$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft File: DE3831D69587EC59C3002006198FD58A977ED1AD.mft (raw, json) Hash identifier: hMd+It/+qeagLytuUEB73we1YiqTs5cHCKS6TkKTHHA= Subject key identifier: D8:EE:CD:A2:A4:28:E9:02:0C:E8:B9:E9:C0:02:7D:5E:1A:AA:39:04 Authority key identifier: DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD Certificate issuer: /CN=DE3831D69587EC59C3002006198FD58A977ED1AD Certificate serial: 02D50FABF476765DC4281E2A2CB9401288DF94FB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft Manifest number: 013B Signing time: Sat 10 Oct 2026 07:29:26 +0000 Manifest this update: Sat 10 Oct 2026 07:24:26 +0000 Manifest next update: Tue 13 Oct 2026 12:38:26 +0000 Files and hashes: 1: 3130332e3132342e34382e302f32342d3234203d3e20313337373330.roa (hash: IJdUyzKY6sON6HIqic7qwxP6xVzVXKeLZ7w4umnpbRc=) 2: 323430333a643963303a3a2f34382d3438203d3e20313337373330.roa (hash: VPrOCsLkPUwzRM6lSxhL059qgm+Bdhv3YweeIJffRuY=) 3: 323430333a643963303a323a3a2f34382d3438203d3e20313337373330.roa (hash: 8AtmVxPyfg99YhJH0s1wWLM8GE+VM4pFN2d/cSoQXeA=) 4: DE3831D69587EC59C3002006198FD58A977ED1AD.crl (hash: 6tYMINbTjqQ1jhzW8cqHBIPzp173z1arEfIJ+XqX0M0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 12:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:d5:0f:ab:f4:76:76:5d:c4:28:1e:2a:2c:b9:40:12:88:df:94:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3831D69587EC59C3002006198FD58A977ED1AD Validity Not Before: Oct 10 07:24:26 2026 GMT Not After : Oct 13 12:38:26 2026 GMT Subject: CN=D8EECDA2A428E9020CE8B9E9C0027D5E1AAA3904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:50:3d:ff:84:b9:c9:15:0c:59:1f:16:ba:d9: e2:12:fa:cb:a6:42:95:bc:da:57:c7:ee:d9:d6:d7: e7:fe:46:da:48:72:94:54:03:09:21:4d:0f:a2:d3: 2e:2b:7c:70:6d:06:6b:55:b4:c7:b1:b6:13:d7:d3: b9:6d:e4:f7:23:13:fb:33:92:33:ee:ef:d8:57:77: 6d:47:3a:f0:f5:55:6a:7b:ec:cb:40:1b:97:77:22: 00:a4:42:08:37:5c:8b:4b:78:75:e0:b6:1e:ee:ae: ee:03:e9:f7:8f:82:39:62:d9:f4:af:b9:1c:cf:ba: 9e:5d:6d:ad:7e:a3:aa:27:58:bd:73:3f:34:b9:04: a3:f0:d5:23:cb:d4:fe:b4:89:db:73:21:6b:63:0a: 03:47:63:db:98:55:45:39:e7:20:a6:ef:b7:1f:6a: 43:28:53:d3:e9:5e:b2:d1:42:d5:19:f9:37:64:26: 29:c3:cc:f3:4b:11:c5:6c:1c:7f:bc:d8:d0:53:72: 57:a2:87:82:d5:c5:db:11:96:b4:8a:d9:67:15:72: 15:34:17:9d:9e:e2:52:cc:44:2a:b5:75:a2:ad:1e: 17:3f:56:ea:f6:c0:28:20:91:b5:0e:2f:e6:58:3e: 2c:3e:98:ed:8d:83:cf:29:67:85:be:35:29:e7:8a: c9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EE:CD:A2:A4:28:E9:02:0C:E8:B9:E9:C0:02:7D:5E:1A:AA:39:04 X509v3 Authority Key Identifier: keyid:DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f3:0d:d8:b4:e0:54:57:ef:38:59:d3:f3:d4:72:80:d8:96: ef:80:15:9d:ae:16:14:06:61:70:12:c4:4c:86:eb:35:ad:5d: 26:33:91:ca:cd:72:5c:ff:24:d6:6d:43:c6:61:c2:b9:1e:44: 18:7d:42:4c:a6:db:c7:83:87:8a:28:53:29:66:09:3a:06:69: 74:c1:d7:06:b1:df:6d:3e:44:17:27:2e:86:35:b9:0a:6d:f7: 6a:af:11:74:22:b3:a3:1c:63:5e:51:da:7d:b7:a0:26:27:4a: 34:39:3f:aa:39:57:12:bc:94:7c:e5:e4:da:6b:50:75:e3:e7: 17:70:55:3d:7f:24:75:2c:f0:ef:b8:8c:9b:11:7d:84:69:07: ba:b4:64:a2:17:92:fb:0d:60:a1:4e:06:e5:c1:b9:44:69:9d: 19:98:ff:bf:a5:f8:81:8d:80:a1:70:ba:68:9f:f4:92:e7:76: 89:b3:2d:9f:b3:5a:c8:fa:de:72:02:17:d0:1a:fd:5c:93:d5: 01:80:1b:24:0b:e9:fb:8c:e9:66:23:3e:b0:10:c9:1f:de:98: e7:f5:2a:e1:48:fd:c4:f7:f0:97:62:24:9b:a1:44:a3:ef:29: 35:3a:45:cc:2e:af:33:8a:dd:6f:f4:7f:b1:1f:7e:f5:46:d9: 6a:39:34:a0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAtUPq/R2dl3EKB4qLLlAEojflPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5 NzdFRDFBRDAeFw0yNjEwMTAwNzI0MjZaFw0yNjEwMTMxMjM4MjZaMDMxMTAvBgNV BAMTKEQ4RUVDREEyQTQyOEU5MDIwQ0U4QjlFOUMwMDI3RDVFMUFBQTM5MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXUD3/hLnJFQxZHxa62eIS+sum QpW82lfH7tnW1+f+RtpIcpRUAwkhTQ+i0y4rfHBtBmtVtMexthPX07lt5PcjE/sz kjPu79hXd21HOvD1VWp77MtAG5d3IgCkQgg3XItLeHXgth7uru4D6fePgjli2fSv uRzPup5dba1+o6onWL1zPzS5BKPw1SPL1P60idtzIWtjCgNHY9uYVUU55yCm77cf akMoU9PpXrLRQtUZ+TdkJinDzPNLEcVsHH+82NBTcleih4LVxdsRlrSK2WcVchU0 F52e4lLMRCq1daKtHhc/Vur2wCggkbUOL+ZYPiw+mO2Ng88pZ4W+NSnnislbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2O7NoqQo6QIM6LnpwAJ9XhqqOQQwHwYDVR0j BBgwFoAU3jgx1pWH7FnDACAGGY/Vipd+0a0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzMyMzM5My8wL0RFMzgzMUQ2OTU4N0VDNTlDMzAwMjAwNjE5OEZE NThBOTc3RUQxQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5NzdFRDFBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczMjMzOTMvMC9ERTM4MzFENjk1ODdF QzU5QzMwMDIwMDYxOThGRDU4QTk3N0VEMUFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvMN2LTgVFfv OFnT89RygNiW74AVna4WFAZhcBLETIbrNa1dJjORys1yXP8k1m1DxmHCuR5EGH1C TKbbx4OHiihTKWYJOgZpdMHXBrHfbT5EFycuhjW5Cm33aq8RdCKzoxxjXlHafbeg JidKNDk/qjlXEryUfOXk2mtQdePnF3BVPX8kdSzw77iMmxF9hGkHurRkoheS+w1g oU4G5cG5RGmdGZj/v6X4gY2AoXC6aJ/0kud2ibMtn7NayPrecgIX0Br9XJPVAYAb JAvp+4zpZiM+sBDJH96Y5/Uq4Uj9xPfwl2Ikm6FEo+8pNTpFzC6vM4rdb/R/sR9+ 9UbZajk0oA== -----END CERTIFICATE-----Generated at Mon Oct 12 09:28:01 2026 by rpki-client