$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft File: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft (raw, json) Hash identifier: 3nlI1ot5hI1HJ4v2UpGj111YBi32kLKWo3BRdEaXpLA= Subject key identifier: 20:BC:69:9F:76:CE:30:1A:72:19:00:A9:34:A4:8C:6A:72:55:06:71 Authority key identifier: 30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 Certificate issuer: /CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Certificate serial: 6F4B38D217D5621F5AD77FB7C74930CADAC8BF88 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft Manifest number: 013C Signing time: Mon 12 Oct 2026 12:41:57 +0000 Manifest this update: Mon 12 Oct 2026 12:36:57 +0000 Manifest next update: Thu 15 Oct 2026 22:32:57 +0000 Files and hashes: 1: 3130332e3130382e3136302e302f32322d3232203d3e20313331343832.roa (hash: OwGJ692ZnKe+Op1Sm1ixyOF3ncQ6G9amzCOrZZ4KNGU=) 2: 308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl (hash: eIbtZJwmB5QkJ01vP0DGCaOpy724FFUaoXPkX02bNtY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:4b:38:d2:17:d5:62:1f:5a:d7:7f:b7:c7:49:30:ca:da:c8:bf:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=308D7E5C521D52C334A8EF1722A4D35F32FCBB48 Validity Not Before: Oct 12 12:36:57 2026 GMT Not After : Oct 15 22:32:57 2026 GMT Subject: CN=20BC699F76CE301A721900A934A48C6A72550671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:af:b3:85:e1:1b:3c:94:ec:6c:c4:21:97:ea: 31:7d:f2:8f:22:95:a3:9c:cf:58:92:0d:5c:61:d3: 3e:fa:5a:ee:5e:e6:04:bd:2e:0f:af:f7:36:0f:47: 1d:7a:6c:6f:2c:9b:fb:53:bb:1c:36:f3:c0:fd:c0: 5a:ef:24:af:f6:dc:10:90:be:cd:8a:8c:ba:8d:0f: 01:01:dc:80:46:22:34:fd:8e:68:11:36:62:81:52: 7b:17:f0:70:60:7e:4b:12:a0:a5:a5:bc:69:8f:3e: 75:dd:90:93:f3:5d:ee:cf:63:b9:80:fc:f6:e5:b0: dd:0a:ce:2b:6f:98:be:47:04:f7:d3:16:57:cf:64: 4a:68:ef:6d:55:ed:2a:45:96:3a:e0:ec:9b:24:83: 57:e3:b5:2e:9e:2a:8b:d6:47:8d:59:dd:75:1a:8c: 58:a4:f1:eb:00:dc:f5:69:26:3b:78:c8:09:57:7a: d8:b2:18:b0:44:46:db:c6:c0:42:d4:52:17:bb:a9: 87:c1:7f:cf:ec:df:63:38:64:05:17:73:97:fc:71: 03:2a:21:63:23:4d:4c:b1:f6:07:97:04:bc:af:59: e8:5e:44:8f:80:90:92:6d:7c:70:19:bb:02:22:11: bf:ac:58:9f:f2:21:c6:f1:a3:74:c5:d9:2f:df:9c: 69:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BC:69:9F:76:CE:30:1A:72:19:00:A9:34:A4:8C:6A:72:55:06:71 X509v3 Authority Key Identifier: keyid:30:8D:7E:5C:52:1D:52:C3:34:A8:EF:17:22:A4:D3:5F:32:FC:BB:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577924610/0/308D7E5C521D52C334A8EF1722A4D35F32FCBB48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:07:bf:e2:35:dd:87:63:3f:01:31:76:95:1c:6e:46:a4:0e: c1:dd:f9:28:84:5a:59:7b:f3:60:b7:ef:6d:e1:48:1a:a6:22: b1:63:fb:2c:01:85:4f:73:fd:44:6e:9f:52:be:e6:11:3a:5d: 0f:7a:ff:83:6e:b7:c3:2f:cc:92:58:df:56:41:dd:9c:91:22: 60:92:27:34:cd:c7:a5:61:16:23:a1:ee:71:6d:46:6e:4a:24: 09:2d:e8:db:9a:85:2e:1b:eb:90:64:f7:6e:3d:de:ad:a1:c3: de:be:cf:9b:e4:4b:ae:96:e0:38:20:cc:30:9c:1e:8f:e1:f9: 30:f3:26:6a:3d:76:c5:d2:47:bc:43:24:58:61:5f:d2:1b:2e: a5:b2:9b:82:5e:83:ed:94:11:94:4c:e5:a6:3b:8a:7c:dd:ac: 46:6e:a5:cb:32:60:d0:5e:19:7b:62:30:34:3a:77:e8:99:63: 56:00:3e:75:33:9c:c4:27:75:3c:63:ac:47:7e:b5:cf:eb:87: b3:48:42:8d:f3:44:4e:64:97:78:0e:f8:d8:33:bc:35:cc:3a: 0a:da:d2:d3:7d:6a:c4:52:45:05:04:c6:0d:0c:e1:48:7d:8d: b2:06:3d:92:55:70:6f:da:ec:b5:99:9f:22:94:62:42:b5:a9: f9:5e:3b:17 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUb0s40hfVYh9a13+3x0kwytrIv4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYz MkZDQkI0ODAeFw0yNjEwMTIxMjM2NTdaFw0yNjEwMTUyMjMyNTdaMDMxMTAvBgNV BAMTKDIwQkM2OTlGNzZDRTMwMUE3MjE5MDBBOTM0QTQ4QzZBNzI1NTA2NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCer7OF4Rs8lOxsxCGX6jF98o8i laOcz1iSDVxh0z76Wu5e5gS9Lg+v9zYPRx16bG8sm/tTuxw288D9wFrvJK/23BCQ vs2KjLqNDwEB3IBGIjT9jmgRNmKBUnsX8HBgfksSoKWlvGmPPnXdkJPzXe7PY7mA /PblsN0KzitvmL5HBPfTFlfPZEpo721V7SpFljrg7Jskg1fjtS6eKovWR41Z3XUa jFik8esA3PVpJjt4yAlXetiyGLBERtvGwELUUhe7qYfBf8/s32M4ZAUXc5f8cQMq IWMjTUyx9geXBLyvWeheRI+AkJJtfHAZuwIiEb+sWJ/yIcbxo3TF2S/fnGlHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUILxpn3bOMBpyGQCpNKSManJVBnEwHwYDVR0j BBgwFoAUMI1+XFIdUsM0qO8XIqTTXzL8u0gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzkyNDYxMC8wLzMwOEQ3RTVDNTIxRDUyQzMzNEE4RUYxNzIyQTRE MzVGMzJGQ0JCNDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzA4RDdFNUM1MjFENTJDMzM0QThFRjE3MjJBNEQzNUYzMkZDQkI0OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5MjQ2MTAvMC8zMDhEN0U1QzUyMUQ1 MkMzMzRBOEVGMTcyMkE0RDM1RjMyRkNCQjQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADge/4jXdh2M/ ATF2lRxuRqQOwd35KIRaWXvzYLfvbeFIGqYisWP7LAGFT3P9RG6fUr7mETpdD3r/ g263wy/MkljfVkHdnJEiYJInNM3HpWEWI6HucW1GbkokCS3o25qFLhvrkGT3bj3e raHD3r7Pm+RLrpbgOCDMMJwej+H5MPMmaj12xdJHvEMkWGFf0hsupbKbgl6D7ZQR lEzlpjuKfN2sRm6lyzJg0F4Ze2IwNDp36JljVgA+dTOcxCd1PGOsR361z+uHs0hC jfNETmSXeA742DO8Ncw6CtrS031qxFJFBQTGDQzhSH2NsgY9klVwb9rstZmfIpRi QrWp+V47Fw== -----END CERTIFICATE-----Generated at Tue Oct 13 08:39:41 2026 by rpki-client