$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft File: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft (raw, json) Hash identifier: gYFmxF3WIDS1OJb+vJNPEPM3Wkvd7w37KDmRVjMZ7GE= Subject key identifier: 42:9A:41:6F:BC:86:A8:CC:E1:A6:5D:33:6B:DF:8E:BE:32:55:4C:DD Authority key identifier: 39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B Certificate issuer: /CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Certificate serial: 6CE109A68443934D7213CCA59A1E50B0442DA4CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft Manifest number: 013C Signing time: Mon 12 Oct 2026 15:07:04 +0000 Manifest this update: Mon 12 Oct 2026 15:02:04 +0000 Manifest next update: Thu 15 Oct 2026 15:58:04 +0000 Files and hashes: 1: 39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl (hash: iCW6Vua+1X0ve2t6INpNHAUJHTkmkVhv6aMBCLvGsYs=) 2: 3130332e3130392e38382e302f32322d3232203d3e20313531323532.roa (hash: UzrNcj85nq6S4JL6UgoFrAEyZtLfoknYga9JtSYLFpw=) 3: 323430323a373734303a3a2f33322d3332203d3e20313531323532.roa (hash: xjYvA9DRxUqGQxnlDXmqrpquoSry4d1r5+lluE63kzU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:e1:09:a6:84:43:93:4d:72:13:cc:a5:9a:1e:50:b0:44:2d:a4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39D60E5D03C07E40791B79D9E045DEE1FD25B37B Validity Not Before: Oct 12 15:02:04 2026 GMT Not After : Oct 15 15:58:04 2026 GMT Subject: CN=429A416FBC86A8CCE1A65D336BDF8EBE32554CDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:97:62:1a:88:74:19:11:a6:a1:22:d8:f9:3d: 80:a0:fe:df:77:12:9e:b9:39:6a:49:fe:00:fc:43: 15:b5:a9:26:d9:b0:4b:8f:03:87:79:2a:13:4c:5b: e8:e5:4b:48:76:b4:bc:5e:4c:65:8a:1e:ff:15:a6: 5d:dc:b3:50:46:b5:e1:84:5d:bb:d0:85:2f:fa:d4: 36:ed:03:6f:4d:d2:5d:cd:69:e2:62:c5:42:bc:b3: 66:5a:73:6d:f6:46:96:07:c6:6f:bb:ed:b6:93:90: 7c:62:51:1a:47:02:56:0a:18:4e:13:52:38:e9:f3: 6b:6d:b5:51:3e:11:4d:74:8a:8c:b0:f2:f1:73:22: c5:3f:0c:e4:0e:2a:8a:fa:75:9a:19:00:0f:00:59: 5e:2f:f1:50:16:92:fe:4a:6d:bd:40:13:20:8e:b8: 85:0f:f7:ef:87:7d:45:68:86:4e:10:1b:f5:3e:89: eb:68:0e:71:00:f9:a0:04:e2:d4:b3:b6:3c:8c:4c: 06:bb:be:52:de:04:4f:c5:f8:41:1e:43:65:bc:b0: 44:05:a1:49:f3:b8:b5:a7:85:56:9b:f0:df:81:90: e5:57:19:fc:08:bd:68:76:fe:51:ba:bd:b1:17:a3: 65:96:fb:d1:3c:ce:f9:91:d9:9c:28:ba:83:dd:a3: 32:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9A:41:6F:BC:86:A8:CC:E1:A6:5D:33:6B:DF:8E:BE:32:55:4C:DD X509v3 Authority Key Identifier: keyid:39:D6:0E:5D:03:C0:7E:40:79:1B:79:D9:E0:45:DE:E1:FD:25:B3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972074499/0/39D60E5D03C07E40791B79D9E045DEE1FD25B37B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:59:00:2a:f7:e0:b1:26:18:95:11:12:a9:ec:82:9e:d5:6e: 62:77:ff:ae:10:f9:12:8f:c3:b1:2b:ec:14:f3:53:38:e1:69: 66:6c:e4:b5:4a:de:ec:c7:80:ed:d0:db:00:39:a5:af:87:8f: 22:af:42:d7:df:fb:da:ab:72:bf:4a:e6:bc:ef:63:d7:7d:c8: f2:bf:e5:9d:49:ff:68:52:c8:44:62:2b:e3:cf:1a:61:76:20: 4e:e1:d3:c1:4d:75:da:22:35:ff:6e:03:df:b3:98:68:b4:10: 44:03:75:5b:cc:8d:ea:4f:26:7b:86:f8:a2:c3:73:59:88:d4: 08:1a:4a:8f:d4:b0:e6:a4:9d:3e:f0:4f:d5:ee:a8:e4:42:52: 87:21:2c:3b:c4:ec:e8:b0:08:58:bc:b2:31:dc:a8:ac:2e:49: c9:d0:b8:6f:05:b6:ae:cf:cd:32:54:41:54:28:4d:4a:b4:8d: 13:6d:92:6a:d3:a5:a1:f3:00:68:a8:56:49:67:8b:a6:e8:ad: 81:d5:fc:62:65:9d:fb:4c:d3:4c:56:01:04:7a:56:a3:55:89: 5e:85:02:da:78:f2:a4:23:f7:a4:c7:8d:c1:87:6f:f5:0f:42: 2a:8a:82:e5:c6:c5:10:bc:b5:69:c4:f1:b5:42:22:3b:01:27: 33:68:39:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbOEJpoRDk01yE8ylmh5QsEQtpM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFG RDI1QjM3QjAeFw0yNjEwMTIxNTAyMDRaFw0yNjEwMTUxNTU4MDRaMDMxMTAvBgNV BAMTKDQyOUE0MTZGQkM4NkE4Q0NFMUE2NUQzMzZCREY4RUJFMzI1NTRDREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkl2IaiHQZEaahItj5PYCg/t93 Ep65OWpJ/gD8QxW1qSbZsEuPA4d5KhNMW+jlS0h2tLxeTGWKHv8Vpl3cs1BGteGE XbvQhS/61DbtA29N0l3NaeJixUK8s2Zac232RpYHxm+77baTkHxiURpHAlYKGE4T Ujjp82tttVE+EU10ioyw8vFzIsU/DOQOKor6dZoZAA8AWV4v8VAWkv5Kbb1AEyCO uIUP9++HfUVohk4QG/U+ietoDnEA+aAE4tSztjyMTAa7vlLeBE/F+EEeQ2W8sEQF oUnzuLWnhVab8N+BkOVXGfwIvWh2/lG6vbEXo2WW+9E8zvmR2ZwouoPdozJTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQppBb7yGqMzhpl0za9+OvjJVTN0wHwYDVR0j BBgwFoAUOdYOXQPAfkB5G3nZ4EXe4f0ls3swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjA3NDQ5OS8wLzM5RDYwRTVEMDNDMDdFNDA3OTFCNzlEOUUwNDVE RUUxRkQyNUIzN0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzlENjBFNUQwM0MwN0U0MDc5MUI3OUQ5RTA0NURFRTFGRDI1QjM3Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzIwNzQ0OTkvMC8zOUQ2MEU1RDAzQzA3 RTQwNzkxQjc5RDlFMDQ1REVFMUZEMjVCMzdCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlkAKvfgsSYY lRESqeyCntVuYnf/rhD5Eo/DsSvsFPNTOOFpZmzktUre7MeA7dDbADmlr4ePIq9C 19/72qtyv0rmvO9j133I8r/lnUn/aFLIRGIr488aYXYgTuHTwU112iI1/24D37OY aLQQRAN1W8yN6k8me4b4osNzWYjUCBpKj9Sw5qSdPvBP1e6o5EJShyEsO8Ts6LAI WLyyMdyorC5JydC4bwW2rs/NMlRBVChNSrSNE22SatOlofMAaKhWSWeLpuitgdX8 YmWd+0zTTFYBBHpWo1WJXoUC2njypCP3pMeNwYdv9Q9CKoqC5cbFELy1acTxtUIi OwEnM2g5Sg== -----END CERTIFICATE-----Generated at Tue Oct 13 22:49:43 2026 by rpki-client