$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft File: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft (raw, json) Hash identifier: 1k+pwY3LclEIdBokOOaetJOdkU9gLXwy/+m5NseTyRE= Subject key identifier: 33:FF:A2:16:B4:16:A8:AA:37:4C:EA:B7:A6:30:6D:27:E6:EC:08:86 Authority key identifier: 7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF Certificate issuer: /CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF Certificate serial: 43D1BF4ED7FFE5E3B3061CBAA79A164D3541A547 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft Manifest number: F0 Signing time: Wed 30 Sep 2026 07:47:50 +0000 Manifest this update: Wed 30 Sep 2026 07:42:50 +0000 Manifest next update: Sat 03 Oct 2026 17:31:50 +0000 Files and hashes: 1: 3136372e3138392e302e302f31362d3234203d3e2030.roa (hash: MXf+SARmeNUqmxYlPN54Ktu2L7cV6EQdIwRkz23xCxM=) 2: 3136372e3138392e302e302f31362d3332203d3e203536303438.roa (hash: MrzEn6klYHxiYP4rtuuhkZhxDGTxHKj05TDsKOfntVs=) 3: 7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl (hash: e6ZZkdwG1jd4Dglmz+WScHUdvPSkLLwBmW6TeJaLKG0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 03:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d1:bf:4e:d7:ff:e5:e3:b3:06:1c:ba:a7:9a:16:4d:35:41:a5:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C559A00840D00325B45D7F6A7C10EDBD2ED69AF Validity Not Before: Sep 30 07:42:50 2026 GMT Not After : Oct 3 17:31:50 2026 GMT Subject: CN=33FFA216B416A8AA374CEAB7A6306D27E6EC0886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4d:46:85:b5:cf:17:19:7f:b5:c4:ef:28:54: d7:a1:db:67:43:30:13:5c:6f:c9:3f:da:2f:c0:4f: 93:85:8d:3f:20:ea:eb:6a:c3:d1:89:21:7c:79:36: 07:e6:b8:97:a3:c3:39:b8:44:4e:d3:d3:0c:6d:71: ed:dc:dc:52:de:d2:1c:b1:6b:45:96:6c:be:85:75: 23:e4:b6:ce:29:21:bd:03:ef:8a:75:84:ab:bb:9f: b2:71:7a:3f:f5:ac:cd:b1:98:4b:16:ef:b2:ec:5f: cb:4a:b2:b0:b9:92:8c:07:6d:0f:dc:b3:22:e6:d5: 4d:db:53:fd:91:45:11:7f:3a:b4:d0:68:95:a2:61: 07:7e:27:64:b1:08:c5:c0:3c:51:de:6e:bf:5a:cb: fa:01:36:a2:5a:13:3a:5c:38:e3:75:88:81:4e:40: 2d:35:ae:8e:ed:6f:c3:ce:cc:b9:ef:3d:6f:32:8f: 0f:86:08:4d:5a:e5:dd:6a:31:e3:69:9e:e7:4f:57: 27:e1:e7:36:af:8e:d5:5b:39:7c:68:75:de:fe:19: 9e:43:69:c6:1b:75:70:6e:57:96:cc:3a:f3:84:c8: 16:21:9a:21:6f:fd:e5:cd:be:8d:44:32:fa:7f:d6: 45:6f:8d:3a:19:6d:9a:de:a7:90:0b:8e:11:d1:33: 3c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FF:A2:16:B4:16:A8:AA:37:4C:EA:B7:A6:30:6D:27:E6:EC:08:86 X509v3 Authority Key Identifier: keyid:7C:55:9A:00:84:0D:00:32:5B:45:D7:F6:A7:C1:0E:DB:D2:ED:69:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096265459348537346/0/7C559A00840D00325B45D7F6A7C10EDBD2ED69AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:4f:0b:3e:32:e0:98:e7:2e:bf:a8:ef:47:18:d3:97:61:d2: 8c:51:f9:ea:72:b0:64:86:c8:02:55:60:cd:03:22:e8:30:55: 50:63:e8:b3:6c:43:47:e2:ec:06:f7:c7:4c:2e:04:74:c4:34: ea:28:34:2d:ac:28:01:f7:23:ab:f3:8f:8f:15:74:56:1c:3b: 03:bf:a4:a2:d8:c6:f8:11:6a:3b:b2:d4:65:f6:5c:7a:b3:a1: 16:43:a3:dd:d3:d9:1a:f7:80:5b:37:7d:6e:2a:53:1b:23:5b: 7e:d4:2d:75:a8:9c:25:b6:dd:d5:24:12:07:2a:24:a7:92:8f: aa:70:e2:07:00:93:6a:2c:ce:b9:90:83:cf:b8:45:f2:05:1e: eb:88:d3:d9:ba:30:8f:2b:60:fe:67:fd:ea:6f:dd:62:41:b2: 86:a1:1a:dc:8d:b0:b4:a1:92:58:f9:f2:cd:ea:27:bb:74:0e: d9:c8:d8:2f:d8:1d:c9:ca:80:fd:64:40:9c:af:52:fb:32:41: f6:8e:f2:0f:a6:4f:3f:e4:e7:00:bf:2e:af:d9:a0:39:2e:f9: 00:2c:aa:3d:34:9a:7c:66:83:25:8b:3b:dc:b4:7a:2f:aa:3e: 68:d5:f0:f7:cf:db:74:75:23:00:3d:05:15:0e:03:82:ab:7d: 28:ef:0b:fe -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ9G/Ttf/5eOzBhy6p5oWTTVBpUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M1NTlBMDA4NDBEMDAzMjVCNDVEN0Y2QTdDMTBFREJE MkVENjlBRjAeFw0yNjA5MzAwNzQyNTBaFw0yNjEwMDMxNzMxNTBaMDMxMTAvBgNV BAMTKDMzRkZBMjE2QjQxNkE4QUEzNzRDRUFCN0E2MzA2RDI3RTZFQzA4ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClTUaFtc8XGX+1xO8oVNeh22dD MBNcb8k/2i/AT5OFjT8g6utqw9GJIXx5NgfmuJejwzm4RE7T0wxtce3c3FLe0hyx a0WWbL6FdSPkts4pIb0D74p1hKu7n7Jxej/1rM2xmEsW77LsX8tKsrC5kowHbQ/c syLm1U3bU/2RRRF/OrTQaJWiYQd+J2SxCMXAPFHebr9ay/oBNqJaEzpcOON1iIFO QC01ro7tb8POzLnvPW8yjw+GCE1a5d1qMeNpnudPVyfh5zavjtVbOXxodd7+GZ5D acYbdXBuV5bMOvOEyBYhmiFv/eXNvo1EMvp/1kVvjToZbZrep5ALjhHRMzwtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUM/+iFrQWqKo3TOq3pjBtJ+bsCIYwHwYDVR0j BBgwFoAUfFWaAIQNADJbRdf2p8EO29Ltaa8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI2NTQ1OTM0ODUzNzM0Ni8wLzdDNTU5QTAwODQwRDAwMzI1QjQ1RDdGNkE3QzEw RURCRDJFRDY5QUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvN0M1NTlBMDA4NDBEMDAzMjVCNDVEN0Y2QTdDMTBFREJEMkVENjlBRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNjU0NTkzNDg1MzczNDYvMC83QzU1OUEwMDg0MEQw MDMyNUI0NUQ3RjZBN0MxMEVEQkQyRUQ2OUFGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ08LPjLgmOcu v6jvRxjTl2HSjFH56nKwZIbIAlVgzQMi6DBVUGPos2xDR+LsBvfHTC4EdMQ06ig0 LawoAfcjq/OPjxV0Vhw7A7+kotjG+BFqO7LUZfZcerOhFkOj3dPZGveAWzd9bipT GyNbftQtdaicJbbd1SQSByokp5KPqnDiBwCTaizOuZCDz7hF8gUe64jT2bowjytg /mf96m/dYkGyhqEa3I2wtKGSWPnyzeonu3QO2cjYL9gdycqA/WRAnK9S+zJB9o7y D6ZPP+TnAL8ur9mgOS75ACyqPTSafGaDJYs73LR6L6o+aNXw98/bdHUjAD0FFQ4D gqt9KO8L/g== -----END CERTIFICATE-----Generated at Thu Oct 1 23:42:20 2026 by rpki-client