$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft File: 3201C4351814E52EC594B407C57D52285AA52E6D.mft (raw, json) Hash identifier: vQHXtkKQGHiLGval2ondNsvGvoEvapeYulf+RfY/yf4= Subject key identifier: DB:35:C9:8B:A9:A8:54:40:82:0F:25:FB:E5:90:76:BB:B2:C7:29:EB Authority key identifier: 32:01:C4:35:18:14:E5:2E:C5:94:B4:07:C5:7D:52:28:5A:A5:2E:6D Certificate issuer: /CN=3201C4351814E52EC594B407C57D52285AA52E6D Certificate serial: 46E71D19B793C7483E1C1C1EBAA0956BF641438E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft Manifest number: 82 Signing time: Sat 03 Oct 2026 05:26:25 +0000 Manifest this update: Sat 03 Oct 2026 05:21:25 +0000 Manifest next update: Tue 06 Oct 2026 06:50:25 +0000 Files and hashes: 1: 3201C4351814E52EC594B407C57D52285AA52E6D.crl (hash: vdl9RgXarj/1uTdCdnVP7CWuXonQPi8xkyGp4xCJnjo=) 2: 3136332e3132382e3135322e302f32332d3233203d3e2030.roa (hash: eG2V3L8ngZytOIhFBaE+6vNlrSGpXtrAmShn5ATKyk0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.crl rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 06:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e7:1d:19:b7:93:c7:48:3e:1c:1c:1e:ba:a0:95:6b:f6:41:43:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3201C4351814E52EC594B407C57D52285AA52E6D Validity Not Before: Oct 3 05:21:25 2026 GMT Not After : Oct 6 06:50:25 2026 GMT Subject: CN=DB35C98BA9A85440820F25FBE59076BBB2C729EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:66:2b:be:b7:f4:f8:ef:59:fe:ab:51:9b: 90:e7:3d:51:2a:59:d2:49:9c:f5:35:ad:18:cb:e0: 23:d5:b9:ed:8b:04:0f:2c:ec:e8:6e:a2:e6:d3:d8: fd:63:80:93:e8:23:43:73:76:a9:a0:5c:51:ec:38: cd:37:f9:ef:6f:28:90:c9:e0:5e:9a:e8:6d:2a:d6: 1f:4e:73:72:04:4e:db:48:d5:ff:19:a8:44:ea:0c: 6b:a2:77:12:72:04:8f:9d:10:90:2d:25:5b:cb:99: 59:8a:58:1c:1f:bb:4e:a5:b1:35:75:3e:ab:55:96: 96:12:6a:ca:34:97:09:20:5a:f6:1b:f6:30:f2:6c: 76:53:3d:69:b3:42:2f:d7:7e:c7:6e:4d:cc:2c:bf: 06:bb:2b:46:f7:54:8d:03:f1:b5:11:c0:e4:4e:93: 12:c1:4e:79:7d:de:72:a2:a9:c7:bc:be:9d:bd:78: 5d:61:df:3f:f7:99:d0:21:f2:f9:f4:d0:18:f5:50: ca:0d:af:36:d7:44:fc:e1:fd:7b:d0:ed:35:d7:26: 30:9b:67:f7:12:ad:1e:89:d4:54:dd:ed:93:8a:59: ba:e1:9f:f9:40:98:22:b9:13:cb:ba:c7:7c:10:75: d4:8c:98:80:12:b3:23:1a:23:8d:cc:e0:c8:f8:9e: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:35:C9:8B:A9:A8:54:40:82:0F:25:FB:E5:90:76:BB:B2:C7:29:EB X509v3 Authority Key Identifier: keyid:32:01:C4:35:18:14:E5:2E:C5:94:B4:07:C5:7D:52:28:5A:A5:2E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b8:6e:ce:6d:90:a6:ef:78:b1:76:74:4b:6e:c1:74:69:5e: 72:fa:27:f5:01:fb:2a:03:3d:82:75:b8:51:09:2b:0f:74:c8: 94:64:6d:8d:a9:fb:37:56:5d:60:39:6d:a2:66:53:ee:98:ef: d9:3a:a5:13:db:4d:11:a7:a7:80:36:9e:d6:1c:1b:fc:ca:39: a1:b0:60:3a:b5:2a:a7:88:65:82:7d:1c:aa:c9:a5:07:1c:82: 3e:18:8a:14:d5:56:70:7f:a5:c9:9a:bb:0b:cd:b8:e8:ec:7d: 66:05:f6:1d:eb:e6:16:43:b9:58:f4:67:f1:ef:e3:f6:7e:74: b5:40:8a:4e:45:6f:25:f2:6c:a8:eb:bc:7d:e2:b7:5f:7d:63: c7:21:f8:14:e5:50:37:34:2d:ec:60:c3:f8:a5:9b:e6:92:fc: d3:2e:12:2a:98:ad:04:6e:08:f2:c3:1d:1d:1f:dc:2b:c4:02: 93:c6:23:14:3e:ee:cc:3a:ed:d2:84:f2:4e:03:a8:d0:0a:8c: ec:19:6f:44:d0:78:69:b9:57:f4:7f:41:63:30:db:37:a3:0a: 29:6e:e5:aa:09:21:33:aa:36:74:1f:ff:d4:41:3a:25:ef:bd: 81:02:db:69:3a:4a:0b:7b:6f:b8:de:88:ed:5d:90:03:f7:ed: 44:4d:2d:cb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURucdGbeTx0g+HBweuqCVa/ZBQ44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIwMUM0MzUxODE0RTUyRUM1OTRCNDA3QzU3RDUyMjg1 QUE1MkU2RDAeFw0yNjEwMDMwNTIxMjVaFw0yNjEwMDYwNjUwMjVaMDMxMTAvBgNV BAMTKERCMzVDOThCQTlBODU0NDA4MjBGMjVGQkU1OTA3NkJCQjJDNzI5RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAmGYrvrf0+O9Z/qtRm5DnPVEq WdJJnPU1rRjL4CPVue2LBA8s7OhuoubT2P1jgJPoI0NzdqmgXFHsOM03+e9vKJDJ 4F6a6G0q1h9Oc3IETttI1f8ZqETqDGuidxJyBI+dEJAtJVvLmVmKWBwfu06lsTV1 PqtVlpYSaso0lwkgWvYb9jDybHZTPWmzQi/XfsduTcwsvwa7K0b3VI0D8bURwORO kxLBTnl93nKiqce8vp29eF1h3z/3mdAh8vn00Bj1UMoNrzbXRPzh/XvQ7TXXJjCb Z/cSrR6J1FTd7ZOKWbrhn/lAmCK5E8u6x3wQddSMmIASsyMaI43M4Mj4nqOfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2zXJi6moVECCDyX75ZB2u7LHKeswHwYDVR0j BBgwFoAUMgHENRgU5S7FlLQHxX1SKFqlLm0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg0OTI3MzY1ODI3NzkxMy8wLzMyMDFDNDM1MTgxNEU1MkVDNTk0QjQwN0M1N0Q1 MjI4NUFBNTJFNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzIwMUM0MzUxODE0RTUyRUM1OTRCNDA3QzU3RDUyMjg1QUE1MkU2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NDkyNzM2NTgyNzc5MTMvMC8zMjAxQzQzNTE4MTRF NTJFQzU5NEI0MDdDNTdENTIyODVBQTUyRTZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLhuzm2Qpu94 sXZ0S27BdGlecvon9QH7KgM9gnW4UQkrD3TIlGRtjan7N1ZdYDltomZT7pjv2Tql E9tNEaengDae1hwb/Mo5obBgOrUqp4hlgn0cqsmlBxyCPhiKFNVWcH+lyZq7C824 6Ox9ZgX2HevmFkO5WPRn8e/j9n50tUCKTkVvJfJsqOu8feK3X31jxyH4FOVQNzQt 7GDD+KWb5pL80y4SKpitBG4I8sMdHR/cK8QCk8YjFD7uzDrt0oTyTgOo0AqM7Blv RNB4ablX9H9BYzDbN6MKKW7lqgkhM6o2dB//1EE6Je+9gQLbaTpKC3tvuN6I7V2Q A/ftRE0tyw== -----END CERTIFICATE-----Generated at Mon Oct 5 00:49:55 2026 by rpki-client