$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft File: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft (raw, json) Hash identifier: oIYIdY7fDqa6OODIq0Az/7LefvsIz+WAPiUh3xZxaMA= Subject key identifier: 4E:F6:D0:55:47:B2:2F:51:57:09:CF:5F:6B:99:EA:92:A6:00:76:79 Authority key identifier: 1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 Certificate issuer: /CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Certificate serial: 52C80917943DBBB34C3E7455CF76D296B76F8834 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft Manifest number: 013A Signing time: Mon 12 Oct 2026 07:11:45 +0000 Manifest this update: Mon 12 Oct 2026 07:06:45 +0000 Manifest next update: Thu 15 Oct 2026 16:56:45 +0000 Files and hashes: 1: 3135372e31352e39342e302f32342d3234203d3e203337393639.roa (hash: DhLKxdD6+JtBAxIoW2O1rxJ1dCIOqNoLXBMH3eZqPU0=) 2: 3135372e31352e39352e302f32342d3234203d3e203337393639.roa (hash: Z8olTvrbXQ/Gw+3ew2y9r3mBODl7LZP3VLoihjF5Wfw=) 3: 1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl (hash: 31DlhobRquHRwh5RBlyqUBIw8UoIN97GWjFQU98/D/E=) 4: 3135372e31352e39342e302f32332d3233203d3e203337393639.roa (hash: xi57IaG20Q9lgyCnw9kCjAN7XuJqs+bzVV2E/QZAECQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 10:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c8:09:17:94:3d:bb:b3:4c:3e:74:55:cf:76:d2:96:b7:6f:88:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4 Validity Not Before: Oct 12 07:06:45 2026 GMT Not After : Oct 15 16:56:45 2026 GMT Subject: CN=4EF6D05547B22F515709CF5F6B99EA92A6007679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ee:db:a2:75:13:11:21:2d:5c:af:95:ca:2c: ca:63:cf:b4:c3:94:96:8b:10:d7:f5:19:b0:0f:88: 66:c6:e6:47:2d:86:c3:da:a9:ca:d2:5e:9e:f1:2b: 01:66:de:8e:a0:5c:8a:3b:00:79:15:21:5c:c6:47: 8e:75:f6:b9:06:b6:32:94:b4:dc:6e:71:c7:32:7b: 6f:b5:f8:37:e4:6c:e9:69:a4:d4:40:70:42:09:85: 0c:a7:0b:37:01:d6:6f:42:f1:f1:a3:b8:f7:3a:fc: 68:cc:da:cc:d1:0d:1e:5f:ed:4f:6e:93:82:73:f1: 84:37:32:68:17:c8:14:04:93:2f:b2:f8:5a:84:16: 40:94:41:37:8a:b3:15:1b:19:d6:78:f2:50:ff:e9: a8:0b:7b:a2:52:51:8a:d3:84:68:4f:ea:f9:2f:2b: 2c:9a:d6:f6:09:9a:cd:b4:65:30:99:6d:0e:da:e6: 79:fe:2c:6b:aa:39:ba:8e:0d:ae:7a:76:48:01:ac: ba:9e:0f:a1:38:ba:c5:3e:e0:4b:d2:5c:7a:0b:c5: 46:9c:cc:e3:30:72:b6:3f:95:54:67:2c:83:60:a4: 4e:4b:8d:94:28:c3:8d:a7:b8:4e:d7:e3:f5:64:3c: f3:25:3d:7b:cb:6e:6f:50:65:a0:7b:f1:97:12:c1: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F6:D0:55:47:B2:2F:51:57:09:CF:5F:6B:99:EA:92:A6:00:76:79 X509v3 Authority Key Identifier: keyid:1C:F7:09:ED:9E:0B:03:39:4B:9F:9B:EB:57:ED:8D:2C:23:26:1D:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346084866/1/1CF709ED9E0B03394B9F9BEB57ED8D2C23261DF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a7:7a:7d:da:82:b1:be:3c:19:57:67:d2:43:3a:9c:99:e5: ec:ff:3f:44:d9:bd:3a:c4:18:24:70:09:8c:0b:ff:95:02:ad: 67:05:f5:ba:fb:40:48:82:e9:5d:1a:f3:12:cf:91:71:0d:b9: bd:ee:b6:06:59:af:9d:f5:91:99:45:53:46:d8:20:40:db:66: dd:01:18:b0:e6:70:04:3f:67:1a:95:b6:1b:2d:0e:52:f0:9d: b6:e3:f2:a1:52:a0:94:18:3c:e1:31:78:40:18:5e:d6:8e:8f: 9a:fd:ff:69:aa:ad:ce:0a:05:c3:14:cb:fb:5e:13:5c:8e:2f: 6d:9b:01:6a:78:c8:15:ec:bd:80:3c:ad:86:4f:c4:bc:61:d3: 5f:ce:43:07:7b:4b:91:05:d3:86:64:85:86:e3:74:80:4d:b2: 4b:8a:07:b0:fc:8b:3c:bc:fb:53:a6:fe:13:f8:25:a9:73:88: 73:62:33:ac:1f:9a:5d:0c:44:6f:3b:09:e4:94:80:e1:58:b6: e7:9b:ae:e4:0d:6f:67:bc:92:d2:7c:d3:d9:dc:4a:35:44:a3: f1:5e:d9:f9:28:92:da:0a:69:19:13:55:cb:7b:ab:81:46:4c: d4:92:90:dc:c3:8c:06:a5:90:59:db:10:95:94:8b:16:7b:18: ca:49:50:44 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUsgJF5Q9u7NMPnRVz3bSlrdviDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMy MzI2MURGNDAeFw0yNjEwMTIwNzA2NDVaFw0yNjEwMTUxNjU2NDVaMDMxMTAvBgNV BAMTKDRFRjZEMDU1NDdCMjJGNTE1NzA5Q0Y1RjZCOTlFQTkyQTYwMDc2NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7tuidRMRIS1cr5XKLMpjz7TD lJaLENf1GbAPiGbG5kcthsPaqcrSXp7xKwFm3o6gXIo7AHkVIVzGR4519rkGtjKU tNxucccye2+1+DfkbOlppNRAcEIJhQynCzcB1m9C8fGjuPc6/GjM2szRDR5f7U9u k4Jz8YQ3MmgXyBQEky+y+FqEFkCUQTeKsxUbGdZ48lD/6agLe6JSUYrThGhP6vkv Kyya1vYJms20ZTCZbQ7a5nn+LGuqObqODa56dkgBrLqeD6E4usU+4EvSXHoLxUac zOMwcrY/lVRnLINgpE5LjZQow42nuE7X4/VkPPMlPXvLbm9QZaB78ZcSwUE7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTvbQVUeyL1FXCc9fa5nqkqYAdnkwHwYDVR0j BBgwFoAUHPcJ7Z4LAzlLn5vrV+2NLCMmHfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjA4NDg2Ni8xLzFDRjcwOUVEOUUwQjAzMzk0QjlGOUJFQjU3RUQ4 RDJDMjMyNjFERjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMUNGNzA5RUQ5RTBCMDMzOTRCOUY5QkVCNTdFRDhEMkMyMzI2MURGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwODQ4NjYvMS8xQ0Y3MDlFRDlFMEIw MzM5NEI5RjlCRUI1N0VEOEQyQzIzMjYxREY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqd6fdqCsb48 GVdn0kM6nJnl7P8/RNm9OsQYJHAJjAv/lQKtZwX1uvtASILpXRrzEs+RcQ25ve62 BlmvnfWRmUVTRtggQNtm3QEYsOZwBD9nGpW2Gy0OUvCdtuPyoVKglBg84TF4QBhe 1o6Pmv3/aaqtzgoFwxTL+14TXI4vbZsBanjIFey9gDythk/EvGHTX85DB3tLkQXT hmSFhuN0gE2yS4oHsPyLPLz7U6b+E/glqXOIc2IzrB+aXQxEbzsJ5JSA4Vi255uu 5A1vZ7yS0nzT2dxKNUSj8V7Z+SiS2gppGRNVy3urgUZM1JKQ3MOMBqWQWdsQlZSL FnsYyklQRA== -----END CERTIFICATE-----Generated at Wed Oct 14 04:48:34 2026 by rpki-client