$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft File: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft (raw, json) Hash identifier: bCcTZ3ocKfM5pl0EDTs3TvvWYY61/fi9ErwiwkBK3f0= Subject key identifier: 12:33:E3:CC:FC:5F:90:66:D5:3E:05:ED:1E:91:77:EA:BA:8D:DE:E9 Authority key identifier: 28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E Certificate issuer: /CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Certificate serial: 3636D5C88BF0DCA1FA0EF6E1EF49540A592A4868 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft Manifest number: C7 Signing time: Wed 07 Oct 2026 23:42:01 +0000 Manifest this update: Wed 07 Oct 2026 23:37:01 +0000 Manifest next update: Sun 11 Oct 2026 08:02:01 +0000 Files and hashes: 1: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl (hash: i904piXFW4gxWkJLOCwcZhU8DyjsyLiqebOoUFSqTXM=) 2: 3230322e3133362e37322e302f32332d3233203d3e2034383437.roa (hash: 0UAAnHGmhpgwD4Y3MO/hfVMnkyeKLb0Kzm5dHFM3DRY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 08:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:36:d5:c8:8b:f0:dc:a1:fa:0e:f6:e1:ef:49:54:0a:59:2a:48:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Validity Not Before: Oct 7 23:37:01 2026 GMT Not After : Oct 11 08:02:01 2026 GMT Subject: CN=1233E3CCFC5F9066D53E05ED1E9177EABA8DDEE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8b:15:a2:d4:7d:52:da:43:9f:b8:1b:f4:de: 7a:91:ba:66:99:9b:23:68:2e:89:78:0f:c9:04:12: 14:cf:b0:c3:77:62:75:56:7d:9f:7c:24:7f:b9:74: d8:2e:51:19:f9:9a:2a:c3:be:a8:32:7c:f6:19:b6: 92:ff:24:a0:44:53:8e:6c:df:52:9f:61:ff:a0:5a: f4:47:7f:d9:87:3a:75:30:9b:99:78:d3:5a:41:a2: 36:06:73:84:85:67:64:b9:1b:fa:7a:9b:b2:a2:64: b7:6d:fd:30:fb:a7:7b:b3:1e:18:fd:01:e8:00:b7: 13:a5:ee:d2:69:a8:62:84:c3:27:98:b5:3e:89:23: 15:a1:4f:cc:94:0d:e6:d7:5d:9a:66:a8:bb:d7:b2: ee:28:b9:01:a6:4f:36:a1:38:b2:06:4b:1e:27:0a: 1d:38:4f:97:d7:19:58:6f:15:d6:7e:1a:16:e4:8d: ae:79:70:ef:c3:07:b0:e0:26:6b:89:37:df:f3:1d: 62:a3:bf:5f:b9:dc:74:41:87:e8:03:86:b5:c3:2a: 53:af:fb:b5:9c:0d:23:1c:0b:6c:21:15:2d:84:d0: e7:c6:85:70:df:19:83:49:bc:05:ce:69:56:46:51: 3e:27:8d:09:19:24:da:6a:e4:a0:21:bb:c5:ea:2f: 99:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:33:E3:CC:FC:5F:90:66:D5:3E:05:ED:1E:91:77:EA:BA:8D:DE:E9 X509v3 Authority Key Identifier: keyid:28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:25:f7:e3:7e:86:c8:02:5c:4b:dc:64:3f:25:f5:cb:61:04: 1a:5f:8b:60:64:9f:2a:8b:90:77:2e:40:f2:c5:12:b3:0a:ac: 03:c4:d7:3e:0d:0a:8e:29:62:05:5a:7f:af:06:a9:c3:d9:87: 37:63:15:19:53:ed:67:2e:e1:a0:b7:88:a2:51:2b:3a:89:d1: cf:f8:ba:0c:2f:37:d4:5c:1b:06:e9:0d:c4:4d:72:73:c4:a2: a8:4d:d9:71:14:67:cd:61:82:bd:7b:99:33:cf:16:f5:d2:1f: 32:6f:e0:33:9f:34:f4:c2:31:b1:72:fe:69:f3:5f:22:c9:fb: 4c:8b:1e:09:82:fa:6d:7d:ef:b0:5e:5e:6f:dd:80:bc:7b:02: 52:be:02:dd:95:b2:20:0b:13:35:99:1a:11:ad:68:25:ee:e4: d8:ff:dd:3a:fe:f5:98:30:f3:c3:37:0b:d5:c5:05:5f:04:84: f1:7f:d9:dd:62:26:2e:0a:d5:69:da:e7:ba:8b:9f:89:a0:5f: fb:36:93:ca:a4:fc:66:26:0d:6d:8b:dd:25:76:f0:51:bb:27: 2f:58:2f:6f:79:40:ee:90:11:b3:29:5f:04:73:0b:6c:e7:58: 71:b0:3b:6b:ad:87:4e:e7:05:07:01:99:76:9a:4f:12:1f:43: 2c:2b:ca:de -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNjbVyIvw3KH6Dvbh70lUClkqSGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2 Q0I2MEQ2RTAeFw0yNjEwMDcyMzM3MDFaFw0yNjEwMTEwODAyMDFaMDMxMTAvBgNV BAMTKDEyMzNFM0NDRkM1RjkwNjZENTNFMDVFRDFFOTE3N0VBQkE4RERFRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqixWi1H1S2kOfuBv03nqRumaZ myNoLol4D8kEEhTPsMN3YnVWfZ98JH+5dNguURn5mirDvqgyfPYZtpL/JKBEU45s 31KfYf+gWvRHf9mHOnUwm5l401pBojYGc4SFZ2S5G/p6m7KiZLdt/TD7p3uzHhj9 AegAtxOl7tJpqGKEwyeYtT6JIxWhT8yUDebXXZpmqLvXsu4ouQGmTzahOLIGSx4n Ch04T5fXGVhvFdZ+Ghbkja55cO/DB7DgJmuJN9/zHWKjv1+53HRBh+gDhrXDKlOv +7WcDSMcC2whFS2E0OfGhXDfGYNJvAXOaVZGUT4njQkZJNpq5KAhu8XqL5nxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEjPjzPxfkGbVPgXtHpF36rqN3ukwHwYDVR0j BBgwFoAUKJJR8Nyj/2rOEB5GnMtMkGy2DW4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMyODkxNzc4MzUxMTA0Mi8wLzI4OTI1MUYwRENBM0ZGNkFDRTEwMUU0NjlDQ0I0 QzkwNkNCNjBENkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2Q0I2MEQ2RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMjg5MTc3ODM1MTEwNDIvMC8yODkyNTFGMERDQTNG RjZBQ0UxMDFFNDY5Q0NCNEM5MDZDQjYwRDZFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiX3436GyAJc S9xkPyX1y2EEGl+LYGSfKouQdy5A8sUSswqsA8TXPg0KjiliBVp/rwapw9mHN2MV GVPtZy7hoLeIolErOonRz/i6DC831FwbBukNxE1yc8SiqE3ZcRRnzWGCvXuZM88W 9dIfMm/gM5809MIxsXL+afNfIsn7TIseCYL6bX3vsF5eb92AvHsCUr4C3ZWyIAsT NZkaEa1oJe7k2P/dOv71mDDzwzcL1cUFXwSE8X/Z3WImLgrVadrnuoufiaBf+zaT yqT8ZiYNbYvdJXbwUbsnL1gvb3lA7pARsylfBHMLbOdYcbA7a62HTucFBwGZdppP Eh9DLCvK3g== -----END CERTIFICATE-----Generated at Sat Oct 10 01:08:31 2026 by rpki-client