$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft File: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft (raw, json) Hash identifier: 3q/sP5Ui9cuDmMG9Oa+EKCVm7WhxvScp+YDQ0Zk+FBI= Subject key identifier: C8:AC:12:20:6F:A5:B0:83:EF:68:85:2C:D9:BA:42:3D:6D:6D:ED:F9 Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Certificate serial: 208BE8E8C2C9821D314C5B876DA961E8B1C3C475 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft Manifest number: 015A Signing time: Mon 12 Oct 2026 16:02:06 +0000 Manifest this update: Mon 12 Oct 2026 15:57:06 +0000 Manifest next update: Fri 16 Oct 2026 02:55:06 +0000 Files and hashes: 1: CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl (hash: 5jUh4aqDH+I8Pgcfg2jpljW7gcpuzB+ZGQsXOUZq6cM=) 2: AS17429.roa (hash: tvQGx7lVTdjUniYlP7sr4BlUtqTEWoYA3mzipdCfds0=) 3: AS146788.roa (hash: 8B6qiNcSC/x73VIpAQpd883oeZsoWKDo+SgTi+7lr6Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 02:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:8b:e8:e8:c2:c9:82:1d:31:4c:5b:87:6d:a9:61:e8:b1:c3:c4:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594 Validity Not Before: Oct 12 15:57:06 2026 GMT Not After : Oct 16 02:55:06 2026 GMT Subject: CN=C8AC12206FA5B083EF68852CD9BA423D6D6DEDF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:2f:3e:5f:ec:75:8b:d2:fb:64:96:3f:98: 53:b5:3a:19:be:72:ca:86:b3:01:52:5d:bd:64:f1: 98:28:fe:cc:14:0b:fd:4b:a3:6e:8d:d3:34:e5:c7: 35:00:0d:60:07:74:37:b8:0b:ec:99:0c:b1:9c:d8: 50:fa:dc:f5:11:56:b1:83:13:94:46:41:3b:b9:cc: 25:2e:34:04:c4:d3:f6:57:a0:28:c5:e6:86:13:8a: 12:09:a1:ef:04:33:dd:1f:b7:4d:23:aa:6f:e2:36: 20:7d:0f:b4:ef:46:f0:72:74:57:da:10:8f:2f:b9: 2d:5e:7b:26:1a:02:59:58:62:11:4f:ba:70:fc:20: 96:50:30:00:2e:af:0e:44:08:26:cb:c6:6c:a9:76: d6:0e:22:69:af:d7:3f:b2:c4:34:99:65:06:fa:ec: ce:5b:1f:aa:5d:95:ae:9b:2d:a1:c0:ec:df:34:b7: 9e:46:81:92:b2:9b:2f:38:3c:bf:38:2e:83:14:c5: 72:ea:96:8a:5a:28:1a:94:68:22:51:24:38:9a:0e: 95:b3:ed:77:cd:d4:d8:93:d1:45:c7:9e:f8:7a:43: 93:10:21:29:16:82:3f:83:88:31:ec:74:cf:73:54: d9:85:41:7d:01:25:12:b3:5b:ab:a5:13:be:98:e8: dc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AC:12:20:6F:A5:B0:83:EF:68:85:2C:D9:BA:42:3D:6D:6D:ED:F9 X509v3 Authority Key Identifier: keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c9:cd:5e:df:96:8b:75:4b:08:ee:22:f7:3a:81:d3:e4:81: 63:44:78:53:e9:a5:6e:0a:53:4b:fe:fb:89:a8:1e:3c:c6:c8: ee:6c:fd:2c:f4:da:0c:93:fa:22:2e:dc:fe:a8:ab:43:df:8f: d1:01:37:99:58:95:7d:40:2f:5e:ad:59:49:50:eb:55:4f:96: 28:92:0e:7a:af:06:48:80:c5:26:d8:fb:ef:63:4b:f8:92:83: 6c:39:55:4c:ed:3f:ca:b6:c6:d3:55:ab:0c:09:4b:3a:fe:86: dc:98:88:95:1b:60:59:e9:6a:47:e3:e9:18:39:f0:ef:52:dc: ad:17:d7:a3:5d:e3:1f:14:1d:32:0b:6a:9a:8c:e5:a1:87:ae: 61:9c:4a:5e:9a:7a:4a:fb:35:66:a6:2d:7e:dc:35:f3:42:dc: c4:27:70:bc:e5:08:ed:85:eb:dd:35:89:6b:78:9a:c7:24:eb: 41:03:9e:ec:27:e3:2b:b0:8e:d8:f5:5f:3e:99:dc:2c:f3:b7: 16:fb:25:a6:29:ff:9f:18:ee:e7:ac:77:55:0f:f6:ae:1d:e0: 58:9c:e4:08:07:90:e1:4d:2d:a0:62:16:a9:eb:06:55:46:6a: 3f:5e:7f:00:5f:f5:53:91:f7:82:5d:07:c8:b9:6f:32:2d:95: 2a:71:21:12 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIIvo6MLJgh0xTFuHbalh6LHDxHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3 MjE5QjU5NDAeFw0yNjEwMTIxNTU3MDZaFw0yNjEwMTYwMjU1MDZaMDMxMTAvBgNV BAMTKEM4QUMxMjIwNkZBNUIwODNFRjY4ODUyQ0Q5QkE0MjNENkQ2REVERjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Xy8+X+x1i9L7ZJY/mFO1Ohm+ csqGswFSXb1k8Zgo/swUC/1Lo26N0zTlxzUADWAHdDe4C+yZDLGc2FD63PURVrGD E5RGQTu5zCUuNATE0/ZXoCjF5oYTihIJoe8EM90ft00jqm/iNiB9D7TvRvBydFfa EI8vuS1eeyYaAllYYhFPunD8IJZQMAAurw5ECCbLxmypdtYOImmv1z+yxDSZZQb6 7M5bH6pdla6bLaHA7N80t55GgZKymy84PL84LoMUxXLqlopaKBqUaCJRJDiaDpWz 7XfN1NiT0UXHnvh6Q5MQISkWgj+DiDHsdM9zVNmFQX0BJRKzW6ulE76Y6NwlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyKwSIG+lsIPvaIUs2bpCPW1t7fkwHwYDVR0j BBgwFoAUzyFM3txYSzsBD8Om0NPbiXIZtZQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjg1MjA5Ny8wL0NGMjE0Q0RFREM1ODRCM0IwMTBGQzNBNkQwRDNE Qjg5NzIxOUI1OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0YyMTRDREVEQzU4NEIzQjAxMEZDM0E2RDBEM0RCODk3MjE5QjU5NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzQ1NjAxNDI4NTIwOTcvMC9DRjIxNENERURDNTg0 QjNCMDEwRkMzQTZEMEQzREI4OTcyMTlCNTk0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMnNXt+Wi3VL CO4i9zqB0+SBY0R4U+mlbgpTS/77iagePMbI7mz9LPTaDJP6Ii7c/qirQ9+P0QE3 mViVfUAvXq1ZSVDrVU+WKJIOeq8GSIDFJtj772NL+JKDbDlVTO0/yrbG01WrDAlL Ov6G3JiIlRtgWelqR+PpGDnw71LcrRfXo13jHxQdMgtqmozloYeuYZxKXpp6Svs1 ZqYtftw180LcxCdwvOUI7YXr3TWJa3iaxyTrQQOe7CfjK7CO2PVfPpncLPO3Fvsl pin/nxju56x3VQ/2rh3gWJzkCAeQ4U0toGIWqesGVUZqP15/AF/1U5H3gl0HyLlv Mi2VKnEhEg== -----END CERTIFICATE-----Generated at Wed Oct 14 12:54:08 2026 by rpki-client