$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft File: 373B103C68D9B84455801815E437C49839794406.mft (raw, json) Hash identifier: 2a+NrKhG0rTVTwl9nhmy4pYveqmRJyqxp0FgeotBz3k= Subject key identifier: 7F:21:7D:2F:FD:29:3F:41:D4:CE:F2:CB:D6:C2:39:95:BD:54:F2:AF Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06 Certificate issuer: /CN=373B103C68D9B84455801815E437C49839794406 Certificate serial: 2AB1FD7460DF57F8AA6033909877B45B4740DF13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft Manifest number: 0143 Signing time: Tue 13 Oct 2026 19:23:13 +0000 Manifest this update: Tue 13 Oct 2026 19:18:13 +0000 Manifest next update: Fri 16 Oct 2026 21:51:13 +0000 Files and hashes: 1: 3138322e3135372e302e302f31362d3136203d3e2039383038.roa (hash: bb97oY6zPLsKhBLVa0rQlewA3WGo8q51y04BsHtNgQM=) 2: 3131302e3233362e302e302f31352d3135203d3e2039383038.roa (hash: hEDr8/74LWqVAxQIAl/qC7YYDZiTh64u3Td4QxxhlWk=) 3: 3131332e31382e3139392e302f32342d3234203d3e2039383038.roa (hash: 26xHgpFQwzdYak11Uk8qGZoi6F5obP9Yhc9faJO/AC0=) 4: 373B103C68D9B84455801815E437C49839794406.crl (hash: /CSspj4Y93iuFkKQ0vNrKSndzpRWgCT0i2LBqEqL2ss=) 5: 3131302e3233362e302e302f31362d3136203d3e2039383038.roa (hash: ypOszjBaxK7aN3qHrAMdQaOEEef+WU0nK8BVdjeedMs=) 6: 3131332e31382e302e302f31362d3136203d3e2039383038.roa (hash: l2TtlQd2OeYBccu9u8JTA5koymL/HDwH4svd8KIbs00=) 7: 3131332e31382e3133302e302f32342d3234203d3e2039383038.roa (hash: zDOWeX9XcM9h2tJJRyjYjzukX9m6ydEOUWtBszIYs2I=) 8: 3131302e3233372e302e302f31362d3136203d3e2039383038.roa (hash: xFtnh6XjWsHSoRFqwMT0dAdbo39z/4IBEm/NltK9l5A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 21:51:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b1:fd:74:60:df:57:f8:aa:60:33:90:98:77:b4:5b:47:40:df:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=373B103C68D9B84455801815E437C49839794406 Validity Not Before: Oct 13 19:18:13 2026 GMT Not After : Oct 16 21:51:13 2026 GMT Subject: CN=7F217D2FFD293F41D4CEF2CBD6C23995BD54F2AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4a:36:8c:9c:8b:38:54:ed:78:f6:d7:68:70: 31:2d:44:27:a4:3b:9f:cd:4a:96:10:ee:5f:47:55: a4:7e:a4:10:60:94:39:86:32:28:ed:67:c9:a8:90: f5:8a:06:57:b3:f3:39:0d:11:9d:46:43:60:98:01: 3f:a0:cc:7f:84:35:d9:82:10:2f:b4:43:bf:fa:a6: 70:3a:04:2c:69:2f:48:3a:93:9e:8d:d5:3b:fe:20: c2:d3:b2:67:ca:5d:dc:b3:d7:1a:c2:9a:83:dd:87: 71:af:8e:46:49:34:d1:71:aa:09:49:f0:60:ed:86: 23:f9:b6:25:8a:f8:74:d8:82:49:94:b7:d5:ec:87: 2b:0d:f8:6c:d7:1e:c9:cd:e3:e2:ca:ab:14:c9:99: b7:be:4d:91:0a:94:25:99:77:14:f6:c1:8a:69:e5: d0:2e:94:ff:f6:75:81:cd:86:76:0c:18:34:55:e8: e5:26:1c:57:f7:eb:b3:18:73:e4:b8:fb:e0:a0:cd: 1c:8c:58:69:ca:f2:d9:f4:3e:23:39:1f:9f:dc:59: df:72:63:61:32:2a:1b:df:75:87:79:4c:4b:a5:2e: 4b:eb:75:bf:61:83:39:6e:0e:93:60:e2:96:87:de: dc:e2:19:29:2a:80:2d:76:3b:e2:64:f6:4c:f4:6f: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:21:7D:2F:FD:29:3F:41:D4:CE:F2:CB:D6:C2:39:95:BD:54:F2:AF X509v3 Authority Key Identifier: keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:47:32:64:5d:fb:6c:e0:bd:48:1d:13:e7:10:9c:c5:17:65: 33:03:b5:6b:4b:7c:74:bc:56:d2:37:e2:0f:39:55:49:8e:20: 22:0c:77:57:bb:c9:83:fc:36:42:3f:f1:0f:48:ae:20:10:bd: 44:9a:88:e4:f1:76:98:e2:9d:8b:03:44:7b:b8:fe:35:76:7f: d1:4e:ff:46:86:8d:08:28:fe:45:55:40:28:d5:49:ad:8d:7a: 2e:f6:df:7e:48:fd:05:18:c2:58:6d:cc:53:e8:a7:09:ef:06: b6:4f:a1:63:ee:c7:2a:17:68:0d:8e:72:f8:fd:75:6f:55:3a: 22:06:98:93:ae:1a:6f:1d:d0:5c:2e:54:e5:f8:93:a1:5f:7b: 08:e1:73:25:1c:cb:f6:0a:05:8f:14:56:39:4b:ed:16:18:bc: 9e:40:68:68:28:5a:cf:9a:ac:93:26:8b:a5:f3:d6:e0:60:bb: fe:dd:a6:1a:18:9d:9c:e7:08:f6:bc:07:57:6b:6d:ee:9e:fd: 50:ec:b2:e6:ce:b2:6b:06:30:e7:09:35:cd:a3:85:fb:41:99: 95:a3:0f:22:00:49:ee:cf:c4:58:8b:94:e5:32:71:f3:31:ea: 00:18:63:41:7d:b8:a5:68:36:a5:05:80:8c:51:10:9c:09:37: 72:e1:1f:62 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKrH9dGDfV/iqYDOQmHe0W0dA3xMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgz OTc5NDQwNjAeFw0yNjEwMTMxOTE4MTNaFw0yNjEwMTYyMTUxMTNaMDMxMTAvBgNV BAMTKDdGMjE3RDJGRkQyOTNGNDFENENFRjJDQkQ2QzIzOTk1QkQ1NEYyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJSjaMnIs4VO149tdocDEtRCek O5/NSpYQ7l9HVaR+pBBglDmGMijtZ8mokPWKBlez8zkNEZ1GQ2CYAT+gzH+ENdmC EC+0Q7/6pnA6BCxpL0g6k56N1Tv+IMLTsmfKXdyz1xrCmoPdh3GvjkZJNNFxqglJ 8GDthiP5tiWK+HTYgkmUt9XshysN+GzXHsnN4+LKqxTJmbe+TZEKlCWZdxT2wYpp 5dAulP/2dYHNhnYMGDRV6OUmHFf367MYc+S4++CgzRyMWGnK8tn0PiM5H5/cWd9y Y2EyKhvfdYd5TEulLkvrdb9hgzluDpNg4paH3tziGSkqgC12O+Jk9kz0b75xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfyF9L/0pP0HUzvLL1sI5lb1U8q8wHwYDVR0j BBgwFoAUNzsQPGjZuERVgBgV5DfEmDl5RAYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQ2ODIyNy8wLzM3M0IxMDNDNjhEOUI4NDQ1NTgwMTgxNUU0MzdD NDk4Mzk3OTQ0MDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgzOTc5NDQwNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDg0NjgyMjcvMC8zNzNCMTAzQzY4RDlC ODQ0NTU4MDE4MTVFNDM3QzQ5ODM5Nzk0NDA2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX0cyZF37bOC9 SB0T5xCcxRdlMwO1a0t8dLxW0jfiDzlVSY4gIgx3V7vJg/w2Qj/xD0iuIBC9RJqI 5PF2mOKdiwNEe7j+NXZ/0U7/RoaNCCj+RVVAKNVJrY16Lvbffkj9BRjCWG3MU+in Ce8Gtk+hY+7HKhdoDY5y+P11b1U6IgaYk64abx3QXC5U5fiToV97COFzJRzL9goF jxRWOUvtFhi8nkBoaChaz5qskyaLpfPW4GC7/t2mGhidnOcI9rwHV2tt7p79UOyy 5s6yawYw5wk1zaOF+0GZlaMPIgBJ7s/EWIuU5TJx8zHqABhjQX24pWg2pQWAjFEQ nAk3cuEfYg== -----END CERTIFICATE-----Generated at Wed Oct 14 15:09:23 2026 by rpki-client