$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft File: 1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft (raw, json) Hash identifier: w+7t3BEpd9R9Xm2sJA/YxPQnikWwMsdyQo5FHQKbQ/Y= Subject key identifier: 40:E7:F1:AF:77:1E:2C:F8:80:0F:A6:1C:8C:26:DB:A6:80:24:C1:4A Authority key identifier: 1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1 Certificate issuer: /CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1 Certificate serial: 5A1174916CB21A39CAF147ED6FD34A7BB6B1F100 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft Manifest number: C8 Signing time: Sat 10 Oct 2026 23:05:04 +0000 Manifest this update: Sat 10 Oct 2026 23:00:04 +0000 Manifest next update: Wed 14 Oct 2026 05:00:04 +0000 Files and hashes: 1: 34332e3234322e39362e302f32322d3332203d3e20313339313138.roa (hash: VDMcp5l8FistRmUvRq8PMpiAPTDY6t5oa9rYeoWoY2o=) 2: 34332e3234322e39362e302f32322d3232203d3e2034383132.roa (hash: Zxv6uhIxhx7VGTPbbGyRLQcjWlJZ2Al9jL46q3enaIw=) 3: 1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl (hash: AfumQer3b23nVu2WScu29yNdDi+o+eN1/WciqEGUT9E=) 4: 3130332e3135362e36382e302f32332d3332203d3e20313339313138.roa (hash: JJeH7/e0S+vcP9rIL80aRLn8d98yMXZivh1TWBvd1eg=) 5: 3130332e3135362e36382e302f32332d3233203d3e2034383132.roa (hash: 7bejjbNQ3v0uT78boBdtD0q+BBCNI2h6V6F6ctkt6zc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:11:74:91:6c:b2:1a:39:ca:f1:47:ed:6f:d3:4a:7b:b6:b1:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1 Validity Not Before: Oct 10 23:00:04 2026 GMT Not After : Oct 14 05:00:04 2026 GMT Subject: CN=40E7F1AF771E2CF8800FA61C8C26DBA68024C14A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ad:1a:16:65:2a:02:64:10:65:d5:86:91:81: 9f:10:d5:80:f1:61:21:9e:83:89:62:1d:52:15:24: b1:cb:1c:51:6e:a0:78:10:44:70:b0:75:df:40:f8: 98:54:c1:c0:5f:91:0e:55:f2:03:d4:dc:ad:2c:77: b0:ab:ff:21:8f:47:7c:61:e0:d4:f1:43:78:10:f7: 98:f6:6e:32:8a:d6:21:b1:26:39:70:b6:48:ec:16: 4c:74:b0:07:b9:89:c4:1a:0c:29:fc:a3:16:85:56: 11:17:2c:18:6c:5a:aa:18:88:20:12:ac:9c:ff:7a: db:89:d7:7f:85:11:a4:c2:20:59:af:35:3c:64:38: 67:16:1d:5a:16:59:cf:18:c5:52:4d:b8:85:35:8b: 8e:34:72:25:59:9f:7d:25:ee:31:33:3f:5e:ff:34: b9:9a:2f:e4:35:14:86:62:28:f6:67:1f:e8:18:d9: ff:05:55:90:57:a0:68:08:a4:81:b6:55:04:cd:69: b2:86:6a:02:fe:75:e7:be:29:f6:3d:39:aa:4b:a4: 2b:d8:ef:f7:3f:fc:42:17:38:86:68:4c:63:9e:b0: ef:dc:cc:67:8d:23:6f:e7:d2:82:52:2f:18:7c:e6: 59:12:a5:36:e5:15:74:6e:d9:a8:5b:43:b9:aa:91: ca:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E7:F1:AF:77:1E:2C:F8:80:0F:A6:1C:8C:26:DB:A6:80:24:C1:4A X509v3 Authority Key Identifier: keyid:1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1c:d1:9c:3e:e1:8f:32:d0:83:0e:8b:7f:1c:01:05:39:46: 1a:9d:49:99:50:b4:08:3b:af:4e:c7:e0:9a:b5:90:68:68:f1: 08:5b:9a:39:66:74:a7:44:b1:40:d4:f9:7b:e2:38:9b:04:93: eb:27:e3:66:48:d0:f6:6c:ec:d2:0a:0c:80:86:c7:1f:11:90: 7a:3f:3d:ea:32:99:55:a3:b8:cd:6c:8c:85:32:c9:97:04:39: e1:f3:bb:b7:89:90:54:f0:db:40:9b:cd:fd:b0:72:7c:b6:94: 8c:bf:46:3c:d4:6b:38:02:5d:00:c6:62:dc:a0:30:0e:b6:bd: fd:e4:02:49:f5:6f:06:76:ed:a1:2e:fe:b3:d6:09:f7:b6:e7: fc:1d:a9:ab:3b:5f:8f:f8:0d:58:a3:d8:fa:96:5e:1d:13:f4: 9e:07:c6:67:b3:b4:d5:9a:37:68:05:d5:4d:34:5b:3e:cd:a6: 15:c4:94:ee:ed:ad:0f:47:02:69:04:d0:17:89:87:7c:f6:66: d1:d7:68:f4:e5:c5:31:c2:fd:51:c6:2f:f4:86:d9:70:01:a3: 04:3a:5b:9a:c1:95:72:01:5c:95:46:34:6f:e8:40:c9:41:37: 89:b3:0c:de:f4:c5:b9:1f:ec:56:45:59:09:4c:1e:a9:01:3c: 04:47:f4:35 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWhF0kWyyGjnK8Uftb9NKe7ax8QAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY2OTNDRDU3RTVFQ0NFQTBERDZBNEMwRTREOEFCMjA3 RkM1MURGMTAeFw0yNjEwMTAyMzAwMDRaFw0yNjEwMTQwNTAwMDRaMDMxMTAvBgNV BAMTKDQwRTdGMUFGNzcxRTJDRjg4MDBGQTYxQzhDMjZEQkE2ODAyNEMxNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfrRoWZSoCZBBl1YaRgZ8Q1YDx YSGeg4liHVIVJLHLHFFuoHgQRHCwdd9A+JhUwcBfkQ5V8gPU3K0sd7Cr/yGPR3xh 4NTxQ3gQ95j2bjKK1iGxJjlwtkjsFkx0sAe5icQaDCn8oxaFVhEXLBhsWqoYiCAS rJz/etuJ13+FEaTCIFmvNTxkOGcWHVoWWc8YxVJNuIU1i440ciVZn30l7jEzP17/ NLmaL+Q1FIZiKPZnH+gY2f8FVZBXoGgIpIG2VQTNabKGagL+dee+KfY9OapLpCvY 7/c//EIXOIZoTGOesO/czGeNI2/n0oJSLxh85lkSpTblFXRu2ahbQ7mqkcpDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQOfxr3ceLPiAD6YcjCbbpoAkwUowHwYDVR0j BBgwFoAUH2k81X5ezOoN1qTA5NirIH/FHfEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ2NTYyNzUxMDY2OTMxNS8wLzFGNjkzQ0Q1N0U1RUNDRUEwREQ2QTRDMEU0RDhB QjIwN0ZDNTFERjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUY2OTNDRDU3RTVFQ0NFQTBERDZBNEMwRTREOEFCMjA3RkM1MURGMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg0NjU2Mjc1MTA2NjkzMTUvMC8xRjY5M0NENTdFNUVD Q0VBMERENkE0QzBFNEQ4QUIyMDdGQzUxREYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhzRnD7hjzLQ gw6LfxwBBTlGGp1JmVC0CDuvTsfgmrWQaGjxCFuaOWZ0p0SxQNT5e+I4mwST6yfj ZkjQ9mzs0goMgIbHHxGQej896jKZVaO4zWyMhTLJlwQ54fO7t4mQVPDbQJvN/bBy fLaUjL9GPNRrOAJdAMZi3KAwDra9/eQCSfVvBnbtoS7+s9YJ97bn/B2pqztfj/gN WKPY+pZeHRP0ngfGZ7O01Zo3aAXVTTRbPs2mFcSU7u2tD0cCaQTQF4mHfPZm0ddo 9OXFMcL9UcYv9IbZcAGjBDpbmsGVcgFclUY0b+hAyUE3ibMM3vTFuR/sVkVZCUwe qQE8BEf0NQ== -----END CERTIFICATE-----Generated at Sun Oct 11 22:41:30 2026 by rpki-client