$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft File: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft (raw, json) Hash identifier: Az9pohdLMqB6qMZFVyTKvF12E2duUpO6S2secrUIQOE= Subject key identifier: BA:53:16:D2:FC:B5:55:C7:E1:5F:6C:3A:38:AD:32:13:04:6B:E0:50 Authority key identifier: D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E Certificate issuer: /CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E Certificate serial: C1DC838BEA73C277C2A7412108B4AE0DC065C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft Manifest number: A3 Signing time: Sun 11 Oct 2026 07:15:24 +0000 Manifest this update: Sun 11 Oct 2026 07:10:24 +0000 Manifest next update: Wed 14 Oct 2026 16:25:24 +0000 Files and hashes: 1: 323430313a313332303a3a2f33322d3332203d3e2039383038.roa (hash: gkXLtfsm57+1SLQOnZmPCOz2Uc/ydhDt+i+LwC+ujFg=) 2: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl (hash: gz4ewZKaZ1QKKaAYsJYD1eQNhw1rv0ZzDD25KLNszzw=) 3: 3130332e3233322e3136362e302f32332d3233203d3e2039383038.roa (hash: wZgCkdZF56vtDndZBJDFwSUyJO2LVVtO+dAGyXmN1DQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 16:25:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c1:dc:83:8b:ea:73:c2:77:c2:a7:41:21:08:b4:ae:0d:c0:65:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E Validity Not Before: Oct 11 07:10:24 2026 GMT Not After : Oct 14 16:25:24 2026 GMT Subject: CN=BA5316D2FCB555C7E15F6C3A38AD3213046BE050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:01:21:6c:d1:37:83:c5:4e:21:2b:4d:5a:18: b4:09:5a:7d:2f:cf:52:c6:d2:c7:6c:6f:6a:5a:d1: 66:32:df:39:e2:f6:b5:e8:a4:08:78:2c:78:be:f7: f5:7c:26:1d:38:66:70:62:00:52:6c:38:ff:55:52: 6e:0e:4b:a4:88:c0:c4:95:6f:4d:78:9b:66:c3:20: 41:db:ff:3c:24:32:da:3d:c3:71:9b:81:39:74:eb: a1:05:65:81:f6:e7:16:82:70:c5:ce:5d:65:80:56: b9:df:50:4d:a4:d9:c4:ff:1e:79:94:63:fb:3d:75: 2e:a0:60:41:b3:0f:fa:84:ed:09:1e:a7:d1:67:7c: 1f:62:0e:ee:f0:4a:c8:b4:4e:69:d1:74:7e:a1:5b: 23:5a:61:5b:ee:f5:5d:e5:a1:d8:5c:38:b2:10:bc: cb:e2:79:30:7b:97:73:a3:70:84:75:58:59:c4:42: 2c:2a:4c:3a:16:e3:77:d9:27:ba:50:2b:45:88:23: d4:9a:84:83:0a:fd:4a:3f:08:87:e4:93:80:98:c6: 88:b0:11:61:99:ad:c1:50:38:f9:36:b8:f7:3d:d1: 31:4e:e6:fb:41:cc:63:31:80:f0:44:97:a0:29:51: a1:62:f7:1d:86:ac:8a:65:c1:6c:6e:e6:d0:5f:be: f8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:53:16:D2:FC:B5:55:C7:E1:5F:6C:3A:38:AD:32:13:04:6B:E0:50 X509v3 Authority Key Identifier: keyid:D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ea:0b:32:14:6c:c2:4e:2d:9c:e0:62:5a:ba:2e:b9:69:80: 5f:9f:01:8d:d5:a8:02:cb:c3:59:42:88:05:f8:5a:30:b1:7d: 6d:12:26:e7:c1:2d:6d:fa:c8:dd:33:f9:28:1d:bc:ee:cc:90: 76:5f:67:e7:17:19:2a:6b:07:8d:50:68:6f:3e:ab:c8:04:bb: 61:c9:7d:95:d3:1d:46:ea:56:a2:52:08:cb:f1:b3:68:6e:2d: f9:69:54:8c:8e:d6:f2:b0:6c:1c:3b:d0:00:3c:ba:f4:e8:1a: 7a:4a:c9:9a:36:04:3c:be:d9:dc:85:ab:f7:b0:65:e0:65:41: 4a:81:25:af:58:b8:38:6d:92:3f:cb:8b:91:db:53:dd:86:4f: 05:41:60:16:e0:69:a1:19:4c:1b:03:76:73:18:7f:a6:67:cc: 26:0a:be:28:c2:c2:4d:85:e7:30:01:8d:18:2d:57:13:92:15: f5:bb:5e:3f:64:f6:7a:d1:0a:0e:e9:cb:8c:7d:ea:3c:e3:1a: ee:46:70:40:d8:c6:93:6d:ed:17:da:20:e5:0a:f1:20:02:a2: 7d:f1:07:8c:bb:1e:40:50:31:3c:f9:fd:57:d6:43:ae:ad:cb: 18:24:5d:9a:62:fe:79:bd:ac:f9:69:8a:0c:0e:7e:72:a1:5e: 5b:a3:82:52 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAMHcg4vqc8J3wqdBIQi0rg3AZcQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgy NzZFOUQwRTAeFw0yNjEwMTEwNzEwMjRaFw0yNjEwMTQxNjI1MjRaMDMxMTAvBgNV BAMTKEJBNTMxNkQyRkNCNTU1QzdFMTVGNkMzQTM4QUQzMjEzMDQ2QkUwNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDASFs0TeDxU4hK01aGLQJWn0v z1LG0sdsb2pa0WYy3zni9rXopAh4LHi+9/V8Jh04ZnBiAFJsOP9VUm4OS6SIwMSV b014m2bDIEHb/zwkMto9w3GbgTl066EFZYH25xaCcMXOXWWAVrnfUE2k2cT/HnmU Y/s9dS6gYEGzD/qE7Qkep9FnfB9iDu7wSsi0TmnRdH6hWyNaYVvu9V3lodhcOLIQ vMvieTB7l3OjcIR1WFnEQiwqTDoW43fZJ7pQK0WII9SahIMK/Uo/CIfkk4CYxoiw EWGZrcFQOPk2uPc90TFO5vtBzGMxgPBEl6ApUaFi9x2GrIplwWxu5tBfvvhVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUulMW0vy1VcfhX2w6OK0yEwRr4FAwHwYDVR0j BBgwFoAU0w+QifnqWDYAC4rkvghaiCdunQ4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzEwNjI1NDQ3MzM5NjI0MS8wL0QzMEY5MDg5RjlFQTU4MzYwMDBCOEFFNEJFMDg1 QTg4Mjc2RTlEMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgyNzZFOUQwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDcxMDYyNTQ0NzMzOTYyNDEvMC9EMzBGOTA4OUY5RUE1 ODM2MDAwQjhBRTRCRTA4NUE4ODI3NkU5RDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOoLMhRswk4t nOBiWrouuWmAX58BjdWoAsvDWUKIBfhaMLF9bRIm58EtbfrI3TP5KB287syQdl9n 5xcZKmsHjVBobz6ryAS7Ycl9ldMdRupWolIIy/GzaG4t+WlUjI7W8rBsHDvQADy6 9OgaekrJmjYEPL7Z3IWr97Bl4GVBSoElr1i4OG2SP8uLkdtT3YZPBUFgFuBpoRlM GwN2cxh/pmfMJgq+KMLCTYXnMAGNGC1XE5IV9bteP2T2etEKDunLjH3qPOMa7kZw QNjGk23tF9og5QrxIAKiffEHjLseQFAxPPn9V9ZDrq3LGCRdmmL+eb2s+WmKDA5+ cqFeW6OCUg== -----END CERTIFICATE-----Generated at Mon Oct 12 03:00:26 2026 by rpki-client