$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft File: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft (raw, json) Hash identifier: a9k5DkCI7bwQcbSGLrXtEBsCRRBrlOZfE+DoJ2x4VSM= Subject key identifier: 4B:18:B8:96:F4:44:24:C8:AD:62:DA:08:44:76:AB:92:AC:61:66:42 Authority key identifier: D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E Certificate issuer: /CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E Certificate serial: 53D75E56B9DA468F9B41F2F4834862E9F095342C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft Manifest number: A1 Signing time: Tue 06 Oct 2026 22:10:28 +0000 Manifest this update: Tue 06 Oct 2026 22:05:28 +0000 Manifest next update: Sat 10 Oct 2026 04:17:28 +0000 Files and hashes: 1: 323430313a313332303a3a2f33322d3332203d3e2039383038.roa (hash: gkXLtfsm57+1SLQOnZmPCOz2Uc/ydhDt+i+LwC+ujFg=) 2: 3130332e3233322e3136362e302f32332d3233203d3e2039383038.roa (hash: wZgCkdZF56vtDndZBJDFwSUyJO2LVVtO+dAGyXmN1DQ=) 3: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl (hash: 42YuHHzR+5a67VWpaobRJn0CqfJ9/ohJLC5ClKe6K54=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 04:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d7:5e:56:b9:da:46:8f:9b:41:f2:f4:83:48:62:e9:f0:95:34:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E Validity Not Before: Oct 6 22:05:28 2026 GMT Not After : Oct 10 04:17:28 2026 GMT Subject: CN=4B18B896F44424C8AD62DA084476AB92AC616642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:f1:21:53:d5:19:28:6f:eb:94:15:66:36: 55:58:79:5e:ae:0b:7f:cf:25:34:6a:3d:6e:ff:23: cf:ab:43:1d:0a:63:02:d9:b1:1a:ab:cb:7c:c4:4d: f2:f1:11:e5:25:4d:56:3b:d0:18:f8:e0:6a:21:87: 12:19:45:da:87:4b:1d:f9:f8:91:83:59:e7:32:77: 83:52:4b:c8:d8:59:17:08:bf:d0:ce:0d:f9:ed:76: 84:11:34:38:0a:3e:0c:f0:0d:ce:4c:92:55:e5:1f: 33:4c:d5:4e:c7:81:90:3a:30:d4:dc:0c:ab:f4:37: 8d:d1:96:65:b1:b2:56:cd:1f:f8:4d:53:6c:b4:09: ac:7f:62:a1:65:1c:d5:38:9c:98:e3:a6:0d:97:ea: 01:9d:e8:09:68:ba:2b:67:5c:6f:24:18:c7:71:bd: 23:1b:7f:bc:88:aa:80:fd:f8:b3:b5:1e:50:30:54: af:8f:75:2b:be:b5:3a:6f:7e:ac:2c:60:9a:cc:3f: 90:60:19:73:46:01:83:bd:d4:79:85:45:bf:56:e8: 50:1e:f0:74:8c:0d:49:d1:ca:ec:e4:7b:14:e8:0a: f3:67:b0:f3:b3:55:ed:91:ab:31:17:1c:37:da:32: d0:0b:fe:7b:0d:66:72:8f:de:ed:95:ec:2c:8e:05: 92:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:18:B8:96:F4:44:24:C8:AD:62:DA:08:44:76:AB:92:AC:61:66:42 X509v3 Authority Key Identifier: keyid:D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:65:f9:0b:f1:05:22:8b:ed:a8:16:a7:79:64:54:d3:da:91: e4:c6:38:ff:f2:1b:50:b1:76:16:a2:0a:a1:6f:ed:ce:bd:62: 5f:14:bd:3c:84:65:ef:08:4e:90:08:3c:59:ff:f7:df:88:41: 08:cf:fe:96:67:b1:c2:54:96:a2:06:64:96:b3:1e:a7:49:57: ce:7f:ad:09:7e:89:6a:e1:e8:77:e3:8b:6b:18:6c:ed:32:07: ee:03:63:65:f1:1e:31:66:92:bd:83:b6:69:85:24:4b:90:75: bb:fc:d8:7b:72:03:7b:02:3d:6a:14:f4:77:19:1a:94:83:66: d0:cc:78:48:81:31:af:d9:9e:4c:fa:0d:44:fb:0a:1f:84:8a: 06:fd:1b:18:5e:d7:85:d2:5d:2a:91:4c:63:8f:07:1d:a5:3a: 65:a9:53:6f:5d:b3:e4:1a:6c:b0:09:4e:63:82:bb:de:fa:a3: 72:5a:8d:63:d9:e9:14:2c:53:1c:f9:14:de:0e:a9:6b:83:9d: 2b:c9:28:56:e5:e4:ae:5a:6a:ff:73:c7:cd:42:fb:d2:9e:e1: c8:0c:49:3e:85:0d:54:83:0f:aa:1a:9a:f5:13:aa:fa:e5:79: aa:94:10:cc:af:5c:44:d7:d1:2d:74:8f:95:f9:ae:6f:35:61: 02:d8:3a:77 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU9deVrnaRo+bQfL0g0hi6fCVNCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgy NzZFOUQwRTAeFw0yNjEwMDYyMjA1MjhaFw0yNjEwMTAwNDE3MjhaMDMxMTAvBgNV BAMTKDRCMThCODk2RjQ0NDI0QzhBRDYyREEwODQ0NzZBQjkyQUM2MTY2NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu+PEhU9UZKG/rlBVmNlVYeV6u C3/PJTRqPW7/I8+rQx0KYwLZsRqry3zETfLxEeUlTVY70Bj44GohhxIZRdqHSx35 +JGDWecyd4NSS8jYWRcIv9DODfntdoQRNDgKPgzwDc5MklXlHzNM1U7HgZA6MNTc DKv0N43RlmWxslbNH/hNU2y0Cax/YqFlHNU4nJjjpg2X6gGd6AlouitnXG8kGMdx vSMbf7yIqoD9+LO1HlAwVK+PdSu+tTpvfqwsYJrMP5BgGXNGAYO91HmFRb9W6FAe 8HSMDUnRyuzkexToCvNnsPOzVe2RqzEXHDfaMtAL/nsNZnKP3u2V7CyOBZKRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSxi4lvREJMitYtoIRHarkqxhZkIwHwYDVR0j BBgwFoAU0w+QifnqWDYAC4rkvghaiCdunQ4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzEwNjI1NDQ3MzM5NjI0MS8wL0QzMEY5MDg5RjlFQTU4MzYwMDBCOEFFNEJFMDg1 QTg4Mjc2RTlEMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgyNzZFOUQwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDcxMDYyNTQ0NzMzOTYyNDEvMC9EMzBGOTA4OUY5RUE1 ODM2MDAwQjhBRTRCRTA4NUE4ODI3NkU5RDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAumX5C/EFIovt qBaneWRU09qR5MY4//IbULF2FqIKoW/tzr1iXxS9PIRl7whOkAg8Wf/334hBCM/+ lmexwlSWogZklrMep0lXzn+tCX6JauHod+OLaxhs7TIH7gNjZfEeMWaSvYO2aYUk S5B1u/zYe3IDewI9ahT0dxkalINm0Mx4SIExr9meTPoNRPsKH4SKBv0bGF7XhdJd KpFMY48HHaU6ZalTb12z5BpssAlOY4K73vqjclqNY9npFCxTHPkU3g6pa4OdK8ko VuXkrlpq/3PHzUL70p7hyAxJPoUNVIMPqhqa9ROq+uV5qpQQzK9cRNfRLXSPlfmu bzVhAtg6dw== -----END CERTIFICATE-----Generated at Thu Oct 8 20:13:43 2026 by rpki-client