$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft File: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft (raw, json) Hash identifier: NrxVYEqgk1A6p0gqMK/aGTMcvwELfG+uIy8Q9WJju9Q= Subject key identifier: 68:A7:72:2A:11:2F:23:46:23:3B:0B:92:12:D5:A4:16:98:D9:65:46 Authority key identifier: 5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 Certificate issuer: /CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Certificate serial: 408CC2E983A48C6CADFC1E6FBEFFEA5C60952851 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft Manifest number: 013D Signing time: Wed 14 Oct 2026 01:43:25 +0000 Manifest this update: Wed 14 Oct 2026 01:38:25 +0000 Manifest next update: Sat 17 Oct 2026 13:04:25 +0000 Files and hashes: 1: 323430333a6663303a3a2f33382d3338203d3e20313331353330.roa (hash: OWdg73kfq+IxC9cdjoFN1n6gGcBVxQM28yQqP4AzCnE=) 2: 3130332e39382e3136342e302f32322d3234203d3e20313331343832.roa (hash: LracsMaC+QrvCPKnHymzdJ0n+YFbpzw1xlf+RpV37Dg=) 3: 3130332e39382e3136342e302f32322d3234203d3e20333938373034.roa (hash: QF2+Jk348dEsMNNKX7v8nbsQSCZY3RPWr+U+z5ykE6Q=) 4: 323430333a6663303a3a2f33322d3338203d3e20313331353330.roa (hash: FxdZOlHBNNosbbc+VM2SsDSEtGaPa7cJThwHgjf0PW4=) 5: 5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl (hash: Sc+MKZEUsHRYwTEo8iXt3ofUp+VMf3RP9M2i3EdT0bE=) 6: 3130332e39382e3136342e302f32322d3234203d3e20313331353330.roa (hash: SUIM7Q/gKTRbtCC89bx/1rAOcJbC24/HcLWuMZ3Rb58=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:8c:c2:e9:83:a4:8c:6c:ad:fc:1e:6f:be:ff:ea:5c:60:95:28:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FC9ED42C0C65E1325089AE613864A6A06CEC140 Validity Not Before: Oct 14 01:38:25 2026 GMT Not After : Oct 17 13:04:25 2026 GMT Subject: CN=68A7722A112F2346233B0B9212D5A41698D96546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:86:6a:f6:06:96:e4:8d:ba:b8:8d:71:25:45: 65:06:ef:a1:7f:19:81:db:1b:d4:47:e6:18:0b:fc: 27:a7:bf:9c:95:18:60:7c:a6:0f:d8:9c:11:59:fd: a1:36:9c:8c:2a:78:53:1b:0a:5e:f9:b1:dd:46:23: ce:ee:b5:9d:5e:68:3f:c9:a5:6f:77:10:6a:68:6a: 3c:7f:6e:90:0f:5a:72:5b:22:28:65:ef:58:3a:bc: e0:eb:bb:b8:f4:cc:1c:74:a7:01:4d:ea:89:f7:53: 15:f2:16:cb:ed:0e:da:6f:f4:f8:85:e8:26:5a:24: a5:ae:ee:2d:d3:a2:71:3c:77:79:77:e3:a9:b4:d5: 36:a7:6a:77:dd:36:d4:cb:5a:8b:aa:b7:e0:17:03: aa:3f:a0:96:7e:19:ac:4e:48:7a:6a:8f:60:05:c8: 80:fa:48:b6:a9:0e:28:24:ab:e5:44:57:3f:2b:2b: d8:fd:72:5f:37:64:66:11:59:d2:8e:a2:01:30:1c: 06:97:c8:02:06:1e:a0:ce:a4:32:1e:7b:84:08:70: f9:96:d7:ab:5d:5a:f0:6f:56:12:89:ab:de:c8:2f: 37:94:cd:f5:da:22:f9:8e:4f:e2:6a:a5:d0:02:ee: ec:ae:34:47:5d:3c:ef:f9:81:23:c2:c8:14:ff:df: 8c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A7:72:2A:11:2F:23:46:23:3B:0B:92:12:D5:A4:16:98:D9:65:46 X509v3 Authority Key Identifier: keyid:5F:C9:ED:42:C0:C6:5E:13:25:08:9A:E6:13:86:4A:6A:06:CE:C1:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5FC9ED42C0C65E1325089AE613864A6A06CEC140.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577531394/0/5FC9ED42C0C65E1325089AE613864A6A06CEC140.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:af:05:09:46:6b:0b:5a:47:d7:78:e3:b8:46:22:bb:96:b1: fc:c6:3e:f9:45:02:8a:bc:23:46:1f:b0:d8:6f:3a:dc:a4:8d: 2c:b5:5b:71:2a:4d:5e:45:65:74:c8:a2:9a:dc:9e:ef:b1:80: 50:16:63:12:62:67:8f:9c:bc:85:85:19:dd:f0:a5:cf:3d:de: ee:7f:35:a0:5e:e1:12:4f:ea:25:7e:9c:c3:16:4a:c6:3e:04: 54:33:99:b4:bb:42:61:dd:b8:de:60:c6:d0:99:77:7e:96:7f: 20:2d:09:c6:48:e6:37:46:da:29:9f:c6:23:23:db:a2:4a:cb: 5b:ef:26:da:9c:1b:21:06:c9:fa:5f:83:1c:5b:d9:de:d1:7a: 5d:59:a3:33:fa:4b:11:51:69:a6:f5:f3:cd:c2:c6:49:04:76: 97:c0:5c:7d:34:0b:90:96:a8:6d:67:5a:d3:6c:a8:9a:5a:24: 1e:0b:28:50:0a:d9:a9:03:17:d7:ad:de:89:23:02:2a:82:9c: 8f:ac:9e:14:f4:72:df:25:32:14:cc:37:4b:be:2b:ca:ac:38: 1a:4d:e9:f3:77:26:49:b3:35:6e:83:4f:eb:d4:71:7d:43:89: 11:b9:99:01:cb:40:8e:6a:d6:00:ab:b4:25:29:34:c5:c6:d7: 0c:c9:c7:4b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQIzC6YOkjGyt/B5vvv/qXGCVKFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEw NkNFQzE0MDAeFw0yNjEwMTQwMTM4MjVaFw0yNjEwMTcxMzA0MjVaMDMxMTAvBgNV BAMTKDY4QTc3MjJBMTEyRjIzNDYyMzNCMEI5MjEyRDVBNDE2OThEOTY1NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRhmr2Bpbkjbq4jXElRWUG76F/ GYHbG9RH5hgL/Cenv5yVGGB8pg/YnBFZ/aE2nIwqeFMbCl75sd1GI87utZ1eaD/J pW93EGpoajx/bpAPWnJbIihl71g6vODru7j0zBx0pwFN6on3UxXyFsvtDtpv9PiF 6CZaJKWu7i3TonE8d3l346m01TananfdNtTLWouqt+AXA6o/oJZ+GaxOSHpqj2AF yID6SLapDigkq+VEVz8rK9j9cl83ZGYRWdKOogEwHAaXyAIGHqDOpDIee4QIcPmW 16tdWvBvVhKJq97ILzeUzfXaIvmOT+JqpdAC7uyuNEddPO/5gSPCyBT/34zlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaKdyKhEvI0YjOwuSEtWkFpjZZUYwHwYDVR0j BBgwFoAUX8ntQsDGXhMlCJrmE4ZKagbOwUAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzUzMTM5NC8wLzVGQzlFRDQyQzBDNjVFMTMyNTA4OUFFNjEzODY0 QTZBMDZDRUMxNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUZDOUVENDJDMEM2NUUxMzI1MDg5QUU2MTM4NjRBNkEwNkNFQzE0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc1MzEzOTQvMC81RkM5RUQ0MkMwQzY1 RTEzMjUwODlBRTYxMzg2NEE2QTA2Q0VDMTQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjK8FCUZrC1pH 13jjuEYiu5ax/MY++UUCirwjRh+w2G863KSNLLVbcSpNXkVldMiimtye77GAUBZj EmJnj5y8hYUZ3fClzz3e7n81oF7hEk/qJX6cwxZKxj4EVDOZtLtCYd243mDG0Jl3 fpZ/IC0JxkjmN0baKZ/GIyPbokrLW+8m2pwbIQbJ+l+DHFvZ3tF6XVmjM/pLEVFp pvXzzcLGSQR2l8BcfTQLkJaobWda02yomlokHgsoUArZqQMX163eiSMCKoKcj6ye FPRy3yUyFMw3S74ryqw4Gk3p83cmSbM1boNP69RxfUOJEbmZActAjmrWAKu0JSk0 xcbXDMnHSw== -----END CERTIFICATE-----Generated at Wed Oct 14 23:01:37 2026 by rpki-client