$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft File: E3993DB092F827CDCF711046B493411A00A72701.mft (raw, json) Hash identifier: hrl0F6msR5umsbrtlK9ctSLx65o6hpj4XbKG3iOS+Zw= Subject key identifier: 94:10:4A:8D:F3:D0:54:5A:74:B0:DF:7B:6E:AD:1E:BA:B4:BB:EA:8F Authority key identifier: E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 Certificate issuer: /CN=E3993DB092F827CDCF711046B493411A00A72701 Certificate serial: 2D3FDE0218695B02CEDF2F7AC30F039FA6E0A21B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft Manifest number: 013F Signing time: Fri 16 Oct 2026 17:37:56 +0000 Manifest this update: Fri 16 Oct 2026 17:32:56 +0000 Manifest next update: Mon 19 Oct 2026 18:39:56 +0000 Files and hashes: 1: E3993DB092F827CDCF711046B493411A00A72701.crl (hash: Dwa3m34bSq+DQxzYe1Hfjn70/x7tbf6sRV8Kh0Wy97o=) 2: 3133382e3235322e37322e302f32342d3234203d3e20313337373331.roa (hash: UQKPf2S3sGHCJlse2YLd/IC42+k7YICa9NGSQPIobpw=) 3: 3133382e3235322e37332e302f32342d3234203d3e20313337373331.roa (hash: BYAXVTxfgLWzT4RgbXwqdG0dnJo1tFwF8NnGu6h4glA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 18:39:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:3f:de:02:18:69:5b:02:ce:df:2f:7a:c3:0f:03:9f:a6:e0:a2:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3993DB092F827CDCF711046B493411A00A72701 Validity Not Before: Oct 16 17:32:56 2026 GMT Not After : Oct 19 18:39:56 2026 GMT Subject: CN=94104A8DF3D0545A74B0DF7B6EAD1EBAB4BBEA8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6d:c4:cc:4c:ad:b3:84:44:2e:a7:3f:e0:10: 30:4e:47:da:5e:3b:51:94:be:b9:5c:da:fd:62:7e: f5:ac:6c:6b:16:0b:df:c7:25:fd:3c:7d:e6:8e:3a: 5f:6f:51:c4:0d:69:d0:08:1c:95:1c:ec:f0:11:cf: 4f:9e:c6:d1:94:15:a6:27:d0:4b:26:17:6d:d9:0d: 99:61:38:b5:48:ab:fa:87:51:ce:fc:00:78:91:50: 0c:10:70:d3:65:2b:a1:2b:30:8f:b0:c3:05:07:e0: 7a:7a:3c:79:99:7e:a4:bf:e6:ed:22:c3:c5:35:41: 73:35:d4:89:01:2a:bb:2c:45:57:72:e8:b3:5f:03: 4d:b6:6b:fe:9f:0e:84:7f:87:9a:4d:0b:a1:69:7b: b1:09:03:39:16:33:6d:aa:78:12:6a:80:21:9e:8e: da:50:c9:10:aa:8d:7f:1c:3d:4a:41:08:06:32:d1: 23:ef:ee:5c:c3:71:c5:e5:77:77:b4:d8:07:49:3c: 36:a0:51:dd:87:28:62:80:2e:f5:14:76:25:1e:1d: 9c:6b:fa:57:c1:d7:f4:e9:79:4b:a0:f7:91:0e:8c: 76:45:37:87:38:18:84:d8:11:c4:e7:98:99:a7:51: 23:95:f8:4e:0b:88:38:09:02:7c:53:fe:aa:0d:aa: ee:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:10:4A:8D:F3:D0:54:5A:74:B0:DF:7B:6E:AD:1E:BA:B4:BB:EA:8F X509v3 Authority Key Identifier: keyid:E3:99:3D:B0:92:F8:27:CD:CF:71:10:46:B4:93:41:1A:00:A7:27:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/E3993DB092F827CDCF711046B493411A00A72701.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588335524839425/1/E3993DB092F827CDCF711046B493411A00A72701.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8c:34:fe:ec:40:52:76:0f:f3:78:8b:d7:ee:cb:2b:fc:02: be:2b:5f:2a:bd:e0:4e:3d:a5:83:2f:85:0e:e2:00:28:1e:3e: 2f:5b:8a:81:96:55:ae:08:26:ec:9a:96:4a:80:5e:83:24:78: 93:1c:df:20:6f:2f:4f:54:2c:b3:87:2f:f3:70:f0:2b:d9:54: b3:64:a7:75:34:f2:a9:c0:fe:1c:44:22:f3:64:e9:f4:d0:e1: ba:c5:15:a4:35:5d:53:0a:6a:c6:bc:2f:75:43:aa:82:a8:37: 63:51:55:84:1d:f5:c4:f9:24:dc:09:88:04:99:ec:f2:3f:f1: 1f:37:46:e7:3a:2c:b9:e1:58:42:12:ef:94:f3:4e:73:e0:0b: b4:25:db:c8:46:86:9c:83:5c:6e:b7:53:ab:e2:e0:1e:af:91: 50:78:8a:4c:45:68:71:85:e5:ca:52:a4:db:81:92:ab:41:db: d9:01:5e:94:7b:66:d0:d8:32:d1:db:fe:b9:7e:f0:8b:83:69: bb:3a:82:71:8d:4a:f6:1a:82:34:17:bf:de:c8:d4:99:44:9e: 59:74:75:57:36:98:d3:8f:ca:26:34:38:f2:d8:85:83:3f:23: 61:b3:7d:1c:e2:a8:37:79:c0:73:06:c2:68:79:31:5c:6e:cc: 95:82:4f:b5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULT/eAhhpWwLO3y96ww8Dn6bgohswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEw MEE3MjcwMTAeFw0yNjEwMTYxNzMyNTZaFw0yNjEwMTkxODM5NTZaMDMxMTAvBgNV BAMTKDk0MTA0QThERjNEMDU0NUE3NEIwREY3QjZFQUQxRUJBQjRCQkVBOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYbcTMTK2zhEQupz/gEDBOR9pe O1GUvrlc2v1ifvWsbGsWC9/HJf08feaOOl9vUcQNadAIHJUc7PARz0+extGUFaYn 0EsmF23ZDZlhOLVIq/qHUc78AHiRUAwQcNNlK6ErMI+wwwUH4Hp6PHmZfqS/5u0i w8U1QXM11IkBKrssRVdy6LNfA022a/6fDoR/h5pNC6Fpe7EJAzkWM22qeBJqgCGe jtpQyRCqjX8cPUpBCAYy0SPv7lzDccXld3e02AdJPDagUd2HKGKALvUUdiUeHZxr +lfB1/TpeUug95EOjHZFN4c4GITYEcTnmJmnUSOV+E4LiDgJAnxT/qoNqu77AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlBBKjfPQVFp0sN97bq0eurS76o8wHwYDVR0j BBgwFoAU45k9sJL4J83PcRBGtJNBGgCnJwEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODMzNTUyNDgzOTQyNS8xL0UzOTkzREIwOTJGODI3Q0RDRjcxMTA0NkI0OTM0 MTFBMDBBNzI3MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRTM5OTNEQjA5MkY4MjdDRENGNzExMDQ2QjQ5MzQxMUEwMEE3MjcwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODgzMzU1MjQ4Mzk0MjUvMS9FMzk5M0RCMDkyRjgy N0NEQ0Y3MTEwNDZCNDkzNDExQTAwQTcyNzAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIw0/uxAUnYP 83iL1+7LK/wCvitfKr3gTj2lgy+FDuIAKB4+L1uKgZZVrggm7JqWSoBegyR4kxzf IG8vT1Qss4cv83DwK9lUs2SndTTyqcD+HEQi82Tp9NDhusUVpDVdUwpqxrwvdUOq gqg3Y1FVhB31xPkk3AmIBJns8j/xHzdG5zosueFYQhLvlPNOc+ALtCXbyEaGnINc brdTq+LgHq+RUHiKTEVocYXlylKk24GSq0Hb2QFelHtm0Ngy0dv+uX7wi4NpuzqC cY1K9hqCNBe/3sjUmUSeWXR1VzaY04/KJjQ48tiFgz8jYbN9HOKoN3nAcwbCaHkx XG7MlYJPtQ== -----END CERTIFICATE-----Generated at Sat Oct 17 09:15:16 2026 by rpki-client