$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft File: 305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft (raw, json) Hash identifier: ilI8ZwHX7cQrFyzzKRe5vIc8lgZIQ0cXEByw0/Xl4bg= Subject key identifier: E2:6B:CD:B6:D1:71:8D:F1:CC:93:84:79:EE:B2:D7:5B:50:F9:A9:BA Authority key identifier: 30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C Certificate issuer: /CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C Certificate serial: 0D405AB8889A3DC058F31BA2EDC426079F31EEDA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft Manifest number: 98 Signing time: Mon 12 Oct 2026 16:27:08 +0000 Manifest this update: Mon 12 Oct 2026 16:22:08 +0000 Manifest next update: Thu 15 Oct 2026 20:13:08 +0000 Files and hashes: 1: 3134342e34382e36342e302f32322d3232203d3e2034383337.roa (hash: vQ0CAaPQV+i3w/GJOaVXDBBSQcmTSIVf3fh4Hxu2or0=) 2: 305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl (hash: +PwMQ6IbQX2iVpgvPLjIBTuUTcJdrA4n1/iRjergdtU=) 3: 3130332e3231342e34382e302f32322d3232203d3e2034383337.roa (hash: wpwMVqYTLbP68yao2fYoXKN2+eMRU0R4Vc9UHj1IA7A=) 4: 34332e3232342e38302e302f32322d3232203d3e2034383337.roa (hash: bXqT1q3Xi8uEtR2DeZe8yD99M07BG3eez7vSwEaf0iI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:40:5a:b8:88:9a:3d:c0:58:f3:1b:a2:ed:c4:26:07:9f:31:ee:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=305CF9A41DCC6E06CE9CA73352325EFC4D34331C Validity Not Before: Oct 12 16:22:08 2026 GMT Not After : Oct 15 20:13:08 2026 GMT Subject: CN=E26BCDB6D1718DF1CC938479EEB2D75B50F9A9BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:66:35:91:79:6c:95:94:1b:de:55:a8:5a:95: c5:e1:43:59:8b:5a:84:ce:f6:70:84:50:46:ac:cc: 23:d6:a4:61:2c:b6:2f:c3:a2:f0:0c:51:6e:f0:e7: 1b:e4:e9:95:c1:10:25:7c:33:63:8b:66:18:86:51: 13:49:59:56:03:13:2d:ba:6b:bf:d4:c3:23:e7:53: 05:13:f8:a1:0d:ed:68:16:a8:0a:a8:b5:ae:4f:67: 4d:ab:ab:1b:9d:91:4a:c0:60:b8:2b:ac:1f:0a:9f: a6:88:78:31:2d:ed:fc:eb:6d:ae:88:87:d0:4f:49: 89:d1:6c:72:53:3d:79:a2:3a:51:df:4d:5f:3f:22: 20:37:4c:d7:be:ff:27:b8:d7:a4:a0:c1:87:58:a2: 66:dc:4c:18:7c:1f:7d:74:37:bb:63:72:f6:50:a1: e5:5e:75:64:4f:be:0d:9a:06:f0:4f:96:0e:ca:94: 9e:1a:bc:31:c6:29:0a:4d:b9:a0:c9:79:36:18:f8: 8b:97:52:78:d2:2e:a4:5a:99:44:71:14:3b:ec:32: de:85:41:8a:63:85:20:e0:28:97:9d:f4:c3:eb:66: 5d:ac:47:c3:53:a4:41:01:69:4d:1b:13:c8:2b:33: b3:29:fb:8e:b5:69:b4:42:ce:da:6d:40:43:f2:a2: e0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6B:CD:B6:D1:71:8D:F1:CC:93:84:79:EE:B2:D7:5B:50:F9:A9:BA X509v3 Authority Key Identifier: keyid:30:5C:F9:A4:1D:CC:6E:06:CE:9C:A7:33:52:32:5E:FC:4D:34:33:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111857844975566867/0/305CF9A41DCC6E06CE9CA73352325EFC4D34331C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:7f:46:26:dd:ad:ca:a7:db:cf:c5:52:f7:c3:db:be:5c:f4: fa:e7:36:5b:1b:8e:5a:91:f3:8e:65:43:1d:b6:ab:90:44:38: 39:f2:70:12:96:fe:ba:34:84:68:6c:a7:29:fb:80:28:00:b1: f4:a6:dc:3c:3b:0d:4c:63:f0:aa:85:02:ac:05:b7:c2:ef:e1: f5:18:63:bd:f8:2f:6c:99:da:61:57:c7:92:8d:32:5d:84:b4: f7:c3:b5:b4:e7:47:36:29:88:84:e2:c7:3d:13:d8:23:49:8c: 1e:97:54:3b:23:ea:65:37:03:89:16:ac:b9:1e:c2:4d:ba:37: 1a:b8:c3:db:69:f1:99:f9:8f:0d:c2:c0:07:78:5b:2c:c2:a7: f4:91:8d:da:80:47:e8:aa:6d:3f:33:00:91:7a:84:25:a9:f5: d3:e8:88:f4:72:82:c2:4a:14:6d:14:e8:bf:d8:ae:60:4d:80: b3:f4:24:55:e7:bf:bd:e2:c1:27:aa:43:fc:46:87:89:03:0c: cc:c5:e1:57:3f:3c:f5:c9:e1:0b:c7:61:21:4d:50:01:15:7d: c6:52:ce:16:6f:f4:98:bb:51:87:ae:f8:52:d3:dd:b8:fe:93: 98:1e:da:fb:9b:5c:f9:e0:3f:f3:b5:c6:bd:f9:cc:35:be:02: 81:ee:9b:cd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDUBauIiaPcBY8xui7cQmB58x7towDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA1Q0Y5QTQxRENDNkUwNkNFOUNBNzMzNTIzMjVFRkM0 RDM0MzMxQzAeFw0yNjEwMTIxNjIyMDhaFw0yNjEwMTUyMDEzMDhaMDMxMTAvBgNV BAMTKEUyNkJDREI2RDE3MThERjFDQzkzODQ3OUVFQjJENzVCNTBGOUE5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGZjWReWyVlBveVahalcXhQ1mL WoTO9nCEUEaszCPWpGEsti/DovAMUW7w5xvk6ZXBECV8M2OLZhiGURNJWVYDEy26 a7/UwyPnUwUT+KEN7WgWqAqota5PZ02rqxudkUrAYLgrrB8Kn6aIeDEt7fzrba6I h9BPSYnRbHJTPXmiOlHfTV8/IiA3TNe+/ye416SgwYdYombcTBh8H310N7tjcvZQ oeVedWRPvg2aBvBPlg7KlJ4avDHGKQpNuaDJeTYY+IuXUnjSLqRamURxFDvsMt6F QYpjhSDgKJed9MPrZl2sR8NTpEEBaU0bE8grM7Mp+461abRCztptQEPyouD1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4mvNttFxjfHMk4R57rLXW1D5qbowHwYDVR0j BBgwFoAUMFz5pB3MbgbOnKczUjJe/E00MxwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTg1Nzg0NDk3NTU2Njg2Ny8wLzMwNUNGOUE0MURDQzZFMDZDRTlDQTczMzUyMzI1 RUZDNEQzNDMzMUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA1Q0Y5QTQxRENDNkUwNkNFOUNBNzMzNTIzMjVFRkM0RDM0MzMxQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE4NTc4NDQ5NzU1NjY4NjcvMC8zMDVDRjlBNDFEQ0M2 RTA2Q0U5Q0E3MzM1MjMyNUVGQzREMzQzMzFDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABn9GJt2tyqfb z8VS98Pbvlz0+uc2WxuOWpHzjmVDHbarkEQ4OfJwEpb+ujSEaGynKfuAKACx9Kbc PDsNTGPwqoUCrAW3wu/h9RhjvfgvbJnaYVfHko0yXYS098O1tOdHNimIhOLHPRPY I0mMHpdUOyPqZTcDiRasuR7CTbo3GrjD22nxmfmPDcLAB3hbLMKn9JGN2oBH6Kpt PzMAkXqEJan10+iI9HKCwkoUbRTov9iuYE2As/QkVee/veLBJ6pD/EaHiQMMzMXh Vz889cnhC8dhIU1QARV9xlLOFm/0mLtRh674UtPduP6TmB7a+5tc+eA/87XGvfnM Nb4Cge6bzQ== -----END CERTIFICATE-----Generated at Tue Oct 13 08:24:40 2026 by rpki-client