$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft File: F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft (raw, json) Hash identifier: 7WKvM2cObtpLcWameOwWt/oZw/bY0vUbpkjejDQQ7wY= Subject key identifier: 91:D7:4A:08:C0:7B:DA:FF:A7:2E:37:4B:DE:4D:67:D4:C5:A2:A0:0C Authority key identifier: F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 Certificate issuer: /CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Certificate serial: 7C8449AD145BFAE6CA08C78959184A51264B05FB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft Manifest number: C1 Signing time: Tue 13 Oct 2026 01:02:35 +0000 Manifest this update: Tue 13 Oct 2026 00:57:35 +0000 Manifest next update: Fri 16 Oct 2026 06:52:35 +0000 Files and hashes: 1: 3130332e3134322e3233342e302f32332d3233203d3e2034383038.roa (hash: bK38O+wDDBO753c5azCJn5pqUThQEDZ04zoRei8ZckI=) 2: 3130332e39302e3137362e302f32322d3232203d3e2034383038.roa (hash: rewDp5XA3tfKBFOlfn+0M99oxcphkJa+FJUlVr1EWOI=) 3: F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl (hash: CS+dlcJewKSIOEF/QIiZPWoCM8F7kiFCIWnn1vcrTDM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:84:49:ad:14:5b:fa:e6:ca:08:c7:89:59:18:4a:51:26:4b:05:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Validity Not Before: Oct 13 00:57:35 2026 GMT Not After : Oct 16 06:52:35 2026 GMT Subject: CN=91D74A08C07BDAFFA72E374BDE4D67D4C5A2A00C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a7:33:d3:8f:7f:e9:01:c8:12:dc:a2:cf:49: 3c:7f:69:7d:5f:ba:1c:4f:4b:96:9d:e2:6c:45:00: 21:d4:1f:7e:cf:32:fd:07:84:42:f4:f8:0b:a1:13: f1:26:46:28:28:47:e3:81:d1:58:7c:42:6a:05:31: ba:1e:94:81:ae:40:a6:fc:7d:5e:4d:d4:a2:02:b2: 96:05:5e:99:fd:97:5d:85:4d:76:29:a7:28:5e:0f: e5:d8:a8:ac:72:63:55:33:92:b1:bb:51:e6:94:b1: c6:c8:3f:28:c5:3d:94:df:cd:20:17:b5:9d:9e:e7: d0:4a:ae:c3:af:7a:7d:b6:da:5d:5e:bd:01:54:d0: 52:a4:62:a9:14:5a:a4:4d:a0:d9:ae:c8:7f:a9:26: 24:f5:49:27:cd:fd:d1:24:14:0d:84:b7:11:42:51: 2b:14:13:a5:65:e4:1c:b8:c1:57:19:56:2e:77:ce: 08:50:18:a6:7c:c4:c8:44:8e:0e:60:d0:81:71:75: 99:fc:f3:1c:f3:87:02:e4:86:f3:24:39:29:92:24: c5:10:b3:c1:6c:66:87:36:61:08:68:42:15:d5:6e: 15:5c:5c:cd:96:b3:62:5b:d4:60:af:a8:be:66:b5: 64:1d:2f:2c:93:c5:3c:4b:f0:e6:05:18:67:d0:3a: 2c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D7:4A:08:C0:7B:DA:FF:A7:2E:37:4B:DE:4D:67:D4:C5:A2:A0:0C X509v3 Authority Key Identifier: keyid:F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:1a:b3:4d:81:f3:88:45:a9:63:ae:83:2e:0f:41:e3:26:0c: e3:4f:8d:0a:48:49:a9:f8:d8:c4:66:93:6c:87:76:a6:0d:8d: 0a:c6:b0:e4:9c:31:87:42:9a:ba:8e:4e:aa:81:0c:4d:f5:7f: 8c:62:69:0f:ea:41:02:bd:ad:e1:ec:fb:26:e1:4f:17:e2:ab: 5b:7c:e4:a8:a6:81:2c:64:a1:39:42:a0:32:5f:57:9d:1f:c6: 1e:1b:84:f0:85:34:7d:81:dd:f8:54:02:fd:e2:8f:45:70:a7: d9:db:8a:4b:73:bf:88:f1:70:86:61:bb:6c:1c:a9:41:20:52: c4:68:e0:f3:03:b9:cf:43:91:7b:07:f9:b8:c7:81:77:81:a3: c5:c0:39:2e:b7:b7:cf:f1:77:5f:cc:e2:29:7b:5e:ac:ea:2b: 85:86:86:3f:25:7d:14:28:2e:01:cd:af:db:1f:de:7d:61:5b: d3:27:61:1e:d2:25:e5:6b:dc:93:34:ce:86:ca:c7:e9:62:e1: a8:7a:d1:36:1d:ca:0d:c7:43:d3:be:b2:0f:45:03:81:13:bb: b4:fe:36:86:8d:b8:a6:40:77:5d:75:65:b5:9b:94:c5:50:9a: 12:31:93:84:21:b2:2a:02:06:0d:cc:64:ed:fa:1d:52:d4:49: 18:56:f0:7d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfIRJrRRb+ubKCMeJWRhKUSZLBfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5 QTJCRDY0NTAeFw0yNjEwMTMwMDU3MzVaFw0yNjEwMTYwNjUyMzVaMDMxMTAvBgNV BAMTKDkxRDc0QTA4QzA3QkRBRkZBNzJFMzc0QkRFNEQ2N0Q0QzVBMkEwMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnpzPTj3/pAcgS3KLPSTx/aX1f uhxPS5ad4mxFACHUH37PMv0HhEL0+AuhE/EmRigoR+OB0Vh8QmoFMboelIGuQKb8 fV5N1KICspYFXpn9l12FTXYppyheD+XYqKxyY1UzkrG7UeaUscbIPyjFPZTfzSAX tZ2e59BKrsOven222l1evQFU0FKkYqkUWqRNoNmuyH+pJiT1SSfN/dEkFA2EtxFC USsUE6Vl5By4wVcZVi53zghQGKZ8xMhEjg5g0IFxdZn88xzzhwLkhvMkOSmSJMUQ s8FsZoc2YQhoQhXVbhVcXM2Ws2Jb1GCvqL5mtWQdLyyTxTxL8OYFGGfQOiyFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkddKCMB72v+nLjdL3k1n1MWioAwwHwYDVR0j BBgwFoAU8kZU+cQgU/LZRb+HLA+q2por1kUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTk5NDY2MzE2MDM4MTQ0MS8wL0YyNDY1NEY5QzQyMDUzRjJEOTQ1QkY4NzJDMEZB QURBOUEyQkQ2NDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5QTJCRDY0NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5OTQ2NjMxNjAzODE0NDEvMC9GMjQ2NTRGOUM0MjA1 M0YyRDk0NUJGODcyQzBGQUFEQTlBMkJENjQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghqzTYHziEWp Y66DLg9B4yYM40+NCkhJqfjYxGaTbId2pg2NCsaw5Jwxh0Kauo5OqoEMTfV/jGJp D+pBAr2t4ez7JuFPF+KrW3zkqKaBLGShOUKgMl9XnR/GHhuE8IU0fYHd+FQC/eKP RXCn2duKS3O/iPFwhmG7bBypQSBSxGjg8wO5z0ORewf5uMeBd4GjxcA5Lre3z/F3 X8ziKXterOorhYaGPyV9FCguAc2v2x/efWFb0ydhHtIl5WvckzTOhsrH6WLhqHrR Nh3KDcdD076yD0UDgRO7tP42ho24pkB3XXVltZuUxVCaEjGThCGyKgIGDcxk7fod UtRJGFbwfQ== -----END CERTIFICATE-----Generated at Tue Oct 13 23:37:10 2026 by rpki-client