$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft File: 3F0AED0297682970CEA1257B1985DB5901444FE7.mft (raw, json) Hash identifier: edodCPzKFaC8C1qmitcJlNReyaLZwKsZ/qNrOSZKjFc= Subject key identifier: 1C:01:C3:83:60:21:50:F3:FC:E3:2D:28:78:BA:26:08:65:A2:FE:CC Authority key identifier: 3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7 Certificate issuer: /CN=3F0AED0297682970CEA1257B1985DB5901444FE7 Certificate serial: 53E8DA88EC1593DC5BBF07323251012A961E4F32 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft Manifest number: AB Signing time: Wed 14 Oct 2026 04:58:34 +0000 Manifest this update: Wed 14 Oct 2026 04:53:34 +0000 Manifest next update: Sat 17 Oct 2026 10:32:34 +0000 Files and hashes: 1: 3F0AED0297682970CEA1257B1985DB5901444FE7.crl (hash: bdCaZNvByDnYtrPncKhQ9W3JzeF75na1BUnqMJqO+IQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 10:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:e8:da:88:ec:15:93:dc:5b:bf:07:32:32:51:01:2a:96:1e:4f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F0AED0297682970CEA1257B1985DB5901444FE7 Validity Not Before: Oct 14 04:53:34 2026 GMT Not After : Oct 17 10:32:34 2026 GMT Subject: CN=1C01C383602150F3FCE32D2878BA260865A2FECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:47:63:19:86:2d:67:25:ec:02:b7:df:c1: 38:24:89:4f:43:dd:ee:8f:59:5d:62:c1:91:2f:cc: 9a:f2:60:25:d5:e5:b7:9a:75:9a:f6:48:a7:16:a8: 30:07:5d:3c:34:19:f1:8d:96:90:5b:6c:1b:04:e4: b2:90:0f:1d:1e:dd:6c:76:1f:eb:79:f0:3b:b9:a7: 78:d8:82:2e:ca:37:cc:68:58:19:4e:46:88:ca:ce: 42:c3:94:9a:a3:45:98:ca:44:38:e5:bd:97:c9:44: b0:5f:8b:8d:e0:44:4d:ed:09:3a:5e:79:6a:df:66: d2:7d:fb:ee:ef:63:67:89:cf:28:27:86:da:73:a5: e0:0c:9b:80:99:65:43:66:ba:82:41:97:fe:ce:b7: fc:2c:6c:9d:4b:6f:04:27:7d:86:c2:27:35:9e:76: e2:29:90:d4:1d:25:bd:c2:47:fa:a7:40:29:60:4d: 90:bb:39:fc:e8:3c:d1:9d:7f:fa:6d:60:b7:ac:45: 4c:05:d9:8f:82:ef:58:43:e7:5d:d6:a0:10:52:f5: 02:c7:a5:ee:53:0f:58:14:e5:d5:e1:2a:33:72:57: e0:7a:93:c9:c5:07:ce:69:fd:ff:42:2d:96:71:bc: 7a:99:f8:2b:9b:16:0b:93:23:fc:f2:07:c2:2d:fc: 1b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:01:C3:83:60:21:50:F3:FC:E3:2D:28:78:BA:26:08:65:A2:FE:CC X509v3 Authority Key Identifier: keyid:3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:41:ae:16:82:31:67:d1:c6:89:09:94:7b:15:e4:c8:3e:9e: c7:38:94:25:65:57:c8:c2:bd:0c:4f:45:d0:0a:9d:c0:d1:79: f6:bb:81:5e:5f:ff:a7:55:98:8e:e7:35:e1:d1:bd:56:ad:7e: bc:a2:d4:0c:1e:f2:0e:54:e9:b2:9e:1d:c1:ec:1a:d4:d8:22: 5a:a2:a4:3e:5e:d8:e1:a2:d2:cb:82:13:9b:d8:42:05:40:43: 25:cb:24:ba:f7:dc:33:36:cc:72:96:01:7a:91:76:6e:24:73: b6:65:9e:14:15:74:19:bc:51:24:63:07:d3:b9:64:f6:ab:1a: 3b:63:c2:60:4d:2f:62:ca:ed:55:e6:55:43:ba:90:de:fc:fe: 1e:4a:c2:04:8d:10:05:12:32:42:59:92:bc:10:6d:18:8d:2e: ac:61:02:45:7e:eb:c7:13:b8:0c:5c:d4:1e:0e:b2:73:0c:79: 52:a7:e1:91:08:d1:74:7d:16:ea:c2:4b:05:d1:7e:7c:53:52: e8:f1:20:aa:14:c1:4d:8a:55:67:63:57:12:ca:49:c6:4d:46: ad:03:d6:6a:0c:78:a9:5a:99:65:23:b3:61:0d:07:72:63:ed: c6:ec:10:2d:05:3c:19:18:fb:9e:6a:60:2b:d0:eb:df:53:e3: 21:29:64:2d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU+jaiOwVk9xbvwcyMlEBKpYeTzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwQUVEMDI5NzY4Mjk3MENFQTEyNTdCMTk4NURCNTkw MTQ0NEZFNzAeFw0yNjEwMTQwNDUzMzRaFw0yNjEwMTcxMDMyMzRaMDMxMTAvBgNV BAMTKDFDMDFDMzgzNjAyMTUwRjNGQ0UzMkQyODc4QkEyNjA4NjVBMkZFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5G0djGYYtZyXsArffwTgkiU9D 3e6PWV1iwZEvzJryYCXV5beadZr2SKcWqDAHXTw0GfGNlpBbbBsE5LKQDx0e3Wx2 H+t58Du5p3jYgi7KN8xoWBlORojKzkLDlJqjRZjKRDjlvZfJRLBfi43gRE3tCTpe eWrfZtJ9++7vY2eJzygnhtpzpeAMm4CZZUNmuoJBl/7Ot/wsbJ1LbwQnfYbCJzWe duIpkNQdJb3CR/qnQClgTZC7OfzoPNGdf/ptYLesRUwF2Y+C71hD513WoBBS9QLH pe5TD1gU5dXhKjNyV+B6k8nFB85p/f9CLZZxvHqZ+CubFguTI/zyB8It/BslAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHAHDg2AhUPP84y0oeLomCGWi/swwHwYDVR0j BBgwFoAUPwrtApdoKXDOoSV7GYXbWQFET+cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTQyMDM1NjUxODE1MDE1OS8wLzNGMEFFRDAyOTc2ODI5NzBDRUExMjU3QjE5ODVE QjU5MDE0NDRGRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0YwQUVEMDI5NzY4Mjk3MENFQTEyNTdCMTk4NURCNTkwMTQ0NEZFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDU0MjAzNTY1MTgxNTAxNTkvMC8zRjBBRUQwMjk3Njgy OTcwQ0VBMTI1N0IxOTg1REI1OTAxNDQ0RkU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckGuFoIxZ9HG iQmUexXkyD6exziUJWVXyMK9DE9F0AqdwNF59ruBXl//p1WYjuc14dG9Vq1+vKLU DB7yDlTpsp4dwewa1NgiWqKkPl7Y4aLSy4ITm9hCBUBDJcskuvfcMzbMcpYBepF2 biRztmWeFBV0GbxRJGMH07lk9qsaO2PCYE0vYsrtVeZVQ7qQ3vz+HkrCBI0QBRIy QlmSvBBtGI0urGECRX7rxxO4DFzUHg6ycwx5UqfhkQjRdH0W6sJLBdF+fFNS6PEg qhTBTYpVZ2NXEspJxk1GrQPWagx4qVqZZSOzYQ0HcmPtxuwQLQU8GRj7nmpgK9Dr 31PjISlkLQ== -----END CERTIFICATE-----Generated at Thu Oct 15 15:36:20 2026 by rpki-client