$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft File: 1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft (raw, json) Hash identifier: mxPBfbROVaPDGu2r95Ueuyw1D6N7pPexa6+0o1FUJuQ= Subject key identifier: 10:25:5A:F6:B4:53:61:C8:3D:E5:38:82:8F:B5:0C:E1:7A:A9:61:E3 Authority key identifier: 1C:0A:7C:94:4D:B9:9C:44:19:C3:E2:89:FF:A9:80:FF:82:2B:8B:71 Certificate issuer: /CN=1C0A7C944DB99C4419C3E289FFA980FF822B8B71 Certificate serial: 69B73B7DB6E7D604F18C9C3C837F432D3A79ED44 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft Manifest number: 7E Signing time: Mon 12 Oct 2026 15:42:06 +0000 Manifest this update: Mon 12 Oct 2026 15:37:05 +0000 Manifest next update: Thu 15 Oct 2026 19:19:05 +0000 Files and hashes: 1: 3131372e3130332e3132382e302f32302d3234203d3e203338333537.roa (hash: u7LzJQwy+fgwt4WDTFIyv8MHQBC/pA/j8q1mwwgHXuo=) 2: 1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl (hash: gRVdd9/v9V8FB+aIeM19jJILPT8o4VXWUfKJge8uCG8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 19:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:b7:3b:7d:b6:e7:d6:04:f1:8c:9c:3c:83:7f:43:2d:3a:79:ed:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C0A7C944DB99C4419C3E289FFA980FF822B8B71 Validity Not Before: Oct 12 15:37:05 2026 GMT Not After : Oct 15 19:19:05 2026 GMT Subject: CN=10255AF6B45361C83DE538828FB50CE17AA961E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a0:68:dc:ec:14:9e:2a:6f:db:d0:fe:2d:55: 02:85:32:36:4b:af:56:e1:74:2b:04:3e:87:d3:35: 94:ad:98:e0:be:a9:b4:b3:7f:32:22:43:c6:3d:a7: e4:a5:be:43:fa:7f:d2:6e:aa:00:1b:ec:64:5b:2b: 9c:14:f3:00:92:5f:e5:f1:54:ec:51:52:56:38:47: 97:0a:50:70:e4:ee:78:c8:4a:96:5c:1d:6b:38:28: 8c:28:20:d8:f2:26:1a:b2:e4:ec:50:83:e1:a6:f8: a6:bb:b7:5b:37:83:50:7e:8e:e1:8d:d4:a4:a3:42: cd:f0:05:4d:12:a8:39:75:0a:39:da:ca:35:d5:2a: 53:d4:14:4d:94:f8:69:a4:5f:57:42:fd:c9:36:e4: a6:3a:7b:56:44:46:60:8d:a1:f8:25:e1:bd:4f:b1: fe:cd:a4:ec:15:37:5c:5d:b8:c6:78:6c:26:4d:27: 47:f0:bb:55:e6:c8:75:87:b9:10:e6:cc:05:84:4e: 52:ed:16:a0:79:ac:8d:6a:45:21:9b:c9:a4:60:92: 3d:55:a9:12:27:12:f2:73:6e:fe:92:f1:6f:46:d3: fb:56:70:a6:0f:dc:c7:d8:4c:50:70:b9:a1:81:40: 28:8a:1f:ec:ef:1c:17:84:79:a6:f6:d6:ef:c1:72: de:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:25:5A:F6:B4:53:61:C8:3D:E5:38:82:8F:B5:0C:E1:7A:A9:61:E3 X509v3 Authority Key Identifier: keyid:1C:0A:7C:94:4D:B9:9C:44:19:C3:E2:89:FF:A9:80:FF:82:2B:8B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:aa:fc:76:d8:a1:ad:f2:32:b2:dc:31:25:b7:9d:49:00:56: 72:8f:99:7c:e4:59:fa:31:ba:4a:d7:35:e4:4e:1f:59:b8:11: 87:3e:d3:1e:58:a2:46:8b:84:eb:dc:e7:d8:ed:e4:4b:d5:a9: a2:35:82:7b:2a:11:68:ce:ee:8a:7d:a2:53:fc:c1:93:9c:80: 05:d9:27:fc:4a:d7:8e:6b:95:ae:fd:c5:c8:6d:55:69:db:83: 7a:5d:58:4b:99:08:42:ec:82:79:06:20:60:50:0d:7a:35:58: 99:0d:ba:82:99:93:00:0b:2b:6f:a7:1e:32:bd:d0:03:c6:44: 92:e5:03:4b:c7:7c:f4:bf:21:1a:e0:4c:30:3f:a2:7d:b5:07: 8b:d6:e1:de:f1:13:36:1d:79:f3:ad:c0:e4:60:d5:00:c0:c3: 26:c6:31:a7:38:be:71:20:0f:9b:d0:41:9f:39:36:87:ac:ac: ed:7d:d4:45:a6:ea:9b:2c:64:ba:18:f5:b2:79:01:60:72:b6: 46:37:fc:a1:cc:4b:27:3c:49:91:b6:ee:16:fa:4a:87:f9:6c: 50:70:29:ea:6f:a3:8d:ce:76:3d:c4:bf:88:2a:47:f2:29:f8: 5e:31:af:18:6e:0f:3d:89:bd:c0:26:8f:6d:56:1a:ea:4f:de: 35:f4:0f:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUabc7fbbn1gTxjJw8g39DLTp57UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMwQTdDOTQ0REI5OUM0NDE5QzNFMjg5RkZBOTgwRkY4 MjJCOEI3MTAeFw0yNjEwMTIxNTM3MDVaFw0yNjEwMTUxOTE5MDVaMDMxMTAvBgNV BAMTKDEwMjU1QUY2QjQ1MzYxQzgzREU1Mzg4MjhGQjUwQ0UxN0FBOTYxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqoGjc7BSeKm/b0P4tVQKFMjZL r1bhdCsEPofTNZStmOC+qbSzfzIiQ8Y9p+SlvkP6f9JuqgAb7GRbK5wU8wCSX+Xx VOxRUlY4R5cKUHDk7njISpZcHWs4KIwoINjyJhqy5OxQg+Gm+Ka7t1s3g1B+juGN 1KSjQs3wBU0SqDl1CjnayjXVKlPUFE2U+GmkX1dC/ck25KY6e1ZERmCNofgl4b1P sf7NpOwVN1xduMZ4bCZNJ0fwu1XmyHWHuRDmzAWETlLtFqB5rI1qRSGbyaRgkj1V qRInEvJzbv6S8W9G0/tWcKYP3MfYTFBwuaGBQCiKH+zvHBeEeab21u/Bct6nAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUECVa9rRTYcg95TiCj7UM4XqpYeMwHwYDVR0j BBgwFoAUHAp8lE25nEQZw+KJ/6mA/4Iri3EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzMyMjg5MjU5MDE4NjUyMS8wLzFDMEE3Qzk0NERCOTlDNDQxOUMzRTI4OUZGQTk4 MEZGODIyQjhCNzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUMwQTdDOTQ0REI5OUM0NDE5QzNFMjg5RkZBOTgwRkY4MjJCOEI3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTczMjI4OTI1OTAxODY1MjEvMC8xQzBBN0M5NDREQjk5 QzQ0MTlDM0UyODlGRkE5ODBGRjgyMkI4QjcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKr8dtihrfIy stwxJbedSQBWco+ZfORZ+jG6Stc15E4fWbgRhz7THliiRouE69zn2O3kS9WpojWC eyoRaM7uin2iU/zBk5yABdkn/ErXjmuVrv3FyG1VaduDel1YS5kIQuyCeQYgYFAN ejVYmQ26gpmTAAsrb6ceMr3QA8ZEkuUDS8d89L8hGuBMMD+ifbUHi9bh3vETNh15 863A5GDVAMDDJsYxpzi+cSAPm9BBnzk2h6ys7X3URabqmyxkuhj1snkBYHK2Rjf8 ocxLJzxJkbbuFvpKh/lsUHAp6m+jjc52PcS/iCpH8in4XjGvGG4PPYm9wCaPbVYa 6k/eNfQPxA== -----END CERTIFICATE-----Generated at Wed Oct 14 14:16:49 2026 by rpki-client