$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft File: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft (raw, json) Hash identifier: BaAvika1FveR8VW/Ve1rrIrSPBJPzBzo+bZy9hjuzvY= Subject key identifier: D5:FC:BE:CB:31:2F:FE:4E:95:96:5C:79:B3:A4:4B:BC:56:2F:FA:F6 Authority key identifier: EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 Certificate issuer: /CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Certificate serial: 2721B001897D1174AD847741600321134A524325 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft Manifest number: CF Signing time: Mon 12 Oct 2026 01:16:17 +0000 Manifest this update: Mon 12 Oct 2026 01:11:17 +0000 Manifest next update: Thu 15 Oct 2026 06:37:17 +0000 Files and hashes: 1: 3136302e32352e3139342e302f32332d3233203d3e20313531323830.roa (hash: X8RsreK6Rmi5o20yh98YatJZCTgpMieWRH7desYRWkk=) 2: EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl (hash: ddN30AIfjM5pfRSdCCC6as6tY1bgBKt3WUbwn1pwB5U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 06:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:21:b0:01:89:7d:11:74:ad:84:77:41:60:03:21:13:4a:52:43:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3 Validity Not Before: Oct 12 01:11:17 2026 GMT Not After : Oct 15 06:37:17 2026 GMT Subject: CN=D5FCBECB312FFE4E95965C79B3A44BBC562FFAF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:fc:dc:27:cf:58:82:87:db:e7:f4:e0:96:c6: 86:07:8c:16:be:8d:9b:57:d2:d1:b9:81:5a:7c:1d: fc:76:ac:17:98:a8:1d:ce:bf:2d:ec:6c:0a:a5:ae: 55:f7:5c:a1:73:9a:c8:e3:c3:ad:48:66:f7:f1:f0: b3:86:4d:5b:4f:97:29:dd:95:e0:c7:c6:91:9b:3e: e8:22:eb:78:69:75:e5:f0:73:34:d7:c0:6f:16:e0: 9c:10:23:49:7e:7b:a5:0f:2d:d6:07:d9:2d:98:41: a2:6d:cd:d1:15:f1:8e:a4:5d:dc:dc:d4:ad:2b:f1: 7e:85:a8:96:9a:6b:fd:3d:b2:be:de:98:9d:01:5d: 23:73:75:f9:9c:3b:7e:59:82:e1:69:47:bd:12:7f: 52:a7:7a:68:4e:1f:38:53:10:9d:7a:20:27:de:1e: 45:e5:b6:41:71:ba:5b:ee:8b:f1:78:69:18:15:fb: f7:a9:e2:98:25:a6:13:43:ff:b6:4d:3c:0a:06:ff: a4:94:f1:43:08:66:03:ac:28:1c:7e:5d:5f:b4:57: 9d:68:3a:df:35:2e:de:ab:22:14:5b:0a:10:bc:38: 2d:14:c8:36:ab:b9:14:fd:67:73:9a:86:2c:c0:2b: 17:e2:d0:e3:83:c3:17:79:e9:ca:2b:16:0f:c1:50: 76:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FC:BE:CB:31:2F:FE:4E:95:96:5C:79:B3:A4:4B:BC:56:2F:FA:F6 X509v3 Authority Key Identifier: keyid:EC:7E:47:6D:D1:FA:65:A1:A1:3C:74:E8:A5:47:C9:E1:D2:7D:8D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984486035816451/0/EC7E476DD1FA65A1A13C74E8A547C9E1D27D8DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:59:ac:56:33:00:35:38:18:ab:b9:63:0a:a5:9a:a0:31:b7: b9:6e:99:ec:82:00:41:d1:3b:9e:a9:69:b2:c8:d4:b1:1e:78: 81:16:a0:7c:c4:72:71:26:c8:32:0e:e2:1b:5f:ba:4e:e5:73: c0:21:a8:cc:bc:65:19:eb:a4:fc:7a:3f:df:6a:27:fa:05:72: 46:73:ed:8a:a2:5e:49:0e:9a:b6:23:37:3a:bf:b9:4c:ed:a3: 8d:4a:9d:7f:87:7f:25:f8:51:aa:ef:9b:5f:8f:a5:dd:b7:c7: 7d:82:5b:c2:fc:dc:d1:c6:86:80:de:8b:82:90:e1:0a:bf:36: 61:1b:23:85:e9:d2:e3:73:28:96:3b:60:a8:71:6c:d4:0d:e5: b0:4d:b0:58:80:57:b0:18:e9:d3:ca:ad:44:5f:da:ad:f5:8a: b1:a9:48:77:2c:c4:ab:7e:d8:78:6c:41:c3:a3:4c:de:76:8b: f0:99:cb:45:ca:3b:c7:0b:c7:fd:ca:07:cc:5a:8d:c1:81:ce: b4:6d:2d:37:1d:af:2a:80:86:4a:7d:5a:94:56:52:fe:67:47: 81:e8:36:04:1d:8c:b0:7d:59:4a:c0:0b:24:66:58:fa:db:73: 20:d0:40:9d:8a:0c:bb:6b:9e:08:37:a2:fa:f5:26:1e:9a:c7: 15:ce:5d:a7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJyGwAYl9EXSthHdBYAMhE0pSQyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFE MjdEOERGMzAeFw0yNjEwMTIwMTExMTdaFw0yNjEwMTUwNjM3MTdaMDMxMTAvBgNV BAMTKEQ1RkNCRUNCMzEyRkZFNEU5NTk2NUM3OUIzQTQ0QkJDNTYyRkZBRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL/Nwnz1iCh9vn9OCWxoYHjBa+ jZtX0tG5gVp8Hfx2rBeYqB3Ovy3sbAqlrlX3XKFzmsjjw61IZvfx8LOGTVtPlynd leDHxpGbPugi63hpdeXwczTXwG8W4JwQI0l+e6UPLdYH2S2YQaJtzdEV8Y6kXdzc 1K0r8X6FqJaaa/09sr7emJ0BXSNzdfmcO35ZguFpR70Sf1KnemhOHzhTEJ16ICfe HkXltkFxulvui/F4aRgV+/ep4pglphND/7ZNPAoG/6SU8UMIZgOsKBx+XV+0V51o Ot81Lt6rIhRbChC8OC0UyDaruRT9Z3OahizAKxfi0OODwxd56corFg/BUHaXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1fy+yzEv/k6Vllx5s6RLvFYv+vYwHwYDVR0j BBgwFoAU7H5HbdH6ZaGhPHTopUfJ4dJ9jfMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDQ4NjAzNTgxNjQ1MS8wL0VDN0U0NzZERDFGQTY1QTFBMTNDNzRFOEE1NDdD OUUxRDI3RDhERjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRUM3RTQ3NkREMUZBNjVBMUExM0M3NEU4QTU0N0M5RTFEMjdEOERGMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5ODQ0ODYwMzU4MTY0NTEvMC9FQzdFNDc2REQxRkE2 NUExQTEzQzc0RThBNTQ3QzlFMUQyN0Q4REYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVmsVjMANTgY q7ljCqWaoDG3uW6Z7IIAQdE7nqlpssjUsR54gRagfMRycSbIMg7iG1+6TuVzwCGo zLxlGeuk/Ho/32on+gVyRnPtiqJeSQ6atiM3Or+5TO2jjUqdf4d/JfhRqu+bX4+l 3bfHfYJbwvzc0caGgN6LgpDhCr82YRsjhenS43MoljtgqHFs1A3lsE2wWIBXsBjp 08qtRF/arfWKsalIdyzEq37YeGxBw6NM3naL8JnLRco7xwvH/coHzFqNwYHOtG0t Nx2vKoCGSn1alFZS/mdHgeg2BB2MsH1ZSsALJGZY+ttzINBAnYoMu2ueCDei+vUm HprHFc5dpw== -----END CERTIFICATE-----Generated at Tue Oct 13 17:48:31 2026 by rpki-client