$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft File: 97B5B7009501E4718F06B9B36D215369C958203F.mft (raw, json) Hash identifier: bZt/rN4Ztd6/ExMJxUKSM4FPIpJgfELzynoAtlVoigA= Subject key identifier: C7:3A:C3:3B:53:13:F3:D7:05:7B:E3:B3:24:93:B0:54:40:74:FF:25 Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F Certificate issuer: /CN=97B5B7009501E4718F06B9B36D215369C958203F Certificate serial: 1D6C684A05244C3C7A263C6641282C67CC3B00FE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft Manifest number: 013C Signing time: Sat 10 Oct 2026 09:04:30 +0000 Manifest this update: Sat 10 Oct 2026 08:59:30 +0000 Manifest next update: Tue 13 Oct 2026 10:11:30 +0000 Files and hashes: 1: 3134302e3231302e382e302f32312d3231203d3e20313334373635.roa (hash: HSDYPYoIaTEjvOoXhrjV5CgDXDpaC41EK5sRdfygvnk=) 2: 97B5B7009501E4718F06B9B36D215369C958203F.crl (hash: 0NZo5MIGtV80WX4SU4mDepTZxvp7KvE+4ZuFpiPVk18=) 3: 3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa (hash: M9h4mps+1IMEWDqZCndydBDbcZZixvF2i/x4Bvz67vM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 02:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:6c:68:4a:05:24:4c:3c:7a:26:3c:66:41:28:2c:67:cc:3b:00:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F Validity Not Before: Oct 10 08:59:30 2026 GMT Not After : Oct 13 10:11:30 2026 GMT Subject: CN=C73AC33B5313F3D7057BE3B32493B0544074FF25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e0:f5:85:e4:81:41:e4:b9:4c:ed:15:1d:d5: a3:af:66:37:13:d1:8a:f4:d9:ae:72:50:07:06:1b: 51:2c:2d:e6:5c:59:19:e8:cc:0a:a0:0c:1c:aa:89: 3d:0a:65:45:3f:5e:b3:ef:d8:b9:f8:d5:35:91:d6: 7e:8e:5e:f0:71:34:d8:70:eb:b3:f3:66:a8:4f:1d: 44:6b:69:64:06:e5:a7:5f:f2:89:10:8f:fd:03:ed: 78:24:b9:34:6e:b2:60:56:56:40:f6:f5:f2:fb:bd: 7b:e4:c6:b4:73:02:e3:3a:45:aa:a8:43:8c:6b:90: 86:bd:c9:a5:ec:cc:3c:1e:d0:f6:5b:f4:87:52:a2: c9:e0:20:00:21:cf:83:08:0f:ea:b1:98:7b:f6:27: 06:c8:bf:42:7b:47:54:d3:6b:76:76:c0:d9:ab:d4: e9:c0:60:50:f3:34:c1:12:22:e8:2c:36:88:2e:8b: 4d:58:09:90:7b:b7:d8:59:35:98:87:c7:2d:6e:cf: 23:f5:97:1a:26:8d:f7:68:23:a9:e0:a6:d6:2c:7b: bb:a3:0b:11:05:c5:10:58:06:19:05:d0:36:c2:be: b9:e0:48:5d:3a:8a:d0:83:64:ea:cd:f8:29:3b:98: 75:80:ab:76:18:d4:b3:a2:47:f1:98:3b:4f:bd:13: fb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3A:C3:3B:53:13:F3:D7:05:7B:E3:B3:24:93:B0:54:40:74:FF:25 X509v3 Authority Key Identifier: keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:5a:4d:95:92:34:5e:c9:22:48:56:94:35:b9:d2:f7:50:6f: 3a:dc:8c:a0:51:13:34:78:20:ac:3e:92:50:1e:47:f0:e7:04: 76:8e:fb:0b:70:73:db:c5:22:59:da:d6:ad:fa:6f:34:67:41: de:9e:a6:bb:83:c9:70:72:c8:8d:54:94:76:ba:11:1e:11:07: e8:60:c5:59:92:a9:23:3e:bc:56:05:03:2b:24:c7:86:5e:c6: ba:54:3e:9e:39:14:9a:f4:d6:5f:5a:46:d2:19:41:83:f5:21: 63:cb:12:9a:cf:a2:8d:4d:bd:15:8b:c2:0d:bc:1f:31:c6:67: 54:60:49:85:19:5d:5a:10:cc:6c:71:75:8a:17:77:c2:b9:32: 86:f2:b3:49:3d:5f:92:85:74:8f:0a:b6:2c:8f:65:2e:83:d1: 7a:b3:d5:6a:82:ca:f1:e1:26:6c:e4:f7:2d:cf:6c:96:d7:23: 52:29:56:ee:31:ac:c0:4a:ff:f0:60:8c:4b:52:14:de:65:5c: 9d:a1:2e:3a:b9:62:e4:6b:a5:4d:f2:34:8a:7b:1c:d4:0c:78: 87:e3:79:08:c1:dd:bc:f2:43:98:7d:83:7b:14:a8:da:fd:a9: c3:b1:bb:b5:d8:28:cb:23:be:43:cd:ca:37:e4:37:4f:f9:6b: 5e:57:bc:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHWxoSgUkTDx6JjxmQSgsZ8w7AP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlD OTU4MjAzRjAeFw0yNjEwMTAwODU5MzBaFw0yNjEwMTMxMDExMzBaMDMxMTAvBgNV BAMTKEM3M0FDMzNCNTMxM0YzRDcwNTdCRTNCMzI0OTNCMDU0NDA3NEZGMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW4PWF5IFB5LlM7RUd1aOvZjcT 0Yr02a5yUAcGG1EsLeZcWRnozAqgDByqiT0KZUU/XrPv2Ln41TWR1n6OXvBxNNhw 67PzZqhPHURraWQG5adf8okQj/0D7XgkuTRusmBWVkD29fL7vXvkxrRzAuM6Raqo Q4xrkIa9yaXszDwe0PZb9IdSosngIAAhz4MID+qxmHv2JwbIv0J7R1TTa3Z2wNmr 1OnAYFDzNMESIugsNogui01YCZB7t9hZNZiHxy1uzyP1lxomjfdoI6ngptYse7uj CxEFxRBYBhkF0DbCvrngSF06itCDZOrN+Ck7mHWAq3YY1LOiR/GYO0+9E/vJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxzrDO1MT89cFe+OzJJOwVEB0/yUwHwYDVR0j BBgwFoAUl7W3AJUB5HGPBrmzbSFTaclYID8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8xLzk3QjVCNzAwOTUwMUU0NzE4RjA2QjlCMzZEMjE1 MzY5Qzk1ODIwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlDOTU4MjAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMS85N0I1QjcwMDk1MDFF NDcxOEYwNkI5QjM2RDIxNTM2OUM5NTgyMDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1pNlZI0Xski SFaUNbnS91BvOtyMoFETNHggrD6SUB5H8OcEdo77C3Bz28UiWdrWrfpvNGdB3p6m u4PJcHLIjVSUdroRHhEH6GDFWZKpIz68VgUDKyTHhl7GulQ+njkUmvTWX1pG0hlB g/UhY8sSms+ijU29FYvCDbwfMcZnVGBJhRldWhDMbHF1ihd3wrkyhvKzST1fkoV0 jwq2LI9lLoPRerPVaoLK8eEmbOT3Lc9sltcjUilW7jGswEr/8GCMS1IU3mVcnaEu Orli5GulTfI0insc1Ax4h+N5CMHdvPJDmH2DexSo2v2pw7G7tdgoyyO+Q83KN+Q3 T/lrXle8vA== -----END CERTIFICATE-----Generated at Sun Oct 11 20:15:33 2026 by rpki-client