$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft File: D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft (raw, json) Hash identifier: 04j/VUj+8qbz6AEgKiTnx5RA5m7jE3utG3T4vskW7p4= Subject key identifier: DA:9C:3D:0D:1E:1A:77:BD:17:A9:28:6D:DB:3A:F2:B4:4C:E7:58:5A Authority key identifier: D2:FF:1D:7C:6D:F1:DD:77:5A:61:06:97:0D:05:FF:44:BC:AD:19:43 Certificate issuer: /CN=D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943 Certificate serial: 3FB6946011F55E471578FD819F8DA48C5E404FA0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft Manifest number: 013D Signing time: Wed 14 Oct 2026 21:49:36 +0000 Manifest this update: Wed 14 Oct 2026 21:44:36 +0000 Manifest next update: Sun 18 Oct 2026 03:55:36 +0000 Files and hashes: 1: 323430623a613030303a6663333a3a2f34382d3438203d3e20313531333033.roa (hash: TiSdjmUDUZ7Io/2Ke/Pu2qkV+pzBX0aVcs8lYCtTick=) 2: D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.crl (hash: 6zfV2XODNjTGha9OwUCSff0399Q4FJ7hlij3n/6XO2o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b6:94:60:11:f5:5e:47:15:78:fd:81:9f:8d:a4:8c:5e:40:4f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943 Validity Not Before: Oct 14 21:44:36 2026 GMT Not After : Oct 18 03:55:36 2026 GMT Subject: CN=DA9C3D0D1E1A77BD17A9286DDB3AF2B44CE7585A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:70:fa:ac:49:f5:f0:ec:04:d5:f4:9e:43:7c: 48:f3:62:b1:c1:60:32:06:c0:aa:5e:60:8e:b3:e2: d8:e8:cd:7f:60:be:69:32:a2:63:47:50:ad:87:7e: e9:be:fc:71:51:00:f2:ad:43:4c:30:52:cf:b9:f2: f0:ae:8e:ff:78:f7:1b:c2:d9:18:87:f8:38:7e:64: c8:24:4c:e5:6b:47:44:8e:dd:9f:02:e3:4f:5c:87: 64:9c:9c:e5:92:48:38:d3:81:8f:04:46:c7:35:6b: bb:a3:2b:1a:d2:f8:f8:10:5f:7a:d0:50:1d:f5:ec: c3:37:f9:89:38:ac:50:08:ac:95:69:83:b6:3a:9a: 59:6a:b6:aa:ef:e7:17:81:bd:74:75:ad:14:98:4c: 62:a6:43:f3:8c:3e:05:95:76:a2:0f:8f:9e:c3:21: c9:37:d8:fd:de:e4:3f:80:76:cb:b7:f4:93:31:a7: ad:01:88:03:b4:05:a8:19:31:1f:4b:7e:19:9e:31: ce:93:47:66:ed:2b:42:70:c7:18:ca:96:d7:b5:6f: c1:cb:5e:6b:82:de:f7:4d:90:bc:ee:11:52:27:ad: 00:8f:26:cf:18:d5:95:63:19:de:26:2d:a0:d5:56: 4c:3f:cc:29:e2:28:3c:48:74:8b:20:8b:27:f4:e5: f1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9C:3D:0D:1E:1A:77:BD:17:A9:28:6D:DB:3A:F2:B4:4C:E7:58:5A X509v3 Authority Key Identifier: keyid:D2:FF:1D:7C:6D:F1:DD:77:5A:61:06:97:0D:05:FF:44:BC:AD:19:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265551361/0/D2FF1D7C6DF1DD775A6106970D05FF44BCAD1943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b6:d7:21:39:3c:96:61:63:56:02:3e:05:dc:e0:b0:66:4c: da:26:df:fa:d8:e7:13:b6:58:77:5b:ff:a0:c5:bd:85:97:53: 83:98:b5:0a:a8:39:a6:b9:40:68:7c:f2:71:65:cf:72:5c:15: f3:81:65:b3:09:f7:3f:6a:f5:b6:73:e6:9e:d3:65:fd:25:49: 86:e8:01:66:16:6e:a8:8a:59:af:8f:45:d3:5e:0b:a7:83:bf: cb:2f:5b:b8:a7:a9:5f:be:26:ff:25:6f:bf:48:ce:42:22:27: 9a:41:40:6f:17:48:d5:77:2c:5f:15:7f:c7:cd:04:9f:93:6e: fa:df:bb:a2:f2:fc:b8:51:d9:79:bb:38:19:64:af:82:e0:da: 06:de:2c:84:0a:55:6e:e5:40:15:ad:3f:43:97:c5:13:b7:6f: bc:a4:60:a5:4e:80:eb:98:48:32:a9:9c:61:64:4c:fd:d0:4a: 68:85:16:fb:84:f5:c7:d3:3a:23:79:1f:90:4a:f4:50:f1:10: 21:8b:84:05:32:f2:ad:54:1f:86:60:2e:56:2a:84:bc:f4:0a: 85:86:41:fd:85:af:4e:ea:7f:a0:d1:51:59:25:bb:cf:61:e6: 35:71:50:83:35:64:79:32:69:bb:88:9a:8a:f1:dd:b7:fa:d5: ed:4f:02:9c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUP7aUYBH1XkcVeP2Bn42kjF5AT6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJGRjFEN0M2REYxREQ3NzVBNjEwNjk3MEQwNUZGNDRC Q0FEMTk0MzAeFw0yNjEwMTQyMTQ0MzZaFw0yNjEwMTgwMzU1MzZaMDMxMTAvBgNV BAMTKERBOUMzRDBEMUUxQTc3QkQxN0E5Mjg2RERCM0FGMkI0NENFNzU4NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdcPqsSfXw7ATV9J5DfEjzYrHB YDIGwKpeYI6z4tjozX9gvmkyomNHUK2Hfum+/HFRAPKtQ0wwUs+58vCujv949xvC 2RiH+Dh+ZMgkTOVrR0SO3Z8C409ch2ScnOWSSDjTgY8ERsc1a7ujKxrS+PgQX3rQ UB317MM3+Yk4rFAIrJVpg7Y6mllqtqrv5xeBvXR1rRSYTGKmQ/OMPgWVdqIPj57D Ick32P3e5D+Adsu39JMxp60BiAO0BagZMR9LfhmeMc6TR2btK0JwxxjKlte1b8HL XmuC3vdNkLzuEVInrQCPJs8Y1ZVjGd4mLaDVVkw/zCniKDxIdIsgiyf05fEbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2pw9DR4ad70XqSht2zrytEznWFowHwYDVR0j BBgwFoAU0v8dfG3x3XdaYQaXDQX/RLytGUMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTU1MTM2MS8wL0QyRkYxRDdDNkRGMURENzc1QTYxMDY5NzBEMDVG RjQ0QkNBRDE5NDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDJGRjFEN0M2REYxREQ3NzVBNjEwNjk3MEQwNUZGNDRCQ0FEMTk0My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU1NTEzNjEvMC9EMkZGMUQ3QzZERjFE RDc3NUE2MTA2OTcwRDA1RkY0NEJDQUQxOTQzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbbXITk8lmFj VgI+BdzgsGZM2ibf+tjnE7ZYd1v/oMW9hZdTg5i1Cqg5prlAaHzycWXPclwV84Fl swn3P2r1tnPmntNl/SVJhugBZhZuqIpZr49F014Lp4O/yy9buKepX74m/yVvv0jO QiInmkFAbxdI1XcsXxV/x80En5Nu+t+7ovL8uFHZebs4GWSvguDaBt4shApVbuVA Fa0/Q5fFE7dvvKRgpU6A65hIMqmcYWRM/dBKaIUW+4T1x9M6I3kfkEr0UPEQIYuE BTLyrVQfhmAuViqEvPQKhYZB/YWvTup/oNFRWSW7z2HmNXFQgzVkeTJpu4iaivHd t/rV7U8CnA== -----END CERTIFICATE-----Generated at Thu Oct 15 03:12:33 2026 by rpki-client