$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft File: CF709CC85A3788918F778EC5F4257016F4294457.mft (raw, json) Hash identifier: 3Q80DeEUpLbVawV4cA8BzrkzvJPFYlIwdC3G5trEtZE= Subject key identifier: 97:FC:1C:3D:1B:5E:72:93:E5:47:77:47:5B:2B:41:96:B9:CC:9D:18 Authority key identifier: CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 Certificate issuer: /CN=CF709CC85A3788918F778EC5F4257016F4294457 Certificate serial: 2607225C3306FAAD11858C76CCD5797A6FF37B9C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft Manifest number: A5 Signing time: Thu 24 Sep 2026 00:25:45 +0000 Manifest this update: Thu 24 Sep 2026 00:20:45 +0000 Manifest next update: Sun 27 Sep 2026 07:35:45 +0000 Files and hashes: 1: CF709CC85A3788918F778EC5F4257016F4294457.crl (hash: gLOUkGx8uOI99+kSoaJ1EPXHm2btq0AXwQTgYjzNV64=) 2: 34332e3234322e3135362e302f32322d3232203d3e2034383337.roa (hash: DXIJ4z4EqslXGtRbFgprkrYQTOPQJTbi60YLp+rEd2s=) 3: 3130332e33382e34302e302f32322d3232203d3e2034383337.roa (hash: 4GHv8joM/5RN0bEMErPJBuhi5iOtTFOrvEdUPol9R3o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 07:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:07:22:5c:33:06:fa:ad:11:85:8c:76:cc:d5:79:7a:6f:f3:7b:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF709CC85A3788918F778EC5F4257016F4294457 Validity Not Before: Sep 24 00:20:45 2026 GMT Not After : Sep 27 07:35:45 2026 GMT Subject: CN=97FC1C3D1B5E7293E54777475B2B4196B9CC9D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4b:66:f0:57:f8:3e:87:26:5a:04:af:c3:d4: bd:08:7c:19:5f:8d:05:e4:b1:05:66:a4:3b:a5:63: 00:7a:2c:e4:7d:82:82:85:47:1f:44:e4:31:69:50: f1:a4:8a:85:3b:93:ef:8c:44:cf:0d:cf:de:2a:f4: f9:57:4e:e6:cc:04:a7:53:00:28:f3:fa:59:86:78: 2a:e5:cd:c6:77:a3:48:a4:b9:e6:c3:01:d7:a0:cc: 93:f8:de:2d:01:0d:0d:5d:97:b1:6e:d4:0d:fd:9b: d6:2a:a0:e2:d3:f3:46:e3:98:0b:8e:bb:c2:ee:33: bc:c0:5e:05:85:8a:b5:99:95:d9:4e:17:53:16:a9: 0a:71:f3:c5:77:e3:17:14:48:8f:40:71:ff:7d:46: 9c:03:7f:1a:a8:5c:c0:f6:90:fe:a6:22:1b:c2:ef: c3:2e:58:ce:82:ae:ac:d7:54:6a:cc:e8:cb:cf:e0: 3a:62:23:fd:2c:e1:9b:34:4f:72:b2:24:fa:04:91: a3:7e:6c:6e:72:55:ef:3e:be:d8:b0:34:96:58:5f: db:5f:97:b3:6b:8e:17:89:4f:89:aa:6d:c3:6b:57: b8:3e:ed:fb:7a:a2:52:aa:43:3f:b0:ce:41:bf:c7: 89:67:a0:bd:a3:37:ed:75:89:ca:be:6b:a1:fd:25: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FC:1C:3D:1B:5E:72:93:E5:47:77:47:5B:2B:41:96:B9:CC:9D:18 X509v3 Authority Key Identifier: keyid:CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:18:9b:fd:2e:d4:83:64:2f:9a:0d:c4:ed:a5:a6:fc:3c:ef: e7:5c:0e:3e:c6:92:a4:80:ba:dd:e6:69:ad:c2:a9:bf:10:ac: 5d:63:0d:e7:ee:b5:a0:ad:c8:91:63:02:0f:9e:c8:51:47:3a: 76:7d:d6:08:8d:c9:a5:ab:6d:28:2c:56:f9:2a:c0:0d:f7:79: 75:ed:69:03:17:cc:fb:52:b3:d5:33:db:88:97:46:da:71:8b: ca:7b:16:a0:1d:89:a5:41:1c:f7:b1:c8:46:2c:28:e4:9a:ed: 08:06:5a:11:ef:6a:67:94:7c:c8:0f:8c:fc:c8:67:a0:a1:76: 29:f2:0e:7a:ae:f4:3f:b1:34:89:25:ec:4c:d9:17:b1:ba:93: 09:f2:bb:90:f5:fb:34:2e:de:6e:5b:e0:68:24:b8:61:93:7a: 52:f7:13:e8:5f:66:6d:8e:bb:c0:2e:1d:ef:5e:2b:76:12:7b: 30:f2:e3:00:40:bb:23:73:61:6a:e9:14:61:ba:5c:2a:aa:34: 57:41:71:9e:04:94:ea:05:38:35:87:85:2e:36:dc:43:57:8f: ec:f3:ac:f1:06:3d:cd:d5:94:77:7b:df:82:d0:69:23:1e:9f: b9:75:30:dc:67:d0:aa:f9:57:84:70:ac:f3:84:2b:07:f1:c8: 4e:2e:9b:42 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJgciXDMG+q0RhYx2zNV5em/ze5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZG NDI5NDQ1NzAeFw0yNjA5MjQwMDIwNDVaFw0yNjA5MjcwNzM1NDVaMDMxMTAvBgNV BAMTKDk3RkMxQzNEMUI1RTcyOTNFNTQ3Nzc0NzVCMkI0MTk2QjlDQzlEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkS2bwV/g+hyZaBK/D1L0IfBlf jQXksQVmpDulYwB6LOR9goKFRx9E5DFpUPGkioU7k++MRM8Nz94q9PlXTubMBKdT ACjz+lmGeCrlzcZ3o0ikuebDAdegzJP43i0BDQ1dl7Fu1A39m9YqoOLT80bjmAuO u8LuM7zAXgWFirWZldlOF1MWqQpx88V34xcUSI9Acf99RpwDfxqoXMD2kP6mIhvC 78MuWM6CrqzXVGrM6MvP4DpiI/0s4Zs0T3KyJPoEkaN+bG5yVe8+vtiwNJZYX9tf l7NrjheJT4mqbcNrV7g+7ft6olKqQz+wzkG/x4lnoL2jN+11icq+a6H9JX4HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUl/wcPRtecpPlR3dHWytBlrnMnRgwHwYDVR0j BBgwFoAUz3CcyFo3iJGPd47F9CVwFvQpRFcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTAxNzA4Mzg2OTAwMzc4My8wL0NGNzA5Q0M4NUEzNzg4OTE4Rjc3OEVDNUY0MjU3 MDE2RjQyOTQ0NTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZGNDI5NDQ1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwMTcwODM4NjkwMDM3ODMvMC9DRjcwOUNDODVBMzc4 ODkxOEY3NzhFQzVGNDI1NzAxNkY0Mjk0NDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBib/S7Ug2Qv mg3E7aWm/Dzv51wOPsaSpIC63eZprcKpvxCsXWMN5+61oK3IkWMCD57IUUc6dn3W CI3JpattKCxW+SrADfd5de1pAxfM+1Kz1TPbiJdG2nGLynsWoB2JpUEc97HIRiwo 5JrtCAZaEe9qZ5R8yA+M/MhnoKF2KfIOeq70P7E0iSXsTNkXsbqTCfK7kPX7NC7e blvgaCS4YZN6UvcT6F9mbY67wC4d714rdhJ7MPLjAEC7I3NhaukUYbpcKqo0V0Fx ngSU6gU4NYeFLjbcQ1eP7POs8QY9zdWUd3vfgtBpIx6fuXUw3GfQqvlXhHCs84Qr B/HITi6bQg== -----END CERTIFICATE-----Generated at Fri Sep 25 20:06:35 2026 by rpki-client