$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft File: 373B103C68D9B84455801815E437C49839794406.mft (raw, json) Hash identifier: lfFZVNu/rgJfBCnYcUxLCGohepOI3G9998rS6SU0N2s= Subject key identifier: 9F:9E:CB:FE:CA:F4:D7:56:F8:AB:B9:29:C0:FA:12:49:E7:22:68:D8 Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06 Certificate issuer: /CN=373B103C68D9B84455801815E437C49839794406 Certificate serial: 772B5D5013362050A53A49FE41CFC79C1372E417 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft Manifest number: 013B Signing time: Sat 26 Sep 2026 00:17:58 +0000 Manifest this update: Sat 26 Sep 2026 00:12:58 +0000 Manifest next update: Tue 29 Sep 2026 05:01:58 +0000 Files and hashes: 1: 373B103C68D9B84455801815E437C49839794406.crl (hash: feg/jlmY57QRlSCGQ+CHU4PUgLX0X52EYX3XXqlrN/o=) 2: 3131302e3233372e302e302f31362d3136203d3e2039383038.roa (hash: xFtnh6XjWsHSoRFqwMT0dAdbo39z/4IBEm/NltK9l5A=) 3: 3131332e31382e302e302f31362d3136203d3e2039383038.roa (hash: l2TtlQd2OeYBccu9u8JTA5koymL/HDwH4svd8KIbs00=) 4: 3131332e31382e3133302e302f32342d3234203d3e2039383038.roa (hash: zDOWeX9XcM9h2tJJRyjYjzukX9m6ydEOUWtBszIYs2I=) 5: 3131302e3233362e302e302f31362d3136203d3e2039383038.roa (hash: ypOszjBaxK7aN3qHrAMdQaOEEef+WU0nK8BVdjeedMs=) 6: 3131332e31382e3139392e302f32342d3234203d3e2039383038.roa (hash: 26xHgpFQwzdYak11Uk8qGZoi6F5obP9Yhc9faJO/AC0=) 7: 3138322e3135372e302e302f31362d3136203d3e2039383038.roa (hash: bb97oY6zPLsKhBLVa0rQlewA3WGo8q51y04BsHtNgQM=) 8: 3131302e3233362e302e302f31352d3135203d3e2039383038.roa (hash: hEDr8/74LWqVAxQIAl/qC7YYDZiTh64u3Td4QxxhlWk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:2b:5d:50:13:36:20:50:a5:3a:49:fe:41:cf:c7:9c:13:72:e4:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=373B103C68D9B84455801815E437C49839794406 Validity Not Before: Sep 26 00:12:58 2026 GMT Not After : Sep 29 05:01:58 2026 GMT Subject: CN=9F9ECBFECAF4D756F8ABB929C0FA1249E72268D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d7:a9:79:c2:42:f9:67:97:19:0e:4f:c9:0c: d8:a9:78:6c:7c:4a:e3:f5:c9:34:8a:eb:ba:2c:35: 84:a1:f5:9e:19:a8:e5:e4:8d:6f:f8:f5:57:95:58: cc:34:4b:93:59:20:09:11:2f:0d:3c:d3:63:8b:e9: b2:58:2a:45:78:6e:b0:c8:ad:96:fe:12:4d:7f:b0: 2c:7d:fa:fb:3c:52:f1:59:ea:c2:e1:c9:e8:e2:aa: cf:c5:70:bb:6f:60:4d:20:2b:e5:80:8d:12:fe:8e: ee:8b:0e:3c:b8:2a:2c:b9:84:78:3e:12:48:81:f1: d7:88:da:87:8b:70:8d:e6:a2:3f:44:8b:f2:2b:21: 2a:4d:73:87:fa:6a:6e:de:e1:fb:4f:46:ad:c6:c4: 48:b4:63:f2:85:61:05:2c:21:ef:24:dd:fe:d7:b3: f2:8e:b7:59:ea:29:61:8c:d0:b3:cf:76:5d:46:ea: cc:94:02:51:e3:8e:c0:56:24:c0:42:61:29:0d:af: 64:8f:13:3e:5e:54:b8:a4:63:a1:bb:6b:3d:12:b5: 86:25:86:d2:e2:86:f7:8c:5d:d1:28:5c:92:01:61: 98:fe:11:5b:4d:75:72:77:58:3d:86:3b:12:89:42: 5a:9d:8b:eb:47:95:4e:84:aa:f3:d8:96:2a:0e:e4: 29:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9E:CB:FE:CA:F4:D7:56:F8:AB:B9:29:C0:FA:12:49:E7:22:68:D8 X509v3 Authority Key Identifier: keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:9a:a9:77:9a:f6:ca:03:d9:5f:77:08:e3:fa:01:61:54:00: f3:90:c6:7f:53:d3:2f:55:5e:df:f2:15:30:fe:3c:8e:30:55: 8e:8d:84:96:e7:aa:e4:05:33:49:97:40:d4:53:86:e9:24:2e: 36:4f:5e:24:75:ba:e5:7d:6c:04:17:31:63:ad:1e:db:24:81: ba:9a:7f:44:fd:4f:06:94:a2:46:d3:05:52:5f:5e:84:ce:5b: 55:90:5d:86:9d:2f:6d:c4:4d:60:02:8a:7a:d6:6a:78:ff:eb: f1:5e:be:27:5b:ce:8a:08:b6:b6:02:5c:ba:bd:7f:f7:13:95: 9e:38:10:b7:df:9c:37:c0:53:50:f7:76:37:9b:c6:34:30:86: 6a:a5:e0:a6:a9:4b:af:f4:52:51:b7:7d:f7:62:af:ed:d7:25: a1:90:f3:89:9a:84:e8:a9:b5:2c:e0:1c:75:03:d2:61:bf:ed: f8:52:a4:a6:02:d5:14:94:8d:68:8e:4b:04:91:cd:4e:16:aa: e8:58:c9:7f:7b:69:f4:53:19:68:6b:1a:bb:55:94:77:61:15: 7e:32:e8:d5:e6:96:61:31:33:ef:52:97:cc:37:54:ab:2d:43: ed:fd:39:a4:e9:b3:08:ad:88:23:84:d1:12:b8:3d:70:45:1d: 0d:e1:dd:ed -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdytdUBM2IFClOkn+Qc/HnBNy5BcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgz OTc5NDQwNjAeFw0yNjA5MjYwMDEyNThaFw0yNjA5MjkwNTAxNThaMDMxMTAvBgNV BAMTKDlGOUVDQkZFQ0FGNEQ3NTZGOEFCQjkyOUMwRkExMjQ5RTcyMjY4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX16l5wkL5Z5cZDk/JDNipeGx8 SuP1yTSK67osNYSh9Z4ZqOXkjW/49VeVWMw0S5NZIAkRLw0802OL6bJYKkV4brDI rZb+Ek1/sCx9+vs8UvFZ6sLhyejiqs/FcLtvYE0gK+WAjRL+ju6LDjy4Kiy5hHg+ EkiB8deI2oeLcI3moj9Ei/IrISpNc4f6am7e4ftPRq3GxEi0Y/KFYQUsIe8k3f7X s/KOt1nqKWGM0LPPdl1G6syUAlHjjsBWJMBCYSkNr2SPEz5eVLikY6G7az0StYYl htLihveMXdEoXJIBYZj+EVtNdXJ3WD2GOxKJQlqdi+tHlU6EqvPYlioO5ClrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUn57L/sr011b4q7kpwPoSSeciaNgwHwYDVR0j BBgwFoAUNzsQPGjZuERVgBgV5DfEmDl5RAYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQ2ODIyNy8wLzM3M0IxMDNDNjhEOUI4NDQ1NTgwMTgxNUU0MzdD NDk4Mzk3OTQ0MDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgzOTc5NDQwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0NjgyMjcvMC8zNzNCMTAzQzY4RDlC ODQ0NTU4MDE4MTVFNDM3QzQ5ODM5Nzk0NDA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJqpd5r2ygPZ X3cI4/oBYVQA85DGf1PTL1Ve3/IVMP48jjBVjo2Elueq5AUzSZdA1FOG6SQuNk9e JHW65X1sBBcxY60e2ySBupp/RP1PBpSiRtMFUl9ehM5bVZBdhp0vbcRNYAKKetZq eP/r8V6+J1vOigi2tgJcur1/9xOVnjgQt9+cN8BTUPd2N5vGNDCGaqXgpqlLr/RS Ubd992Kv7dcloZDziZqE6Km1LOAcdQPSYb/t+FKkpgLVFJSNaI5LBJHNThaq6FjJ f3tp9FMZaGsau1WUd2EVfjLo1eaWYTEz71KXzDdUqy1D7f05pOmzCK2II4TRErg9 cEUdDeHd7Q== -----END CERTIFICATE-----Generated at Sat Sep 26 07:33:45 2026 by rpki-client