$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft File: F3D2189E79D8CABAA6E636A706E38827E75A574A.mft (raw, json) Hash identifier: LZJi+QvjWUf32rDexJ9K58mjfe2wTvZuvfHHPKid1Rs= Subject key identifier: EF:4A:50:19:14:44:92:12:5C:AD:F2:8C:23:E7:8D:4F:C8:4A:59:D7 Authority key identifier: F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A Certificate issuer: /CN=F3D2189E79D8CABAA6E636A706E38827E75A574A Certificate serial: 7D92B83AD618F79E6DEF38694081065FD893D36D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft Manifest number: 0128 Signing time: Fri 16 Oct 2026 06:22:17 +0000 Manifest this update: Fri 16 Oct 2026 06:17:17 +0000 Manifest next update: Mon 19 Oct 2026 07:48:17 +0000 Files and hashes: 1: F3D2189E79D8CABAA6E636A706E38827E75A574A.crl (hash: Er2Pmm9twGhbjkqfNFHhNP7UKqz/fsoxTT4cwfUWQ7I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 07:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:92:b8:3a:d6:18:f7:9e:6d:ef:38:69:40:81:06:5f:d8:93:d3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3D2189E79D8CABAA6E636A706E38827E75A574A Validity Not Before: Oct 16 06:17:17 2026 GMT Not After : Oct 19 07:48:17 2026 GMT Subject: CN=EF4A5019144492125CADF28C23E78D4FC84A59D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:81:58:cf:81:00:fa:e2:33:6b:7f:42:9a:f3: 37:10:25:4c:4a:ec:33:c0:5e:d1:cf:fe:ca:f5:f6: 7a:bd:03:0f:8c:67:e4:fc:10:0c:b9:99:20:cb:20: 7d:e1:4f:ed:e9:ee:82:09:e8:5e:ed:69:94:62:d9: b3:9c:a1:6a:e3:2f:74:59:9f:6f:5f:54:0d:a9:a4: 3e:93:51:0c:a5:9d:5b:0a:3e:80:28:de:e6:54:57: db:35:5b:4a:cc:30:fe:64:92:93:da:c3:a8:68:27: 91:a0:6e:87:ca:06:87:a3:be:60:24:98:e2:31:89: 44:1f:86:d7:1c:f7:4b:24:43:0b:4c:35:fc:f1:0c: e3:b5:64:d0:d4:28:d5:e4:70:06:70:f3:8a:c1:82: f5:a1:72:5e:1c:23:a6:18:dd:fa:22:75:4b:e6:16: 05:ad:34:00:40:e9:dc:5b:9e:18:c1:5e:c6:73:6d: d4:0d:d5:e0:3e:1d:0d:5d:b2:62:ca:aa:9b:59:06: 33:bf:27:72:0f:9a:51:fa:74:82:fe:f2:aa:ab:42: 49:bd:07:8f:1e:f1:73:5f:a1:ef:38:31:6f:4d:41: 27:72:35:cd:d3:b9:94:9f:56:6e:bb:f8:5d:65:e1: 5b:f6:a5:22:13:87:69:f3:a3:ea:be:2f:d8:14:e6: f7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4A:50:19:14:44:92:12:5C:AD:F2:8C:23:E7:8D:4F:C8:4A:59:D7 X509v3 Authority Key Identifier: keyid:F3:D2:18:9E:79:D8:CA:BA:A6:E6:36:A7:06:E3:88:27:E7:5A:57:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F3D2189E79D8CABAA6E636A706E38827E75A574A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073480195/0/F3D2189E79D8CABAA6E636A706E38827E75A574A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:c1:37:f9:6b:d5:3a:db:bb:c9:7a:24:00:93:21:91:6a:5b: 31:ac:62:91:34:ca:03:e8:80:cb:ee:ca:5c:49:0b:df:e8:c8: 99:8c:28:26:70:90:54:51:f7:93:d3:b3:08:d7:7a:26:ec:9a: 57:a4:a7:ec:dd:71:20:9e:89:5f:6b:66:b7:1e:bd:c8:ea:82: fc:ab:cd:3b:ab:64:78:d4:39:cf:1f:a2:3d:33:03:f3:df:cc: 5a:df:44:16:b2:0f:07:a8:2f:43:85:80:28:c9:4a:d3:f1:64: c3:02:73:e6:0a:f1:6c:d7:14:2e:c0:f4:3c:b0:ea:e2:a1:56: ca:ff:7d:f6:a9:fc:59:5d:94:22:9b:89:ef:49:e9:c7:24:5b: 13:ed:37:97:2d:17:9c:16:ec:e0:30:98:08:e2:ca:fb:4c:e5: d8:e2:db:0b:35:85:75:fa:b2:4e:80:8b:c8:8b:70:1d:23:f2: 7d:71:67:01:d2:96:58:fc:4b:31:4d:c0:88:46:9b:0a:3a:cc: f6:91:31:81:85:fa:65:be:ed:c5:11:3c:e1:3d:e7:db:26:66: fa:82:ee:ca:85:e6:07:1b:94:4a:62:e5:e2:d4:46:e7:fc:52: 8f:59:8a:38:76:88:05:03:65:1e:bc:1c:da:49:4f:cd:14:27: 87:1c:9e:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfZK4OtYY955t7zhpQIEGX9iT020wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjNEMjE4OUU3OUQ4Q0FCQUE2RTYzNkE3MDZFMzg4MjdF NzVBNTc0QTAeFw0yNjEwMTYwNjE3MTdaFw0yNjEwMTkwNzQ4MTdaMDMxMTAvBgNV BAMTKEVGNEE1MDE5MTQ0NDkyMTI1Q0FERjI4QzIzRTc4RDRGQzg0QTU5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdgVjPgQD64jNrf0Ka8zcQJUxK 7DPAXtHP/sr19nq9Aw+MZ+T8EAy5mSDLIH3hT+3p7oIJ6F7taZRi2bOcoWrjL3RZ n29fVA2ppD6TUQylnVsKPoAo3uZUV9s1W0rMMP5kkpPaw6hoJ5GgbofKBoejvmAk mOIxiUQfhtcc90skQwtMNfzxDOO1ZNDUKNXkcAZw84rBgvWhcl4cI6YY3foidUvm FgWtNABA6dxbnhjBXsZzbdQN1eA+HQ1dsmLKqptZBjO/J3IPmlH6dIL+8qqrQkm9 B48e8XNfoe84MW9NQSdyNc3TuZSfVm67+F1l4Vv2pSITh2nzo+q+L9gU5vcXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU70pQGRREkhJcrfKMI+eNT8hKWdcwHwYDVR0j BBgwFoAU89IYnnnYyrqm5janBuOIJ+daV0owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MDk1NTkyNDA3MzQ4MDE5NS8wL0YzRDIxODlFNzlEOENBQkFBNkU2MzZBNzA2RTM4 ODI3RTc1QTU3NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjNEMjE4OUU3OUQ4Q0FCQUE2RTYzNkE3MDZFMzg4MjdFNzVBNTc0QS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzA5NTU5MjQwNzM0ODAxOTUvMC9GM0QyMTg5RTc5RDhD QUJBQTZFNjM2QTcwNkUzODgyN0U3NUE1NzRBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuME3+WvVOtu7 yXokAJMhkWpbMaxikTTKA+iAy+7KXEkL3+jImYwoJnCQVFH3k9OzCNd6JuyaV6Sn 7N1xIJ6JX2tmtx69yOqC/KvNO6tkeNQ5zx+iPTMD89/MWt9EFrIPB6gvQ4WAKMlK 0/FkwwJz5grxbNcULsD0PLDq4qFWyv999qn8WV2UIpuJ70npxyRbE+03ly0XnBbs 4DCYCOLK+0zl2OLbCzWFdfqyToCLyItwHSPyfXFnAdKWWPxLMU3AiEabCjrM9pEx gYX6Zb7txRE84T3n2yZm+oLuyoXmBxuUSmLl4tRG5/xSj1mKOHaIBQNlHrwc2klP zRQnhxyedA== -----END CERTIFICATE-----Generated at Sun Oct 18 11:33:00 2026 by rpki-client