$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft File: F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft (raw, json) Hash identifier: JEBU9/3rLK+tYgYTyoJwT/AMeW8dpAFile+kWevbS64= Subject key identifier: 88:F5:5B:7B:81:6F:20:A9:8D:F6:D4:94:36:DE:3A:B5:6D:10:7A:1F Authority key identifier: F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 Certificate issuer: /CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Certificate serial: 4A12C5263371E39B7D24C3733ED3A345F724097B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft Manifest number: 0138 Signing time: Thu 01 Oct 2026 22:14:57 +0000 Manifest this update: Thu 01 Oct 2026 22:09:57 +0000 Manifest next update: Mon 05 Oct 2026 08:29:57 +0000 Files and hashes: 1: 3130332e322e3138382e302f32332d3233203d3e20313436373838.roa (hash: 1mZLsbSQDgVY9UCD1VPGrkN6C62vdnF4KG0dgCvVkDM=) 2: 323430303a663836303a3a2f33322d3332203d3e20313436373838.roa (hash: bhAt8cX8amjXlALbrVpoF7u5oi22Rc5T2VUlEjgtt+k=) 3: F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl (hash: E+JNuPPgIiIVHGTXPQLFZ9ZQsnI63LaDXy1JVIp+Ymo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 08:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:12:c5:26:33:71:e3:9b:7d:24:c3:73:3e:d3:a3:45:f7:24:09:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Validity Not Before: Oct 1 22:09:57 2026 GMT Not After : Oct 5 08:29:57 2026 GMT Subject: CN=88F55B7B816F20A98DF6D49436DE3AB56D107A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fe:89:e1:45:04:32:24:bd:72:64:08:07:71: 99:dd:6e:8c:f6:55:b9:84:f8:8d:a8:31:97:01:7d: 28:45:40:f2:b0:4e:8a:65:29:f1:e7:a5:d6:ed:50: 7a:2c:29:d0:0b:14:fe:02:83:17:b9:b5:bc:27:61: 9f:c8:57:2a:cf:f1:d8:86:a4:29:6a:60:e6:c8:08: 24:e4:e4:7c:f9:87:91:90:8d:b2:7a:4c:cc:60:dc: 6f:83:3c:28:8d:b5:70:bc:63:23:6b:eb:1d:34:ed: 7d:f1:3b:12:c9:4c:56:6f:a4:d2:4e:33:0d:d8:ce: 8d:2d:8d:60:fc:49:e3:77:ab:42:b1:fd:2d:3a:e0: 59:5a:85:ab:8e:11:d1:26:e5:d6:34:c9:d6:a3:4b: 8c:3c:51:aa:83:24:de:28:a6:0e:c3:f2:41:ec:1b: 53:ff:0b:94:77:52:f9:2b:37:81:06:ee:0d:c2:c1: 6f:76:bd:5e:43:95:15:f7:d9:88:6d:92:87:80:26: 43:8a:3e:ee:ad:45:ae:f0:e1:35:00:3f:0b:a7:81: c8:bc:cd:96:6e:df:ae:71:39:85:1a:9d:53:7c:3e: 62:32:b6:48:ef:15:b7:6f:e2:db:68:53:57:11:5f: 43:d2:87:62:43:45:3d:c0:d1:62:24:28:9a:6d:52: bb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F5:5B:7B:81:6F:20:A9:8D:F6:D4:94:36:DE:3A:B5:6D:10:7A:1F X509v3 Authority Key Identifier: keyid:F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:bb:e7:34:8d:53:5c:31:d1:04:c6:11:62:54:85:8c:d2:e6: 5d:99:ad:06:f3:a2:b8:79:ae:c7:c4:4e:2d:05:9a:6a:a7:4c: 12:f4:7b:18:f0:be:14:f6:f2:e0:c8:b1:22:5e:5a:9d:8b:c0: 92:e1:9a:c2:45:60:41:53:eb:67:3b:ce:44:9e:14:7e:be:c7: 3c:08:59:da:5e:86:0c:1c:42:0b:a3:f0:55:81:21:49:ea:b8: 48:85:41:b6:01:8c:64:14:bf:2f:46:89:cc:67:a4:a9:df:f4: fa:6b:65:54:35:a8:94:62:7b:12:c7:5e:60:05:a5:d9:de:68: 8c:b6:91:0a:bf:14:00:14:96:88:62:96:fe:25:bb:f0:b6:24: 8c:d0:8d:ed:5b:e7:a5:b4:c0:33:9e:29:60:10:d5:8d:2d:3e: 49:08:e8:ac:8f:8e:40:8a:d0:a8:75:98:ac:06:a6:21:36:bd: d0:d0:db:fa:fd:15:85:ce:08:ee:65:e0:25:57:4d:28:73:20: 9e:a6:4a:3d:4d:0f:6e:74:dd:5e:74:cf:74:f4:e6:3c:77:89: 47:5e:46:0c:ff:99:de:ed:59:a6:48:1d:dc:de:ea:4b:f4:52: 8f:3c:f5:6f:d3:b9:e4:68:ed:8d:2f:9e:7d:34:7d:f9:b2:c9: a1:0f:93:45 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUShLFJjNx45t9JMNzPtOjRfckCXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhD OTVDNjc3MzAeFw0yNjEwMDEyMjA5NTdaFw0yNjEwMDUwODI5NTdaMDMxMTAvBgNV BAMTKDg4RjU1QjdCODE2RjIwQTk4REY2RDQ5NDM2REUzQUI1NkQxMDdBMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx/onhRQQyJL1yZAgHcZndboz2 VbmE+I2oMZcBfShFQPKwToplKfHnpdbtUHosKdALFP4Cgxe5tbwnYZ/IVyrP8diG pClqYObICCTk5Hz5h5GQjbJ6TMxg3G+DPCiNtXC8YyNr6x007X3xOxLJTFZvpNJO Mw3Yzo0tjWD8SeN3q0Kx/S064FlahauOEdEm5dY0ydajS4w8UaqDJN4opg7D8kHs G1P/C5R3UvkrN4EG7g3CwW92vV5DlRX32YhtkoeAJkOKPu6tRa7w4TUAPwungci8 zZZu365xOYUanVN8PmIytkjvFbdv4ttoU1cRX0PSh2JDRT3A0WIkKJptUrtpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiPVbe4FvIKmN9tSUNt46tW0Qeh8wHwYDVR0j BBgwFoAU8K/zYsewkUf1xkNRIW++uMlcZ3MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTg4ODI1OC8wL0YwQUZGMzYyQzdCMDkxNDdGNUM2NDM1MTIxNkZC RUI4Qzk1QzY3NzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhDOTVDNjc3My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4ODgyNTgvMC9GMEFGRjM2MkM3QjA5 MTQ3RjVDNjQzNTEyMTZGQkVCOEM5NUM2NzczLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrvnNI1TXDHR BMYRYlSFjNLmXZmtBvOiuHmux8ROLQWaaqdMEvR7GPC+FPby4MixIl5anYvAkuGa wkVgQVPrZzvORJ4Ufr7HPAhZ2l6GDBxCC6PwVYEhSeq4SIVBtgGMZBS/L0aJzGek qd/0+mtlVDWolGJ7EsdeYAWl2d5ojLaRCr8UABSWiGKW/iW78LYkjNCN7VvnpbTA M54pYBDVjS0+SQjorI+OQIrQqHWYrAamITa90NDb+v0Vhc4I7mXgJVdNKHMgnqZK PU0PbnTdXnTPdPTmPHeJR15GDP+Z3u1Zpkgd3N7qS/RSjzz1b9O55GjtjS+efTR9 +bLJoQ+TRQ== -----END CERTIFICATE-----Generated at Sun Oct 4 02:00:20 2026 by rpki-client