$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft File: E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft (raw, json) Hash identifier: ut1pCNGJYBqyCf2QJQUkGnVdydtzcmpdaRGN7wvWJLs= Subject key identifier: 8A:85:2E:18:3C:F2:FE:76:3B:E9:4D:79:7C:99:72:5D:DD:36:4D:49 Authority key identifier: E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76 Certificate issuer: /CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76 Certificate serial: 14E64AFD12A86D1EC41EA2737725F477FABFA212 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft Manifest number: 0135 Signing time: Sat 26 Sep 2026 23:54:28 +0000 Manifest this update: Sat 26 Sep 2026 23:49:28 +0000 Manifest next update: Wed 30 Sep 2026 05:56:28 +0000 Files and hashes: 1: 323430303a623630303a3a2f33322d3332203d3e203234333632.roa (hash: OosGElGWS+GJxc2ZLFUVt0Ov6ZtBGlbrmX6x9kVC9FE=) 2: 3132312e3235352e302e302f31362d3136203d3e2039383038.roa (hash: i+Yvpy4wEjm9Zal8avDFdBxjmmqkEh/jP0WXLF0Nx9I=) 3: 3230322e3134312e3137362e302f32302d3234203d3e2039383038.roa (hash: BJiMFl6jVD4T1WT4EgvA6XJoshc/WlwYp74ViFHNY8M=) 4: 3230322e3134312e3136302e302f32302d3234203d3e2034313334.roa (hash: Af/wuALTSgcc0XewJsOWxFCtdlbkemPNclhlWQx+CcE=) 5: E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl (hash: ZUE5HHUmj3+Joa3yL+PDkMT/XpJAhm8hhPmbc1NX91I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:e6:4a:fd:12:a8:6d:1e:c4:1e:a2:73:77:25:f4:77:fa:bf:a2:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76 Validity Not Before: Sep 26 23:49:28 2026 GMT Not After : Sep 30 05:56:28 2026 GMT Subject: CN=8A852E183CF2FE763BE94D797C99725DDD364D49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e6:06:be:5e:57:01:05:2c:24:7f:86:d5:c0: 51:3f:03:cf:a7:98:79:2f:e7:92:32:7a:2d:79:8d: 92:e0:a9:9b:ea:28:e1:4b:6f:c8:c6:0c:83:26:89: 8d:82:f0:bc:73:65:cf:2a:07:b0:0b:01:60:63:d5: 93:11:d1:80:84:33:98:2e:c1:84:e3:97:ab:e2:7e: 73:1d:ff:1d:6c:eb:f0:e6:21:45:ff:91:16:fe:b5: ce:dd:ad:02:8e:19:3d:58:9d:fb:b7:38:93:04:4c: a3:53:20:31:1f:c9:82:2a:48:e3:12:91:83:95:31: 48:6c:1b:40:3b:ef:b2:aa:ac:00:31:8a:1b:98:3a: ae:19:d4:10:79:c7:28:dd:30:fc:bc:05:e7:d9:e1: 9c:9e:bb:a9:63:f7:5e:78:5e:8c:7a:08:ff:15:1c: a7:24:37:54:9d:92:d9:be:05:82:f0:f1:70:3e:97: c7:c6:72:0a:3c:34:35:9e:72:2e:33:49:4e:bc:bc: 4f:92:03:c7:11:1a:c2:ca:c8:2c:1d:30:2f:ab:1f: a7:e0:cf:d3:eb:b4:bc:01:30:04:b3:96:d5:a5:05: 6d:89:7a:1f:61:01:55:55:b4:e9:a5:7f:ff:c9:cb: 27:ae:db:c1:af:8c:58:3a:19:dc:ec:33:78:30:ba: 43:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:85:2E:18:3C:F2:FE:76:3B:E9:4D:79:7C:99:72:5D:DD:36:4D:49 X509v3 Authority Key Identifier: keyid:E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:bb:12:d6:56:05:aa:60:f2:b9:7b:da:c5:cf:6f:b6:ca:9f: bd:3b:55:6f:df:c1:61:29:e7:53:0f:db:1d:d3:a1:2e:4d:e6: 36:ab:99:dd:f7:fe:cb:39:ba:1e:f3:68:02:a2:50:3a:98:46: e3:64:15:5e:2a:1f:0b:4f:ec:d9:d7:c7:b2:b0:48:4d:35:e1: 36:7d:1e:f4:4a:c8:f6:8e:a0:e7:68:cd:2e:f7:a3:18:49:21: 7d:59:a8:bd:1a:c7:1d:7b:3a:20:34:6f:87:c0:5e:3c:80:46: ab:4a:45:4f:db:cd:49:ee:77:17:7a:55:8f:45:f9:27:99:7d: b6:42:f0:81:0f:da:73:92:c6:a5:75:f3:d2:36:ec:29:46:9b: 84:cf:87:93:41:07:46:3e:81:50:a5:ea:c5:99:7c:29:c6:c3: 54:3c:72:2f:07:94:c9:42:1c:43:36:cc:16:39:7c:28:0c:e5: 78:86:bc:6f:3f:7d:f0:8e:59:18:fa:ca:c9:38:f5:d1:31:b3: 3b:76:8b:c5:ae:69:34:a8:8b:e3:40:01:78:b1:bd:3a:5c:07: b3:01:00:f9:08:4e:4f:05:03:ab:52:71:86:46:e7:fc:cd:2a: 8d:a6:bf:b0:25:f8:6f:08:36:ae:38:3d:b5:8c:08:07:f7:fc: eb:32:eb:f9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFOZK/RKobR7EHqJzdyX0d/q/ohIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBDRjlDNzMxODE3MEUyOTQ5QUQ2MzVFM0JGNDcwRTI3 NkVFMUU3NjAeFw0yNjA5MjYyMzQ5MjhaFw0yNjA5MzAwNTU2MjhaMDMxMTAvBgNV BAMTKDhBODUyRTE4M0NGMkZFNzYzQkU5NEQ3OTdDOTk3MjVEREQzNjRENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf5ga+XlcBBSwkf4bVwFE/A8+n mHkv55Iyei15jZLgqZvqKOFLb8jGDIMmiY2C8LxzZc8qB7ALAWBj1ZMR0YCEM5gu wYTjl6vifnMd/x1s6/DmIUX/kRb+tc7drQKOGT1Ynfu3OJMETKNTIDEfyYIqSOMS kYOVMUhsG0A777KqrAAxihuYOq4Z1BB5xyjdMPy8BefZ4Zyeu6lj9154Xox6CP8V HKckN1Sdktm+BYLw8XA+l8fGcgo8NDWeci4zSU68vE+SA8cRGsLKyCwdMC+rH6fg z9PrtLwBMASzltWlBW2Jeh9hAVVVtOmlf//Jyyeu28GvjFg6GdzsM3gwukPtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUioUuGDzy/nY76U15fJlyXd02TUkwHwYDVR0j BBgwFoAU4M+ccxgXDilJrWNeO/Rw4nbuHnYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODIwNjA4My8wL0UwQ0Y5QzczMTgxNzBFMjk0OUFENjM1RTNCRjQ3 MEUyNzZFRTFFNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTBDRjlDNzMxODE3MEUyOTQ5QUQ2MzVFM0JGNDcwRTI3NkVFMUU3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyMDYwODMvMC9FMENGOUM3MzE4MTcw RTI5NDlBRDYzNUUzQkY0NzBFMjc2RUUxRTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLsS1lYFqmDy uXvaxc9vtsqfvTtVb9/BYSnnUw/bHdOhLk3mNquZ3ff+yzm6HvNoAqJQOphG42QV XiofC0/s2dfHsrBITTXhNn0e9ErI9o6g52jNLvejGEkhfVmovRrHHXs6IDRvh8Be PIBGq0pFT9vNSe53F3pVj0X5J5l9tkLwgQ/ac5LGpXXz0jbsKUabhM+Hk0EHRj6B UKXqxZl8KcbDVDxyLweUyUIcQzbMFjl8KAzleIa8bz998I5ZGPrKyTj10TGzO3aL xa5pNKiL40ABeLG9OlwHswEA+QhOTwUDq1Jxhkbn/M0qjaa/sCX4bwg2rjg9tYwI B/f86zLr+Q== -----END CERTIFICATE-----Generated at Mon Sep 28 05:56:42 2026 by rpki-client