$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft File: 3F0AED0297682970CEA1257B1985DB5901444FE7.mft (raw, json) Hash identifier: RSmrMgXuON+3WZRyh2o0cKQgpkHc9II47C29bVGXM38= Subject key identifier: C8:13:8E:61:7C:75:8E:CB:DE:1F:E2:1D:46:27:F0:C2:35:FB:1D:91 Authority key identifier: 3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7 Certificate issuer: /CN=3F0AED0297682970CEA1257B1985DB5901444FE7 Certificate serial: 737238D833A249B633DA8BCC9B9C0A53C9066987 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft Manifest number: A9 Signing time: Fri 09 Oct 2026 17:28:39 +0000 Manifest this update: Fri 09 Oct 2026 17:23:39 +0000 Manifest next update: Tue 13 Oct 2026 03:38:39 +0000 Files and hashes: 1: 3F0AED0297682970CEA1257B1985DB5901444FE7.crl (hash: T1naav+QxNmbfqrYwW8B0WJSqTPnVCb5+omp1D7+Wf4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 03:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:72:38:d8:33:a2:49:b6:33:da:8b:cc:9b:9c:0a:53:c9:06:69:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F0AED0297682970CEA1257B1985DB5901444FE7 Validity Not Before: Oct 9 17:23:39 2026 GMT Not After : Oct 13 03:38:39 2026 GMT Subject: CN=C8138E617C758ECBDE1FE21D4627F0C235FB1D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0e:81:7c:a0:d3:67:fd:81:06:ed:dd:22:3d: f8:8c:30:bf:ca:81:11:81:c9:01:a9:bf:95:d1:b3: 8d:a4:70:05:c2:2b:1f:94:72:86:a9:bb:97:76:90: e2:cf:ea:ec:21:96:fd:15:91:c4:be:d7:ef:61:ef: a6:56:2f:13:df:bd:4e:93:0a:28:12:f7:90:41:7f: 25:c2:9a:88:de:d5:2f:9c:6e:1e:8c:c8:92:a3:d6: 2c:94:3a:b2:65:44:cb:a0:fc:42:f4:38:e3:e9:37: ae:e2:18:0a:6f:7e:cf:21:e0:81:13:a6:1a:cc:9a: 01:ab:8c:b2:9f:02:a9:2e:ba:9d:b9:cc:00:7e:b2: 1a:9b:d3:8f:45:28:01:9d:27:35:f5:be:50:97:6f: a7:27:4f:c8:16:b6:51:16:44:42:07:0f:8b:21:69: 9a:7c:c4:bb:67:88:8e:2d:67:04:5f:f6:06:14:d1: a8:29:fa:ee:92:38:b8:46:ed:0b:1e:70:a3:10:64: dd:fb:dd:b0:fb:71:1a:77:58:3f:8e:29:40:7d:a2: c3:a9:42:06:60:b5:e0:9f:bb:4b:c2:18:01:21:51: c1:a0:38:53:3d:4e:b5:a9:c6:24:61:31:f4:e4:93: 29:5a:28:6e:d9:58:e1:8f:23:07:30:76:1d:f8:f8: 85:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:13:8E:61:7C:75:8E:CB:DE:1F:E2:1D:46:27:F0:C2:35:FB:1D:91 X509v3 Authority Key Identifier: keyid:3F:0A:ED:02:97:68:29:70:CE:A1:25:7B:19:85:DB:59:01:44:4F:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F0AED0297682970CEA1257B1985DB5901444FE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105420356518150159/0/3F0AED0297682970CEA1257B1985DB5901444FE7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:54:d1:f4:75:54:16:65:63:f6:20:39:a0:23:f7:36:50:33: 98:38:59:4c:95:94:3f:43:0d:79:dd:07:63:66:62:42:9e:45: 74:b6:18:89:38:ae:1d:63:95:e3:0f:87:f1:13:8a:c6:10:b5: da:ea:d3:cb:76:fb:00:af:c3:25:3c:ce:32:21:2e:21:87:be: bb:94:c9:24:93:76:36:0f:73:d1:bc:ad:1e:14:e3:34:85:e5: 72:44:8a:3f:9d:6e:f0:8d:e7:88:92:23:1a:25:9a:a2:59:64: 75:1e:90:b5:0d:83:5a:0c:f9:5c:f5:78:67:40:9f:01:2a:6d: 26:0c:eb:1a:d7:a5:b0:b7:32:34:0d:d8:e9:48:9a:cb:fa:74: 3c:46:c5:b3:55:d3:07:db:73:64:77:74:43:f2:89:63:f5:9c: 08:de:4a:0c:80:eb:e1:4b:86:51:1d:05:d7:59:2e:ee:aa:8d: da:0e:1f:1c:31:c6:6d:bc:c5:37:e6:37:d1:d1:ea:a2:37:16: 42:a2:a2:f6:df:48:c4:e5:4c:6c:fc:8a:90:f5:f5:14:bc:f4: e9:33:96:93:78:03:36:ff:45:4f:1d:b9:f9:d4:c3:88:c6:bf: 4f:32:64:f9:f4:6b:4e:9f:a9:52:ad:0d:a1:f5:c6:c1:43:b1: 8d:54:43:cc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUc3I42DOiSbYz2ovMm5wKU8kGaYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YwQUVEMDI5NzY4Mjk3MENFQTEyNTdCMTk4NURCNTkw MTQ0NEZFNzAeFw0yNjEwMDkxNzIzMzlaFw0yNjEwMTMwMzM4MzlaMDMxMTAvBgNV BAMTKEM4MTM4RTYxN0M3NThFQ0JERTFGRTIxRDQ2MjdGMEMyMzVGQjFEOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DoF8oNNn/YEG7d0iPfiMML/K gRGByQGpv5XRs42kcAXCKx+Ucoapu5d2kOLP6uwhlv0VkcS+1+9h76ZWLxPfvU6T CigS95BBfyXCmoje1S+cbh6MyJKj1iyUOrJlRMug/EL0OOPpN67iGApvfs8h4IET phrMmgGrjLKfAqkuup25zAB+shqb049FKAGdJzX1vlCXb6cnT8gWtlEWREIHD4sh aZp8xLtniI4tZwRf9gYU0agp+u6SOLhG7QsecKMQZN373bD7cRp3WD+OKUB9osOp QgZgteCfu0vCGAEhUcGgOFM9TrWpxiRhMfTkkylaKG7ZWOGPIwcwdh34+IU5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyBOOYXx1jsveH+IdRifwwjX7HZEwHwYDVR0j BBgwFoAUPwrtApdoKXDOoSV7GYXbWQFET+cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTQyMDM1NjUxODE1MDE1OS8wLzNGMEFFRDAyOTc2ODI5NzBDRUExMjU3QjE5ODVE QjU5MDE0NDRGRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0YwQUVEMDI5NzY4Mjk3MENFQTEyNTdCMTk4NURCNTkwMTQ0NEZFNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDU0MjAzNTY1MTgxNTAxNTkvMC8zRjBBRUQwMjk3Njgy OTcwQ0VBMTI1N0IxOTg1REI1OTAxNDQ0RkU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlTR9HVUFmVj 9iA5oCP3NlAzmDhZTJWUP0MNed0HY2ZiQp5FdLYYiTiuHWOV4w+H8ROKxhC12urT y3b7AK/DJTzOMiEuIYe+u5TJJJN2Ng9z0bytHhTjNIXlckSKP51u8I3niJIjGiWa ollkdR6QtQ2DWgz5XPV4Z0CfASptJgzrGtelsLcyNA3Y6Uiay/p0PEbFs1XTB9tz ZHd0Q/KJY/WcCN5KDIDr4UuGUR0F11ku7qqN2g4fHDHGbbzFN+Y30dHqojcWQqKi 9t9IxOVMbPyKkPX1FLz06TOWk3gDNv9FTx25+dTDiMa/TzJk+fRrTp+pUq0NofXG wUOxjVRDzA== -----END CERTIFICATE-----Generated at Mon Oct 12 02:58:07 2026 by rpki-client