$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft File: 7E97B2869243296A265D98767FC04F1998D143DE.mft (raw, json) Hash identifier: Lu4WPblYE0xsZmSLSGqGb7fzGK6IJVKUtLO0t7k/oI4= Subject key identifier: 4D:1F:F7:CE:68:64:46:0F:F1:16:B7:6B:4C:A6:72:B5:63:BE:F7:BF Authority key identifier: 7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE Certificate issuer: /CN=7E97B2869243296A265D98767FC04F1998D143DE Certificate serial: 58541E7459B66E6B6D2A3CAA318802A2D3BA115A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft Manifest number: BC Signing time: Sat 17 Oct 2026 00:58:18 +0000 Manifest this update: Sat 17 Oct 2026 00:53:18 +0000 Manifest next update: Tue 20 Oct 2026 02:37:18 +0000 Files and hashes: 1: 3130332e3233332e3133382e302f32342d3234203d3e203633363937.roa (hash: rm3DnKUZiRzyrB9MIhtg+3yts5DolytZ1bDtJ/yPMew=) 2: 3130332e3233332e3133362e302f32342d3234203d3e203633363936.roa (hash: RfspFMxmIvUaZoDDu4Mh9YLmEtrO/QrKQVLqrxLFw3U=) 3: 3130332e3233332e3133382e302f32332d3233203d3e203633363937.roa (hash: uOCqEKaImN5wNlAYjTqBY4smG8MJ0enpKts3XJnKdC4=) 4: 3130332e3233332e3133362e302f32332d3233203d3e203633363936.roa (hash: KQvWBZXWCR3Q1jOkECmr3kjMcu1iG3s8aIgIPbrTDHI=) 5: 7E97B2869243296A265D98767FC04F1998D143DE.crl (hash: 9jJBAdOtBbdrmB0eoDn7oqIqSJCjo9Qjukz1m3r2hUE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:54:1e:74:59:b6:6e:6b:6d:2a:3c:aa:31:88:02:a2:d3:ba:11:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E97B2869243296A265D98767FC04F1998D143DE Validity Not Before: Oct 17 00:53:18 2026 GMT Not After : Oct 20 02:37:18 2026 GMT Subject: CN=4D1FF7CE6864460FF116B76B4CA672B563BEF7BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:88:47:75:de:23:ac:5c:9f:dc:8f:cb:76:f8: 2a:ef:c8:98:4a:62:b6:1c:49:ab:5d:0e:13:68:44: fb:cd:45:37:28:9d:6f:57:67:8c:33:65:00:6f:9c: f1:ec:df:cb:92:ce:19:c3:ee:b6:68:0a:d2:c9:9f: 59:c5:f6:0c:72:f9:a8:42:d3:e2:c0:09:74:94:74: e6:09:a2:4d:36:1d:42:cf:f6:9d:4e:4b:cc:f0:46: 17:43:ec:0f:cc:23:49:f9:74:6d:db:d6:b5:5d:3b: 34:ca:4d:ab:7e:13:6a:1b:ea:1c:c8:38:7e:39:ca: 49:e8:5f:d1:d7:17:23:96:85:bb:97:00:98:06:5d: 6a:4c:ed:5c:71:e0:b0:5d:46:92:98:f3:a7:65:c4: bc:31:e3:c6:ff:7c:ff:72:90:ad:ac:10:4e:54:45: cd:04:11:31:9e:8b:ac:9d:aa:b4:c6:54:b0:1f:cd: eb:ed:f9:e3:13:c4:ad:c3:e1:82:cc:56:f9:75:8d: 8b:a2:03:54:8b:88:97:08:de:84:7f:33:12:a7:56: f0:91:6d:09:27:c9:20:50:b9:11:62:61:48:8c:ba: 6c:76:9a:01:4e:c1:7a:88:3c:f4:70:72:c8:a0:79: 22:21:1e:e8:be:16:e0:cb:ac:82:f6:9a:c2:e3:84: f7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1F:F7:CE:68:64:46:0F:F1:16:B7:6B:4C:A6:72:B5:63:BE:F7:BF X509v3 Authority Key Identifier: keyid:7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:55:20:18:23:21:9a:44:e5:33:0d:b3:31:65:e7:ff:ed:23: cd:42:68:d2:07:1f:7e:5d:09:b0:68:4d:db:55:4f:35:5b:d7: d7:42:31:4a:de:df:05:10:9b:2b:c5:42:db:98:a0:da:0c:52: ca:15:55:9d:46:13:54:fe:29:41:77:40:f9:0d:9d:de:27:c9: e5:fb:67:c2:f7:57:d1:aa:f4:95:fb:b1:60:50:f8:46:ec:13: 2f:08:47:89:07:bf:1d:38:53:c7:79:62:f4:bd:b7:2d:72:62: f2:5d:21:2f:ea:d5:23:2f:c3:2b:3a:49:89:61:b8:e2:e2:ed: 2a:28:02:01:83:0d:73:ff:67:5f:64:28:d5:d7:c1:3f:6b:c5: 5e:31:eb:13:7e:bd:48:4c:db:55:bd:90:f7:0e:9e:bc:6e:d8: ed:fe:64:70:8b:19:d1:d8:b6:ca:69:c6:c2:c2:d9:e6:d4:c6: dc:72:34:70:01:20:5c:47:06:4c:0e:77:e3:3b:e1:89:fd:eb: f6:19:3e:5e:72:74:af:89:1a:cb:3f:95:b6:8f:4a:1b:5b:12: 95:d3:34:dd:15:a1:d9:c4:cf:4e:d1:60:c7:62:70:b3:93:7b: f8:d8:71:20:c2:a1:c3:d0:88:38:95:ac:05:56:67:94:73:ee: a3:5d:0c:de -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWFQedFm2bmttKjyqMYgCotO6EVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5 OEQxNDNERTAeFw0yNjEwMTcwMDUzMThaFw0yNjEwMjAwMjM3MThaMDMxMTAvBgNV BAMTKDREMUZGN0NFNjg2NDQ2MEZGMTE2Qjc2QjRDQTY3MkI1NjNCRUY3QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCciEd13iOsXJ/cj8t2+CrvyJhK YrYcSatdDhNoRPvNRTconW9XZ4wzZQBvnPHs38uSzhnD7rZoCtLJn1nF9gxy+ahC 0+LACXSUdOYJok02HULP9p1OS8zwRhdD7A/MI0n5dG3b1rVdOzTKTat+E2ob6hzI OH45yknoX9HXFyOWhbuXAJgGXWpM7Vxx4LBdRpKY86dlxLwx48b/fP9ykK2sEE5U Rc0EETGei6ydqrTGVLAfzevt+eMTxK3D4YLMVvl1jYuiA1SLiJcI3oR/MxKnVvCR bQknySBQuRFiYUiMumx2mgFOwXqIPPRwcsigeSIhHui+FuDLrIL2msLjhPfdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTR/3zmhkRg/xFrdrTKZytWO+978wHwYDVR0j BBgwFoAUfpeyhpJDKWomXZh2f8BPGZjRQ94wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTAxMjU4MTgzOTAxMTg0My8wLzdFOTdCMjg2OTI0MzI5NkEyNjVEOTg3NjdGQzA0 RjE5OThEMTQzREUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5OEQxNDNERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEwMTI1ODE4MzkwMTE4NDMvMC83RTk3QjI4NjkyNDMy OTZBMjY1RDk4NzY3RkMwNEYxOTk4RDE0M0RFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVUgGCMhmkTl Mw2zMWXn/+0jzUJo0gcffl0JsGhN21VPNVvX10IxSt7fBRCbK8VC25ig2gxSyhVV nUYTVP4pQXdA+Q2d3ifJ5ftnwvdX0ar0lfuxYFD4RuwTLwhHiQe/HThTx3li9L23 LXJi8l0hL+rVIy/DKzpJiWG44uLtKigCAYMNc/9nX2Qo1dfBP2vFXjHrE369SEzb Vb2Q9w6evG7Y7f5kcIsZ0di2ymnGwsLZ5tTG3HI0cAEgXEcGTA534zvhif3r9hk+ XnJ0r4kayz+Vto9KG1sSldM03RWh2cTPTtFgx2Jws5N7+NhxIMKhw9CIOJWsBVZn lHPuo10M3g== -----END CERTIFICATE-----Generated at Sat Oct 17 12:23:58 2026 by rpki-client