$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft File: E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft (raw, json) Hash identifier: kDEIm1/O9J5sKH2xhnC5Ybbcztk9i346/ez0NIPnJjI= Subject key identifier: 3F:D3:C0:C6:BE:C4:15:60:39:A4:C8:3C:93:75:AA:AF:5D:FF:9D:40 Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Certificate serial: 65F0E76EB6EA5C50AD91871CA8A959825E2704F5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft Manifest number: DB Signing time: Sat 10 Oct 2026 20:44:56 +0000 Manifest this update: Sat 10 Oct 2026 20:39:56 +0000 Manifest next update: Tue 13 Oct 2026 23:20:56 +0000 Files and hashes: 1: AS4134.roa (hash: pbBEiZBvdlrzSkUwoE6zC9388fVOYjGShgHk6XRCmy8=) 2: AS38730.roa (hash: R6GUDNjhj7Y2lemEXh2qBIc7qq98BsfLVSYfayFPICM=) 3: E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl (hash: AFI0AC5hJX6av14u53v++z97L9BuvU2cMevw/CQ27lg=) 4: AS134764.roa (hash: xBe/goNb1fufTCb9L8wWUBYbiFdPALUFLhszW5C/vLo=) 5: AS56040.roa (hash: tVA43wmUt+A+FVm7xKq2eFE3EsL8rO65+DeveNNNVRk=) 6: AS58466.roa (hash: onBVv54zU+fifJMqJLlLT5PjMTHT1naY/xWE99SHHKs=) 7: AS135391.roa (hash: OwlCXhq3ct5HY0L/JGkpNJUvk5HjfYzH4Zcih23X4Jo=) 8: AS38370.roa (hash: r67f/FHpksh2pXDDienni8fvzhcRro11FYuwh2hDxos=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f0:e7:6e:b6:ea:5c:50:ad:91:87:1c:a8:a9:59:82:5e:27:04:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Validity Not Before: Oct 10 20:39:56 2026 GMT Not After : Oct 13 23:20:56 2026 GMT Subject: CN=3FD3C0C6BEC4156039A4C83C9375AAAF5DFF9D40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c3:67:7f:60:57:e9:6f:3f:41:91:d9:05:42: 66:ee:31:34:bd:9b:08:d2:de:fe:27:7d:de:7f:02: 7d:44:bc:fb:77:01:e1:54:7e:0b:25:5a:bb:ce:5e: 34:04:92:d2:42:4f:dd:83:66:07:21:9b:c8:f6:1c: 9e:e0:3e:1a:8c:20:38:40:97:59:de:77:7b:4b:a2: e1:9b:a3:0a:16:77:d4:f2:f7:d7:49:bb:1a:d0:58: d1:3f:c5:22:8e:c8:cc:51:9f:dd:30:85:64:aa:1f: f7:01:55:33:c5:9f:0f:51:32:8b:ea:c4:62:03:b5: ac:40:ce:02:dd:5d:02:76:5b:2a:03:ed:06:ad:ad: 39:e4:89:ab:6b:15:07:4f:98:02:f8:c8:b0:39:94: 21:14:6c:6a:6d:57:dc:27:19:da:11:3d:fb:c5:c4: 93:9d:96:ef:c3:cb:34:e5:fd:f4:4a:8b:7f:19:f7: 57:05:18:8a:fd:5c:76:3c:63:96:2d:b4:99:f9:87: a5:a3:d8:02:18:d9:ba:1a:50:91:8d:0f:da:6b:1b: d2:5b:dc:64:c6:e4:5f:6a:66:99:ab:4a:b2:21:ca: 23:cf:24:5f:a2:50:76:e8:ab:e0:b3:98:24:01:8d: 64:a7:9f:d5:9f:47:8d:fa:f1:1e:94:13:b1:37:6d: f4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D3:C0:C6:BE:C4:15:60:39:A4:C8:3C:93:75:AA:AF:5D:FF:9D:40 X509v3 Authority Key Identifier: keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:65:4a:54:45:2e:19:27:bb:72:ea:3d:66:c0:34:b6:65:24: 3d:0c:c1:94:54:10:df:a4:5c:ee:88:4a:f2:36:87:17:0d:f9: ef:13:ec:8c:55:b6:83:2b:0d:7e:a6:a2:79:11:41:11:21:37: de:66:eb:2a:db:b6:65:c3:57:b1:ea:d3:55:5f:fe:f6:28:1f: d0:07:ce:77:42:ee:7d:a6:c1:3d:0d:68:e5:65:cf:21:bf:f2: 2e:33:bf:d9:e3:4e:4f:8d:31:31:82:4b:7e:21:3a:85:3f:d8: 32:ba:2e:81:0a:1a:15:27:9d:6c:a5:7e:4f:f5:94:10:e1:b1: c1:d5:a1:15:6a:03:ab:08:ed:68:27:8c:e6:f4:e8:bb:e3:2a: 0c:5c:34:03:12:a1:c7:ac:dd:e7:36:d1:8b:0c:a0:c4:c0:b9: c0:e7:2e:2f:a2:65:b2:0a:0c:6b:ea:a9:b3:49:55:63:b6:6e: f6:1d:3a:96:40:f2:6c:11:76:9d:c2:45:c4:40:d1:14:f3:6e: 8d:d4:1b:d7:bc:02:f7:c4:17:bc:bf:e8:3e:eb:c9:d8:05:7e: 86:59:05:ef:0a:bd:f9:d2:fb:db:ea:8c:65:71:cf:0f:01:c0: 8f:a1:c2:a4:51:1a:9b:50:7f:45:7d:f9:4b:63:50:0f:a4:f3: 7e:62:88:fb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZfDnbrbqXFCtkYccqKlZgl4nBPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD MUE4NjlFNjAeFw0yNjEwMTAyMDM5NTZaFw0yNjEwMTMyMzIwNTZaMDMxMTAvBgNV BAMTKDNGRDNDMEM2QkVDNDE1NjAzOUE0QzgzQzkzNzVBQUFGNURGRjlENDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnw2d/YFfpbz9BkdkFQmbuMTS9 mwjS3v4nfd5/An1EvPt3AeFUfgslWrvOXjQEktJCT92DZgchm8j2HJ7gPhqMIDhA l1ned3tLouGbowoWd9Ty99dJuxrQWNE/xSKOyMxRn90whWSqH/cBVTPFnw9RMovq xGIDtaxAzgLdXQJ2WyoD7QatrTnkiatrFQdPmAL4yLA5lCEUbGptV9wnGdoRPfvF xJOdlu/DyzTl/fRKi38Z91cFGIr9XHY8Y5YttJn5h6Wj2AIY2boaUJGND9prG9Jb 3GTG5F9qZpmrSrIhyiPPJF+iUHboq+CzmCQBjWSnn9WfR4368R6UE7E3bfRZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUP9PAxr7EFWA5pMg8k3Wqr13/nUAwHwYDVR0j BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0 MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNzUzMzA3NzczNTAxNDYvMC9FM0UwQzc3NEUzQjJC QzU4NzkwRTc0OTk4MzdBNDE1NUMxQTg2OUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGVKVEUuGSe7 cuo9ZsA0tmUkPQzBlFQQ36Rc7ohK8jaHFw357xPsjFW2gysNfqaieRFBESE33mbr Ktu2ZcNXserTVV/+9igf0AfOd0LufabBPQ1o5WXPIb/yLjO/2eNOT40xMYJLfiE6 hT/YMrougQoaFSedbKV+T/WUEOGxwdWhFWoDqwjtaCeM5vTou+MqDFw0AxKhx6zd 5zbRiwygxMC5wOcuL6JlsgoMa+qps0lVY7Zu9h06lkDybBF2ncJFxEDRFPNujdQb 17wC98QXvL/oPuvJ2AV+hlkF7wq9+dL72+qMZXHPDwHAj6HCpFEam1B/RX35S2NQ D6TzfmKI+w== -----END CERTIFICATE-----Generated at Sun Oct 11 08:44:37 2026 by rpki-client