$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft File: CF709CC85A3788918F778EC5F4257016F4294457.mft (raw, json) Hash identifier: d5bI49WpV2mUFvO6ifJsCdhD3EpezqHCdSelmE7G3hM= Subject key identifier: F6:CF:B5:26:A0:FD:84:45:DB:C7:0E:12:35:EC:6A:AE:CD:89:FD:5B Authority key identifier: CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 Certificate issuer: /CN=CF709CC85A3788918F778EC5F4257016F4294457 Certificate serial: 735A39FE1C938AE6B3DEE9177DD5FCDC5550EDC4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft Manifest number: A7 Signing time: Mon 28 Sep 2026 17:46:11 +0000 Manifest this update: Mon 28 Sep 2026 17:41:11 +0000 Manifest next update: Thu 01 Oct 2026 21:23:11 +0000 Files and hashes: 1: 3130332e33382e34302e302f32322d3232203d3e2034383337.roa (hash: 4GHv8joM/5RN0bEMErPJBuhi5iOtTFOrvEdUPol9R3o=) 2: 34332e3234322e3135362e302f32322d3232203d3e2034383337.roa (hash: DXIJ4z4EqslXGtRbFgprkrYQTOPQJTbi60YLp+rEd2s=) 3: CF709CC85A3788918F778EC5F4257016F4294457.crl (hash: ds2Zkr5Q3lmFNyipihmSa04WD7ythxc2IRCT2ASzxqk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 21:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:5a:39:fe:1c:93:8a:e6:b3:de:e9:17:7d:d5:fc:dc:55:50:ed:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF709CC85A3788918F778EC5F4257016F4294457 Validity Not Before: Sep 28 17:41:11 2026 GMT Not After : Oct 1 21:23:11 2026 GMT Subject: CN=F6CFB526A0FD8445DBC70E1235EC6AAECD89FD5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0d:0f:e4:60:85:72:a5:92:61:a7:88:06:e9: 3b:b7:39:0a:45:0b:ea:5c:91:25:8f:dd:5d:77:af: 46:12:37:c6:70:ad:e8:c7:1f:06:25:54:2b:45:94: 50:b8:f6:f2:2f:31:3f:4f:b1:c6:63:bf:64:87:88: b6:88:00:b2:21:68:69:85:ca:11:57:32:12:ad:3d: 0d:b4:06:42:95:37:56:b2:6f:8b:dc:b4:6a:99:e9: 5d:cf:ed:4a:e1:79:ed:86:4b:4a:97:6a:63:9c:79: d0:26:ba:cd:04:8b:dc:8d:5b:df:2b:2b:49:d1:61: de:32:5b:01:bc:47:43:7a:40:5a:65:c6:e5:00:ba: 4b:cb:01:82:31:99:ec:87:26:55:c4:93:58:46:ce: 21:0f:55:a8:de:44:63:12:be:e8:b7:d5:3d:99:50: af:ac:ea:c8:04:bb:a1:57:8c:7a:4d:09:f3:ab:a5: df:84:92:ba:89:ad:f9:ea:b7:89:b4:9a:2d:77:81: c4:43:54:2b:87:60:3c:18:50:77:fe:ff:4d:25:c1: 12:00:ee:9b:c2:75:99:5f:86:d8:df:10:0c:df:95: 03:8b:99:c2:23:2b:4e:13:3b:a2:f8:ff:71:f3:c3: 21:7a:bb:20:f4:20:4d:11:f1:6f:40:62:f2:a3:93: 96:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CF:B5:26:A0:FD:84:45:DB:C7:0E:12:35:EC:6A:AE:CD:89:FD:5B X509v3 Authority Key Identifier: keyid:CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f2:4c:1f:f5:ca:09:bc:5c:26:a2:20:ca:ec:b3:de:54:1c: f4:fa:a1:1c:e2:df:8c:72:91:0e:af:11:23:c2:db:66:9b:28: 8f:81:c3:fa:70:b7:fb:c6:16:71:68:37:34:17:ec:56:cb:a8: 13:89:38:b5:f5:80:ab:57:40:d2:f5:bc:74:56:da:80:a8:1f: 96:a4:df:48:3f:90:da:2e:55:92:af:d0:cb:7a:f9:49:8f:85: 58:9f:22:e8:b5:ed:b7:0f:d6:60:18:d1:06:a9:35:9f:91:77: 7a:59:3c:f4:89:54:36:f2:ef:61:79:8c:ad:9b:ab:7e:8b:76: 82:9a:40:e2:73:ec:e3:da:0d:aa:10:b0:25:b7:b3:1d:43:ca: 9e:6d:88:91:47:4e:d4:7a:09:88:de:14:ae:47:46:db:09:7a: d7:9b:58:b0:c9:cb:75:de:d0:98:91:21:a6:0e:e1:11:49:d8: 8a:5a:ad:b2:41:76:83:86:0d:31:0c:bf:16:a2:73:60:a0:6e: f5:a2:c6:5b:2f:a6:0d:8a:cd:6b:df:86:fe:be:24:86:91:55: f2:e6:e7:4e:53:ae:d4:34:62:77:92:f1:28:dd:1b:c1:5e:30: a3:4d:0f:bc:18:60:46:1d:44:50:5c:db:f3:af:0a:88:46:50: 6b:74:07:e1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc1o5/hyTiuaz3ukXfdX83FVQ7cQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZG NDI5NDQ1NzAeFw0yNjA5MjgxNzQxMTFaFw0yNjEwMDEyMTIzMTFaMDMxMTAvBgNV BAMTKEY2Q0ZCNTI2QTBGRDg0NDVEQkM3MEUxMjM1RUM2QUFFQ0Q4OUZENUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRDQ/kYIVypZJhp4gG6Tu3OQpF C+pckSWP3V13r0YSN8ZwrejHHwYlVCtFlFC49vIvMT9PscZjv2SHiLaIALIhaGmF yhFXMhKtPQ20BkKVN1ayb4vctGqZ6V3P7Urhee2GS0qXamOcedAmus0Ei9yNW98r K0nRYd4yWwG8R0N6QFplxuUAukvLAYIxmeyHJlXEk1hGziEPVajeRGMSvui31T2Z UK+s6sgEu6FXjHpNCfOrpd+EkrqJrfnqt4m0mi13gcRDVCuHYDwYUHf+/00lwRIA 7pvCdZlfhtjfEAzflQOLmcIjK04TO6L4/3HzwyF6uyD0IE0R8W9AYvKjk5afAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9s+1JqD9hEXbxw4SNexqrs2J/VswHwYDVR0j BBgwFoAUz3CcyFo3iJGPd47F9CVwFvQpRFcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTAxNzA4Mzg2OTAwMzc4My8wL0NGNzA5Q0M4NUEzNzg4OTE4Rjc3OEVDNUY0MjU3 MDE2RjQyOTQ0NTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZGNDI5NDQ1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwMTcwODM4NjkwMDM3ODMvMC9DRjcwOUNDODVBMzc4 ODkxOEY3NzhFQzVGNDI1NzAxNkY0Mjk0NDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfJMH/XKCbxc JqIgyuyz3lQc9PqhHOLfjHKRDq8RI8LbZpsoj4HD+nC3+8YWcWg3NBfsVsuoE4k4 tfWAq1dA0vW8dFbagKgflqTfSD+Q2i5Vkq/Qy3r5SY+FWJ8i6LXttw/WYBjRBqk1 n5F3elk89IlUNvLvYXmMrZurfot2gppA4nPs49oNqhCwJbezHUPKnm2IkUdO1HoJ iN4UrkdG2wl615tYsMnLdd7QmJEhpg7hEUnYilqtskF2g4YNMQy/FqJzYKBu9aLG Wy+mDYrNa9+G/r4khpFV8ubnTlOu1DRid5LxKN0bwV4wo00PvBhgRh1EUFzb868K iEZQa3QH4Q== -----END CERTIFICATE-----Generated at Tue Sep 29 06:49:57 2026 by rpki-client