$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft File: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft (raw, json) Hash identifier: +o8H6Ft8wYk/HXcVLcmZFxnL0fwm8yw9BgevR/yPMCY= Subject key identifier: DB:E9:13:85:C2:5D:F4:BA:71:9D:71:72:E5:31:0D:89:BF:54:EB:C5 Authority key identifier: 7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08 Certificate issuer: /CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608 Certificate serial: 31AF4D623BB6A7063627D638424BF5E81D8767EA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft Manifest number: CD Signing time: Wed 07 Oct 2026 03:50:39 +0000 Manifest this update: Wed 07 Oct 2026 03:45:39 +0000 Manifest next update: Sat 10 Oct 2026 05:53:39 +0000 Files and hashes: 1: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl (hash: UyA3aaUKWtIXspTSpQWDqog615hMPi3EvIujh7q8BRA=) 2: 3130332e33362e3230342e302f32322d3232203d3e203233363530.roa (hash: Nz+r/dZKAwE/9JB0MxhKtZjDSMYb6nHSikzBbLCS+DM=) 3: 3130332e33362e3139322e302f32322d3232203d3e203233363530.roa (hash: M765CopqZf6j7SPn53UaW0BZUmGFf3AOcTsTTNyVaoA=) 4: 3130332e33362e3139362e302f32322d3232203d3e203233363530.roa (hash: IZ4XVYgqKmGtS8wgseXWsX65eKc4WUGyUyoHldRsixk=) 5: 3130332e33362e3230302e302f32322d3232203d3e203233363530.roa (hash: 8dDfwQ79qdpVpYeaUnX/qx0QM5Ju+lrPZd8Vtd9vWpk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 05:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:af:4d:62:3b:b6:a7:06:36:27:d6:38:42:4b:f5:e8:1d:87:67:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608 Validity Not Before: Oct 7 03:45:39 2026 GMT Not After : Oct 10 05:53:39 2026 GMT Subject: CN=DBE91385C25DF4BA719D7172E5310D89BF54EBC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:7f:80:70:b9:f6:c8:bf:e0:94:3f:46:07: 5c:74:76:19:01:95:84:84:3a:41:2d:e1:07:3b:e0: f7:dd:0b:9a:11:26:ae:7e:75:3f:67:c3:41:54:52: 38:06:77:7a:00:8d:36:60:0d:50:14:ff:c7:38:99: e4:19:76:a7:22:62:e7:c8:e6:57:f8:ca:1a:57:8c: a8:68:22:dd:d2:be:6a:2f:8d:64:8f:2f:c1:7f:92: 89:f9:1d:5c:45:9c:3e:5b:5b:e5:0d:83:19:11:aa: 6d:d7:ac:43:ad:db:18:00:6a:17:d6:86:d9:d5:4b: 81:82:08:62:7d:4f:34:c7:66:a2:91:48:67:c1:e5: 66:22:6d:80:1f:a2:8f:5f:21:46:cd:6e:29:da:ca: 2d:d7:d6:44:0a:3d:6b:8f:b6:65:21:f9:2b:ee:4a: 64:aa:54:6d:70:48:4d:54:c1:2e:04:04:d6:f5:da: b8:8d:66:25:fc:5f:2b:5f:b4:56:68:c3:91:fd:f2: 2a:d7:4c:5b:6b:8a:ba:73:dd:78:d1:66:71:7e:52: 65:f5:4d:6d:ad:c6:bd:f8:2b:d8:09:b2:2c:dc:56: b4:fe:b0:6e:14:73:b0:06:75:60:6d:67:ac:a1:f5: d9:b7:8b:a6:ad:10:d4:7d:b0:6c:8d:eb:df:5b:d6: c8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E9:13:85:C2:5D:F4:BA:71:9D:71:72:E5:31:0D:89:BF:54:EB:C5 X509v3 Authority Key Identifier: keyid:7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:fa:f0:46:ca:7f:9b:76:d8:c8:02:f8:f1:68:17:28:53:2e: 52:5f:ee:c2:09:a7:de:3b:26:90:4f:31:37:9c:03:f2:cc:c8: 16:27:71:f4:03:75:81:71:1a:79:56:b9:e1:0a:fa:83:06:f2: 1f:8e:66:a0:43:de:4f:83:44:e8:fe:05:5a:b2:2d:5f:50:da: 1e:7a:df:31:e8:70:b9:7e:46:32:8b:22:e2:d9:6b:dd:03:3c: 2a:a7:7c:7b:82:98:01:b8:30:d4:9e:40:50:b9:16:44:63:7c: 79:b2:58:b5:6d:0a:c1:42:8d:03:f0:90:09:ec:8d:6a:8a:6a: 4e:9f:ab:c0:2a:26:b0:d6:e8:e4:45:a6:2d:b6:f7:63:71:4a: d4:ff:09:20:d7:b3:6b:3c:17:2c:29:9c:7e:65:e3:98:1b:ad: e1:6f:96:01:b8:46:f9:fb:c7:bb:d7:52:bf:9e:e8:57:71:da: bc:c9:40:82:35:81:d0:bc:5e:8c:fd:f4:53:7e:d0:d9:50:1a: 4e:53:4f:b4:22:5f:a0:95:18:d4:91:03:d4:69:e0:73:44:b5: 26:52:5a:7f:ff:9a:96:60:b0:16:33:ca:dc:b4:8d:85:17:ec: 18:b8:2b:d8:cc:b0:b3:af:11:45:c3:55:43:19:fc:44:37:2a: 82:bf:ed:51 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMa9NYju2pwY2J9Y4Qkv16B2HZ+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4 OUZFNzYwODAeFw0yNjEwMDcwMzQ1MzlaFw0yNjEwMTAwNTUzMzlaMDMxMTAvBgNV BAMTKERCRTkxMzg1QzI1REY0QkE3MTlENzE3MkU1MzEwRDg5QkY1NEVCQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7c3+AcLn2yL/glD9GB1x0dhkB lYSEOkEt4Qc74PfdC5oRJq5+dT9nw0FUUjgGd3oAjTZgDVAU/8c4meQZdqciYufI 5lf4yhpXjKhoIt3SvmovjWSPL8F/kon5HVxFnD5bW+UNgxkRqm3XrEOt2xgAahfW htnVS4GCCGJ9TzTHZqKRSGfB5WYibYAfoo9fIUbNbinayi3X1kQKPWuPtmUh+Svu SmSqVG1wSE1UwS4EBNb12riNZiX8XytftFZow5H98irXTFtrirpz3XjRZnF+UmX1 TW2txr34K9gJsizcVrT+sG4Uc7AGdWBtZ6yh9dm3i6atENR9sGyN699b1si9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2+kThcJd9LpxnXFy5TENib9U68UwHwYDVR0j BBgwFoAUeikWuaL+UH6f+oEYgcK3gYn+dggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMxOTk3OTEwNTY4MTQxMS8wLzdBMjkxNkI5QTJGRTUwN0U5RkZBODExODgxQzJC NzgxODlGRTc2MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4OUZFNzYwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMTk5NzkxMDU2ODE0MTEvMC83QTI5MTZCOUEyRkU1 MDdFOUZGQTgxMTg4MUMyQjc4MTg5RkU3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvrwRsp/m3bY yAL48WgXKFMuUl/uwgmn3jsmkE8xN5wD8szIFidx9AN1gXEaeVa54Qr6gwbyH45m oEPeT4NE6P4FWrItX1DaHnrfMehwuX5GMosi4tlr3QM8Kqd8e4KYAbgw1J5AULkW RGN8ebJYtW0KwUKNA/CQCeyNaopqTp+rwComsNbo5EWmLbb3Y3FK1P8JINezazwX LCmcfmXjmBut4W+WAbhG+fvHu9dSv57oV3HavMlAgjWB0LxejP30U37Q2VAaTlNP tCJfoJUY1JED1Gngc0S1JlJaf/+almCwFjPK3LSNhRfsGLgr2Myws68RRcNVQxn8 RDcqgr/tUQ== -----END CERTIFICATE-----Generated at Thu Oct 8 15:42:46 2026 by rpki-client