$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft File: CFB23E5C25BCDF75B10365741E60EA1870019718.mft (raw, json) Hash identifier: +qDm3j1ZMLVlo9zbwGyPpwtAtP0p4XsBGBwmvGh1TJE= Subject key identifier: EF:3F:9A:3A:D6:1C:7E:17:52:C7:A3:E9:46:8F:FE:86:34:85:A4:94 Authority key identifier: CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 Certificate issuer: /CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Certificate serial: 2B62B8FE636B9946F4234F3543EE3B494BF79BFF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft Manifest number: CD Signing time: Fri 30 Oct 2026 00:37:37 +0000 Manifest this update: Fri 30 Oct 2026 00:32:37 +0000 Manifest next update: Mon 02 Nov 2026 11:45:37 +0000 Files and hashes: 1: 323430363a643263303a3a2f33322d3332203d3e2030.roa (hash: FwOErwlAiR3u/ZG967hSx7vY8EONG5MybUZ/8LS5gRE=) 2: CFB23E5C25BCDF75B10365741E60EA1870019718.crl (hash: H8Ah0b3CjzNvXY4Hs43ZU9vJHXj3zAz4zO0+vGBFtnQ=) 3: 3130332e3135392e3133342e302f32332d3233203d3e2030.roa (hash: NsCWtPvZZPd11fxDgtHFGg5jBBb8km/B001wul3DeR4=) 4: 3130332e3233352e3134302e302f32322d3232203d3e2030.roa (hash: KOOIm9R0YCCCAFgvNV64BXvgP060l23D5hOwzFbW7o0=) 5: 323430323a313630303a3a2f33322d3332203d3e2030.roa (hash: ihJ1MFpKmDRf0Pi6slt2kz3wUesE+0iWX9y1H+GS2Dg=) 6: 3135302e3234322e3136302e302f32322d3232203d3e2030.roa (hash: MKeIFb7EqWHM5PapPyd468bY98jUVD1BZFhXNfceQXU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 14:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:62:b8:fe:63:6b:99:46:f4:23:4f:35:43:ee:3b:49:4b:f7:9b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Validity Not Before: Oct 30 00:32:37 2026 GMT Not After : Nov 2 11:45:37 2026 GMT Subject: CN=EF3F9A3AD61C7E1752C7A3E9468FFE863485A494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:6d:ec:7f:99:6c:20:47:13:e8:d9:94:db: 5b:80:82:15:a7:9c:ec:1a:56:13:59:45:3a:c9:69: 4f:d4:8b:d8:b6:9d:6b:c6:e4:29:e3:d1:ac:ed:75: a7:50:14:e8:69:d9:da:52:50:3f:52:01:f1:25:0f: f2:a6:1d:1d:46:ed:73:d4:90:23:fd:ad:db:3c:8c: dd:74:0a:7f:a9:4c:16:ab:e2:73:58:d3:d7:53:0b: 95:61:3c:c4:d2:20:eb:04:87:fa:2d:7f:55:13:77: a5:1d:16:e8:54:4f:e6:32:3f:4f:bd:e7:fc:4e:36: d3:91:32:eb:c1:44:ce:91:d2:f7:26:25:0c:d3:ad: 7e:f0:2f:b5:cb:71:a0:8f:e6:0f:5a:bb:b2:59:72: 45:1d:00:f3:2b:6d:f6:5a:07:0a:6d:f0:4e:a0:b5: 6b:70:db:80:95:b7:f6:5c:f9:6b:ca:39:f9:14:a0: 3a:53:d3:b0:35:25:60:88:28:2b:20:95:cb:7e:6e: 95:45:1b:01:20:94:2b:56:a8:1d:03:16:0b:b9:4f: 03:8f:72:56:13:b2:9f:e0:d0:66:4f:de:ff:bf:a9: 11:99:19:e7:a8:c5:ae:98:18:9f:e8:b0:3c:4f:7b: 5f:eb:23:d9:7b:d4:67:bb:2b:ae:e9:35:a6:01:b4: 61:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3F:9A:3A:D6:1C:7E:17:52:C7:A3:E9:46:8F:FE:86:34:85:A4:94 X509v3 Authority Key Identifier: keyid:CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:cc:aa:bb:f3:c7:e1:f2:48:97:81:83:64:dd:e2:1a:e9:6a: e0:47:21:da:3e:ce:0e:c3:4c:89:db:91:29:96:54:70:80:d4: 65:94:53:ab:6e:47:2d:c5:44:fc:1f:bd:9c:69:81:d3:cc:08: 56:d1:29:48:37:16:6c:34:36:24:48:fd:8a:86:41:d3:37:f0: bf:c4:80:eb:af:2a:67:3e:58:e0:b2:5d:ef:29:bb:0f:94:0b: 68:99:86:21:7b:bb:20:be:a3:18:a5:bd:16:9d:e6:7a:13:55: fb:c3:ad:eb:30:36:84:54:8c:c4:ee:60:3a:9c:29:76:48:0d: 70:7f:2c:92:cc:35:5a:2d:4e:e3:8b:74:90:4f:85:a7:4e:0e: 62:60:00:c5:a5:59:c1:ae:d2:99:02:43:72:51:db:66:f3:19: 0f:43:0d:21:06:e4:df:18:97:24:29:13:66:1f:ff:21:95:a0: e2:65:76:51:6b:3f:46:78:9f:c9:4f:09:63:16:7e:54:58:0d: 3f:bf:2f:1a:0a:70:99:8e:ac:ec:ef:a9:15:92:69:ad:92:67: 40:7d:6d:5d:e8:5e:f0:f7:a9:23:83:1a:b3:71:13:34:a7:09: 5c:85:0e:90:bc:35:26:06:8f:fc:11:ea:b5:ea:bc:7b:da:a7: 37:65:55:78 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK2K4/mNrmUb0I081Q+47SUv3m/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3 MDAxOTcxODAeFw0yNjEwMzAwMDMyMzdaFw0yNjExMDIxMTQ1MzdaMDMxMTAvBgNV BAMTKEVGM0Y5QTNBRDYxQzdFMTc1MkM3QTNFOTQ2OEZGRTg2MzQ4NUE0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0W3sf5lsIEcT6NmU21uAghWn nOwaVhNZRTrJaU/Ui9i2nWvG5Cnj0aztdadQFOhp2dpSUD9SAfElD/KmHR1G7XPU kCP9rds8jN10Cn+pTBar4nNY09dTC5VhPMTSIOsEh/otf1UTd6UdFuhUT+YyP0+9 5/xONtORMuvBRM6R0vcmJQzTrX7wL7XLcaCP5g9au7JZckUdAPMrbfZaBwpt8E6g tWtw24CVt/Zc+WvKOfkUoDpT07A1JWCIKCsglct+bpVFGwEglCtWqB0DFgu5TwOP clYTsp/g0GZP3v+/qRGZGeeoxa6YGJ/osDxPe1/rI9l71Ge7K67pNaYBtGFPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7z+aOtYcfhdSx6PpRo/+hjSFpJQwHwYDVR0j BBgwFoAUz7I+XCW833WxA2V0HmDqGHABlxgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODgzNDgyNDc2NTg5ODc1NC8wL0NGQjIzRTVDMjVCQ0RGNzVCMTAzNjU3NDFFNjBF QTE4NzAwMTk3MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3MDAxOTcxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4MzQ4MjQ3NjU4OTg3NTQvMC9DRkIyM0U1QzI1QkNE Rjc1QjEwMzY1NzQxRTYwRUExODcwMDE5NzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcyqu/PH4fJI l4GDZN3iGulq4Ech2j7ODsNMiduRKZZUcIDUZZRTq25HLcVE/B+9nGmB08wIVtEp SDcWbDQ2JEj9ioZB0zfwv8SA668qZz5Y4LJd7ym7D5QLaJmGIXu7IL6jGKW9Fp3m ehNV+8Ot6zA2hFSMxO5gOpwpdkgNcH8sksw1Wi1O44t0kE+Fp04OYmAAxaVZwa7S mQJDclHbZvMZD0MNIQbk3xiXJCkTZh//IZWg4mV2UWs/RnifyU8JYxZ+VFgNP78v GgpwmY6s7O+pFZJprZJnQH1tXehe8PepI4Mas3ETNKcJXIUOkLw1JgaP/BHqteq8 e9qnN2VVeA== -----END CERTIFICATE-----Generated at Fri Oct 30 03:18:33 2026 by rpki-client