$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft File: DE3831D69587EC59C3002006198FD58A977ED1AD.mft (raw, json) Hash identifier: JxQSL51pz9gG4oIfW8ebYjVDV6O3gm8AniZVaw/zT9g= Subject key identifier: 34:89:13:7F:1E:B2:A5:34:16:F3:BB:2D:6D:10:2A:E2:4E:09:65:5D Authority key identifier: DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD Certificate issuer: /CN=DE3831D69587EC59C3002006198FD58A977ED1AD Certificate serial: 2331C1AA96EE6FB01403E2062FF1C7F453F347FB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft Manifest number: 013D Signing time: Wed 14 Oct 2026 14:49:16 +0000 Manifest this update: Wed 14 Oct 2026 14:44:16 +0000 Manifest next update: Sun 18 Oct 2026 00:01:16 +0000 Files and hashes: 1: 323430333a643963303a323a3a2f34382d3438203d3e20313337373330.roa (hash: 8AtmVxPyfg99YhJH0s1wWLM8GE+VM4pFN2d/cSoQXeA=) 2: DE3831D69587EC59C3002006198FD58A977ED1AD.crl (hash: Ls1/2b+n2oZex48THhhFoSLD+ZzIGW2NNd9tdm/Oiw0=) 3: 3130332e3132342e34382e302f32342d3234203d3e20313337373330.roa (hash: IJdUyzKY6sON6HIqic7qwxP6xVzVXKeLZ7w4umnpbRc=) 4: 323430333a643963303a3a2f34382d3438203d3e20313337373330.roa (hash: VPrOCsLkPUwzRM6lSxhL059qgm+Bdhv3YweeIJffRuY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:31:c1:aa:96:ee:6f:b0:14:03:e2:06:2f:f1:c7:f4:53:f3:47:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE3831D69587EC59C3002006198FD58A977ED1AD Validity Not Before: Oct 14 14:44:16 2026 GMT Not After : Oct 18 00:01:16 2026 GMT Subject: CN=3489137F1EB2A53416F3BB2D6D102AE24E09655D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:12:10:6c:dc:6e:42:d0:d2:f8:5b:9e:f5:49: 7d:49:50:eb:b2:4b:e1:3f:ac:bb:ac:b0:85:10:3f: 74:11:62:6a:3c:ec:01:aa:89:33:31:8d:3d:21:12: f5:3a:4a:a1:95:70:74:63:92:02:3e:91:42:57:97: 6e:b0:88:12:ef:ee:e1:fe:11:2c:2b:4a:a3:67:6c: f9:52:ae:63:6a:36:57:90:3c:7e:9a:76:f5:71:f6: 8c:cf:37:44:fb:3b:07:15:ab:92:5d:6f:e6:18:db: e0:ba:1f:58:cd:bf:3a:af:02:65:04:9f:ca:96:ba: 29:82:1e:41:d4:ff:3a:2c:b2:55:96:30:e4:72:39: 0f:f4:b2:12:e9:2b:7a:da:bd:5b:cd:e2:2d:ad:61: fe:a3:12:41:d6:bf:09:df:e3:a6:b1:0d:8a:d9:4a: 81:51:9a:e3:9b:59:3f:df:5c:38:d3:e8:e8:f1:5e: f4:da:36:e2:46:45:cd:df:b5:46:21:50:26:0d:ff: bd:00:05:06:58:2a:9b:3e:8b:bf:39:54:c5:99:4e: 82:b6:93:b2:99:ee:60:74:83:47:15:d3:6a:26:0b: 63:35:af:29:c8:b7:e9:4a:e0:1c:65:c2:99:d3:a4: 9d:8f:9f:b6:36:a4:60:69:c2:89:9c:87:d5:a3:6e: 8c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:89:13:7F:1E:B2:A5:34:16:F3:BB:2D:6D:10:2A:E2:4E:09:65:5D X509v3 Authority Key Identifier: keyid:DE:38:31:D6:95:87:EC:59:C3:00:20:06:19:8F:D5:8A:97:7E:D1:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE3831D69587EC59C3002006198FD58A977ED1AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347323393/0/DE3831D69587EC59C3002006198FD58A977ED1AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:aa:cd:67:b8:e5:d9:ae:64:95:fd:43:9b:e8:80:5f:22:3c: f3:72:2a:3c:97:f1:9e:ae:7d:c5:6a:31:c2:3f:8b:91:65:4f: 97:45:e3:79:c3:d8:02:0f:8b:7d:4a:f1:65:f3:fd:6d:df:09: 88:96:bf:14:f1:a5:43:04:c1:9e:31:fb:bb:83:5a:88:2e:ec: f9:38:e9:4f:47:da:78:e3:e4:c2:a2:e6:3d:2d:df:77:fb:2a: 7e:67:81:bb:4a:7c:ed:5d:7a:b3:69:90:5f:23:55:35:b8:86: 23:05:ed:be:97:1a:20:c2:fb:4b:5e:ba:46:70:cd:a9:b1:22: cd:c0:5a:b4:66:57:7e:59:4f:0f:3c:ef:9d:a6:4f:cb:ab:47: 02:15:43:9a:ec:69:33:cd:3a:c1:7d:b7:da:9e:a8:58:46:c7: b8:17:1e:61:eb:64:41:23:46:03:8e:63:d1:a1:2b:93:d4:d6: f0:86:c8:81:1f:fb:ff:f9:d0:34:23:36:64:eb:20:d8:0b:cb: e4:24:39:72:ff:51:36:d6:30:d3:b8:76:ff:86:0b:c9:f8:80: 06:7c:1e:b0:e1:0f:27:48:17:00:4a:29:73:6e:25:bd:dc:23: 49:61:c1:5a:3f:bc:f7:fa:eb:dd:c5:11:71:bf:40:ef:b5:1d: 0a:b3:64:c6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIzHBqpbub7AUA+IGL/HH9FPzR/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5 NzdFRDFBRDAeFw0yNjEwMTQxNDQ0MTZaFw0yNjEwMTgwMDAxMTZaMDMxMTAvBgNV BAMTKDM0ODkxMzdGMUVCMkE1MzQxNkYzQkIyRDZEMTAyQUUyNEUwOTY1NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtEhBs3G5C0NL4W571SX1JUOuy S+E/rLussIUQP3QRYmo87AGqiTMxjT0hEvU6SqGVcHRjkgI+kUJXl26wiBLv7uH+ ESwrSqNnbPlSrmNqNleQPH6advVx9ozPN0T7OwcVq5Jdb+YY2+C6H1jNvzqvAmUE n8qWuimCHkHU/zosslWWMORyOQ/0shLpK3ravVvN4i2tYf6jEkHWvwnf46axDYrZ SoFRmuObWT/fXDjT6OjxXvTaNuJGRc3ftUYhUCYN/70ABQZYKps+i785VMWZToK2 k7KZ7mB0g0cV02omC2M1rynIt+lK4BxlwpnTpJ2Pn7Y2pGBpwomch9WjboytAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNIkTfx6ypTQW87stbRAq4k4JZV0wHwYDVR0j BBgwFoAU3jgx1pWH7FnDACAGGY/Vipd+0a0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzMyMzM5My8wL0RFMzgzMUQ2OTU4N0VDNTlDMzAwMjAwNjE5OEZE NThBOTc3RUQxQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREUzODMxRDY5NTg3RUM1OUMzMDAyMDA2MTk4RkQ1OEE5NzdFRDFBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDczMjMzOTMvMC9ERTM4MzFENjk1ODdF QzU5QzMwMDIwMDYxOThGRDU4QTk3N0VEMUFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqrNZ7jl2a5k lf1Dm+iAXyI883IqPJfxnq59xWoxwj+LkWVPl0XjecPYAg+LfUrxZfP9bd8JiJa/ FPGlQwTBnjH7u4NaiC7s+TjpT0faeOPkwqLmPS3fd/sqfmeBu0p87V16s2mQXyNV NbiGIwXtvpcaIML7S166RnDNqbEizcBatGZXfllPDzzvnaZPy6tHAhVDmuxpM806 wX232p6oWEbHuBceYetkQSNGA45j0aErk9TW8IbIgR/7//nQNCM2ZOsg2AvL5CQ5 cv9RNtYw07h2/4YLyfiABnwesOEPJ0gXAEopc24lvdwjSWHBWj+89/rr3cURcb9A 77UdCrNkxg== -----END CERTIFICATE-----Generated at Thu Oct 15 02:04:42 2026 by rpki-client