$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft File: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft (raw, json) Hash identifier: x3MHjuC3X5B6ggg7e5b3yKO+VbCJ3sY1DaNWt535Qrc= Subject key identifier: 9E:F6:AE:BB:22:A0:2F:C2:4E:29:3A:FA:14:4E:23:7D:73:41:B5:28 Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 Certificate issuer: /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Certificate serial: 4951A5AB546C67AD28B5CD3515A1ABF9D1BB0AA4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft Manifest number: 013B Signing time: Fri 09 Oct 2026 17:48:39 +0000 Manifest this update: Fri 09 Oct 2026 17:43:39 +0000 Manifest next update: Tue 13 Oct 2026 00:23:39 +0000 Files and hashes: 1: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl (hash: T9Fs7lY7X56JzMxRkxP/NMfpAiKQZFNECgA4vTBjgc0=) 2: 3130332e39382e3136342e302f32322d3234203d3e20333938373034.roa (hash: QF2+Jk348dEsMNNKX7v8nbsQSCZY3RPWr+U+z5ykE6Q=) 3: 3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa (hash: LracsMaC+QrvCPKnHymzdJ0n+YFbpzw1xlf+RpV37Dg=) 4: 323430333a6663303a3a2f33322d3338203d3e20313331353330.roa (hash: FxdZOlHBNNosbbc+VM2SsDSEtGaPa7cJThwHgjf0PW4=) 5: 323430333a6663303a3a2f33382d3338203d3e20313331353330.roa (hash: OWdg73kfq+IxC9cdjoFN1n6gGcBVxQM28yQqP4AzCnE=) 6: 3130332e39382e3136342e302f32322d3234203d3e20313331353330.roa (hash: SUIM7Q/gKTRbtCC89bx/1rAOcJbC24/HcLWuMZ3Rb58=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 00:23:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:51:a5:ab:54:6c:67:ad:28:b5:cd:35:15:a1:ab:f9:d1:bb:0a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Validity Not Before: Oct 9 17:43:39 2026 GMT Not After : Oct 13 00:23:39 2026 GMT Subject: CN=9EF6AEBB22A02FC24E293AFA144E237D7341B528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3b:82:87:64:0c:fd:18:a8:a0:11:c2:14:8b: b1:8c:7f:de:0d:52:22:21:16:ff:5e:1f:63:ed:be: 03:07:8b:99:ca:0d:5e:0c:8a:f9:e2:dd:35:45:c8: d1:fd:dc:3e:6f:ac:c7:0b:42:a3:0a:94:0c:f1:e4: b8:f5:f2:45:87:f8:94:ae:37:b1:8f:af:ee:95:24: 23:02:91:56:15:8a:9b:3f:20:47:59:43:e9:d1:bf: 5a:dc:55:2b:80:6b:ea:1c:51:3b:a1:c7:7f:6a:f9: 72:21:76:d4:64:19:dc:0d:fc:21:94:dd:8f:66:08: 8f:17:d5:dc:41:e9:3c:4c:10:f2:07:59:17:c2:78: 10:2a:16:b9:e9:95:8e:9c:c4:d8:d3:14:20:15:72: c7:48:69:6a:ca:29:6f:d7:ea:88:d8:27:e4:4d:1b: 65:cc:8b:36:04:0e:43:7d:ff:5e:dc:1c:ef:8e:59: 0c:75:45:18:0c:75:44:89:bb:0d:73:a8:45:4d:2e: d1:c8:83:b1:6b:5d:50:1a:2f:84:9d:8d:91:43:47: 3e:a6:d5:29:d7:3c:24:9c:20:12:bf:1b:83:4b:70: d1:c0:df:29:cb:84:4e:a8:63:55:67:ae:38:8e:09: e1:8b:6a:7b:05:17:6b:7f:d6:63:6a:b9:15:61:f5: 35:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F6:AE:BB:22:A0:2F:C2:4E:29:3A:FA:14:4E:23:7D:73:41:B5:28 X509v3 Authority Key Identifier: keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:86:bc:2e:98:ed:a1:23:80:01:10:45:a6:5e:dd:c8:03:a1: 46:30:e0:a3:3b:7a:a0:cc:86:c8:fe:e6:16:d1:44:26:90:89: 2e:20:96:c6:cb:cb:2f:f7:96:32:0b:82:5a:2d:04:fe:ba:ac: e8:09:e5:56:42:d9:e1:7b:4b:1c:00:e9:f6:e4:2c:09:c4:b5: 1f:e4:e3:ca:82:c5:d9:25:80:eb:29:bd:c3:ce:e7:db:de:df: e8:bb:13:23:b5:f5:ee:10:e0:4e:8d:b0:e4:57:25:90:2c:e6: e5:12:19:2d:c6:e6:38:4a:bd:e4:3b:a3:cb:27:f4:f1:bf:04: ad:e4:43:c7:26:5b:c6:c3:55:d1:56:e9:2e:2c:1f:69:8b:54: b0:04:00:41:b4:92:5e:be:c2:40:5e:7c:76:1d:44:3f:81:a4: fe:73:05:79:52:73:5b:83:e5:80:7d:49:b9:51:87:8e:32:b1: cb:7c:5f:60:56:3a:f8:18:1d:b2:fd:c0:6a:37:61:33:a8:fd: fb:25:6d:aa:d1:ec:47:bc:b3:2e:cf:2a:0f:b0:3c:37:e8:a3: 45:19:df:1e:b4:d6:f6:11:3a:e4:30:88:1f:6d:d1:da:1b:c2: e3:a7:2a:bf:25:57:66:cc:a0:48:a8:ce:17:37:e0:f2:84:3c: 39:d9:2d:66 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSVGlq1RsZ60otc01FaGr+dG7CqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEw NkNFQzE0MDAeFw0yNjEwMDkxNzQzMzlaFw0yNjEwMTMwMDIzMzlaMDMxMTAvBgNV BAMTKDlFRjZBRUJCMjJBMDJGQzI0RTI5M0FGQTE0NEUyMzdENzM0MUI1MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWO4KHZAz9GKigEcIUi7GMf94N UiIhFv9eH2PtvgMHi5nKDV4Mivni3TVFyNH93D5vrMcLQqMKlAzx5Lj18kWH+JSu N7GPr+6VJCMCkVYVips/IEdZQ+nRv1rcVSuAa+ocUTuhx39q+XIhdtRkGdwN/CGU 3Y9mCI8X1dxB6TxMEPIHWRfCeBAqFrnplY6cxNjTFCAVcsdIaWrKKW/X6ojYJ+RN G2XMizYEDkN9/17cHO+OWQx1RRgMdUSJuw1zqEVNLtHIg7FrXVAaL4SdjZFDRz6m 1SnXPCScIBK/G4NLcNHA3ynLhE6oY1VnrjiOCeGLansFF2t/1mNquRVh9TWBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnvauuyKgL8JOKTr6FE4jfXNBtSgwHwYDVR0j BBgwFoAUX8ntQsDGXhMlCJrmE4ZKagbOwUAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzUzMTM5NC8wLzVGQzlFRDQyQzBDNjVFMTMyNTA4OUFFNjEzODY0 QTZBMDZDRUMxNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEwNkNFQzE0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1MzEzOTQvMC81RkM5RUQ0MkMwQzY1 RTEzMjUwODlBRTYxMzg2NEE2QTA2Q0VDMTQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYa8LpjtoSOA ARBFpl7dyAOhRjDgozt6oMyGyP7mFtFEJpCJLiCWxsvLL/eWMguCWi0E/rqs6Anl VkLZ4XtLHADp9uQsCcS1H+TjyoLF2SWA6ym9w87n297f6LsTI7X17hDgTo2w5Fcl kCzm5RIZLcbmOEq95Dujyyf08b8EreRDxyZbxsNV0VbpLiwfaYtUsAQAQbSSXr7C QF58dh1EP4Gk/nMFeVJzW4PlgH1JuVGHjjKxy3xfYFY6+Bgdsv3AajdhM6j9+yVt qtHsR7yzLs8qD7A8N+ijRRnfHrTW9hE65DCIH23R2hvC46cqvyVXZsygSKjOFzfg 8oQ8OdktZg== -----END CERTIFICATE-----Generated at Sun Oct 11 01:38:10 2026 by rpki-client