$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft File: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft (raw, json) Hash identifier: F8omeO8M5ltJ3PSwaDVKo73IOdtX2YBS5WJGKiquFyQ= Subject key identifier: 4B:DC:8B:1D:26:A0:B9:86:4C:73:43:BE:37:E2:EE:60:7E:62:5B:79 Authority key identifier: F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 Certificate issuer: /CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Certificate serial: 6AC52CC70B475DE30B2B26B8BE94E295AB169061 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft Manifest number: 013E Signing time: Tue 13 Oct 2026 19:18:13 +0000 Manifest this update: Tue 13 Oct 2026 19:13:13 +0000 Manifest next update: Sat 17 Oct 2026 04:40:13 +0000 Files and hashes: 1: 3135372e31302e3131322e302f32332d3234203d3e20313331353131.roa (hash: fo7R8Q6Bhn8CxCXto70HZgVcBGZs2crFGgl/cDu0Hdg=) 2: F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl (hash: KhRk5KaoVkrOi26QLQ9SG4XoPtxWJKjq5n42pUKdIOU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 04:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c5:2c:c7:0b:47:5d:e3:0b:2b:26:b8:be:94:e2:95:ab:16:90:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8291D72985D2225F7CB1A97A84837BBD2F5FE88 Validity Not Before: Oct 13 19:13:13 2026 GMT Not After : Oct 17 04:40:13 2026 GMT Subject: CN=4BDC8B1D26A0B9864C7343BE37E2EE607E625B79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:67:98:05:cf:fb:44:6e:23:84:a2:13:06: 5a:82:16:cd:c0:d3:c2:2d:57:c0:a8:fe:86:2b:ff: 63:38:35:c1:00:ac:63:76:37:a7:7c:80:20:bd:26: ba:7b:b8:3e:2c:64:e2:07:70:cb:8e:0d:29:e8:e6: 9a:fe:d8:a2:0a:f2:19:bd:ae:1a:09:2f:ef:2c:1c: 7a:a9:44:3f:c4:39:49:45:97:9c:ff:a8:28:23:36: d1:27:30:0f:35:69:98:2b:9e:d9:1b:f8:15:ef:e8: 5d:c4:d8:6f:fc:0d:b0:26:28:fd:d7:8d:a2:78:67: 33:09:75:6e:cf:1a:da:e8:83:89:22:e1:01:b3:aa: bd:31:08:3b:ac:fd:63:54:27:68:75:6b:cd:02:b3: 5a:7c:32:af:d3:d1:50:96:f1:95:b5:63:80:c2:77: 35:fb:34:19:0d:f1:f0:1d:c6:5b:1a:54:5a:a1:0a: ef:42:40:9f:e2:01:8c:25:8d:e1:88:cd:6f:d2:ec: 3b:54:94:1c:93:10:5b:6f:50:ad:39:2c:a0:f9:ce: af:cc:28:0f:04:23:49:f2:5c:cf:f2:a6:13:d2:05: 44:03:9b:fa:8c:95:3f:0d:cf:84:88:7c:b1:b5:a0: 2e:4d:01:ea:8e:a1:91:7e:b4:5c:68:99:b9:c6:24: 35:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DC:8B:1D:26:A0:B9:86:4C:73:43:BE:37:E2:EE:60:7E:62:5B:79 X509v3 Authority Key Identifier: keyid:F8:29:1D:72:98:5D:22:25:F7:CB:1A:97:A8:48:37:BB:D2:F5:FE:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524708353/1/F8291D72985D2225F7CB1A97A84837BBD2F5FE88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f6:06:f1:97:cc:d2:a6:ba:50:b7:20:29:8f:1a:6f:7e:18: 26:d7:66:a2:68:04:a4:90:eb:2f:89:be:2e:ab:16:fb:f8:19: 5e:73:97:10:4a:35:64:2d:61:40:9d:09:7d:a5:f7:dd:38:f2: ff:46:89:0d:1c:6a:af:95:2c:74:d4:53:b2:c7:ec:5a:b5:fe: e1:16:21:b6:bb:c2:4b:aa:7a:64:6a:6a:f3:71:6b:3b:c3:13: 98:e1:e5:b7:52:52:6d:22:d1:d3:37:c6:d8:0c:d0:60:c7:eb: 20:73:23:96:ed:22:aa:9d:63:90:ec:b3:b0:9a:03:f7:e9:ab: 0e:6a:8e:4f:c2:08:41:62:ed:50:0f:0c:d5:2e:c3:fe:cd:04: c8:3d:cf:62:dc:3c:61:aa:48:0d:2e:7c:15:23:36:38:5e:56: f3:86:cd:92:fd:92:4c:46:ef:33:89:a8:d8:37:ae:b0:ae:e7: 8b:5d:99:5d:bf:96:59:a8:e3:7d:3e:8c:2d:7b:37:5e:6f:44: dc:b3:47:c5:b3:1a:e7:50:73:53:1f:16:33:d1:bc:69:f2:b3: cd:2c:f4:f6:b4:15:bd:c5:51:15:43:df:72:a6:52:fb:05:16: 52:d5:ac:74:fc:d9:39:b0:6e:34:75:54:85:3d:af:04:6b:cc: eb:ef:aa:98 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUasUsxwtHXeMLKya4vpTilasWkGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJE MkY1RkU4ODAeFw0yNjEwMTMxOTEzMTNaFw0yNjEwMTcwNDQwMTNaMDMxMTAvBgNV BAMTKDRCREM4QjFEMjZBMEI5ODY0QzczNDNCRTM3RTJFRTYwN0U2MjVCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpgGeYBc/7RG4jhKITBlqCFs3A 08ItV8Co/oYr/2M4NcEArGN2N6d8gCC9Jrp7uD4sZOIHcMuODSno5pr+2KIK8hm9 rhoJL+8sHHqpRD/EOUlFl5z/qCgjNtEnMA81aZgrntkb+BXv6F3E2G/8DbAmKP3X jaJ4ZzMJdW7PGtrog4ki4QGzqr0xCDus/WNUJ2h1a80Cs1p8Mq/T0VCW8ZW1Y4DC dzX7NBkN8fAdxlsaVFqhCu9CQJ/iAYwljeGIzW/S7DtUlByTEFtvUK05LKD5zq/M KA8EI0nyXM/yphPSBUQDm/qMlT8Nz4SIfLG1oC5NAeqOoZF+tFxombnGJDUnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUS9yLHSaguYZMc0O+N+LuYH5iW3kwHwYDVR0j BBgwFoAU+CkdcphdIiX3yxqXqEg3u9L1/ogwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDcwODM1My8xL0Y4MjkxRDcyOTg1RDIyMjVGN0NCMUE5N0E4NDgz N0JCRDJGNUZFODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRjgyOTFENzI5ODVEMjIyNUY3Q0IxQTk3QTg0ODM3QkJEMkY1RkU4OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ3MDgzNTMvMS9GODI5MUQ3Mjk4NUQy MjI1RjdDQjFBOTdBODQ4MzdCQkQyRjVGRTg4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfYG8ZfM0qa6 ULcgKY8ab34YJtdmomgEpJDrL4m+LqsW+/gZXnOXEEo1ZC1hQJ0JfaX33Tjy/0aJ DRxqr5UsdNRTssfsWrX+4RYhtrvCS6p6ZGpq83FrO8MTmOHlt1JSbSLR0zfG2AzQ YMfrIHMjlu0iqp1jkOyzsJoD9+mrDmqOT8IIQWLtUA8M1S7D/s0EyD3PYtw8YapI DS58FSM2OF5W84bNkv2STEbvM4mo2DeusK7ni12ZXb+WWajjfT6MLXs3Xm9E3LNH xbMa51BzUx8WM9G8afKzzSz09rQVvcVRFUPfcqZS+wUWUtWsdPzZObBuNHVUhT2v BGvM6++qmA== -----END CERTIFICATE-----Generated at Wed Oct 14 20:18:55 2026 by rpki-client