$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft File: 5CFD6F5150236B766305D5CD47F180D751FBED31.mft (raw, json) Hash identifier: eQxE5BmuuZ8nWGfP1c5vXsBy7NRvPY6mY23x8VOGLjM= Subject key identifier: 24:DD:D9:B0:A9:B8:1C:24:DA:BA:33:49:F7:8B:6E:8D:96:68:4E:6D Authority key identifier: 5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 Certificate issuer: /CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Certificate serial: 497B60F51F1E6388A0B0378A1387A22AEB3C3394 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft Manifest number: C8 Signing time: Wed 14 Oct 2026 06:48:38 +0000 Manifest this update: Wed 14 Oct 2026 06:43:38 +0000 Manifest next update: Sat 17 Oct 2026 15:49:38 +0000 Files and hashes: 1: 3136332e36312e3137382e302f32332d3233203d3e2034383136.roa (hash: kzkct/XMGGZmPvSWm/qwliS7VkV51M4mNi2s4idW3VI=) 2: 5CFD6F5150236B766305D5CD47F180D751FBED31.crl (hash: zb2fVQbt12FT8N6Vi1Q1Cqe4pFed+f2VxfSpLxhk1Vo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:7b:60:f5:1f:1e:63:88:a0:b0:37:8a:13:87:a2:2a:eb:3c:33:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Validity Not Before: Oct 14 06:43:38 2026 GMT Not After : Oct 17 15:49:38 2026 GMT Subject: CN=24DDD9B0A9B81C24DABA3349F78B6E8D96684E6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6d:6f:fa:91:a5:8b:7f:92:f6:c4:69:05:30: 92:15:9c:e0:cc:e3:02:03:a2:83:5b:49:91:cd:67: 6d:ae:49:b2:0c:47:9b:61:cd:aa:d1:d5:c8:4a:80: 31:25:d8:79:dc:3d:c6:51:ca:2c:e7:26:01:4c:f5: 31:9e:ff:93:27:af:a5:13:28:10:12:03:27:2c:d6: 99:cb:44:70:7f:a7:c4:ba:db:3b:24:95:e1:22:23: 16:1d:10:9f:12:01:ba:a4:c5:0a:08:2b:58:9d:c8: aa:2a:53:0d:49:83:e7:60:34:c7:ea:bb:12:ca:f3: b6:1d:96:f1:25:84:3e:77:fa:ab:c7:6f:38:1b:36: 88:ad:a1:b3:3e:ff:e8:07:60:2f:47:47:b9:c2:a7: ef:6e:eb:b6:0a:e7:d2:c7:77:6c:f2:5f:63:01:9b: 19:9f:0c:0f:ab:e0:46:81:00:77:a2:c6:fb:de:09: 99:a8:2a:f4:3c:d3:46:7e:fc:2e:19:77:b1:d0:7b: a2:81:a5:55:66:9d:db:49:98:49:ba:4f:2b:a1:06: 5f:07:8a:19:88:b9:88:89:7c:a6:25:d1:3c:97:cd: 3b:18:f3:40:b9:b1:35:32:ef:d8:85:41:6c:5a:5e: 38:f4:52:69:5e:10:66:17:c6:f1:6c:f9:c1:5f:ad: 1c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DD:D9:B0:A9:B8:1C:24:DA:BA:33:49:F7:8B:6E:8D:96:68:4E:6D X509v3 Authority Key Identifier: keyid:5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:28:bb:d1:1e:9e:03:e7:ad:d8:a6:e3:59:03:6a:cb:2a:8f: f1:56:ec:12:1f:4f:98:52:f0:45:dc:d7:1e:75:db:3a:13:d3: e3:9d:be:ab:12:f0:5f:9c:22:bb:da:29:79:d3:ed:9f:1a:0f: e8:7d:31:d5:21:76:42:d5:a6:35:45:a5:48:e6:56:d2:e1:8d: e9:fd:92:1e:a9:40:e0:5c:c3:b6:03:38:54:15:d7:e6:bf:40: e2:79:30:e9:93:6f:a1:04:59:42:b4:81:3f:b8:c6:2e:2d:d5: 54:5a:cc:d9:a5:aa:45:9b:64:5a:0c:bf:d6:0e:66:91:11:90: 07:bc:a9:4f:69:bb:90:d1:59:82:dd:f0:59:6f:b2:a0:10:3c: fc:79:d1:c0:b4:23:02:8b:05:b1:61:e7:84:ee:4a:c7:48:87: cd:c1:06:91:a2:6d:6f:5d:1b:c4:50:17:30:68:88:f6:5f:3e: a6:86:a3:bf:9c:ea:5f:fc:2d:e3:d3:fe:6b:60:95:26:be:59: 35:b9:60:5c:8f:71:84:50:62:91:c7:c1:e2:9d:8d:99:03:b2: 00:82:5b:e0:48:40:2a:5a:15:39:fd:92:cb:a0:bf:50:ee:76: 3f:32:89:d8:6e:43:f9:7f:4b:22:e2:0a:6a:d1:87:ed:da:72: e4:60:e0:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSXtg9R8eY4igsDeKE4eiKus8M5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1 MUZCRUQzMTAeFw0yNjEwMTQwNjQzMzhaFw0yNjEwMTcxNTQ5MzhaMDMxMTAvBgNV BAMTKDI0REREOUIwQTlCODFDMjREQUJBMzM0OUY3OEI2RThEOTY2ODRFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmbW/6kaWLf5L2xGkFMJIVnODM 4wIDooNbSZHNZ22uSbIMR5thzarR1chKgDEl2HncPcZRyiznJgFM9TGe/5Mnr6UT KBASAycs1pnLRHB/p8S62zskleEiIxYdEJ8SAbqkxQoIK1idyKoqUw1Jg+dgNMfq uxLK87YdlvElhD53+qvHbzgbNoitobM+/+gHYC9HR7nCp+9u67YK59LHd2zyX2MB mxmfDA+r4EaBAHeixvveCZmoKvQ800Z+/C4Zd7HQe6KBpVVmndtJmEm6TyuhBl8H ihmIuYiJfKYl0TyXzTsY80C5sTUy79iFQWxaXjj0UmleEGYXxvFs+cFfrRznAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJN3ZsKm4HCTaujNJ94tujZZoTm0wHwYDVR0j BBgwFoAUXP1vUVAja3ZjBdXNR/GA11H77TEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQyMzczNTA3NTM3MzA1OS8wLzVDRkQ2RjUxNTAyMzZCNzY2MzA1RDVDRDQ3RjE4 MEQ3NTFGQkVEMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1MUZCRUQzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MjM3MzUwNzUzNzMwNTkvMC81Q0ZENkY1MTUwMjM2 Qjc2NjMwNUQ1Q0Q0N0YxODBENzUxRkJFRDMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSi70R6eA+et 2KbjWQNqyyqP8VbsEh9PmFLwRdzXHnXbOhPT452+qxLwX5wiu9opedPtnxoP6H0x 1SF2QtWmNUWlSOZW0uGN6f2SHqlA4FzDtgM4VBXX5r9A4nkw6ZNvoQRZQrSBP7jG Li3VVFrM2aWqRZtkWgy/1g5mkRGQB7ypT2m7kNFZgt3wWW+yoBA8/HnRwLQjAosF sWHnhO5Kx0iHzcEGkaJtb10bxFAXMGiI9l8+poajv5zqX/wt49P+a2CVJr5ZNblg XI9xhFBikcfB4p2NmQOyAIJb4EhAKloVOf2Sy6C/UO52PzKJ2G5D+X9LIuIKatGH 7dpy5GDgUA== -----END CERTIFICATE-----Generated at Thu Oct 15 00:24:38 2026 by rpki-client