$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft File: F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft (raw, json) Hash identifier: Kb12+86mdS1AaffvI+y8w6uGXfwHxSCzm0m4niSyWoQ= Subject key identifier: 7B:42:8C:C8:02:33:91:91:7C:46:FA:E6:4F:17:FF:A8:63:4A:80:FC Authority key identifier: F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 Certificate issuer: /CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Certificate serial: 7A5888BE8D9261821F7B49FAB0306F1145BF6B08 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft Manifest number: C0 Signing time: Sat 10 Oct 2026 22:05:00 +0000 Manifest this update: Sat 10 Oct 2026 22:00:00 +0000 Manifest next update: Wed 14 Oct 2026 01:01:00 +0000 Files and hashes: 1: 3130332e39302e3137362e302f32322d3232203d3e2034383038.roa (hash: rewDp5XA3tfKBFOlfn+0M99oxcphkJa+FJUlVr1EWOI=) 2: 3130332e3134322e3233342e302f32332d3233203d3e2034383038.roa (hash: bK38O+wDDBO753c5azCJn5pqUThQEDZ04zoRei8ZckI=) 3: F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl (hash: D63YVXvzx1vo0MstxTyiUqY9sHLAf+F5bOMe3PwtpFw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:58:88:be:8d:92:61:82:1f:7b:49:fa:b0:30:6f:11:45:bf:6b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Validity Not Before: Oct 10 22:00:00 2026 GMT Not After : Oct 14 01:01:00 2026 GMT Subject: CN=7B428CC8023391917C46FAE64F17FFA8634A80FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:72:1d:ed:04:8e:eb:97:82:b4:81:e2:b9:11: 1c:74:f9:23:05:33:c4:05:2f:8c:c3:6e:5b:35:fa: 2c:1b:e2:f1:4e:4d:0a:57:bd:4c:c9:90:15:43:70: e9:00:ec:b5:9e:37:d9:a3:1b:5f:9a:04:73:6a:e7: 3d:29:52:1e:cb:3f:f7:3c:54:d8:ae:7f:22:fe:35: 80:bd:33:fe:14:58:02:93:99:18:b0:df:e8:28:c6: ad:52:66:2d:60:46:c9:41:20:a9:ee:71:e5:ba:d0: 95:56:32:46:1e:d6:e7:f8:06:82:f1:fd:2d:a9:1d: 22:43:2a:1b:04:5c:ad:ae:98:4e:c4:d9:b4:4e:ce: 38:5c:0b:d1:2c:17:f5:dc:53:66:01:35:6b:10:2e: 5e:37:33:cf:d2:2d:2c:b7:a7:99:2e:83:3b:a0:0b: 5e:0f:b6:4c:42:0d:50:bd:4c:30:38:70:2c:43:ee: bc:eb:6d:38:c3:6e:f8:a9:12:dc:62:9c:1f:77:06: 6b:10:36:02:58:59:2c:36:96:f9:94:e6:e5:f8:b7: 77:8d:18:d0:f5:bd:31:f8:14:09:90:ab:fc:6d:55: d3:65:79:c4:5d:e6:26:52:6a:17:dc:6c:75:68:f6: 75:7b:3b:b8:21:a3:5d:12:ac:4e:a7:6b:a4:9b:c6: db:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:42:8C:C8:02:33:91:91:7C:46:FA:E6:4F:17:FF:A8:63:4A:80:FC X509v3 Authority Key Identifier: keyid:F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:2f:7d:10:f8:cf:d6:eb:04:80:74:10:c5:d4:6f:8f:1f:1c: 2c:e1:d4:96:a0:d6:03:cc:58:ab:0e:ba:ae:e4:aa:73:de:99: 19:33:80:c1:03:c9:69:17:f8:6b:c9:d1:51:69:29:02:2b:34: 3c:2a:ce:ee:db:08:02:01:fa:18:29:b7:8a:15:a8:83:17:ea: c0:a4:4c:d4:53:0a:6e:52:78:c6:a8:91:79:7d:fc:e7:45:ba: 82:ef:8f:a4:5a:34:45:01:2d:45:e3:57:67:e4:af:af:31:e2: 7c:6e:a5:5d:5b:ba:66:94:ef:b8:bb:98:ba:72:b9:74:e0:e3: ba:18:5d:50:aa:8f:2d:8c:55:53:e2:63:e1:96:64:cd:3d:01: 91:f4:28:ed:d7:14:e3:f0:9c:0f:1f:21:bf:ff:37:b6:35:92: 6b:40:53:05:32:83:a3:7b:9b:49:4f:22:85:8a:ad:0f:5f:8a: ff:db:9e:6d:3c:1a:25:bc:1a:02:c1:89:87:81:6e:82:df:92: 8c:1a:48:43:b5:67:25:c8:ab:cf:3f:2a:c4:3f:01:fb:18:d5: 0e:4b:b7:ce:15:54:4f:da:40:b0:b3:f7:6a:3b:eb:af:23:b2: 1f:9a:66:ae:75:01:18:b8:f3:f4:1e:a4:68:fe:07:a6:b8:f6: 4d:f6:5b:94 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeliIvo2SYYIfe0n6sDBvEUW/awgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5 QTJCRDY0NTAeFw0yNjEwMTAyMjAwMDBaFw0yNjEwMTQwMTAxMDBaMDMxMTAvBgNV BAMTKDdCNDI4Q0M4MDIzMzkxOTE3QzQ2RkFFNjRGMTdGRkE4NjM0QTgwRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnch3tBI7rl4K0geK5ERx0+SMF M8QFL4zDbls1+iwb4vFOTQpXvUzJkBVDcOkA7LWeN9mjG1+aBHNq5z0pUh7LP/c8 VNiufyL+NYC9M/4UWAKTmRiw3+goxq1SZi1gRslBIKnuceW60JVWMkYe1uf4BoLx /S2pHSJDKhsEXK2umE7E2bROzjhcC9EsF/XcU2YBNWsQLl43M8/SLSy3p5kugzug C14PtkxCDVC9TDA4cCxD7rzrbTjDbvipEtxinB93BmsQNgJYWSw2lvmU5uX4t3eN GND1vTH4FAmQq/xtVdNlecRd5iZSahfcbHVo9nV7O7gho10SrE6na6SbxtvrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUe0KMyAIzkZF8RvrmTxf/qGNKgPwwHwYDVR0j BBgwFoAU8kZU+cQgU/LZRb+HLA+q2por1kUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTk5NDY2MzE2MDM4MTQ0MS8wL0YyNDY1NEY5QzQyMDUzRjJEOTQ1QkY4NzJDMEZB QURBOUEyQkQ2NDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5QTJCRDY0NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5OTQ2NjMxNjAzODE0NDEvMC9GMjQ2NTRGOUM0MjA1 M0YyRDk0NUJGODcyQzBGQUFEQTlBMkJENjQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMC99EPjP1usE gHQQxdRvjx8cLOHUlqDWA8xYqw66ruSqc96ZGTOAwQPJaRf4a8nRUWkpAis0PCrO 7tsIAgH6GCm3ihWogxfqwKRM1FMKblJ4xqiReX3850W6gu+PpFo0RQEtReNXZ+Sv rzHifG6lXVu6ZpTvuLuYunK5dODjuhhdUKqPLYxVU+Jj4ZZkzT0BkfQo7dcU4/Cc Dx8hv/83tjWSa0BTBTKDo3ubSU8ihYqtD1+K/9uebTwaJbwaAsGJh4Fugt+SjBpI Q7VnJcirzz8qxD8B+xjVDku3zhVUT9pAsLP3ajvrryOyH5pmrnUBGLjz9B6kaP4H prj2TfZblA== -----END CERTIFICATE-----Generated at Sun Oct 11 16:30:13 2026 by rpki-client