$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft File: 3201C4351814E52EC594B407C57D52285AA52E6D.mft (raw, json) Hash identifier: ozRGVtBkwWWSz60cB5hEz3CNcx57Q1FLzfA5ykwBoLw= Subject key identifier: CB:47:B7:36:9C:A0:18:71:E6:84:13:C4:E3:5E:2B:B9:D7:C7:D6:B4 Authority key identifier: 32:01:C4:35:18:14:E5:2E:C5:94:B4:07:C5:7D:52:28:5A:A5:2E:6D Certificate issuer: /CN=3201C4351814E52EC594B407C57D52285AA52E6D Certificate serial: 5270C828F2CDDABFADE2B8371C89172A6B27FC89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft Manifest number: 86 Signing time: Mon 12 Oct 2026 02:06:18 +0000 Manifest this update: Mon 12 Oct 2026 02:01:18 +0000 Manifest next update: Thu 15 Oct 2026 05:34:18 +0000 Files and hashes: 1: 3201C4351814E52EC594B407C57D52285AA52E6D.crl (hash: bFUI+iaL+pRfe6FHedizU0c+yStP1QZ5e7HegRRLGN8=) 2: 3136332e3132382e3135322e302f32332d3233203d3e2030.roa (hash: eG2V3L8ngZytOIhFBaE+6vNlrSGpXtrAmShn5ATKyk0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.crl rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:70:c8:28:f2:cd:da:bf:ad:e2:b8:37:1c:89:17:2a:6b:27:fc:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3201C4351814E52EC594B407C57D52285AA52E6D Validity Not Before: Oct 12 02:01:18 2026 GMT Not After : Oct 15 05:34:18 2026 GMT Subject: CN=CB47B7369CA01871E68413C4E35E2BB9D7C7D6B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:53:cb:c7:d1:a1:3e:35:f9:4f:6d:3e:f8:a2: cf:2e:00:b3:56:0e:b6:a0:21:70:93:d7:a2:fa:1c: e3:f7:a5:ec:17:2b:26:f3:fb:a6:7c:16:af:17:f7: 29:55:41:a5:88:22:bf:fc:3a:22:84:3a:fb:f1:c7: 60:00:f6:57:41:2e:df:9a:00:6c:53:c1:2f:b0:c0: 56:85:1a:4c:e9:db:7d:3e:55:12:90:63:a8:c4:35: ae:ef:36:e1:9b:dc:73:86:23:b9:0a:24:7d:b1:fc: e6:79:e1:ab:78:6a:d7:75:0e:16:1a:35:cd:a8:4b: 48:fe:18:8f:43:a0:16:d9:f8:90:4a:29:06:64:5d: 66:65:ca:ee:d3:dd:c2:2f:b8:0b:e1:8e:51:ec:26: 0b:0a:60:39:42:af:e3:ff:ef:40:68:ca:c3:ed:29: 53:0e:60:7a:50:b4:12:9b:30:24:28:f7:75:0a:1f: 52:86:48:75:b6:1b:8e:1a:ff:9b:f8:60:94:a8:1b: 1c:38:c7:c0:13:43:ad:26:79:cf:a6:e2:fe:b6:b9: 93:c9:04:87:6d:1d:68:4f:2d:11:a2:de:b8:ca:09: 55:4b:95:20:7e:bb:51:13:eb:0a:ed:bd:a6:4d:1c: 8d:fe:1a:f5:d8:15:7e:6d:c3:6b:0f:bc:d6:37:dc: f2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:47:B7:36:9C:A0:18:71:E6:84:13:C4:E3:5E:2B:B9:D7:C7:D6:B4 X509v3 Authority Key Identifier: keyid:32:01:C4:35:18:14:E5:2E:C5:94:B4:07:C5:7D:52:28:5A:A5:2E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4b:39:bc:c1:ac:fd:fe:4c:ff:4c:f1:7d:0f:92:02:71:35: fb:47:bc:c0:b7:4c:41:09:96:fc:70:92:56:1c:a2:be:46:ef: c2:9f:55:21:01:5a:b8:12:13:d4:c2:e8:f1:2f:70:1d:8f:c5: 8b:a1:60:02:b6:b5:7d:73:98:52:15:41:0a:3b:9c:a4:27:81: 1e:12:f1:5d:f7:c3:b7:6e:23:20:5c:58:bf:00:b9:b8:56:40: 61:c5:e3:56:b9:be:83:15:92:fc:37:a3:0b:87:9b:39:a0:d6: cd:31:2c:a2:51:9e:cf:f7:5d:9a:f4:c8:96:ca:12:63:b4:ab: 18:17:31:c4:0d:59:0d:18:36:20:7e:7b:61:3c:ee:40:63:91: 2b:40:02:92:02:ce:f9:c8:cf:36:23:83:35:f4:cc:14:3e:3a: e7:de:6a:84:5a:9f:78:d8:da:25:72:95:59:08:de:d5:9f:88: 42:c6:82:c3:46:14:af:6d:a4:de:af:2d:ea:f9:f1:0f:ea:dd: 3e:bd:d7:04:55:de:cc:b4:33:cf:cc:93:c7:5e:82:b1:ad:bd: 77:7a:5b:ae:41:f2:45:f1:08:8f:c5:90:1a:db:0a:09:6a:5b: 52:e3:ef:dd:30:48:c1:ca:64:1f:ce:61:64:7b:63:b0:0a:1a: a1:d0:fa:ee -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUnDIKPLN2r+t4rg3HIkXKmsn/IkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIwMUM0MzUxODE0RTUyRUM1OTRCNDA3QzU3RDUyMjg1 QUE1MkU2RDAeFw0yNjEwMTIwMjAxMThaFw0yNjEwMTUwNTM0MThaMDMxMTAvBgNV BAMTKENCNDdCNzM2OUNBMDE4NzFFNjg0MTNDNEUzNUUyQkI5RDdDN0Q2QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxU8vH0aE+NflPbT74os8uALNW DragIXCT16L6HOP3pewXKybz+6Z8Fq8X9ylVQaWIIr/8OiKEOvvxx2AA9ldBLt+a AGxTwS+wwFaFGkzp230+VRKQY6jENa7vNuGb3HOGI7kKJH2x/OZ54at4atd1DhYa Nc2oS0j+GI9DoBbZ+JBKKQZkXWZlyu7T3cIvuAvhjlHsJgsKYDlCr+P/70BoysPt KVMOYHpQtBKbMCQo93UKH1KGSHW2G44a/5v4YJSoGxw4x8ATQ60mec+m4v62uZPJ BIdtHWhPLRGi3rjKCVVLlSB+u1ET6wrtvaZNHI3+GvXYFX5tw2sPvNY33PKJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUy0e3NpygGHHmhBPE414rudfH1rQwHwYDVR0j BBgwFoAUMgHENRgU5S7FlLQHxX1SKFqlLm0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg0OTI3MzY1ODI3NzkxMy8wLzMyMDFDNDM1MTgxNEU1MkVDNTk0QjQwN0M1N0Q1 MjI4NUFBNTJFNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzIwMUM0MzUxODE0RTUyRUM1OTRCNDA3QzU3RDUyMjg1QUE1MkU2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NDkyNzM2NTgyNzc5MTMvMC8zMjAxQzQzNTE4MTRF NTJFQzU5NEI0MDdDNTdENTIyODVBQTUyRTZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUs5vMGs/f5M /0zxfQ+SAnE1+0e8wLdMQQmW/HCSVhyivkbvwp9VIQFauBIT1MLo8S9wHY/Fi6Fg Ara1fXOYUhVBCjucpCeBHhLxXffDt24jIFxYvwC5uFZAYcXjVrm+gxWS/DejC4eb OaDWzTEsolGez/ddmvTIlsoSY7SrGBcxxA1ZDRg2IH57YTzuQGORK0ACkgLO+cjP NiODNfTMFD46595qhFqfeNjaJXKVWQje1Z+IQsaCw0YUr22k3q8t6vnxD+rdPr3X BFXezLQzz8yTx16Csa29d3pbrkHyRfEIj8WQGtsKCWpbUuPv3TBIwcpkH85hZHtj sAoaodD67g== -----END CERTIFICATE-----Generated at Mon Oct 12 04:57:43 2026 by rpki-client