$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft File: 97B5B7009501E4718F06B9B36D215369C958203F.mft (raw, json) Hash identifier: elMxcgeJpT3V0kz3u7MskV6/VT1d0aF9g9Sy03sAYdI= Subject key identifier: E3:45:A5:D3:38:3C:83:B9:1A:05:4E:97:AC:D6:4E:81:FC:15:03:3F Authority key identifier: 97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F Certificate issuer: /CN=97B5B7009501E4718F06B9B36D215369C958203F Certificate serial: 032C94D2F25738693256FF1F03C39B743A78D968 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft Manifest number: 0144 Signing time: Wed 28 Oct 2026 02:10:31 +0000 Manifest this update: Wed 28 Oct 2026 02:05:31 +0000 Manifest next update: Sat 31 Oct 2026 09:45:31 +0000 Files and hashes: 1: 3134302e3231302e382e302f32312d3231203d3e20313334373635.roa (hash: HSDYPYoIaTEjvOoXhrjV5CgDXDpaC41EK5sRdfygvnk=) 2: 97B5B7009501E4718F06B9B36D215369C958203F.crl (hash: vArePodt9OU5FcMBjyo7YGPymSOfI2p/Y5i28Xrykng=) 3: 3136302e33302e3233302e302f32332d3233203d3e20313334373635.roa (hash: M9h4mps+1IMEWDqZCndydBDbcZZixvF2i/x4Bvz67vM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 09:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2c:94:d2:f2:57:38:69:32:56:ff:1f:03:c3:9b:74:3a:78:d9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97B5B7009501E4718F06B9B36D215369C958203F Validity Not Before: Oct 28 02:05:31 2026 GMT Not After : Oct 31 09:45:31 2026 GMT Subject: CN=E345A5D3383C83B91A054E97ACD64E81FC15033F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b3:99:a5:5b:31:ea:f8:b8:3f:37:52:91:bc: f9:16:29:74:6b:89:a9:c7:0f:b9:73:7c:2d:6d:a9: 95:4d:ee:f6:28:2f:8e:40:17:1e:2f:f8:34:77:2e: 80:17:0d:bc:de:76:f3:1d:15:18:08:74:0d:da:f5: 28:5d:58:16:58:6f:dc:b2:6c:22:de:10:3c:c1:bd: 93:05:b6:d3:82:58:89:3c:ec:ac:23:48:ed:56:3f: 6c:8b:5e:b0:5f:50:60:67:e3:bb:c7:73:93:cb:fd: cf:9b:b5:c8:33:db:e5:f5:ae:46:79:32:91:b5:89: 30:be:8c:32:44:32:88:83:53:b0:c8:9e:73:03:78: 99:71:d8:37:ff:6a:f7:9f:d6:7e:5c:0c:b2:fd:c2: 7d:68:06:e1:87:64:f7:13:06:93:01:c8:53:a4:7d: 8b:ef:98:df:c6:20:95:83:d8:88:b2:ca:6a:55:23: cc:51:70:ca:4a:d9:b3:68:95:eb:66:c1:f2:db:e3: 85:b5:db:31:74:84:65:6c:65:ac:3d:18:c4:f0:c7: d3:50:63:a3:f2:9b:38:e8:b9:5d:c3:b9:a7:7c:e1: 23:22:74:3b:6b:c7:85:22:d3:b6:f8:96:37:a1:40: bf:27:e1:77:f4:e3:35:bf:21:99:7c:95:df:60:7e: dd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:45:A5:D3:38:3C:83:B9:1A:05:4E:97:AC:D6:4E:81:FC:15:03:3F X509v3 Authority Key Identifier: keyid:97:B5:B7:00:95:01:E4:71:8F:06:B9:B3:6D:21:53:69:C9:58:20:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/97B5B7009501E4718F06B9B36D215369C958203F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/1/97B5B7009501E4718F06B9B36D215369C958203F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:b6:d4:92:03:93:0a:c9:dd:b2:60:00:a6:74:c5:85:45:48: e8:3a:f5:13:8d:dd:52:49:d8:f2:b0:f8:3b:cd:77:c4:b2:b8: 0d:e8:9a:6b:78:75:10:e4:fe:16:f0:8c:f5:2d:89:e4:d2:00: 4d:aa:e8:92:24:76:8b:88:fe:8c:f8:a8:5c:a6:04:0f:67:d6: 9e:05:99:27:28:62:48:08:24:e8:f0:8d:dc:25:db:98:91:a1: e4:0f:8b:e0:b8:ee:c9:88:ad:5b:25:40:39:09:be:77:3f:bd: 55:06:89:b6:0e:e7:e8:f0:23:23:1e:b5:a6:52:73:38:f3:8b: 43:c1:19:e0:69:0d:3f:28:9e:c9:7e:94:0b:1f:b3:8b:7d:ed: 51:c6:a8:2b:2f:1f:63:76:c1:69:9e:59:d1:f3:eb:5c:35:cb: ae:9f:6d:e0:a0:cf:3c:2b:71:85:24:78:eb:61:7c:6d:de:20: ea:fd:8f:dc:34:0f:b2:08:5c:1b:4f:0c:38:e0:8a:c6:94:ac: fb:da:2d:43:5d:76:88:43:9f:19:40:f6:e1:d0:d9:78:50:08: 1c:3a:6e:b1:67:2b:a3:d8:d5:6a:c3:b9:cb:b7:c3:64:57:b5: 2c:aa:aa:2c:98:62:25:12:63:2d:49:d9:93:df:3d:37:2b:ab: 85:95:dd:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAyyU0vJXOGkyVv8fA8ObdDp42WgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlD OTU4MjAzRjAeFw0yNjEwMjgwMjA1MzFaFw0yNjEwMzEwOTQ1MzFaMDMxMTAvBgNV BAMTKEUzNDVBNUQzMzgzQzgzQjkxQTA1NEU5N0FDRDY0RTgxRkMxNTAzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGs5mlWzHq+Lg/N1KRvPkWKXRr ianHD7lzfC1tqZVN7vYoL45AFx4v+DR3LoAXDbzedvMdFRgIdA3a9ShdWBZYb9yy bCLeEDzBvZMFttOCWIk87KwjSO1WP2yLXrBfUGBn47vHc5PL/c+btcgz2+X1rkZ5 MpG1iTC+jDJEMoiDU7DInnMDeJlx2Df/avef1n5cDLL9wn1oBuGHZPcTBpMByFOk fYvvmN/GIJWD2IiyympVI8xRcMpK2bNoletmwfLb44W12zF0hGVsZaw9GMTwx9NQ Y6PymzjouV3Duad84SMidDtrx4Ui07b4ljehQL8n4Xf04zW/IZl8ld9gft3BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU40Wl0zg8g7kaBU6XrNZOgfwVAz8wHwYDVR0j BBgwFoAUl7W3AJUB5HGPBrmzbSFTaclYID8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8xLzk3QjVCNzAwOTUwMUU0NzE4RjA2QjlCMzZEMjE1 MzY5Qzk1ODIwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTdCNUI3MDA5NTAxRTQ3MThGMDZCOUIzNkQyMTUzNjlDOTU4MjAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMS85N0I1QjcwMDk1MDFF NDcxOEYwNkI5QjM2RDIxNTM2OUM5NTgyMDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1bbUkgOTCsnd smAApnTFhUVI6Dr1E43dUknY8rD4O813xLK4Deiaa3h1EOT+FvCM9S2J5NIATaro kiR2i4j+jPioXKYED2fWngWZJyhiSAgk6PCN3CXbmJGh5A+L4LjuyYitWyVAOQm+ dz+9VQaJtg7n6PAjIx61plJzOPOLQ8EZ4GkNPyieyX6UCx+zi33tUcaoKy8fY3bB aZ5Z0fPrXDXLrp9t4KDPPCtxhSR462F8bd4g6v2P3DQPsghcG08MOOCKxpSs+9ot Q112iEOfGUD24dDZeFAIHDpusWcro9jVasO5y7fDZFe1LKqqLJhiJRJjLUnZk989 NyurhZXd5w== -----END CERTIFICATE-----Generated at Wed Oct 28 19:31:32 2026 by rpki-client