$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft File: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft (raw, json) Hash identifier: 2Q47lROdSp3mdF2WCysdC9cQMCrU5nf4BStUDFxSWj4= Subject key identifier: BE:72:0F:14:86:FD:67:FB:80:7A:A6:59:77:97:08:4F:A3:2C:75:3D Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Certificate serial: 39207733119BF8FE94C186960E2035096E0485CF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft Manifest number: 020C Signing time: Sat 26 Sep 2026 14:43:57 +0000 Manifest this update: Sat 26 Sep 2026 14:38:57 +0000 Manifest next update: Tue 29 Sep 2026 19:41:57 +0000 Files and hashes: 1: 01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl (hash: KJZpLOgUhJtGBdkrG9+LK8nvNHjv5FXpybCsc4bPjBA=) 2: AS134366.roa (hash: YH9VBWSVppGK2zBKuttmPZfacvCbwc7gR9t/t8CcrwE=) 3: AS59078.roa (hash: 2B8pJIuSClUXLdMmKtN1iToF3wMArM1B9t1OGhORpHA=) 4: AS58466.roa (hash: bYW7mUCNbybJX6ytLBj2Z20WgV3cCFyjuS+ypkrHPFk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:20:77:33:11:9b:f8:fe:94:c1:86:96:0e:20:35:09:6e:04:85:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA Validity Not Before: Sep 26 14:38:57 2026 GMT Not After : Sep 29 19:41:57 2026 GMT Subject: CN=BE720F1486FD67FB807AA6597797084FA32C753D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:24:c1:fa:e7:45:56:66:a2:df:d0:ab:3c:ec: c1:de:79:7f:06:8f:88:e0:f9:49:e1:48:71:70:c0: 95:44:3d:2e:fb:2b:02:d9:73:bf:32:f3:ce:6c:2a: 67:a9:8d:3d:d7:61:30:79:09:4d:be:42:6e:20:a8: 18:bc:85:83:d5:de:d3:c0:1d:b5:33:eb:29:87:5f: 3f:cc:28:fb:6e:11:85:c4:2a:3a:1a:69:2c:6c:51: 04:25:4b:a4:17:c0:3e:3b:ed:c3:fc:33:fb:37:9a: 0c:7a:3d:e7:1e:63:13:c9:93:8b:de:5d:be:06:6e: 71:78:58:40:44:15:35:a1:73:82:cf:60:3e:5f:63: 46:21:d9:47:10:72:b5:f5:65:e1:05:8a:88:a4:17: e4:55:d9:51:55:12:a8:30:35:cc:b0:8b:18:96:fa: dd:2e:61:ad:24:75:2d:a4:a1:54:57:57:3a:17:9c: 41:d6:8f:bf:dd:5e:14:92:56:35:f9:8d:e4:e6:55: fc:86:42:0f:72:62:93:d8:8a:93:e8:85:9a:0a:0e: 89:19:8f:f4:ca:79:22:fb:34:4e:4e:d1:cd:dc:6b: 96:86:11:20:7b:32:cc:26:bf:f7:08:b2:b8:ad:69: 67:45:21:dd:74:f1:7a:ca:66:ee:84:96:90:70:13: ea:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:72:0F:14:86:FD:67:FB:80:7A:A6:59:77:97:08:4F:A3:2C:75:3D X509v3 Authority Key Identifier: keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:64:1e:0d:d3:3c:c3:c5:08:c5:47:4a:c5:be:c7:12:09:05: 2c:bf:a4:ba:fc:9e:48:c4:06:50:a5:85:ab:4a:bf:00:29:66: 24:36:a9:14:75:6a:55:83:e5:98:98:c6:83:20:10:66:53:47: 3b:65:42:49:7e:8f:98:be:33:48:e6:cf:62:d1:e8:e6:f4:d9: c3:1f:d1:05:cd:b4:1c:b3:90:97:33:d6:c6:fc:3b:64:0b:80: 36:34:fe:92:37:ca:af:59:85:8d:81:95:7a:34:43:56:3d:c5: 04:f5:11:3d:af:81:f4:a8:c9:f1:3f:70:63:9a:7f:11:79:29: 94:b8:f3:ad:39:32:1d:31:d7:8f:0d:4e:f0:6f:ea:d6:6c:d0: 83:8e:54:64:38:6e:d7:32:ff:f2:ed:58:d2:97:ea:c6:b1:31: ac:fc:87:ad:25:ce:37:89:1e:be:c7:95:b6:1a:f2:9f:d3:c4: 70:bb:7d:ed:a4:07:f1:f8:99:f1:06:0e:42:b0:6c:08:1e:d8: 07:c0:a3:49:7f:e4:df:69:70:66:59:05:f4:a2:d6:67:70:17: 50:60:0b:07:98:e5:f0:61:21:6e:73:c7:79:77:9f:5e:4b:fb: e0:8f:8f:f2:50:53:e3:77:92:dc:cf:47:2f:dc:7b:15:d0:d7: 36:19:06:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOSB3MxGb+P6UwYaWDiA1CW4Ehc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz RUJEMTBDQTAeFw0yNjA5MjYxNDM4NTdaFw0yNjA5MjkxOTQxNTdaMDMxMTAvBgNV BAMTKEJFNzIwRjE0ODZGRDY3RkI4MDdBQTY1OTc3OTcwODRGQTMyQzc1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFJMH650VWZqLf0Ks87MHeeX8G j4jg+UnhSHFwwJVEPS77KwLZc78y885sKmepjT3XYTB5CU2+Qm4gqBi8hYPV3tPA HbUz6ymHXz/MKPtuEYXEKjoaaSxsUQQlS6QXwD477cP8M/s3mgx6PeceYxPJk4ve Xb4GbnF4WEBEFTWhc4LPYD5fY0Yh2UcQcrX1ZeEFioikF+RV2VFVEqgwNcywixiW +t0uYa0kdS2koVRXVzoXnEHWj7/dXhSSVjX5jeTmVfyGQg9yYpPYipPohZoKDokZ j/TKeSL7NE5O0c3ca5aGESB7Mswmv/cIsritaWdFId108XrKZu6ElpBwE+rpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvnIPFIb9Z/uAeqZZd5cIT6MsdT0wHwYDVR0j BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMS8wMUZCNTYwOUZEMkFB NTY3QUQ3QUY2OUNEMjBDQzRBQjNFQkQxMENBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2QeDdM8w8UI xUdKxb7HEgkFLL+kuvyeSMQGUKWFq0q/AClmJDapFHVqVYPlmJjGgyAQZlNHO2VC SX6PmL4zSObPYtHo5vTZwx/RBc20HLOQlzPWxvw7ZAuANjT+kjfKr1mFjYGVejRD Vj3FBPURPa+B9KjJ8T9wY5p/EXkplLjzrTkyHTHXjw1O8G/q1mzQg45UZDhu1zL/ 8u1Y0pfqxrExrPyHrSXON4kevseVthryn9PEcLt97aQH8fiZ8QYOQrBsCB7YB8Cj SX/k32lwZlkF9KLWZ3AXUGALB5jl8GEhbnPHeXefXkv74I+P8lBT43eS3M9HL9x7 FdDXNhkGfA== -----END CERTIFICATE-----Generated at Sun Sep 27 14:56:23 2026 by rpki-client