$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft File: F3D2189E79D8CABAA6E636A706E38827E75A574A.mft (raw, json) Hash identifier: fjQBjGPmrF7ycBjrH2hBMDFQUr0yCCCErfpfLmeAAUU= Subject key identifier: 69:86:7D:94:3D:14:04:A4:7F:06:EE:73:00:41:9E:24:95:2C:2D:26 Authority key identifier: F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A Certificate issuer: /CN=F3D2189E79D8CABAA6E636A706E38827E75A574A Certificate serial: 250C416F4A7AFD968580EF62EF6D1EDE91377E17 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft Manifest number: 0126 Signing time: Sun 11 Oct 2026 16:05:42 +0000 Manifest this update: Sun 11 Oct 2026 16:00:42 +0000 Manifest next update: Thu 15 Oct 2026 03:35:42 +0000 Files and hashes: 1: F3D2189E79D8CABAA6E636A706E38827E75A574A.crl (hash: P7OxZ/47kBZr93PnLQ1ppQ9neb2r4ORdd+0GoN94190=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:0c:41:6f:4a:7a:fd:96:85:80:ef:62:ef:6d:1e:de:91:37:7e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3D2189E79D8CABAA6E636A706E38827E75A574A Validity Not Before: Oct 11 16:00:42 2026 GMT Not After : Oct 15 03:35:42 2026 GMT Subject: CN=69867D943D1404A47F06EE7300419E24952C2D26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:30:fe:fa:7d:75:c0:38:3a:3a:8f:01:97:87: 15:41:bb:0e:96:30:89:56:64:1a:9f:b9:04:e6:46: c6:3b:d8:4b:d4:8e:7e:e6:aa:85:43:61:65:81:34: bf:a4:ab:8c:f4:b9:97:c2:df:69:94:8e:c4:be:92: b9:d8:2c:b3:42:fe:38:88:dd:8b:0a:25:b3:dd:be: 15:7b:9b:16:0f:02:6f:c6:c5:bd:16:ca:8e:64:3c: 49:f4:0f:50:e1:59:47:31:e3:1a:28:0b:55:a7:42: 02:35:8e:eb:92:8e:b9:4d:09:5b:42:10:76:c1:03: 18:14:48:25:25:07:85:68:0e:ac:0e:ba:e9:7d:fb: e7:6a:78:30:c9:5c:29:60:d7:a9:b7:48:72:6a:8f: 53:89:f6:ad:e4:78:db:f5:c8:4f:51:59:c9:cb:18: d9:8f:a4:80:69:58:c0:ba:c1:ad:c1:55:3b:a1:e5: f6:00:3e:b1:e8:14:26:f6:55:64:d3:4a:e2:ed:f0: 07:fd:3a:cb:e2:4d:ca:8b:86:11:bd:cb:48:3b:40: c9:b2:cb:c2:8f:6d:55:c7:25:fe:ed:f1:b6:2e:d0: 28:8e:10:32:a8:f0:c6:d6:64:5d:90:37:b7:2f:d4: 28:97:51:a5:0e:79:1b:c0:a3:67:0f:87:34:7c:95: da:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:86:7D:94:3D:14:04:A4:7F:06:EE:73:00:41:9E:24:95:2C:2D:26 X509v3 Authority Key Identifier: keyid:F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:6f:db:20:e7:7a:9d:0d:c8:d3:db:94:77:69:48:47:d5:8f: 25:18:98:a1:50:13:4c:29:77:d4:3e:38:57:fb:fd:d0:da:e9: d2:d2:9d:7e:37:5a:d4:40:b1:eb:e4:7f:61:58:cc:1b:75:b7: d7:3e:96:71:f7:bb:b6:74:96:7d:0f:d1:28:eb:24:0c:f2:ec: 4f:4f:5d:8e:26:57:51:5b:78:3a:d7:c5:e8:57:68:ab:4d:4f: 4e:72:a4:28:73:fb:4a:8b:7a:f6:12:be:f3:29:4b:48:a7:be: 95:dc:c7:a2:31:25:d6:15:80:54:23:ee:d2:09:72:36:0a:f3: 6c:d5:52:6b:9a:eb:59:09:28:3b:6a:5c:74:38:7c:c7:a7:32: 59:ac:0d:fe:21:96:c0:86:34:fa:8f:05:cf:eb:fe:14:a5:6a: 86:ed:7d:28:2e:88:1e:35:9b:bc:ab:41:3f:d1:43:75:85:a0: 41:45:e8:84:e0:d2:a6:cf:b3:63:a5:dd:a1:5e:8c:18:af:42: 5f:37:e2:78:ac:ad:2b:08:38:53:5f:d5:35:75:96:bd:44:85: b6:bb:f4:f0:29:8e:c0:fc:1e:4e:1b:a3:5c:37:b5:e5:5a:45: 3e:a6:86:d0:3b:a8:6e:de:1f:8d:7a:19:d7:55:85:e5:c0:ca: e5:55:41:56 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJQxBb0p6/ZaFgO9i720e3pE3fhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNEMjE4OUU3OUQ4Q0FCQUE2RTYzNkE3MDZFMzg4MjdF NzVBNTc0QTAeFw0yNjEwMTExNjAwNDJaFw0yNjEwMTUwMzM1NDJaMDMxMTAvBgNV BAMTKDY5ODY3RDk0M0QxNDA0QTQ3RjA2RUU3MzAwNDE5RTI0OTUyQzJEMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkMP76fXXAODo6jwGXhxVBuw6W MIlWZBqfuQTmRsY72EvUjn7mqoVDYWWBNL+kq4z0uZfC32mUjsS+krnYLLNC/jiI 3YsKJbPdvhV7mxYPAm/Gxb0Wyo5kPEn0D1DhWUcx4xooC1WnQgI1juuSjrlNCVtC EHbBAxgUSCUlB4VoDqwOuul9++dqeDDJXClg16m3SHJqj1OJ9q3keNv1yE9RWcnL GNmPpIBpWMC6wa3BVTuh5fYAPrHoFCb2VWTTSuLt8Af9OsviTcqLhhG9y0g7QMmy y8KPbVXHJf7t8bYu0CiOEDKo8MbWZF2QN7cv1CiXUaUOeRvAo2cPhzR8ldoXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaYZ9lD0UBKR/Bu5zAEGeJJUsLSYwHwYDVR0j BBgwFoAU89IYnnnYyrqm5janBuOIJ+daV0owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MDk1NTkyNDA3MzQ4MDE5NS8wL0YzRDIxODlFNzlEOENBQkFBNkU2MzZBNzA2RTM4 ODI3RTc1QTU3NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjNEMjE4OUU3OUQ4Q0FCQUE2RTYzNkE3MDZFMzg4MjdFNzVBNTc0QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzA5NTU5MjQwNzM0ODAxOTUvMC9GM0QyMTg5RTc5RDhD QUJBQTZFNjM2QTcwNkUzODgyN0U3NUE1NzRBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk2/bIOd6nQ3I 09uUd2lIR9WPJRiYoVATTCl31D44V/v90Nrp0tKdfjda1ECx6+R/YVjMG3W31z6W cfe7tnSWfQ/RKOskDPLsT09djiZXUVt4OtfF6Fdoq01PTnKkKHP7Sot69hK+8ylL SKe+ldzHojEl1hWAVCPu0glyNgrzbNVSa5rrWQkoO2pcdDh8x6cyWawN/iGWwIY0 +o8Fz+v+FKVqhu19KC6IHjWbvKtBP9FDdYWgQUXohODSps+zY6XdoV6MGK9CXzfi eKytKwg4U1/VNXWWvUSFtrv08CmOwPweThujXDe15VpFPqaG0Duobt4fjXoZ11WF 5cDK5VVBVg== -----END CERTIFICATE-----Generated at Wed Oct 14 01:11:35 2026 by rpki-client