$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft File: B7CD3069B4897C94D73E4A5156A5BB580263686D.mft (raw, json) Hash identifier: oZ2Yxfm9WnWFgwFcXY5tRAL3QbmhnyUQrJJEM9yxvrI= Subject key identifier: D1:EC:4D:A0:13:8F:FB:49:CA:94:C1:F2:56:55:E2:BD:30:09:AA:EB Authority key identifier: B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D Certificate issuer: /CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Certificate serial: 781C91A38E88ABDA1A15529CBC938ACD23CB5AA8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft Manifest number: 013D Signing time: Wed 14 Oct 2026 08:28:51 +0000 Manifest this update: Wed 14 Oct 2026 08:23:51 +0000 Manifest next update: Sat 17 Oct 2026 17:17:51 +0000 Files and hashes: 1: 323430323a333465303a3a2f33322d3634203d3e20313337373331.roa (hash: Wbeu0hKMIHoSh2P7VuIFvW2KrEjA7clBu32fGJbvhD0=) 2: B7CD3069B4897C94D73E4A5156A5BB580263686D.crl (hash: do7B9aRVMlUMHSJf1Er9z4ODPHOdUpU2CkRCeLnmgxc=) 3: 3130332e36322e38392e302f32342d3234203d3e20313337373331.roa (hash: pM31wts4Oaso1hrJBK0dRasFzd5sL5iB5ioXtCHk96o=) 4: 3130332e36322e38382e302f32342d3234203d3e20313337373331.roa (hash: 8Xb1CHZIDmh88wJbpKG5TbT7TsAK7LQOv8M6QxQppao=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 17:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1c:91:a3:8e:88:ab:da:1a:15:52:9c:bc:93:8a:cd:23:cb:5a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7CD3069B4897C94D73E4A5156A5BB580263686D Validity Not Before: Oct 14 08:23:51 2026 GMT Not After : Oct 17 17:17:51 2026 GMT Subject: CN=D1EC4DA0138FFB49CA94C1F25655E2BD3009AAEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:65:93:78:58:18:58:3b:f3:b4:5f:7f:eb:ec: 1b:ec:97:d4:f5:02:db:96:0a:b5:8b:b7:7c:1c:20: b3:9f:b1:45:a8:ee:19:ae:da:77:f2:80:2a:dd:d6: 4f:f7:e3:cf:b7:b1:13:62:8a:7d:f0:46:1b:17:c2: 5b:c9:32:6c:48:05:4c:9a:23:24:2a:3c:ef:b8:25: ed:f2:e8:81:4a:10:41:c3:4f:5c:7f:e0:88:f8:80: 7b:4c:37:7d:96:1c:79:54:50:08:92:30:d0:b6:a8: 49:4b:49:bf:e6:0d:19:a1:7d:22:fc:6f:33:e8:11: a0:eb:59:cd:a1:c4:52:7b:32:4d:c0:1d:26:43:b3: ff:7a:91:6d:c3:1a:c5:22:d6:9d:5d:88:3f:8e:1d: a3:20:9e:85:a4:ea:4f:fb:62:80:52:6d:53:a6:ab: 19:bb:4f:cf:b7:af:af:b7:56:6d:79:84:07:51:0a: e8:c4:d1:fd:c4:da:eb:17:da:47:4c:4c:8b:2e:d4: 23:a3:a4:3e:6c:48:98:e7:7b:66:a8:07:31:12:51: e2:8f:57:fe:1f:f5:46:d1:33:cc:38:b1:12:eb:da: c1:6b:57:56:8c:83:0a:0d:5d:ab:6b:cc:22:60:4d: b3:4a:bc:6a:62:29:d8:22:82:1b:80:08:43:05:18: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EC:4D:A0:13:8F:FB:49:CA:94:C1:F2:56:55:E2:BD:30:09:AA:EB X509v3 Authority Key Identifier: keyid:B7:CD:30:69:B4:89:7C:94:D7:3E:4A:51:56:A5:BB:58:02:63:68:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B7CD3069B4897C94D73E4A5156A5BB580263686D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/0/B7CD3069B4897C94D73E4A5156A5BB580263686D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:42:de:81:2b:b1:6b:fc:b2:af:08:ca:9c:89:6d:85:31:b8: 06:aa:92:0f:40:a1:8f:13:59:36:63:cf:db:5c:4e:8a:a7:7d: 9e:dd:3e:6c:a4:8a:c3:17:2d:0c:a5:7d:90:2c:be:3d:8e:2a: fc:f2:c7:ec:72:86:b2:11:57:e7:12:02:5e:e9:68:1e:7c:40: a8:22:f6:a6:a9:12:11:f4:6a:76:00:3e:aa:5f:0c:a1:5c:76: 93:89:ae:04:de:7f:3d:53:19:84:ee:67:1d:b8:44:e0:82:c8: 76:ce:63:86:5c:cc:d7:c8:f2:6f:ef:8e:22:5e:c3:42:c1:28: 9d:83:64:d7:1c:b0:87:c7:a5:76:41:96:3a:ea:ed:bd:8a:b6: c6:a3:cc:17:13:d0:1f:86:26:35:8e:a8:82:9b:91:16:27:cb: 5d:d1:cf:d0:39:9d:c9:17:83:62:b4:c6:50:a0:b0:fd:a8:8c: 84:88:2a:dc:a9:81:20:14:f4:2e:0c:e4:39:62:fb:a4:34:c1: 1b:ad:f0:ef:0d:51:40:01:36:7e:8b:19:05:4a:a8:ec:b4:96: 2f:ec:af:7a:f3:fc:d9:ca:3e:36:2a:6d:b6:ff:af:31:da:dc: 73:e4:2e:92:c7:72:7a:00:db:43:dc:97:09:aa:c1:0c:ab:a5: 2b:98:90:fa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeByRo46Iq9oaFVKcvJOKzSPLWqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgw MjYzNjg2RDAeFw0yNjEwMTQwODIzNTFaFw0yNjEwMTcxNzE3NTFaMDMxMTAvBgNV BAMTKEQxRUM0REEwMTM4RkZCNDlDQTk0QzFGMjU2NTVFMkJEMzAwOUFBRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXZZN4WBhYO/O0X3/r7Bvsl9T1 AtuWCrWLt3wcILOfsUWo7hmu2nfygCrd1k/348+3sRNiin3wRhsXwlvJMmxIBUya IyQqPO+4Je3y6IFKEEHDT1x/4Ij4gHtMN32WHHlUUAiSMNC2qElLSb/mDRmhfSL8 bzPoEaDrWc2hxFJ7Mk3AHSZDs/96kW3DGsUi1p1diD+OHaMgnoWk6k/7YoBSbVOm qxm7T8+3r6+3Vm15hAdRCujE0f3E2usX2kdMTIsu1COjpD5sSJjne2aoBzESUeKP V/4f9UbRM8w4sRLr2sFrV1aMgwoNXatrzCJgTbNKvGpiKdgighuACEMFGHAXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0exNoBOP+0nKlMHyVlXivTAJquswHwYDVR0j BBgwFoAUt80wabSJfJTXPkpRVqW7WAJjaG0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8wL0I3Q0QzMDY5QjQ4OTdDOTRENzNFNEE1MTU2QTVC QjU4MDI2MzY4NkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjdDRDMwNjlCNDg5N0M5NEQ3M0U0QTUxNTZBNUJCNTgwMjYzNjg2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMC9CN0NEMzA2OUI0ODk3 Qzk0RDczRTRBNTE1NkE1QkI1ODAyNjM2ODZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANELegSuxa/yy rwjKnIlthTG4BqqSD0ChjxNZNmPP21xOiqd9nt0+bKSKwxctDKV9kCy+PY4q/PLH 7HKGshFX5xICXuloHnxAqCL2pqkSEfRqdgA+ql8MoVx2k4muBN5/PVMZhO5nHbhE 4ILIds5jhlzM18jyb++OIl7DQsEonYNk1xywh8eldkGWOurtvYq2xqPMFxPQH4Ym NY6ogpuRFifLXdHP0DmdyReDYrTGUKCw/aiMhIgq3KmBIBT0LgzkOWL7pDTBG63w 7w1RQAE2fosZBUqo7LSWL+yvevP82co+Nipttv+vMdrcc+QuksdyegDbQ9yXCarB DKulK5iQ+g== -----END CERTIFICATE-----Generated at Thu Oct 15 10:53:53 2026 by rpki-client