$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft File: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft (raw, json) Hash identifier: IHv1JykBNMZz1SbhfDVO9OAH2z5mQ8GdfnngvA3wihk= Subject key identifier: 2F:7A:68:A6:CB:0B:37:DF:76:CE:A4:E0:A6:05:82:E4:EC:96:09:80 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 1DFCD7BCF85B982BC374D790540FBBCCDEF6D1C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft Manifest number: 0156 Signing time: Sat 03 Oct 2026 06:21:31 +0000 Manifest this update: Sat 03 Oct 2026 06:16:31 +0000 Manifest next update: Tue 06 Oct 2026 14:23:31 +0000 Files and hashes: 1: AS146788.roa (hash: 8B6qiNcSC/x73VIpAQpd883oeZsoWKDo+SgTi+7lr6Q=) 2: AS17429.roa (hash: tvQGx7lVTdjUniYlP7sr4BlUtqTEWoYA3mzipdCfds0=) 3: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl (hash: tkUUBiBW5KdXziKrfLlO0Msr6K5/VouT7+g0HixxYuc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 09:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:fc:d7:bc:f8:5b:98:2b:c3:74:d7:90:54:0f:bb:cc:de:f6:d1:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Oct 3 06:16:31 2026 GMT Not After : Oct 6 14:23:31 2026 GMT Subject: CN=2F7A68A6CB0B37DF76CEA4E0A60582E4EC960980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bb:02:ed:25:44:d8:a0:c7:fc:57:32:62:a8: d8:f8:cc:dc:cc:c5:b3:29:22:ad:ff:e6:45:bc:5b: df:3a:c0:8a:35:a6:9e:79:6f:cd:f1:8c:c8:f5:e6: 33:1b:ea:8e:a7:61:7b:90:cc:e9:ea:aa:5e:01:c3: 68:4e:1e:b2:ce:5d:42:eb:84:66:a1:89:53:4d:cc: ec:58:3a:4f:43:eb:ba:38:36:af:7e:f8:f9:a4:43: 32:ea:0e:d2:63:05:2b:53:19:a8:fe:b5:8e:0b:63: fa:c5:e3:1c:e9:87:c8:aa:cc:0e:b3:4f:7e:46:cd: e6:9d:bb:9d:b1:f3:fc:4c:13:bc:c4:2e:6d:04:f7: 4d:d5:45:65:46:4d:98:0c:13:20:76:f7:51:00:9d: 28:e9:e1:e4:89:28:0b:4b:91:90:b4:d1:25:26:b2: f8:b8:c2:18:56:95:a5:10:d2:49:94:11:4d:6d:2a: 39:93:ad:20:82:b8:6c:05:d2:00:5e:a3:ea:c4:48: 79:f8:9c:f7:1b:1c:41:11:f0:9b:28:4e:e8:6a:42: 1b:6c:8d:36:cd:26:34:3e:7d:13:d7:db:22:c1:c0: 4d:49:ff:4a:92:64:b8:b2:e4:1e:7c:65:8a:62:87: a9:6b:56:31:99:c7:8c:45:d6:6a:61:d3:7b:50:fa: 7e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7A:68:A6:CB:0B:37:DF:76:CE:A4:E0:A6:05:82:E4:EC:96:09:80 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:47:8d:85:84:e4:47:ca:46:35:80:91:66:5d:96:55:e9:1f: f9:71:25:ec:c3:05:e8:ac:65:a1:a7:18:1d:28:24:8e:e1:14: 9d:c0:1f:e5:ff:cd:50:49:2b:36:3b:d0:d3:54:3e:ce:96:33: a1:42:07:43:a2:73:69:20:f0:20:f0:a7:69:37:ec:59:fa:cc: 7c:ee:8e:19:bc:e3:02:1e:fb:de:38:96:30:64:1a:1e:9c:c9: ba:ae:95:83:ad:c2:f3:23:a9:e1:bd:57:94:0a:c1:48:a7:c3: 8f:cf:94:e2:5a:69:e2:b8:4a:4c:40:40:ce:2b:f8:39:ca:5f: 42:f7:9c:34:93:12:5d:ed:62:49:a0:cc:30:03:a1:5f:a5:99: e8:2f:5c:28:e7:89:0a:18:70:e1:4a:90:5d:4a:4f:da:d3:55: e5:60:cc:cf:91:87:40:1a:cc:16:61:0b:2f:4a:29:27:02:00: 3e:23:2a:cc:05:50:3e:20:18:4d:22:24:83:06:2e:84:ac:2b: da:7f:19:d6:80:5e:52:47:67:3c:5a:ad:48:b9:85:47:06:ce: 2f:91:e6:de:e0:12:d9:2e:06:4b:af:8a:d1:fa:97:09:18:4a: 23:3b:2b:8f:3c:9c:a2:15:91:60:31:18:a7:90:4a:b5:a9:04: 08:c8:14:75 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHfzXvPhbmCvDdNeQVA+7zN720cYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjEwMDMwNjE2MzFaFw0yNjEwMDYxNDIzMzFaMDMxMTAvBgNV BAMTKDJGN0E2OEE2Q0IwQjM3REY3NkNFQTRFMEE2MDU4MkU0RUM5NjA5ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDuwLtJUTYoMf8VzJiqNj4zNzM xbMpIq3/5kW8W986wIo1pp55b83xjMj15jMb6o6nYXuQzOnqql4Bw2hOHrLOXULr hGahiVNNzOxYOk9D67o4Nq9++PmkQzLqDtJjBStTGaj+tY4LY/rF4xzph8iqzA6z T35Gzeadu52x8/xME7zELm0E903VRWVGTZgMEyB291EAnSjp4eSJKAtLkZC00SUm svi4whhWlaUQ0kmUEU1tKjmTrSCCuGwF0gBeo+rESHn4nPcbHEER8JsoTuhqQhts jTbNJjQ+fRPX2yLBwE1J/0qSZLiy5B58ZYpih6lrVjGZx4xF1mph03tQ+n7xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUL3popssLN992zqTgpgWC5OyWCYAwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI4NTIwOTcvMC9DRjIxNENERURDNTg0 QjNCMDEwRkMzQTZEMEQzREI4OTcyMTlCNTk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAukeNhYTkR8pG NYCRZl2WVekf+XEl7MMF6KxloacYHSgkjuEUncAf5f/NUEkrNjvQ01Q+zpYzoUIH Q6JzaSDwIPCnaTfsWfrMfO6OGbzjAh773jiWMGQaHpzJuq6Vg63C8yOp4b1XlArB SKfDj8+U4lpp4rhKTEBAziv4OcpfQvecNJMSXe1iSaDMMAOhX6WZ6C9cKOeJChhw 4UqQXUpP2tNV5WDMz5GHQBrMFmELL0opJwIAPiMqzAVQPiAYTSIkgwYuhKwr2n8Z 1oBeUkdnPFqtSLmFRwbOL5Hm3uAS2S4GS6+K0fqXCRhKIzsrjzycohWRYDEYp5BK takECMgUdQ== -----END CERTIFICATE-----Generated at Sat Oct 3 13:09:49 2026 by rpki-client