$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft File: FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft (raw, json) Hash identifier: uG2iBGkIiKk8V2SssPrxo4QwXXQx/UP5z2d2zIUQFck= Subject key identifier: 16:EF:D9:7E:B1:54:F8:A0:74:E3:62:5D:34:A7:61:F4:54:B7:97:90 Authority key identifier: FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E Certificate issuer: /CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E Certificate serial: 031CC42A36F2DC64B7768B0399DE8C3FBCEE7AD3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft Manifest number: 8A Signing time: Sun 11 Oct 2026 16:50:45 +0000 Manifest this update: Sun 11 Oct 2026 16:45:45 +0000 Manifest next update: Wed 14 Oct 2026 21:36:45 +0000 Files and hashes: 1: 3230322e39312e3137362e302f32312d3332203d3e2034383038.roa (hash: PIwjB7Cm/PHG2yK99D3XAoIfIN92y706TJvBiQ2oqzs=) 2: 3230322e39312e3138342e302f32332d3332203d3e2034383038.roa (hash: x5BW1+RlHPJ1eIaJoW8xLLmvZjNlyPZpGHm7mjrN2v4=) 3: FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl (hash: baDgX1687HcuOzVL23Hvj1VmxOTTp9p51lSienWzdJM=) 4: 3230322e39332e3235322e302f32322d3332203d3e2034383038.roa (hash: kK/ACVhxw+EM5uNXfp+kpIl6rn/PuCSg8zqiCgwErdA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:1c:c4:2a:36:f2:dc:64:b7:76:8b:03:99:de:8c:3f:bc:ee:7a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E Validity Not Before: Oct 11 16:45:45 2026 GMT Not After : Oct 14 21:36:45 2026 GMT Subject: CN=16EFD97EB154F8A074E3625D34A761F454B79790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d1:2b:2a:9f:7e:69:fd:91:41:3f:4f:a3:44: 38:ec:c7:32:ea:61:bb:c8:35:c7:35:64:bd:93:32: 1d:f6:8a:e1:a8:c4:cd:11:4a:24:f7:ab:19:ae:70: dc:b5:51:fc:7a:58:14:29:c1:e6:29:e1:84:b8:96: cd:3c:82:f6:83:ea:39:57:35:8c:e1:0c:8f:da:39: 56:02:c3:f1:86:47:f5:92:70:2d:4f:2a:a4:b9:9a: 3b:fc:b0:6b:46:71:4c:77:7c:dd:ec:a7:c1:7e:11: ea:c5:a7:79:4a:f0:cc:c3:21:aa:8f:65:89:07:4b: 87:32:96:cf:bf:b9:bb:47:2a:92:97:71:38:20:44: c8:bf:d2:3e:53:06:cc:00:2d:b5:ff:09:3f:c7:5c: e7:c2:c9:91:05:c4:5f:17:a4:9c:80:0f:f3:94:3e: af:67:6f:13:e2:22:62:b5:6f:5f:3f:ce:ba:d4:0d: c2:f0:14:9e:be:11:d5:04:f0:62:ed:8d:71:b1:df: f1:70:34:b9:bb:91:46:fc:55:96:5b:37:5d:0e:42: 14:43:7b:5c:8b:9e:b9:56:c9:0c:41:4a:61:38:fd: 58:74:76:c5:f3:f1:90:c0:1d:45:0a:49:76:53:41: 00:2d:7d:59:2e:58:e8:1e:dc:87:de:11:50:6c:61: b7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EF:D9:7E:B1:54:F8:A0:74:E3:62:5D:34:A7:61:F4:54:B7:97:90 X509v3 Authority Key Identifier: keyid:FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:5d:2f:7a:e7:f7:6c:77:d1:62:0d:4f:bf:30:72:64:fd:93: f7:75:a3:01:fa:08:74:83:b8:1a:39:66:33:b3:11:94:e4:65: 76:56:39:db:bc:72:a4:f1:3c:79:98:c1:89:52:85:1e:2a:d1: d0:7e:56:6e:4b:fe:9e:ff:49:58:22:48:e6:13:f1:2c:2a:31: 5e:b1:c2:f5:14:e9:50:4d:42:6f:20:39:bb:18:24:ca:52:17: 67:01:33:52:af:99:a6:92:b6:c1:12:60:eb:24:17:22:13:6e: 84:62:71:fe:ef:0e:aa:d5:a9:2c:a8:9c:05:3d:43:7c:4c:05: a5:0f:bf:a1:34:b7:2c:29:41:11:6e:ba:06:05:78:63:28:a4: 0d:60:52:82:0f:4f:5c:96:f2:66:50:ed:ef:da:6c:af:f7:c5: 60:92:1c:e8:05:97:61:1c:5a:0f:dd:f8:33:b8:b8:85:f4:21: 9c:d8:5f:ba:33:60:fc:03:1e:a3:bc:0c:cb:2c:bb:31:0c:73: 62:2f:6a:0f:4c:cf:54:d2:a0:d3:15:97:fc:c6:d3:f8:4a:8d: c3:42:42:d3:a5:02:a4:f6:1b:51:c8:c5:08:3e:78:b2:9e:dd: 26:4e:6b:2f:d2:a3:3a:ed:fb:6a:e1:61:52:3e:e9:26:47:37: a4:37:cd:a1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAxzEKjby3GS3dosDmd6MP7zuetMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGOTZGOEIxM0M5MzZBQzE5N0FEQjQzOEUyN0M0RTk5 OEY4NjQyRTAeFw0yNjEwMTExNjQ1NDVaFw0yNjEwMTQyMTM2NDVaMDMxMTAvBgNV BAMTKDE2RUZEOTdFQjE1NEY4QTA3NEUzNjI1RDM0QTc2MUY0NTRCNzk3OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe0Ssqn35p/ZFBP0+jRDjsxzLq YbvINcc1ZL2TMh32iuGoxM0RSiT3qxmucNy1Ufx6WBQpweYp4YS4ls08gvaD6jlX NYzhDI/aOVYCw/GGR/WScC1PKqS5mjv8sGtGcUx3fN3sp8F+EerFp3lK8MzDIaqP ZYkHS4cyls+/ubtHKpKXcTggRMi/0j5TBswALbX/CT/HXOfCyZEFxF8XpJyAD/OU Pq9nbxPiImK1b18/zrrUDcLwFJ6+EdUE8GLtjXGx3/FwNLm7kUb8VZZbN10OQhRD e1yLnrlWyQxBSmE4/Vh0dsXz8ZDAHUUKSXZTQQAtfVkuWOge3IfeEVBsYbdlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFu/ZfrFU+KB042JdNKdh9FS3l5AwHwYDVR0j BBgwFoAU//lvixPJNqwZettDjifE6Zj4ZC4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDQ1Nzc0MTMwNjQyOTQ2My8wL0ZGRjk2RjhCMTNDOTM2QUMxOTdBREI0MzhFMjdD NEU5OThGODY0MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkZGOTZGOEIxM0M5MzZBQzE5N0FEQjQzOEUyN0M0RTk5OEY4NjQyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ0NTc3NDEzMDY0Mjk0NjMvMC9GRkY5NkY4QjEzQzkz NkFDMTk3QURCNDM4RTI3QzRFOTk4Rjg2NDJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqV0veuf3bHfR Yg1PvzByZP2T93WjAfoIdIO4GjlmM7MRlORldlY527xypPE8eZjBiVKFHirR0H5W bkv+nv9JWCJI5hPxLCoxXrHC9RTpUE1CbyA5uxgkylIXZwEzUq+ZppK2wRJg6yQX IhNuhGJx/u8OqtWpLKicBT1DfEwFpQ+/oTS3LClBEW66BgV4YyikDWBSgg9PXJby ZlDt79psr/fFYJIc6AWXYRxaD934M7i4hfQhnNhfujNg/AMeo7wMyyy7MQxzYi9q D0zPVNKg0xWX/MbT+EqNw0JC06UCpPYbUcjFCD54sp7dJk5rL9KjOu37auFhUj7p Jkc3pDfNoQ== -----END CERTIFICATE-----Generated at Mon Oct 12 00:59:57 2026 by rpki-client