$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft File: CFB23E5C25BCDF75B10365741E60EA1870019718.mft (raw, json) Hash identifier: hdIEJv4Oc6ZD/Wi4Ksv4uyKq2xwasuEV4GFwJW/VH6M= Subject key identifier: D2:0B:67:49:34:16:7F:50:F8:E5:9C:52:2C:51:87:93:DA:D9:FE:C8 Authority key identifier: CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 Certificate issuer: /CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Certificate serial: 3252C7327F258C2D4E1D9EC2C25E0D7577ADC945 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft Manifest number: C5 Signing time: Sun 11 Oct 2026 23:06:12 +0000 Manifest this update: Sun 11 Oct 2026 23:01:12 +0000 Manifest next update: Thu 15 Oct 2026 03:56:12 +0000 Files and hashes: 1: 323430363a643263303a3a2f33322d3332203d3e2030.roa (hash: FwOErwlAiR3u/ZG967hSx7vY8EONG5MybUZ/8LS5gRE=) 2: 3135302e3234322e3136302e302f32322d3232203d3e2030.roa (hash: MKeIFb7EqWHM5PapPyd468bY98jUVD1BZFhXNfceQXU=) 3: CFB23E5C25BCDF75B10365741E60EA1870019718.crl (hash: 6UvM4ocAchccGNwPnRpJkSPMAF2NcX6CIQyuKHz0ALM=) 4: 3130332e3135392e3133342e302f32332d3233203d3e2030.roa (hash: NsCWtPvZZPd11fxDgtHFGg5jBBb8km/B001wul3DeR4=) 5: 323430323a313630303a3a2f33322d3332203d3e2030.roa (hash: ihJ1MFpKmDRf0Pi6slt2kz3wUesE+0iWX9y1H+GS2Dg=) 6: 3130332e3233352e3134302e302f32322d3232203d3e2030.roa (hash: KOOIm9R0YCCCAFgvNV64BXvgP060l23D5hOwzFbW7o0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:52:c7:32:7f:25:8c:2d:4e:1d:9e:c2:c2:5e:0d:75:77:ad:c9:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Validity Not Before: Oct 11 23:01:12 2026 GMT Not After : Oct 15 03:56:12 2026 GMT Subject: CN=D20B674934167F50F8E59C522C518793DAD9FEC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:19:2b:44:33:72:cd:23:33:e9:3a:2b:08:36: 23:2d:4a:17:e9:0d:06:7a:7a:61:cd:62:ca:23:36: 8c:76:f6:35:7f:47:49:5d:88:43:1e:b2:0d:09:c8: c7:7d:72:4a:80:a5:2a:6c:b3:81:60:f5:00:43:9e: a6:2b:2c:49:88:71:13:1f:a2:51:4a:d2:3e:21:b0: 2b:f2:af:b0:2c:30:ca:16:2d:79:ad:97:15:33:5d: 03:2b:39:20:a4:dd:0a:54:ce:4e:5f:e3:52:c1:80: 44:29:8b:be:af:5a:ca:b7:42:dc:cb:04:3d:01:50: c9:a0:66:67:b3:69:c7:ba:a2:38:e5:9c:cd:20:5a: df:5d:4d:f8:f1:85:7b:46:89:ee:2c:e5:10:1c:72: 2e:e1:12:07:df:78:67:bb:57:3d:74:20:7e:7b:e4: 20:2b:79:5c:43:9b:bc:a7:c0:6a:d9:a6:ea:6d:d9: 9d:ed:1d:52:07:52:8b:86:3d:49:1d:09:92:cd:2f: f2:94:ff:2b:03:ca:c7:e8:a6:f4:48:52:ea:a0:a7: 29:3f:62:cf:b7:90:37:b0:61:13:72:5c:8f:d7:88: 8b:e1:39:83:35:8c:c0:e2:af:d1:65:e5:0f:6b:3d: 2e:b4:7a:3c:cc:ec:45:b8:7b:1b:f8:55:9b:bd:b6: de:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:0B:67:49:34:16:7F:50:F8:E5:9C:52:2C:51:87:93:DA:D9:FE:C8 X509v3 Authority Key Identifier: keyid:CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:7a:56:df:6e:e7:c4:b9:d1:ea:63:c1:c9:f5:99:2e:74:5e: db:97:b0:dd:0f:f3:7f:a2:9d:1f:64:5c:66:97:d0:a6:5f:57: 7c:c9:8f:99:5b:86:ad:d1:b0:06:e0:b1:2f:3e:b3:4a:00:17: 75:48:cb:92:1e:88:71:e8:99:43:c3:61:eb:9c:7e:13:93:e1: e8:a7:e2:53:76:40:02:10:e4:46:2c:cd:aa:07:31:18:40:51: 04:95:00:b5:f5:03:c2:b6:2b:43:76:0e:7f:a3:87:8b:f6:4d: 1f:1b:d6:11:3f:c0:ce:6e:d0:9a:01:56:d9:9e:29:86:21:17: 8a:ef:77:0c:c6:27:7f:2d:53:f8:2f:0d:f6:d4:10:ac:7e:29: 84:4e:db:9e:9d:fe:20:60:e9:1d:a5:14:66:d2:0f:1a:75:7d: 82:fd:32:67:77:19:d3:db:29:5e:1e:31:15:2c:18:a1:3b:bb: 02:19:d4:44:8a:b1:6b:86:1f:90:1c:94:7e:57:7e:c2:3d:a9: 98:1f:ec:a0:89:b2:72:6b:62:b0:90:4a:ce:a5:f9:d0:2c:00: f7:0a:9c:ba:a8:d1:08:af:42:77:fb:5e:f7:27:ed:f3:e6:02: fa:dc:00:39:54:af:5a:50:fd:f6:0e:5c:c2:b2:43:81:09:7e: 96:21:46:7a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMlLHMn8ljC1OHZ7Cwl4NdXetyUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3 MDAxOTcxODAeFw0yNjEwMTEyMzAxMTJaFw0yNjEwMTUwMzU2MTJaMDMxMTAvBgNV BAMTKEQyMEI2NzQ5MzQxNjdGNTBGOEU1OUM1MjJDNTE4NzkzREFEOUZFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnGStEM3LNIzPpOisINiMtShfp DQZ6emHNYsojNox29jV/R0ldiEMesg0JyMd9ckqApSpss4Fg9QBDnqYrLEmIcRMf olFK0j4hsCvyr7AsMMoWLXmtlxUzXQMrOSCk3QpUzk5f41LBgEQpi76vWsq3QtzL BD0BUMmgZmezace6ojjlnM0gWt9dTfjxhXtGie4s5RAcci7hEgffeGe7Vz10IH57 5CAreVxDm7ynwGrZpupt2Z3tHVIHUouGPUkdCZLNL/KU/ysDysfopvRIUuqgpyk/ Ys+3kDewYRNyXI/XiIvhOYM1jMDir9Fl5Q9rPS60ejzM7EW4exv4VZu9tt7pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0gtnSTQWf1D45ZxSLFGHk9rZ/sgwHwYDVR0j BBgwFoAUz7I+XCW833WxA2V0HmDqGHABlxgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODgzNDgyNDc2NTg5ODc1NC8wL0NGQjIzRTVDMjVCQ0RGNzVCMTAzNjU3NDFFNjBF QTE4NzAwMTk3MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3MDAxOTcxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4MzQ4MjQ3NjU4OTg3NTQvMC9DRkIyM0U1QzI1QkNE Rjc1QjEwMzY1NzQxRTYwRUExODcwMDE5NzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInpW327nxLnR 6mPByfWZLnRe25ew3Q/zf6KdH2RcZpfQpl9XfMmPmVuGrdGwBuCxLz6zSgAXdUjL kh6IceiZQ8Nh65x+E5Ph6KfiU3ZAAhDkRizNqgcxGEBRBJUAtfUDwrYrQ3YOf6OH i/ZNHxvWET/Azm7QmgFW2Z4phiEXiu93DMYnfy1T+C8N9tQQrH4phE7bnp3+IGDp HaUUZtIPGnV9gv0yZ3cZ09spXh4xFSwYoTu7AhnURIqxa4YfkByUfld+wj2pmB/s oImycmtisJBKzqX50CwA9wqcuqjRCK9Cd/te9yft8+YC+twAOVSvWlD99g5cwrJD gQl+liFGeg== -----END CERTIFICATE-----Generated at Wed Oct 14 00:42:19 2026 by rpki-client