$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft File: F0F3E3439565B918CE50D05087491A23A7E8FF40.mft (raw, json) Hash identifier: 0ePLXRRxL9o9BdO8RN15T96FLklFwlwq7IiE74iaTSc= Subject key identifier: 94:F6:ED:7B:BB:01:43:12:05:29:CF:BE:EB:A8:F1:A2:DA:30:6D:43 Authority key identifier: F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 Certificate issuer: /CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Certificate serial: 4B77C9550B72EB7EAADEF45B67D4C5C05536E66D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft Manifest number: D0 Signing time: Mon 12 Oct 2026 03:11:23 +0000 Manifest this update: Mon 12 Oct 2026 03:06:23 +0000 Manifest next update: Thu 15 Oct 2026 04:33:23 +0000 Files and hashes: 1: 3230332e3131382e3234382e302f32322d3232203d3e203435303731.roa (hash: nsVtxkR/+GBz1gKXYRUuPMhNEkH95+hyumzsZS9hdyc=) 2: F0F3E3439565B918CE50D05087491A23A7E8FF40.crl (hash: b3ACdBvKUamA6JE9lL557cxllvhh9Mx41lYrUdhI5ls=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:77:c9:55:0b:72:eb:7e:aa:de:f4:5b:67:d4:c5:c0:55:36:e6:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Validity Not Before: Oct 12 03:06:23 2026 GMT Not After : Oct 15 04:33:23 2026 GMT Subject: CN=94F6ED7BBB0143120529CFBEEBA8F1A2DA306D43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:31:88:f8:ac:24:25:4f:aa:39:3c:6a:6d:df: b2:70:4f:67:66:da:45:e9:23:0c:56:31:45:99:dd: 4d:bc:c6:ed:b9:b6:4d:fb:fc:5c:4c:f3:8d:d0:df: 85:95:18:9c:9d:ac:d6:52:4a:8a:76:ef:db:a3:ac: 56:3e:16:ec:85:8f:ad:1d:c2:bd:83:29:5b:ae:ab: db:2b:ff:09:09:0f:84:b8:87:ca:c1:a8:99:ec:77: c5:d4:6c:b9:e8:66:e7:bc:b2:d1:4e:97:3a:a1:5e: a2:e8:8f:7b:b9:ab:cc:fc:dd:83:01:8e:c3:1e:b1: 50:f3:17:24:6f:c6:1f:5d:3b:5e:72:0c:5f:34:cb: 56:ef:9b:7c:66:ff:be:f6:8c:0b:c8:e5:25:f9:08: 8f:9e:2b:78:23:0d:5a:d0:d7:59:b7:cd:7b:f0:59: 52:ad:c4:9d:57:5a:2a:09:a4:ef:f8:53:23:87:54: d3:94:58:a9:bd:58:03:7b:7e:11:b2:1b:11:b5:af: dd:7b:60:c0:94:69:79:a2:f3:d5:90:b8:6e:a8:a6: 62:e1:af:b8:5b:2b:29:f8:d9:8c:c1:1b:5b:a9:78: 9f:80:6a:fb:5d:20:51:ea:a3:40:86:fb:3a:7b:65: 01:72:8b:46:4b:4e:95:02:10:2d:f1:c4:e7:b9:d4: 93:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F6:ED:7B:BB:01:43:12:05:29:CF:BE:EB:A8:F1:A2:DA:30:6D:43 X509v3 Authority Key Identifier: keyid:F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:92:e8:f4:0d:0e:f7:80:17:fa:37:8e:de:e5:5b:ea:8c:59: 7a:fb:7c:55:6d:22:c9:09:39:b4:54:f5:d4:58:4b:59:b3:6d: 53:4d:08:6e:a3:d1:d9:cb:c6:ed:d9:d2:26:f3:be:86:49:f3: cc:c3:8a:7c:aa:b0:e6:ee:bb:45:c6:90:95:f4:02:50:f3:33: a0:92:68:5b:48:2f:64:09:8b:89:46:6d:79:39:7f:3a:5b:35: cd:b5:55:e6:bb:b7:62:f6:fb:3a:4b:07:17:46:d7:30:be:cc: 54:83:b7:f1:dc:00:37:b3:9c:5d:b5:8d:7f:3a:8f:4d:e8:02: 0f:6a:e6:e4:d7:44:d5:cc:24:7e:a9:3a:53:bd:9b:a1:1f:00: fb:55:39:4e:e3:59:6d:cd:f2:0c:6d:40:94:e2:c2:8b:e2:12: 8b:19:ef:c1:de:2a:30:24:0a:39:69:89:97:c8:38:f6:61:15: 1b:a2:61:04:2b:d5:f9:46:a8:ad:02:61:f1:21:06:c0:07:c7: e4:59:98:50:ec:2a:e7:cc:47:a7:a9:92:43:56:4b:e3:6f:0a: a2:28:e1:17:34:7d:87:12:e1:f8:a2:45:10:58:b3:7f:b2:b0: 4e:f3:27:95:5f:00:61:21:8b:c6:6a:d9:ee:ea:90:40:79:93: e5:86:b7:1e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS3fJVQty636q3vRbZ9TFwFU25m0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNB N0U4RkY0MDAeFw0yNjEwMTIwMzA2MjNaFw0yNjEwMTUwNDMzMjNaMDMxMTAvBgNV BAMTKDk0RjZFRDdCQkIwMTQzMTIwNTI5Q0ZCRUVCQThGMUEyREEzMDZENDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbMYj4rCQlT6o5PGpt37JwT2dm 2kXpIwxWMUWZ3U28xu25tk37/FxM843Q34WVGJydrNZSSop279ujrFY+FuyFj60d wr2DKVuuq9sr/wkJD4S4h8rBqJnsd8XUbLnoZue8stFOlzqhXqLoj3u5q8z83YMB jsMesVDzFyRvxh9dO15yDF80y1bvm3xm/772jAvI5SX5CI+eK3gjDVrQ11m3zXvw WVKtxJ1XWioJpO/4UyOHVNOUWKm9WAN7fhGyGxG1r917YMCUaXmi89WQuG6opmLh r7hbKyn42YzBG1upeJ+AavtdIFHqo0CG+zp7ZQFyi0ZLTpUCEC3xxOe51JP7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlPbte7sBQxIFKc++66jxotowbUMwHwYDVR0j BBgwFoAU8PPjQ5VluRjOUNBQh0kaI6fo/0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjQ3NzgzOTE3OTc3Ny8wL0YwRjNFMzQzOTU2NUI5MThDRTUwRDA1MDg3NDkx QTIzQTdFOEZGNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNBN0U4RkY0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzY0Nzc4MzkxNzk3NzcvMC9GMEYzRTM0Mzk1NjVC OTE4Q0U1MEQwNTA4NzQ5MUEyM0E3RThGRjQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJLo9A0O94AX +jeO3uVb6oxZevt8VW0iyQk5tFT11FhLWbNtU00IbqPR2cvG7dnSJvO+hknzzMOK fKqw5u67RcaQlfQCUPMzoJJoW0gvZAmLiUZteTl/Ols1zbVV5ru3Yvb7OksHF0bX ML7MVIO38dwAN7OcXbWNfzqPTegCD2rm5NdE1cwkfqk6U72boR8A+1U5TuNZbc3y DG1AlOLCi+ISixnvwd4qMCQKOWmJl8g49mEVG6JhBCvV+UaorQJh8SEGwAfH5FmY UOwq58xHp6mSQ1ZL428KoijhFzR9hxLh+KJFEFizf7KwTvMnlV8AYSGLxmrZ7uqQ QHmT5Ya3Hg== -----END CERTIFICATE-----Generated at Tue Oct 13 18:05:25 2026 by rpki-client