$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft File: 7E97B2869243296A265D98767FC04F1998D143DE.mft (raw, json) Hash identifier: LEogBs0phsAWKD1PP5mTd4p001ifvchcmONUkzzB/dE= Subject key identifier: 9A:12:23:7B:E1:4F:01:96:C7:EF:04:3F:31:2F:72:73:63:7B:F7:EE Authority key identifier: 7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE Certificate issuer: /CN=7E97B2869243296A265D98767FC04F1998D143DE Certificate serial: 7099831B29AF49077E90AA843BA15E70668CFA14 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft Manifest number: BE Signing time: Wed 21 Oct 2026 04:07:41 +0000 Manifest this update: Wed 21 Oct 2026 04:02:41 +0000 Manifest next update: Sat 24 Oct 2026 12:59:41 +0000 Files and hashes: 1: 3130332e3233332e3133382e302f32342d3234203d3e203633363937.roa (hash: rm3DnKUZiRzyrB9MIhtg+3yts5DolytZ1bDtJ/yPMew=) 2: 3130332e3233332e3133362e302f32332d3233203d3e203633363936.roa (hash: KQvWBZXWCR3Q1jOkECmr3kjMcu1iG3s8aIgIPbrTDHI=) 3: 7E97B2869243296A265D98767FC04F1998D143DE.crl (hash: WNqFw2uCO9JL72d0sIvH3d8VfER2N2l2rC8MzNGeLb0=) 4: 3130332e3233332e3133382e302f32332d3233203d3e203633363937.roa (hash: uOCqEKaImN5wNlAYjTqBY4smG8MJ0enpKts3XJnKdC4=) 5: 3130332e3233332e3133362e302f32342d3234203d3e203633363936.roa (hash: RfspFMxmIvUaZoDDu4Mh9YLmEtrO/QrKQVLqrxLFw3U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 18:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:99:83:1b:29:af:49:07:7e:90:aa:84:3b:a1:5e:70:66:8c:fa:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E97B2869243296A265D98767FC04F1998D143DE Validity Not Before: Oct 21 04:02:41 2026 GMT Not After : Oct 24 12:59:41 2026 GMT Subject: CN=9A12237BE14F0196C7EF043F312F7273637BF7EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6d:d2:f6:ff:3d:57:52:2e:27:3a:dd:c5:c8: d2:0e:90:cf:42:2e:e2:96:9f:94:7a:31:a0:5b:96: aa:83:46:f9:43:94:de:b2:0c:63:ce:5c:64:bf:fb: 4f:90:1b:f6:70:24:22:fe:e3:16:b5:45:2b:a1:85: 12:51:c6:13:8c:4e:02:f8:5a:31:4d:51:8e:84:de: 69:47:4d:80:f3:f0:21:8b:09:26:a0:1f:32:3e:11: 8f:cc:ac:ca:5a:25:58:f7:b3:5b:8b:17:41:ad:71: 9c:d2:3b:53:13:88:cc:00:fb:31:27:75:6f:6a:5d: 4a:95:d5:bc:42:fe:48:06:c8:25:61:23:0b:2c:2d: ee:c9:73:ce:15:d0:a5:42:08:98:f0:93:6c:ec:5b: db:59:66:f1:5a:e4:02:2f:39:99:2b:80:0b:9b:8d: cb:38:66:61:14:cc:f5:74:b4:9a:5b:2c:b5:f8:9e: 8c:19:11:6b:21:dd:4c:e1:35:80:4c:eb:a2:7d:92: d6:be:8d:6e:17:3e:ae:6c:d5:18:5c:62:78:f6:28: 44:d9:7c:8e:42:ab:04:e2:3b:76:0d:a0:98:2a:36: d7:76:04:1a:72:f3:54:2a:0c:e3:87:b4:58:63:8f: 48:ed:3f:07:53:b4:96:5e:79:fc:b7:1c:d6:8b:17: d4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:12:23:7B:E1:4F:01:96:C7:EF:04:3F:31:2F:72:73:63:7B:F7:EE X509v3 Authority Key Identifier: keyid:7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:27:e3:b0:0e:d2:f9:26:ec:a9:1c:68:61:57:2c:d8:53:b6: dd:8b:07:7d:64:cc:27:ee:85:7a:2c:95:6e:ef:21:50:46:8b: 0c:29:21:48:46:6d:b4:cf:e5:4c:87:8f:ee:ad:7d:92:22:c4: 3f:2b:81:b8:f9:fb:51:58:15:c2:44:3b:86:e4:85:bf:80:60: d1:66:92:ec:c1:e2:b8:a9:38:af:16:ed:c4:17:88:a2:10:e7: 6c:30:28:5b:5f:fd:ae:30:78:e8:70:30:66:b7:65:20:db:0f: 36:b7:f5:82:d4:ca:8e:d6:6c:3d:5b:de:4a:5e:83:2e:7f:d2: c1:ff:51:3f:39:28:26:e1:13:3a:12:fa:9e:ed:d4:b1:09:34: 8a:a7:62:ff:84:25:08:ed:0d:09:f6:7b:69:66:b1:ee:d1:f1: ba:06:75:1b:29:69:da:65:0c:16:fa:88:35:c2:ea:e7:fb:c6: c7:f4:84:00:4e:f7:1f:7c:6b:06:47:e4:39:d4:50:76:49:af: 8a:61:ef:f7:f6:79:f3:21:f3:2d:e5:c3:82:d3:2a:43:34:41: a8:e7:f3:36:0b:21:5e:a9:9b:93:42:c5:20:bb:09:b3:fe:66: 90:5b:4f:32:7d:7b:5e:71:bf:40:82:22:6a:b5:1e:a8:0b:9a: 32:5b:28:6e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcJmDGymvSQd+kKqEO6FecGaM+hQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5 OEQxNDNERTAeFw0yNjEwMjEwNDAyNDFaFw0yNjEwMjQxMjU5NDFaMDMxMTAvBgNV BAMTKDlBMTIyMzdCRTE0RjAxOTZDN0VGMDQzRjMxMkY3MjczNjM3QkY3RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsbdL2/z1XUi4nOt3FyNIOkM9C LuKWn5R6MaBblqqDRvlDlN6yDGPOXGS/+0+QG/ZwJCL+4xa1RSuhhRJRxhOMTgL4 WjFNUY6E3mlHTYDz8CGLCSagHzI+EY/MrMpaJVj3s1uLF0GtcZzSO1MTiMwA+zEn dW9qXUqV1bxC/kgGyCVhIwssLe7Jc84V0KVCCJjwk2zsW9tZZvFa5AIvOZkrgAub jcs4ZmEUzPV0tJpbLLX4nowZEWsh3UzhNYBM66J9kta+jW4XPq5s1RhcYnj2KETZ fI5CqwTiO3YNoJgqNtd2BBpy81QqDOOHtFhjj0jtPwdTtJZeefy3HNaLF9SbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmhIje+FPAZbH7wQ/MS9yc2N79+4wHwYDVR0j BBgwFoAUfpeyhpJDKWomXZh2f8BPGZjRQ94wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTAxMjU4MTgzOTAxMTg0My8wLzdFOTdCMjg2OTI0MzI5NkEyNjVEOTg3NjdGQzA0 RjE5OThEMTQzREUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5OEQxNDNERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEwMTI1ODE4MzkwMTE4NDMvMC83RTk3QjI4NjkyNDMy OTZBMjY1RDk4NzY3RkMwNEYxOTk4RDE0M0RFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyfjsA7S+Sbs qRxoYVcs2FO23YsHfWTMJ+6FeiyVbu8hUEaLDCkhSEZttM/lTIeP7q19kiLEPyuB uPn7UVgVwkQ7huSFv4Bg0WaS7MHiuKk4rxbtxBeIohDnbDAoW1/9rjB46HAwZrdl INsPNrf1gtTKjtZsPVveSl6DLn/Swf9RPzkoJuETOhL6nu3UsQk0iqdi/4QlCO0N CfZ7aWax7tHxugZ1Gylp2mUMFvqINcLq5/vGx/SEAE73H3xrBkfkOdRQdkmvimHv 9/Z58yHzLeXDgtMqQzRBqOfzNgshXqmbk0LFILsJs/5mkFtPMn17XnG/QIIiarUe qAuaMlsobg== -----END CERTIFICATE-----Generated at Wed Oct 21 18:14:44 2026 by rpki-client