$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft File: 3518C1E70B30D501EC0803B85E52F5905EE82052.mft (raw, json) Hash identifier: nEMDO/9YYDcWzKmd0r3R62OMoEEOs2S6P9fNZ8wLpQo= Subject key identifier: 0B:86:37:51:8B:AB:61:13:BF:CF:E2:B2:D5:8B:28:75:00:D1:E6:89 Authority key identifier: 35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 Certificate issuer: /CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Certificate serial: 12527F1D77E3B7737B9DE297C1D66C503B4CD743 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft Manifest number: CA Signing time: Fri 02 Oct 2026 17:35:41 +0000 Manifest this update: Fri 02 Oct 2026 17:30:41 +0000 Manifest next update: Mon 05 Oct 2026 20:39:41 +0000 Files and hashes: 1: 3518C1E70B30D501EC0803B85E52F5905EE82052.crl (hash: IKxun7HrnhTwJFcXPYJLaNkL5bzaqLUdDz9QyGS0awo=) 2: 3130332e3133312e3135322e302f32322d3234203d3e2034383038.roa (hash: xmJpASv6f6muagMJ4cJj94OGQ9aSvhbvGuyic71zQKQ=) 3: 3130332e34392e3137362e302f32342d3234203d3e2034383437.roa (hash: ajQJ6j9gJz58Pt34bat8WkxraIuEvfp95aG2jJ5f9t8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 09:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:52:7f:1d:77:e3:b7:73:7b:9d:e2:97:c1:d6:6c:50:3b:4c:d7:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Validity Not Before: Oct 2 17:30:41 2026 GMT Not After : Oct 5 20:39:41 2026 GMT Subject: CN=0B8637518BAB6113BFCFE2B2D58B287500D1E689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:4e:35:37:d6:58:42:2d:43:19:ab:bd:f4: ac:37:99:9a:6f:29:73:93:bc:15:c8:6d:82:57:72: 11:1d:ce:6b:9e:34:55:ed:99:90:a3:85:e7:63:5b: d2:c8:d5:df:44:45:d7:a1:2c:61:62:85:2d:dd:96: 03:1c:77:11:b4:5f:4b:da:35:ca:20:ad:1e:47:28: 98:a5:31:7f:14:e9:74:cf:78:26:60:03:fd:db:b6: 5c:cb:69:b4:48:e5:5a:48:39:c0:3f:7f:db:42:56: b8:f8:f3:21:90:f9:95:68:49:92:7c:81:4f:b9:92: ad:5e:1b:7f:43:de:b8:2b:3f:cf:29:26:96:b3:e7: b5:c3:2d:e6:76:9f:ca:66:3e:5a:5c:c8:e0:36:52: 73:68:95:52:bc:5a:f8:c1:1c:a7:83:d1:71:16:40: af:b5:39:cb:f0:f9:f0:d6:68:74:c6:89:46:ad:18: e8:d8:f8:9f:f8:c9:5d:95:29:7f:0f:0f:53:0e:49: e6:6d:93:95:d1:89:e7:5e:8a:2d:ba:3c:ac:9e:80: 30:56:ff:a5:9d:c4:9e:f7:20:54:f4:27:bd:f8:71: d1:78:db:72:2c:7f:fc:03:25:87:3f:24:d4:9d:c2: 5c:1e:6b:0d:74:59:25:13:54:b4:ad:24:1e:2d:cb: db:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:86:37:51:8B:AB:61:13:BF:CF:E2:B2:D5:8B:28:75:00:D1:E6:89 X509v3 Authority Key Identifier: keyid:35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:eb:58:9d:d6:c3:f2:80:95:95:42:c2:4f:05:fc:7e:07:79: 70:a7:2e:02:21:72:a7:15:3e:3b:28:a9:c3:64:5e:71:83:61: e0:86:0b:b2:24:49:aa:31:1e:bd:ae:0a:67:d2:23:d3:44:ee: 26:4e:aa:26:54:4b:ee:87:1b:ca:35:00:d4:55:3d:2e:bb:68: 97:e0:14:81:7f:b4:9d:a4:08:5e:f4:1b:4d:76:9a:67:f4:8c: 8c:16:17:25:e4:f5:d3:6b:3e:8e:ba:21:9a:1a:48:2e:cd:a4: 52:f2:fe:12:a0:2d:d5:d2:13:e7:62:5a:22:ab:72:7a:ad:e8: f5:6a:1a:cb:0a:6e:4d:f6:e1:58:47:a8:1f:d8:fe:6e:3e:2d: 1e:59:91:45:95:91:b4:48:4c:fa:09:81:19:5e:19:c6:bc:ae: 70:a9:71:1b:99:dc:24:16:27:03:78:12:49:4d:a4:e0:96:47: a3:30:82:07:ad:a4:0c:cd:0d:71:50:7f:7a:e8:3c:1d:a4:d7: 85:45:e6:30:d1:c9:cd:e4:1c:02:ad:a1:e4:7d:5d:d3:00:7b: d2:f8:2f:6f:f3:f4:0e:31:7d:ac:be:4e:59:94:91:7f:a8:5c: 42:73:d9:5b:7b:a0:d5:14:28:a0:8c:fd:e8:5f:ee:7f:a4:61: 77:06:85:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUElJ/HXfjt3N7neKXwdZsUDtM10MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1 RUU4MjA1MjAeFw0yNjEwMDIxNzMwNDFaFw0yNjEwMDUyMDM5NDFaMDMxMTAvBgNV BAMTKDBCODYzNzUxOEJBQjYxMTNCRkNGRTJCMkQ1OEIyODc1MDBEMUU2ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNRU41N9ZYQi1DGau99Kw3mZpv KXOTvBXIbYJXchEdzmueNFXtmZCjhedjW9LI1d9ERdehLGFihS3dlgMcdxG0X0va NcogrR5HKJilMX8U6XTPeCZgA/3btlzLabRI5VpIOcA/f9tCVrj48yGQ+ZVoSZJ8 gU+5kq1eG39D3rgrP88pJpaz57XDLeZ2n8pmPlpcyOA2UnNolVK8WvjBHKeD0XEW QK+1Ocvw+fDWaHTGiUatGOjY+J/4yV2VKX8PD1MOSeZtk5XRiedeii26PKyegDBW /6WdxJ73IFT0J734cdF423Isf/wDJYc/JNSdwlweaw10WSUTVLStJB4ty9tRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUC4Y3UYurYRO/z+Ky1YsodQDR5okwHwYDVR0j BBgwFoAUNRjB5wsw1QHsCAO4XlL1kF7oIFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk1ODAxODE4MjM0ODgwMS8wLzM1MThDMUU3MEIzMEQ1MDFFQzA4MDNCODVFNTJG NTkwNUVFODIwNTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1RUU4MjA1Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NTgwMTgxODIzNDg4MDEvMC8zNTE4QzFFNzBCMzBE NTAxRUMwODAzQjg1RTUyRjU5MDVFRTgyMDUyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOtYndbD8oCV lULCTwX8fgd5cKcuAiFypxU+Oyipw2RecYNh4IYLsiRJqjEeva4KZ9Ij00TuJk6q JlRL7ocbyjUA1FU9Lrtol+AUgX+0naQIXvQbTXaaZ/SMjBYXJeT102s+jrohmhpI Ls2kUvL+EqAt1dIT52JaIqtyeq3o9WoaywpuTfbhWEeoH9j+bj4tHlmRRZWRtEhM +gmBGV4ZxryucKlxG5ncJBYnA3gSSU2k4JZHozCCB62kDM0NcVB/eug8HaTXhUXm MNHJzeQcAq2h5H1d0wB70vgvb/P0DjF9rL5OWZSRf6hcQnPZW3ug1RQooIz96F/u f6RhdwaFjQ== -----END CERTIFICATE-----Generated at Sat Oct 3 22:33:47 2026 by rpki-client