$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft File: F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft (raw, json) Hash identifier: NJqcxJpnPQ5F60AXcTBGTWkQz4UNUSecn2FM05Tqe5A= Subject key identifier: EF:01:09:DC:77:D5:6F:4D:4D:C3:CB:8F:CE:89:72:46:A5:FE:FC:33 Authority key identifier: F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 Certificate issuer: /CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Certificate serial: 1E3DA40742C310CD2C1C2A05E3FAF7D20DDEB765 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft Manifest number: 013D Signing time: Tue 13 Oct 2026 08:27:53 +0000 Manifest this update: Tue 13 Oct 2026 08:22:53 +0000 Manifest next update: Fri 16 Oct 2026 11:15:53 +0000 Files and hashes: 1: F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl (hash: MtZ2J9C0Z4vy9bC6qlqCb7L5KMl4cSVqB2RXdhY041Y=) 2: 3130332e322e3138382e302f32332d3233203d3e20313436373838.roa (hash: 1mZLsbSQDgVY9UCD1VPGrkN6C62vdnF4KG0dgCvVkDM=) 3: 323430303a663836303a3a2f33322d3332203d3e20313436373838.roa (hash: bhAt8cX8amjXlALbrVpoF7u5oi22Rc5T2VUlEjgtt+k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 11:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3d:a4:07:42:c3:10:cd:2c:1c:2a:05:e3:fa:f7:d2:0d:de:b7:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0AFF362C7B09147F5C64351216FBEB8C95C6773 Validity Not Before: Oct 13 08:22:53 2026 GMT Not After : Oct 16 11:15:53 2026 GMT Subject: CN=EF0109DC77D56F4D4DC3CB8FCE897246A5FEFC33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d5:b8:9f:2d:0d:78:c0:41:83:bb:92:19:25: b3:45:81:27:30:72:db:3b:58:7c:1a:6a:90:30:78: 10:c1:fd:ab:df:8e:51:75:d9:f8:40:49:27:c4:e1: 9b:6b:ca:47:13:a4:d2:31:18:50:31:a1:4b:2f:17: b6:bf:37:1d:7b:0c:89:f2:bf:c7:db:da:89:df:44: 42:e8:3b:1e:ba:41:56:d9:27:91:a7:03:93:88:cc: 40:76:d4:7e:47:97:7a:52:99:b0:20:d1:5c:db:6d: 31:08:ef:78:f2:06:fe:65:1e:38:88:cb:a2:a0:f6: 68:a3:fd:2e:fb:ae:0e:90:7a:0a:f1:ee:28:65:3e: 11:21:63:c9:4e:14:1d:e9:01:a3:d4:49:99:a5:8a: c1:71:a5:bf:84:62:07:2f:15:fb:38:a3:52:97:da: 40:a6:f0:f2:de:4a:f8:71:8d:6c:51:86:4b:4c:4f: 58:6f:8e:b5:c9:a6:6a:2d:7d:d2:8e:a7:da:42:ac: ad:2f:ba:e3:be:c3:1e:99:ae:ae:20:ae:2d:bb:37: 69:b1:c0:87:c0:68:70:81:fa:5e:ce:b6:35:13:89: 77:af:29:a9:f8:06:d8:18:09:87:e9:57:8a:49:39: a5:31:23:d0:ca:80:9c:ed:14:59:35:f6:b5:61:29: a9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:01:09:DC:77:D5:6F:4D:4D:C3:CB:8F:CE:89:72:46:A5:FE:FC:33 X509v3 Authority Key Identifier: keyid:F0:AF:F3:62:C7:B0:91:47:F5:C6:43:51:21:6F:BE:B8:C9:5C:67:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0AFF362C7B09147F5C64351216FBEB8C95C6773.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345888258/0/F0AFF362C7B09147F5C64351216FBEB8C95C6773.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f9:b3:ed:30:6f:f1:96:80:3b:a0:54:5e:ae:73:4b:2e:74: 1b:51:1c:99:43:aa:5c:85:f7:de:8d:1c:53:eb:02:d4:a4:9f: e4:e5:1a:72:4f:70:51:00:c3:29:cc:51:9d:aa:19:58:6f:28: 2c:41:1d:2e:66:4c:72:c9:d4:54:47:ee:4b:4d:5b:5a:01:f7: 26:fb:14:aa:a3:8f:a4:4b:d0:f5:30:fd:ed:21:fe:49:7d:56: e5:24:e8:e7:be:b4:2c:3e:02:76:af:1f:2c:81:28:66:86:ed: 34:87:e0:8f:c2:cd:5d:37:f5:b2:14:20:88:53:e0:5e:1b:75: 3e:1c:37:04:22:cc:2e:a6:8c:75:8c:23:97:f5:2c:b4:af:9a: c8:87:3e:e2:18:24:ba:26:7a:bd:15:36:d6:a2:a2:e3:d3:57: 94:ba:97:50:49:7d:41:85:0f:09:ec:18:09:a1:2e:03:e6:41: 51:2c:8a:41:79:ab:ec:af:df:26:25:6e:00:a2:bb:91:fd:d0: 6f:57:be:f9:08:3e:01:f6:9f:eb:3a:9b:17:8f:63:0e:ce:ba: 18:be:3b:9a:d1:30:fc:c5:8c:b5:9a:a9:95:b4:5c:1c:63:0a: e4:c2:88:1e:cd:bd:40:62:f2:79:68:a4:1f:93:2b:bb:f3:aa: bf:d3:ce:45 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHj2kB0LDEM0sHCoF4/r30g3et2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhD OTVDNjc3MzAeFw0yNjEwMTMwODIyNTNaFw0yNjEwMTYxMTE1NTNaMDMxMTAvBgNV BAMTKEVGMDEwOURDNzdENTZGNEQ0REMzQ0I4RkNFODk3MjQ2QTVGRUZDMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM1bifLQ14wEGDu5IZJbNFgScw cts7WHwaapAweBDB/avfjlF12fhASSfE4ZtrykcTpNIxGFAxoUsvF7a/Nx17DIny v8fb2onfRELoOx66QVbZJ5GnA5OIzEB21H5Hl3pSmbAg0VzbbTEI73jyBv5lHjiI y6Kg9mij/S77rg6Qegrx7ihlPhEhY8lOFB3pAaPUSZmlisFxpb+EYgcvFfs4o1KX 2kCm8PLeSvhxjWxRhktMT1hvjrXJpmotfdKOp9pCrK0vuuO+wx6Zrq4gri27N2mx wIfAaHCB+l7OtjUTiXevKan4BtgYCYfpV4pJOaUxI9DKgJztFFk19rVhKalrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7wEJ3HfVb01Nw8uPzolyRqX+/DMwHwYDVR0j BBgwFoAU8K/zYsewkUf1xkNRIW++uMlcZ3MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTg4ODI1OC8wL0YwQUZGMzYyQzdCMDkxNDdGNUM2NDM1MTIxNkZC RUI4Qzk1QzY3NzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBBRkYzNjJDN0IwOTE0N0Y1QzY0MzUxMjE2RkJFQjhDOTVDNjc3My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4ODgyNTgvMC9GMEFGRjM2MkM3QjA5 MTQ3RjVDNjQzNTEyMTZGQkVCOEM5NUM2NzczLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvmz7TBv8ZaA O6BUXq5zSy50G1EcmUOqXIX33o0cU+sC1KSf5OUack9wUQDDKcxRnaoZWG8oLEEd LmZMcsnUVEfuS01bWgH3JvsUqqOPpEvQ9TD97SH+SX1W5STo5760LD4Cdq8fLIEo ZobtNIfgj8LNXTf1shQgiFPgXht1Phw3BCLMLqaMdYwjl/UstK+ayIc+4hgkuiZ6 vRU21qKi49NXlLqXUEl9QYUPCewYCaEuA+ZBUSyKQXmr7K/fJiVuAKK7kf3Qb1e+ +Qg+Afaf6zqbF49jDs66GL47mtEw/MWMtZqplbRcHGMK5MKIHs29QGLyeWikH5Mr u/Oqv9PORQ== -----END CERTIFICATE-----Generated at Wed Oct 14 08:53:44 2026 by rpki-client