$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft File: C1686602F57C97BDB7058DB5F05623F79F733F08.mft (raw, json) Hash identifier: 3eHDBeKpbchWGlpqGS13mRiYYwwps2YcwsHf5wLAIww= Subject key identifier: 2C:7F:68:4D:93:A4:61:BB:27:A5:CC:CE:3D:03:D7:FC:23:C8:DC:C4 Authority key identifier: C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08 Certificate issuer: /CN=C1686602F57C97BDB7058DB5F05623F79F733F08 Certificate serial: 3CE0917E87F3D5DFD1FF4F60AB723F202B02A0DB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft Manifest number: A4 Signing time: Sun 11 Oct 2026 15:45:41 +0000 Manifest this update: Sun 11 Oct 2026 15:40:41 +0000 Manifest next update: Thu 15 Oct 2026 00:23:41 +0000 Files and hashes: 1: 323430363a336438303a3a2f33322d3332203d3e203633363230.roa (hash: S7ogy1GUCLHfddt1QMmppgk2+axfyM/l/Np8aUOiq9M=) 2: 3130332e37302e3232302e302f32322d3232203d3e203633363230.roa (hash: 3qFSuhseOlQYOClfmoRUWVSL78nGJzbZToh19IkyDe0=) 3: 35392e3135332e3131362e302f32322d3232203d3e203633363230.roa (hash: 7R0HqxHOl8psiPTmoioP+yiWqxO71oxXvgRWvUwoxqQ=) 4: C1686602F57C97BDB7058DB5F05623F79F733F08.crl (hash: QYEgonFwDyYYHFaBb8tkt/EG0o6WUNS19f3/WrLff2o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 00:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e0:91:7e:87:f3:d5:df:d1:ff:4f:60:ab:72:3f:20:2b:02:a0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1686602F57C97BDB7058DB5F05623F79F733F08 Validity Not Before: Oct 11 15:40:41 2026 GMT Not After : Oct 15 00:23:41 2026 GMT Subject: CN=2C7F684D93A461BB27A5CCCE3D03D7FC23C8DCC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:f4:c6:dc:52:79:7c:ca:78:ba:ad:d2:48: f4:db:3c:65:3d:a9:e6:aa:76:fc:6d:59:50:0a:65: a7:1c:85:e2:55:3b:cf:11:94:ed:d3:12:80:ec:73: d9:28:a2:d5:09:23:3c:c9:7a:89:87:94:42:0d:26: c5:df:86:61:99:d2:2e:26:b4:da:7c:de:68:87:7c: d6:97:bb:c4:32:3a:3c:b9:bf:49:1b:37:2f:02:86: 94:d1:9d:b1:16:9b:d9:d7:48:28:19:5b:fb:7a:5a: db:db:5c:40:82:24:7e:f7:6d:37:bd:e0:81:ab:88: cb:b4:c2:86:19:a0:0f:c5:07:ce:dd:fb:16:98:cb: 03:5c:6d:00:ac:df:3e:fb:95:68:a3:21:75:48:72: fc:d7:3d:a3:e9:77:90:99:db:55:18:65:c0:d1:8b: eb:34:9b:c4:16:28:8a:d3:25:fb:e8:23:66:4e:2d: 8c:fe:03:a1:9e:1a:94:08:25:1b:db:af:d0:8e:d0: ca:f7:6a:e7:ac:4d:33:e6:c4:6c:e4:61:fc:27:fb: ac:1e:3a:84:27:5b:72:d6:09:85:14:d8:25:a3:89: 9b:e5:fd:19:e2:32:51:5e:50:31:ca:2d:8a:16:87: 24:f6:e1:69:10:32:2e:bb:49:b4:f9:e3:82:a4:ec: b6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7F:68:4D:93:A4:61:BB:27:A5:CC:CE:3D:03:D7:FC:23:C8:DC:C4 X509v3 Authority Key Identifier: keyid:C1:68:66:02:F5:7C:97:BD:B7:05:8D:B5:F0:56:23:F7:9F:73:3F:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1686602F57C97BDB7058DB5F05623F79F733F08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220108819/0/C1686602F57C97BDB7058DB5F05623F79F733F08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:05:69:61:9a:4d:63:45:92:28:16:d4:45:aa:a7:f8:49:c7: 7c:9b:88:58:b9:29:d2:0f:f7:1f:79:80:85:b8:45:66:91:0d: 4b:96:5c:7e:bc:43:b6:08:1c:ce:1c:1a:2f:49:1f:44:7e:06: 1e:f4:78:b8:30:a5:09:bc:7a:47:ab:72:8d:06:9f:84:92:de: 8a:24:ea:7b:11:d1:f8:81:02:8f:e0:5c:18:5b:7e:89:57:b5: ce:31:ab:e2:e3:74:d9:db:ee:58:08:c5:51:7f:c9:d6:b9:36: 73:70:51:db:c3:91:30:b4:4e:a2:36:f0:55:f2:eb:48:20:a0: bf:00:21:73:be:a7:72:bb:f6:24:d5:13:e4:86:b3:3f:ab:1b: df:f1:05:0d:6b:7b:0d:0d:fe:9d:0a:ea:87:9c:36:82:bf:81: a0:f1:1a:70:b6:35:3e:bc:e4:f8:aa:0f:26:c8:b1:2d:73:8e: c3:87:dd:57:3a:bc:93:a4:18:54:59:46:b2:ce:66:b1:82:2f: 2f:1b:4f:8d:7e:3b:69:c8:cc:2b:5a:62:30:3f:0a:b2:ca:4b: 8a:a8:d9:86:a9:fa:52:dc:09:f2:38:09:9a:21:05:23:a5:08: f6:f8:db:12:89:f6:e0:85:ab:62:97:e2:eb:b0:88:28:3a:08: bd:ce:83:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPOCRfofz1d/R/09gq3I/ICsCoNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2ODY2MDJGNTdDOTdCREI3MDU4REI1RjA1NjIzRjc5 RjczM0YwODAeFw0yNjEwMTExNTQwNDFaFw0yNjEwMTUwMDIzNDFaMDMxMTAvBgNV BAMTKDJDN0Y2ODREOTNBNDYxQkIyN0E1Q0NDRTNEMDNEN0ZDMjNDOERDQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy4PTG3FJ5fMp4uq3SSPTbPGU9 qeaqdvxtWVAKZaccheJVO88RlO3TEoDsc9kootUJIzzJeomHlEINJsXfhmGZ0i4m tNp83miHfNaXu8QyOjy5v0kbNy8ChpTRnbEWm9nXSCgZW/t6WtvbXECCJH73bTe9 4IGriMu0woYZoA/FB87d+xaYywNcbQCs3z77lWijIXVIcvzXPaPpd5CZ21UYZcDR i+s0m8QWKIrTJfvoI2ZOLYz+A6GeGpQIJRvbr9CO0Mr3auesTTPmxGzkYfwn+6we OoQnW3LWCYUU2CWjiZvl/RniMlFeUDHKLYoWhyT24WkQMi67SbT544Kk7LZjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULH9oTZOkYbsnpczOPQPX/CPI3MQwHwYDVR0j BBgwFoAUwWhmAvV8l723BY218FYj959zPwgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg3MTA3NjIyMDEwODgxOS8wL0MxNjg2NjAyRjU3Qzk3QkRCNzA1OERCNUYwNTYy M0Y3OUY3MzNGMDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzE2ODY2MDJGNTdDOTdCREI3MDU4REI1RjA1NjIzRjc5RjczM0YwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NzEwNzYyMjAxMDg4MTkvMC9DMTY4NjYwMkY1N0M5 N0JEQjcwNThEQjVGMDU2MjNGNzlGNzMzRjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgVpYZpNY0WS KBbURaqn+EnHfJuIWLkp0g/3H3mAhbhFZpENS5ZcfrxDtggczhwaL0kfRH4GHvR4 uDClCbx6R6tyjQafhJLeiiTqexHR+IECj+BcGFt+iVe1zjGr4uN02dvuWAjFUX/J 1rk2c3BR28ORMLROojbwVfLrSCCgvwAhc76ncrv2JNUT5IazP6sb3/EFDWt7DQ3+ nQrqh5w2gr+BoPEacLY1Przk+KoPJsixLXOOw4fdVzq8k6QYVFlGss5msYIvLxtP jX47acjMK1piMD8KsspLiqjZhqn6UtwJ8jgJmiEFI6UI9vjbEon24IWrYpfi67CI KDoIvc6DMQ== -----END CERTIFICATE-----Generated at Mon Oct 12 13:11:27 2026 by rpki-client