$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft File: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft (raw, json) Hash identifier: OBPghUpU/kmLKJUEkuNzoL0k2h5cTfb5Zc33rTt9hxs= Subject key identifier: 0E:E3:7F:3F:50:30:F6:E9:94:EB:95:74:EE:CA:EC:40:79:6D:85:82 Authority key identifier: 71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 Certificate issuer: /CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Certificate serial: 52A302DEE52D08770806CFD337984AA1AFA6351D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft Manifest number: BC Signing time: Fri 16 Oct 2026 21:48:08 +0000 Manifest this update: Fri 16 Oct 2026 21:43:08 +0000 Manifest next update: Tue 20 Oct 2026 07:14:08 +0000 Files and hashes: 1: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl (hash: vwF6T4/G9cmK1qfrv07NhKeEwQPBXEu+wc0BLt5wbr0=) 2: 3130332e3134372e3132342e302f32342d3234203d3e2034383132.roa (hash: RTIL7pSBicBirhk5lHYPd9ZAXm/vBtAaCSHa5kDDI8k=) 3: 3130332e3134372e3132342e302f32342d3234203d3e203137363231.roa (hash: h0YZk3m9PfR3qf/OG78Z8ldBE8xpriz8QQrGcV+RdXA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a3:02:de:e5:2d:08:77:08:06:cf:d3:37:98:4a:a1:af:a6:35:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Validity Not Before: Oct 16 21:43:08 2026 GMT Not After : Oct 20 07:14:08 2026 GMT Subject: CN=0EE37F3F5030F6E994EB9574EECAEC40796D8582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6d:47:17:a8:09:6f:c2:92:de:46:f4:30:d6: 15:f3:63:ea:18:6e:18:56:40:f5:fb:4b:6d:a6:c6: 88:20:d5:f9:c8:37:91:fc:aa:7a:c9:3f:6b:f2:e1: 5f:98:e3:1b:dd:73:3a:be:20:ef:16:a0:96:30:c3: 8b:2e:0e:ef:89:23:78:c3:c3:82:bb:b8:f4:f9:da: e1:32:c6:83:4c:f5:cd:21:47:e8:06:06:51:04:28: 74:65:31:a3:2a:05:c6:27:8e:05:1c:cd:af:a4:9d: e7:5a:cf:44:f7:2b:dd:bb:53:51:60:8a:14:3b:32: a6:0d:9a:05:2b:c9:24:24:d7:14:59:0c:fd:1a:dd: 4e:4c:52:f9:85:a6:58:55:3d:6d:17:af:fa:c6:43: 5e:19:20:b4:56:44:08:43:b8:c2:d3:aa:e6:36:e3: f6:73:74:94:a9:ea:be:03:82:9b:45:ff:a4:08:21: e5:c6:60:d5:45:12:0b:bc:b2:32:1f:d7:32:1a:e9: 70:73:c7:87:03:c4:77:23:af:a6:0c:29:85:b0:c3: 29:50:6f:d4:9a:62:35:89:02:4e:c3:17:8f:89:7c: 0c:4a:a0:37:62:5e:4d:d3:7a:8f:78:9d:34:f7:fa: f1:a8:d6:84:e7:23:1c:38:eb:eb:fe:9c:32:de:9c: da:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E3:7F:3F:50:30:F6:E9:94:EB:95:74:EE:CA:EC:40:79:6D:85:82 X509v3 Authority Key Identifier: keyid:71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:85:59:bb:73:47:9d:a9:87:6a:ac:b9:b6:21:01:2e:b5:1f: 1a:6e:b8:33:7b:74:3b:50:6e:f2:38:c6:35:11:dd:e8:dd:c8: 73:71:95:be:d4:d4:a0:b4:8f:c1:a7:bc:03:4a:3f:d6:4b:77: 63:7d:80:13:f6:e4:55:de:66:11:89:09:73:ca:95:7d:3c:68: 9f:90:b2:d3:06:6e:c2:62:5b:b3:9a:21:40:8c:ae:39:8f:26: 91:4c:f1:35:75:c8:62:98:f8:0a:6f:c0:e2:7f:a0:95:45:06: 2a:47:f7:f1:0e:8f:9c:c2:26:a6:b1:ae:ba:99:1e:c2:5d:71: b0:6f:ba:78:f9:db:45:15:10:ef:24:1b:f1:bd:43:a2:c6:bd: e4:da:85:69:0f:53:b1:bb:66:7b:03:eb:6b:89:b7:45:66:39: df:bc:37:1b:ad:a6:a3:30:e5:05:24:9b:5e:b6:ff:88:d7:a6: e8:e0:e0:54:f2:bf:96:2a:e1:5c:35:48:9e:97:9c:03:99:c8: 5b:d8:c8:e9:ad:b9:a1:51:21:5f:f8:48:17:97:f7:b5:75:7d: 65:5b:ae:a4:46:c8:46:f6:d6:64:fc:d2:5d:b9:ad:f1:ba:d4: e6:33:e0:fb:36:23:66:52:b3:a2:d5:c0:ef:ca:31:3c:e7:b7: 8f:ec:8b:59 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUqMC3uUtCHcIBs/TN5hKoa+mNR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1 QjIwNkIwMzAeFw0yNjEwMTYyMTQzMDhaFw0yNjEwMjAwNzE0MDhaMDMxMTAvBgNV BAMTKDBFRTM3RjNGNTAzMEY2RTk5NEVCOTU3NEVFQ0FFQzQwNzk2RDg1ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSbUcXqAlvwpLeRvQw1hXzY+oY bhhWQPX7S22mxogg1fnIN5H8qnrJP2vy4V+Y4xvdczq+IO8WoJYww4suDu+JI3jD w4K7uPT52uEyxoNM9c0hR+gGBlEEKHRlMaMqBcYnjgUcza+knedaz0T3K927U1Fg ihQ7MqYNmgUrySQk1xRZDP0a3U5MUvmFplhVPW0Xr/rGQ14ZILRWRAhDuMLTquY2 4/ZzdJSp6r4DgptF/6QIIeXGYNVFEgu8sjIf1zIa6XBzx4cDxHcjr6YMKYWwwylQ b9SaYjWJAk7DF4+JfAxKoDdiXk3Teo94nTT3+vGo1oTnIxw46+v+nDLenNq5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDuN/P1Aw9umU65V07srsQHlthYIwHwYDVR0j BBgwFoAUceociy6d2Tn9ppPPALt4YFsgawMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTQxMjA4MjMxNTY4OTk5MS8wLzcxRUExQzhCMkU5REQ5MzlGREE2OTNDRjAwQkI3 ODYwNUIyMDZCMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1QjIwNkIwMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDE0MTIwODIzMTU2ODk5OTEvMC83MUVBMUM4QjJFOURE OTM5RkRBNjkzQ0YwMEJCNzg2MDVCMjA2QjAzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoVZu3NHnamH aqy5tiEBLrUfGm64M3t0O1Bu8jjGNRHd6N3Ic3GVvtTUoLSPwae8A0o/1kt3Y32A E/bkVd5mEYkJc8qVfTxon5Cy0wZuwmJbs5ohQIyuOY8mkUzxNXXIYpj4Cm/A4n+g lUUGKkf38Q6PnMImprGuupkewl1xsG+6ePnbRRUQ7yQb8b1Dosa95NqFaQ9Tsbtm ewPra4m3RWY537w3G62mozDlBSSbXrb/iNem6ODgVPK/lirhXDVInpecA5nIW9jI 6a25oVEhX/hIF5f3tXV9ZVuupEbIRvbWZPzSXbmt8brU5jPg+zYjZlKzotXA78ox POe3j+yLWQ== -----END CERTIFICATE-----Generated at Sun Oct 18 06:53:18 2026 by rpki-client