$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft File: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft (raw, json) Hash identifier: KqdmjXu9ZSD+H34jN4EbqKhXFlMfOqt/op/b7QlSEXM= Subject key identifier: F1:72:A0:5B:BA:B4:C4:BF:DF:76:F7:EE:89:B2:22:6D:C6:CF:7A:21 Authority key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Certificate issuer: /CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Certificate serial: 2EFFCD1F42D34A33475CD093873A9A209248AC8D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft Manifest number: 013B Signing time: Wed 14 Oct 2026 16:59:23 +0000 Manifest this update: Wed 14 Oct 2026 16:54:23 +0000 Manifest next update: Sat 17 Oct 2026 18:27:23 +0000 Files and hashes: 1: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl (hash: y+eBBNVrqvrAtHcZ5hAqObwBoh3mKD3saM32nP4nJrU=) 2: 3135372e31352e39342e302f32342d3234203d3e203337393639.roa (hash: DhLKxdD6+JtBAxIoW2O1rxJ1dCIOqNoLXBMH3eZqPU0=) 3: 3135372e31352e39352e302f32342d3234203d3e203337393639.roa (hash: Z8olTvrbXQ/Gw+3ew2y9r3mBODl7LZP3VLoihjF5Wfw=) 4: 3135372e31352e39342e302f32332d3233203d3e203337393639.roa (hash: xi57IaG20Q9lgyCnw9kCjAN7XuJqs+bzVV2E/QZAECQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 14:29:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ff:cd:1f:42:d3:4a:33:47:5c:d0:93:87:3a:9a:20:92:48:ac:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Validity Not Before: Oct 14 16:54:23 2026 GMT Not After : Oct 17 18:27:23 2026 GMT Subject: CN=F172A05BBAB4C4BFDF76F7EE89B2226DC6CF7A21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cd:77:d6:29:27:d3:6c:4f:e0:38:8f:dc:8d: 13:29:a4:1a:02:a7:7d:f2:3f:0b:1e:c3:19:fa:32: 53:81:7f:54:e5:e3:b3:ae:70:0d:0a:a8:0e:10:e6: 97:f1:98:9e:61:9f:c2:ae:ff:f6:f0:b9:fb:a3:ca: bc:be:ba:ca:51:17:59:d0:bf:2f:6d:86:56:43:f3: 6e:44:66:9b:f3:f6:ab:78:9b:29:61:32:5c:d1:4e: 90:53:f6:c2:20:8d:21:78:5a:3a:5f:20:9b:1a:3a: 8c:de:4a:11:37:e7:e1:e4:4f:93:56:3e:fc:ae:a4: 3d:46:64:89:e9:33:92:4f:44:0b:00:c1:8d:d3:3b: e5:d8:57:ed:58:d1:42:ac:b7:35:2d:2e:8e:c4:24: 52:f9:3a:59:8e:ca:38:62:ba:3c:08:d9:5a:3e:7e: 79:44:2a:fb:7d:1e:75:ee:2f:06:bd:c9:f2:2a:7a: 07:f7:c5:65:1d:ad:11:30:ba:3d:a5:4c:4a:5f:70: 84:c0:02:8d:ef:ed:dd:0c:79:7d:ee:17:c1:0e:fc: bf:ec:5a:45:23:83:ab:e8:14:46:40:e5:99:6c:3f: a3:a2:8a:c7:36:07:a9:cb:f8:d3:4f:ac:80:52:9d: 1f:ca:33:d8:94:55:32:85:57:dc:51:18:56:1f:21: 88:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:72:A0:5B:BA:B4:C4:BF:DF:76:F7:EE:89:B2:22:6D:C6:CF:7A:21 X509v3 Authority Key Identifier: keyid:1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:13:f4:32:3c:1c:d5:ef:6c:10:ef:ec:7f:17:cb:95:23:87: 7b:87:e4:fe:1b:39:a9:93:db:e5:3e:ff:b8:03:aa:f7:84:6d: 06:f9:c0:54:ce:c9:95:3a:c0:af:2b:ac:ae:bc:f4:3c:eb:b1: 3b:22:5b:95:5e:f0:40:a1:59:0f:7c:7e:05:2a:1d:8c:90:e9: 16:e6:75:bb:ec:2e:0a:e9:f9:04:8f:b0:d1:35:fc:55:76:a0: e7:6e:7e:e8:a8:1f:11:7d:7a:aa:67:a3:ca:cf:03:dc:a4:e5: 38:cd:72:3b:c3:3a:66:b5:2b:16:b2:06:6b:a2:83:33:ed:f6: dc:2f:b0:80:a0:8f:e0:e4:c5:46:ca:29:86:47:22:7b:ba:8d: 85:c2:c6:1d:28:56:13:c8:55:bb:70:0f:28:20:17:d9:64:c3: 4e:a6:05:cb:cf:c1:04:e2:0b:32:3c:16:64:93:d3:f9:1f:ed: 31:80:8c:27:8c:90:51:6f:81:ba:6e:a9:71:0e:a2:f7:fd:52: 4d:e7:2d:e5:64:f7:22:e4:26:17:8d:b3:39:8a:58:a3:2d:53: d1:b4:ba:a3:68:3b:74:08:2b:e1:43:cd:8d:54:19:1e:65:ca: d3:9c:17:80:a2:29:56:25:2b:e1:30:8a:03:cc:b4:2d:be:cf: a9:31:56:71 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULv/NH0LTSjNHXNCThzqaIJJIrI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMy MzI2MURGNDAeFw0yNjEwMTQxNjU0MjNaFw0yNjEwMTcxODI3MjNaMDMxMTAvBgNV BAMTKEYxNzJBMDVCQkFCNEM0QkZERjc2RjdFRTg5QjIyMjZEQzZDRjdBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzXfWKSfTbE/gOI/cjRMppBoC p33yPwsewxn6MlOBf1Tl47OucA0KqA4Q5pfxmJ5hn8Ku//bwufujyry+uspRF1nQ vy9thlZD825EZpvz9qt4mylhMlzRTpBT9sIgjSF4WjpfIJsaOozeShE35+HkT5NW PvyupD1GZInpM5JPRAsAwY3TO+XYV+1Y0UKstzUtLo7EJFL5OlmOyjhiujwI2Vo+ fnlEKvt9HnXuLwa9yfIqegf3xWUdrREwuj2lTEpfcITAAo3v7d0MeX3uF8EO/L/s WkUjg6voFEZA5ZlsP6Oiisc2B6nL+NNPrIBSnR/KM9iUVTKFV9xRGFYfIYj3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8XKgW7q0xL/fdvfuibIibcbPeiEwHwYDVR0j BBgwFoAUHPcJ7Z4LAzlLn5vrV+2NLCMmHfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8xLzFDRjcwOUVEOUUwQjAzMzk0QjlGOUJFQjU3RUQ4 RDJDMjMyNjFERjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMyMzI2MURGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwODQ4NjYvMS8xQ0Y3MDlFRDlFMEIw MzM5NEI5RjlCRUI1N0VEOEQyQzIzMjYxREY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRP0Mjwc1e9s EO/sfxfLlSOHe4fk/hs5qZPb5T7/uAOq94RtBvnAVM7JlTrAryusrrz0POuxOyJb lV7wQKFZD3x+BSodjJDpFuZ1u+wuCun5BI+w0TX8VXag525+6KgfEX16qmejys8D 3KTlOM1yO8M6ZrUrFrIGa6KDM+323C+wgKCP4OTFRsophkcie7qNhcLGHShWE8hV u3APKCAX2WTDTqYFy8/BBOILMjwWZJPT+R/tMYCMJ4yQUW+Bum6pcQ6i9/1STect 5WT3IuQmF42zOYpYoy1T0bS6o2g7dAgr4UPNjVQZHmXK05wXgKIpViUr4TCKA8y0 Lb7PqTFWcQ== -----END CERTIFICATE-----Generated at Wed Oct 14 20:38:27 2026 by rpki-client