDZD3VLY5KUZ9DEg79k= Subject key identifier: 0C:1F:40:AB:09:A2:FD:D6:26:37:24:7D:3F:8F:9C:8C:73:69:8D:6C Authority key identifier: 28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E Certificate issuer: /CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Certificate serial: 0313A068C0BCC72F8E0B40DF0BFD01107E143DEB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft Manifest number: C8 Signing time: Sat 10 Oct 2026 08:04:27 +0000 Manifest this update: Sat 10 Oct 2026 07:59:27 +0000 Manifest next update: Tue 13 Oct 2026 08:25:27 +0000 Files and hashes: 1: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl (hash: /40tQpA/OebGw5HKP7/yixBNUwgpg/+6aobRKeFt/l8=) 2: 3230322e3133362e37322e302f32332d3233203d3e2034383437.roa (hash: 0UAAnHGmhpgwD4Y3MO/hfVMnkyeKLb0Kzm5dHFM3DRY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 08:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:13:a0:68:c0:bc:c7:2f:8e:0b:40:df:0b:fd:01:10:7e:14:3d:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Validity Not Before: Oct 10 07:59:27 2026 GMT Not After : Oct 13 08:25:27 2026 GMT Subject: CN=0C1F40AB09A2FDD62637247D3F8F9C8C73698D6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3b:b0:be:31:9c:d5:6b:85:6f:b8:2f:e7:71: cc:41:18:8c:8c:b3:1f:be:95:5a:c7:7e:6a:bc:21: 4c:32:5d:81:2c:f2:22:15:93:bd:b8:bc:2e:30:b5: cb:fd:7c:a8:27:62:65:a6:f8:35:ea:1a:3e:ab:ac: c9:32:9e:e3:31:c8:fb:8d:09:b2:1a:e9:8a:26:e1: ff:b2:f8:8d:54:31:4d:36:99:f3:f6:c0:dc:2c:99: 8a:2e:69:16:63:15:b8:40:26:01:75:9a:ea:6b:99: f3:2c:d4:c4:20:3a:1a:48:a3:73:93:67:d6:06:eb: 59:db:ee:3f:ae:b9:9e:e6:ca:d4:63:54:f3:3d:4a: 6b:2f:84:16:bf:fa:11:12:e4:a6:db:b0:98:60:ad: e2:08:12:2c:2e:5e:6e:49:f7:62:a1:9e:81:7b:88: 86:8f:32:82:0c:3d:e3:dc:8e:d1:de:c0:e0:35:71: fa:1e:96:f8:d5:f4:41:ef:c5:72:ad:34:c0:b1:5c: af:3a:14:c7:ee:7a:ae:2c:60:94:00:55:90:c2:3c: 19:29:69:1d:89:15:12:c2:1b:48:2f:88:fe:16:0e: 25:a3:0e:7d:00:43:8f:fa:bb:0c:e1:42:e9:de:49: 23:a6:32:c4:2b:cc:06:aa:7b:53:7a:0f:a0:e4:7c: 67:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1F:40:AB:09:A2:FD:D6:26:37:24:7D:3F:8F:9C:8C:73:69:8D:6C X509v3 Authority Key Identifier: keyid:28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:56:a0:a7:75:85:27:b2:17:98:5a:6b:35:49:97:5c:d1:c6: c0:04:2b:f7:28:5d:b8:6a:7b:ed:5c:0c:11:c6:21:ef:a0:9b: 61:fd:82:c9:83:5d:ec:8f:ae:6a:e5:7b:ec:c7:c5:d1:b3:4d: 5e:d3:48:f6:e1:ba:fd:61:f3:e6:38:96:fb:2a:7c:9e:50:ad: ed:97:fc:1b:46:cc:01:48:cb:f1:26:cb:af:bd:fd:21:f5:3a: 84:12:68:48:f8:b3:c8:aa:1b:ff:b4:0c:e1:e1:27:bf:8d:1c: 3f:3d:af:00:8d:27:f5:a8:72:35:9f:7a:83:90:5e:5b:84:56: ff:9a:d2:51:41:ea:29:1e:ab:6e:55:08:57:2f:d3:4a:d1:a8: b4:80:ae:bc:68:a8:e1:2b:17:7d:3e:98:51:f7:30:c2:7e:48: 23:91:75:8a:ed:ee:14:2c:83:4f:56:77:9b:59:40:30:59:75: ef:46:0a:22:7e:e9:b4:68:5d:49:66:93:b7:d3:a1:7d:52:88: 1d:10:bb:99:e9:45:43:24:30:40:03:64:fa:9f:35:9c:d6:fa: 78:bb:64:3d:58:81:07:bd:10:41:8a:50:77:d4:8a:dd:f7:d2: 85:99:6e:9d:73:00:99:7a:32:f9:a1:2b:52:75:62:de:43:f6: 0f:80:84:7e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAxOgaMC8xy+OC0DfC/0BEH4UPeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2 Q0I2MEQ2RTAeFw0yNjEwMTAwNzU5MjdaFw0yNjEwMTMwODI1MjdaMDMxMTAvBgNV BAMTKDBDMUY0MEFCMDlBMkZERDYyNjM3MjQ3RDNGOEY5QzhDNzM2OThENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/O7C+MZzVa4VvuC/nccxBGIyM sx++lVrHfmq8IUwyXYEs8iIVk724vC4wtcv9fKgnYmWm+DXqGj6rrMkynuMxyPuN CbIa6Yom4f+y+I1UMU02mfP2wNwsmYouaRZjFbhAJgF1muprmfMs1MQgOhpIo3OT Z9YG61nb7j+uuZ7mytRjVPM9SmsvhBa/+hES5KbbsJhgreIIEiwuXm5J92KhnoF7 iIaPMoIMPePcjtHewOA1cfoelvjV9EHvxXKtNMCxXK86FMfueq4sYJQAVZDCPBkp aR2JFRLCG0gviP4WDiWjDn0AQ4/6uwzhQuneSSOmMsQrzAaqe1N6D6DkfGevAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDB9Aqwmi/dYmNyR9P4+cjHNpjWwwHwYDVR0j BBgwFoAUKJJR8Nyj/2rOEB5GnMtMkGy2DW4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMyODkxNzc4MzUxMTA0Mi8wLzI4OTI1MUYwRENBM0ZGNkFDRTEwMUU0NjlDQ0I0 QzkwNkNCNjBENkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2Q0I2MEQ2RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMjg5MTc3ODM1MTEwNDIvMC8yODkyNTFGMERDQTNG RjZBQ0UxMDFFNDY5Q0NCNEM5MDZDQjYwRDZFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1agp3WFJ7IX mFprNUmXXNHGwAQr9yhduGp77VwMEcYh76CbYf2CyYNd7I+uauV77MfF0bNNXtNI 9uG6/WHz5jiW+yp8nlCt7Zf8G0bMAUjL8SbLr739IfU6hBJoSPizyKob/7QM4eEn v40cPz2vAI0n9ahyNZ96g5BeW4RW/5rSUUHqKR6rblUIVy/TStGotICuvGio4SsX fT6YUfcwwn5II5F1iu3uFCyDT1Z3m1lAMFl170YKIn7ptGhdSWaTt9OhfVKIHRC7 melFQyQwQANk+p81nNb6eLtkPViBB70QQYpQd9SK3ffShZlunXMAmXoy+aErUnVi 3kP2D4CEfg== -----END CERTIFICATE-----Generated at Sun Oct 11 23:48:14 2026 by rpki-client