$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft File: E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft (raw, json) Hash identifier: 0IoXTgW6gvy1lmEItUCEsBiEQDn+CEqjy6p3jRxs+qc= Subject key identifier: 8B:C2:80:6F:EF:99:F5:09:B3:45:FB:FE:BD:FC:6C:64:2C:EE:63:71 Authority key identifier: E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76 Certificate issuer: /CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76 Certificate serial: 10E585A5F2F6137BAC33BEBA00A9C5B4DDB52483 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft Manifest number: 0143 Signing time: Wed 28 Oct 2026 03:25:37 +0000 Manifest this update: Wed 28 Oct 2026 03:20:37 +0000 Manifest next update: Sat 31 Oct 2026 06:53:37 +0000 Files and hashes: 1: 323430303a623630303a3a2f33322d3332203d3e203234333632.roa (hash: OosGElGWS+GJxc2ZLFUVt0Ov6ZtBGlbrmX6x9kVC9FE=) 2: 3230322e3134312e3137362e302f32302d3234203d3e2039383038.roa (hash: BJiMFl6jVD4T1WT4EgvA6XJoshc/WlwYp74ViFHNY8M=) 3: E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl (hash: mRESIMBc0/iK48nMskdF10NT4CmquZcs0/4gOIVS3l0=) 4: 3132312e3235352e302e302f31362d3136203d3e2039383038.roa (hash: i+Yvpy4wEjm9Zal8avDFdBxjmmqkEh/jP0WXLF0Nx9I=) 5: 3230322e3134312e3136302e302f32302d3234203d3e2034313334.roa (hash: Af/wuALTSgcc0XewJsOWxFCtdlbkemPNclhlWQx+CcE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 06:53:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:e5:85:a5:f2:f6:13:7b:ac:33:be:ba:00:a9:c5:b4:dd:b5:24:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E0CF9C7318170E2949AD635E3BF470E276EE1E76 Validity Not Before: Oct 28 03:20:37 2026 GMT Not After : Oct 31 06:53:37 2026 GMT Subject: CN=8BC2806FEF99F509B345FBFEBDFC6C642CEE6371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:b1:f8:9e:3f:0c:9a:4b:01:4d:92:0e:66: cb:40:f3:99:18:b3:c8:43:57:a2:26:9b:b0:45:ca: a5:8f:d6:30:7c:a4:cf:6b:19:8d:bd:80:81:7b:22: d5:27:d5:d2:84:9d:c3:70:26:9d:5d:6d:dc:f3:c0: 1f:a9:f5:94:05:8d:61:c0:29:83:7e:b4:25:31:12: 8c:d2:f0:4b:91:a6:d1:fd:b0:77:7d:2b:6b:a4:58: 85:49:91:6b:a2:8b:26:07:61:88:f4:b2:53:4d:cd: 24:28:8a:00:1f:5b:6e:8c:00:bd:86:a4:80:84:30: fb:9b:ab:75:14:41:2e:f1:ca:73:7d:b0:56:f2:91: 8f:cf:ee:53:1b:5b:16:79:96:d5:2b:e1:5a:c2:07: 15:e6:7d:b5:79:76:8d:b4:19:33:44:97:07:da:68: c8:bc:76:d1:0c:d6:6b:3c:83:3d:93:d8:9d:cf:a8: 49:fa:e7:91:8c:5c:1d:11:ef:19:6a:df:7e:94:b0: de:2a:7d:c0:8c:b6:68:9c:27:74:62:a1:c5:d4:de: 9f:9f:76:c3:fc:98:d3:14:c5:da:59:e4:94:b0:90: 86:99:ba:90:78:30:35:9b:39:c0:2e:f0:e3:d2:8e: 16:3b:f1:65:b5:8c:33:10:8e:44:b7:f7:1f:99:69: 58:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C2:80:6F:EF:99:F5:09:B3:45:FB:FE:BD:FC:6C:64:2C:EE:63:71 X509v3 Authority Key Identifier: keyid:E0:CF:9C:73:18:17:0E:29:49:AD:63:5E:3B:F4:70:E2:76:EE:1E:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E0CF9C7318170E2949AD635E3BF470E276EE1E76.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948206083/0/E0CF9C7318170E2949AD635E3BF470E276EE1E76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:85:b8:f4:49:be:61:ee:b5:a1:f9:d3:47:3d:35:fd:99:a5: e6:af:53:0a:7e:99:66:bf:95:78:d0:bb:1d:b9:22:86:50:04: 17:ba:0f:35:81:eb:e3:d7:0f:9c:c4:ef:62:67:71:8d:18:c7: d4:3e:0a:10:77:4e:e0:3f:95:c4:a9:ba:e3:eb:f1:33:90:8e: c2:2a:fc:1b:97:8d:6d:49:fc:24:54:9e:27:a5:73:f7:24:89: dd:46:90:4e:e1:d7:7d:81:81:e4:c1:ef:10:80:30:c5:39:af: 9c:8b:82:db:12:55:06:b3:24:13:14:48:31:58:3c:8d:8b:e1: dd:c0:9c:1b:14:34:1c:23:3f:2a:4b:8a:47:d0:55:79:ad:e3: eb:73:11:a3:60:93:ea:40:9c:e3:d7:45:26:64:99:49:bc:06: c0:46:d0:a8:2f:9e:4e:f2:b5:45:75:1b:53:b7:cb:88:3b:45: bf:08:b4:c3:85:61:70:30:3e:7d:b3:01:ff:5a:05:e0:ee:b0: a5:2b:e5:98:5f:a0:74:43:cf:56:d8:55:ae:1c:23:53:13:65: b0:47:99:ec:f3:1c:2b:51:6f:c8:8f:38:93:30:d0:68:f0:cd: 8e:61:26:ec:63:3a:02:8e:74:46:65:43:e8:df:c2:4a:16:9c: c4:3c:65:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEOWFpfL2E3usM766AKnFtN21JIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTBDRjlDNzMxODE3MEUyOTQ5QUQ2MzVFM0JGNDcwRTI3 NkVFMUU3NjAeFw0yNjEwMjgwMzIwMzdaFw0yNjEwMzEwNjUzMzdaMDMxMTAvBgNV BAMTKDhCQzI4MDZGRUY5OUY1MDlCMzQ1RkJGRUJERkM2QzY0MkNFRTYzNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8DbH4nj8MmksBTZIOZstA85kY s8hDV6Imm7BFyqWP1jB8pM9rGY29gIF7ItUn1dKEncNwJp1dbdzzwB+p9ZQFjWHA KYN+tCUxEozS8EuRptH9sHd9K2ukWIVJkWuiiyYHYYj0slNNzSQoigAfW26MAL2G pICEMPubq3UUQS7xynN9sFbykY/P7lMbWxZ5ltUr4VrCBxXmfbV5do20GTNElwfa aMi8dtEM1ms8gz2T2J3PqEn655GMXB0R7xlq336UsN4qfcCMtmicJ3RiocXU3p+f dsP8mNMUxdpZ5JSwkIaZupB4MDWbOcAu8OPSjhY78WW1jDMQjkS39x+ZaVjPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUi8KAb++Z9QmzRfv+vfxsZCzuY3EwHwYDVR0j BBgwFoAU4M+ccxgXDilJrWNeO/Rw4nbuHnYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODIwNjA4My8wL0UwQ0Y5QzczMTgxNzBFMjk0OUFENjM1RTNCRjQ3 MEUyNzZFRTFFNzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTBDRjlDNzMxODE3MEUyOTQ5QUQ2MzVFM0JGNDcwRTI3NkVFMUU3Ni5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyMDYwODMvMC9FMENGOUM3MzE4MTcw RTI5NDlBRDYzNUUzQkY0NzBFMjc2RUUxRTc2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoW49Em+Ye61 ofnTRz01/Zml5q9TCn6ZZr+VeNC7HbkihlAEF7oPNYHr49cPnMTvYmdxjRjH1D4K EHdO4D+VxKm64+vxM5COwir8G5eNbUn8JFSeJ6Vz9ySJ3UaQTuHXfYGB5MHvEIAw xTmvnIuC2xJVBrMkExRIMVg8jYvh3cCcGxQ0HCM/KkuKR9BVea3j63MRo2CT6kCc 49dFJmSZSbwGwEbQqC+eTvK1RXUbU7fLiDtFvwi0w4VhcDA+fbMB/1oF4O6wpSvl mF+gdEPPVthVrhwjUxNlsEeZ7PMcK1FvyI84kzDQaPDNjmEm7GM6Ao50RmVD6N/C ShacxDxlGA== -----END CERTIFICATE-----Generated at Wed Oct 28 10:13:11 2026 by rpki-client