$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft File: F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft (raw, json) Hash identifier: iJrZhCkDds+SL09mgKGXKH+YGiWcEpUM3/yxEwjgBH4= Subject key identifier: 81:ED:2A:56:03:63:80:35:2F:60:64:CF:3B:5C:91:59:AE:F9:6D:FC Authority key identifier: F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D Certificate issuer: /CN=F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D Certificate serial: 7AD58B44B2947F96B3B391EA7286BB5A2B516B93 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft Manifest number: AC Signing time: Sat 19 Sep 2026 21:21:58 +0000 Manifest this update: Sat 19 Sep 2026 21:16:58 +0000 Manifest next update: Wed 23 Sep 2026 00:04:58 +0000 Files and hashes: 1: AS56047.roa (hash: sOB/0xCvANLFyAUMciUsWEdcJJQE+e/pwZ+FBWrYdhk=) 2: AS131562.roa (hash: lyeaZzzsA1wNSTES7Ho+HHZ+RzXLaE47z3sSRZstjus=) 3: AS0.roa (hash: hr/y8Vrz7JwAP+c/RvJl3p5fDAyUbA1PYMKSxrjs7FE=) 4: F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl (hash: 43CEnT2D/QalSPmpYpG9kEo5wPPXoi8toyXyWYa0qTI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d5:8b:44:b2:94:7f:96:b3:b3:91:ea:72:86:bb:5a:2b:51:6b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D Validity Not Before: Sep 19 21:16:58 2026 GMT Not After : Sep 23 00:04:58 2026 GMT Subject: CN=81ED2A56036380352F6064CF3B5C9159AEF96DFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:90:54:77:df:65:e5:f0:55:0b:db:fa:3c:b7: e9:e3:5e:e9:00:74:d1:63:e8:86:48:5d:d3:4d:56: fc:1f:97:06:33:26:9e:5b:13:ec:ed:7b:d8:f8:55: 3d:3b:ff:8b:09:8a:59:bc:74:de:4c:98:82:a3:83: b3:0e:0b:f6:93:a0:9a:75:1c:9a:20:ef:23:4e:1f: 99:05:48:95:5f:04:53:b2:a5:5a:61:e9:63:41:f3: 65:a7:fe:91:97:93:51:29:d9:d0:73:42:26:10:13: ce:75:be:0e:b2:25:ef:9c:92:9e:42:78:1e:71:46: 0b:78:44:68:da:ed:86:d2:1f:39:5b:e7:f8:e5:fe: 9c:80:64:10:ec:67:67:23:a0:8b:ee:fc:19:10:c5: 31:9e:86:f3:6c:c4:86:a0:cb:5c:cc:cd:71:a6:5b: d3:10:e5:9a:7f:11:80:70:c0:21:3d:2b:7b:fe:25: ec:21:94:ad:f5:dd:44:06:fe:74:2a:e5:76:b8:70: 7d:30:d9:e5:b8:53:62:ff:99:61:e3:e3:53:30:88: 61:26:26:65:84:b4:55:00:01:0c:04:cc:54:1b:6f: 86:fa:29:61:f7:62:85:db:ee:70:31:c0:ef:61:fe: e8:11:21:78:45:1b:ab:b0:83:06:0d:96:34:91:6b: 58:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:ED:2A:56:03:63:80:35:2F:60:64:CF:3B:5C:91:59:AE:F9:6D:FC X509v3 Authority Key Identifier: keyid:F0:71:BD:CF:D0:0F:17:B0:D2:CB:7A:04:E3:9F:7F:C3:C3:3A:0B:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111469242210844693/0/F071BDCFD00F17B0D2CB7A04E39F7FC3C33A0B8D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:62:d2:cc:5a:96:97:f0:19:f7:19:70:8d:be:59:18:4d:f3: fd:9f:60:c4:54:08:ba:08:b8:5b:df:07:b8:66:86:15:3e:31: 1a:bb:1e:e5:7f:67:82:11:54:f8:4b:dc:ac:98:a7:fb:0d:eb: 26:28:99:8c:0e:39:17:e6:0e:d3:c9:99:36:e3:b5:b1:25:03: d8:b4:61:db:93:cc:6b:7c:d8:bf:3f:e3:37:98:0d:8e:69:ec: df:31:8d:4d:4b:80:8f:09:e5:7e:08:9f:37:9a:79:2a:01:8e: 3a:27:e4:62:f8:1d:c7:80:95:9b:85:f6:a0:8b:35:44:b1:0e: bb:ed:14:5b:74:e4:1b:73:7e:79:3e:f7:2e:68:e1:26:52:36: 32:91:0b:3f:69:b1:9a:03:ed:0f:48:86:82:42:40:c0:25:43: de:3d:d4:ca:8e:60:65:1d:71:cd:5c:07:57:3a:e6:ee:f2:4d: 9d:8d:f7:22:e4:d9:50:51:7b:8e:e4:6c:86:55:36:4a:52:a8: 8b:61:76:fd:e7:ab:6d:93:3a:b7:05:4d:45:a3:27:d9:f0:1e: a1:44:b8:98:6a:7a:27:c9:32:37:53:de:ff:e3:75:c5:20:96: e1:6a:75:af:94:c6:2c:ad:2e:e7:81:49:16:fe:fa:59:71:50: 0d:33:95:17 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUetWLRLKUf5azs5Hqcoa7WitRa5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjA3MUJEQ0ZEMDBGMTdCMEQyQ0I3QTA0RTM5RjdGQzND MzNBMEI4RDAeFw0yNjA5MTkyMTE2NThaFw0yNjA5MjMwMDA0NThaMDMxMTAvBgNV BAMTKDgxRUQyQTU2MDM2MzgwMzUyRjYwNjRDRjNCNUM5MTU5QUVGOTZERkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPkFR332Xl8FUL2/o8t+njXukA dNFj6IZIXdNNVvwflwYzJp5bE+zte9j4VT07/4sJilm8dN5MmIKjg7MOC/aToJp1 HJog7yNOH5kFSJVfBFOypVph6WNB82Wn/pGXk1Ep2dBzQiYQE851vg6yJe+ckp5C eB5xRgt4RGja7YbSHzlb5/jl/pyAZBDsZ2cjoIvu/BkQxTGehvNsxIagy1zMzXGm W9MQ5Zp/EYBwwCE9K3v+JewhlK313UQG/nQq5Xa4cH0w2eW4U2L/mWHj41MwiGEm JmWEtFUAAQwEzFQbb4b6KWH3YoXb7nAxwO9h/ugRIXhFG6uwgwYNljSRa1gDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUge0qVgNjgDUvYGTPO1yRWa75bfwwHwYDVR0j BBgwFoAU8HG9z9APF7DSy3oE459/w8M6C40wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTQ2OTI0MjIxMDg0NDY5My8wL0YwNzFCRENGRDAwRjE3QjBEMkNCN0EwNEUzOUY3 RkMzQzMzQTBCOEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjA3MUJEQ0ZEMDBGMTdCMEQyQ0I3QTA0RTM5RjdGQzNDMzNBMEI4RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE0NjkyNDIyMTA4NDQ2OTMvMC9GMDcxQkRDRkQwMEYx N0IwRDJDQjdBMDRFMzlGN0ZDM0MzM0EwQjhELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWLSzFqWl/AZ 9xlwjb5ZGE3z/Z9gxFQIugi4W98HuGaGFT4xGrse5X9nghFU+EvcrJin+w3rJiiZ jA45F+YO08mZNuO1sSUD2LRh25PMa3zYvz/jN5gNjmns3zGNTUuAjwnlfgifN5p5 KgGOOifkYvgdx4CVm4X2oIs1RLEOu+0UW3TkG3N+eT73LmjhJlI2MpELP2mxmgPt D0iGgkJAwCVD3j3Uyo5gZR1xzVwHVzrm7vJNnY33IuTZUFF7juRshlU2SlKoi2F2 /eerbZM6twVNRaMn2fAeoUS4mGp6J8kyN1Pe/+N1xSCW4Wp1r5TGLK0u54FJFv76 WXFQDTOVFw== -----END CERTIFICATE-----Generated at Mon Sep 21 08:08:28 2026 by rpki-client