$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft File: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft (raw, json) Hash identifier: DqzhOggNqiCCQ5amj0ku/XCNNs9iLd9qnIbxVioDyg8= Subject key identifier: A6:12:89:19:FA:A8:4F:48:32:59:4A:64:F9:6A:8B:45:8B:9D:0A:38 Authority key identifier: 29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE Certificate issuer: /CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Certificate serial: 5454CBB2D9C9376DB21A286967C2223D4F08A3EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft Manifest number: DF Signing time: Thu 15 Oct 2026 07:31:29 +0000 Manifest this update: Thu 15 Oct 2026 07:26:29 +0000 Manifest next update: Sun 18 Oct 2026 10:14:29 +0000 Files and hashes: 1: 2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl (hash: tiBAp0j4n1WrKuAxU/HEWZ+X9lMnsg7PSDN43fp0fQA=) 2: 3130332e3233392e36382e302f32322d3234203d3e2034383337.roa (hash: zWLOR+6QqlKmV8jnsKvvhM705PHgJixbSDt5nMztFWY=) 3: 34332e3235352e39362e302f32322d3234203d3e2034383337.roa (hash: wbxa7dpgFToQaI0alfskq+blHdOpT/fn3yyu5WpNQf0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 10:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:54:cb:b2:d9:c9:37:6d:b2:1a:28:69:67:c2:22:3d:4f:08:a3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2970708A1B73BC2BF2FF6CD7F397C536523226BE Validity Not Before: Oct 15 07:26:29 2026 GMT Not After : Oct 18 10:14:29 2026 GMT Subject: CN=A6128919FAA84F4832594A64F96A8B458B9D0A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:e8:b4:c2:9f:4a:b8:65:b6:91:c8:a1:01: 4f:93:38:09:01:b8:0c:13:9f:07:19:1a:58:0c:6b: 0b:0e:fd:63:1b:1b:33:19:ca:aa:37:6f:fa:a5:ac: 52:2c:c4:df:1a:28:46:7b:1d:bf:47:63:82:90:60: e1:9c:e1:72:3b:27:42:3f:2d:5d:52:15:27:9d:0b: 80:13:95:7c:e5:37:5b:cf:3e:ca:06:bf:fc:46:78: d7:6e:a5:41:55:3e:37:70:4b:dd:51:a5:00:7e:ec: 7a:90:5b:e9:7f:a5:c2:68:a9:98:04:c0:16:b0:ae: 5a:12:de:fc:71:e4:23:c2:72:3f:02:f3:bc:ac:01: 01:c4:6c:5d:f5:9c:ea:e3:bb:3f:77:78:09:0a:78: f4:f0:28:09:58:88:45:e8:9b:ba:cb:a4:01:84:61: a6:f9:53:93:93:cc:3f:3d:68:aa:3b:94:5a:53:9e: 83:94:17:40:07:74:60:22:35:84:fd:c5:45:9b:48: 7d:89:be:5a:92:40:3d:42:32:69:72:2f:e3:3d:47: b5:39:75:38:61:4f:bc:7b:2d:2b:44:7b:e2:7f:cc: d3:a2:e5:9a:06:24:6c:13:bb:0e:83:8d:6e:2b:2c: cc:a7:ed:b5:f7:44:0b:03:b8:61:34:20:d4:23:aa: 87:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:12:89:19:FA:A8:4F:48:32:59:4A:64:F9:6A:8B:45:8B:9D:0A:38 X509v3 Authority Key Identifier: keyid:29:70:70:8A:1B:73:BC:2B:F2:FF:6C:D7:F3:97:C5:36:52:32:26:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2970708A1B73BC2BF2FF6CD7F397C536523226BE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091910320722542594/0/2970708A1B73BC2BF2FF6CD7F397C536523226BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:0a:38:ca:ed:bb:1e:ba:81:9b:de:62:e6:94:d1:4f:91:02: 3d:5a:c8:c2:4b:f9:1f:86:b6:e5:1e:09:bc:44:9d:4d:6e:a6: 7e:00:43:c6:6d:d6:83:88:b4:03:10:88:d5:1b:de:e2:8e:2d: 09:21:4c:43:e0:7a:ee:67:f2:13:9b:02:0a:eb:fe:2c:73:26: 76:6d:d4:ed:2d:bf:1c:76:b5:11:22:7e:4c:97:fb:1a:ea:4e: 91:9d:ac:64:b3:c2:1e:b4:6e:56:60:e4:d1:50:8a:f0:76:ec: f4:79:8f:59:94:f3:6b:41:12:2d:13:1c:01:c9:88:81:41:5a: e7:0b:1d:13:73:77:a8:a1:b2:c9:b1:5f:e4:df:8b:52:7e:85: 27:1a:3c:61:b2:f9:ec:c5:e3:9a:b6:a1:d7:81:25:53:1b:58: bb:67:a6:88:7e:ea:a6:f7:f8:8a:dd:51:62:ff:1a:ad:f7:45: 42:a4:d1:6d:8f:2b:1f:b6:30:97:ff:76:42:23:6a:51:b1:9d: 9c:f6:95:94:ba:41:7b:b1:ee:a2:cb:63:a3:98:c1:e5:5a:1b: 44:cc:b2:af:b5:ee:32:9a:80:ea:17:b2:84:73:20:68:97:7b: ac:39:20:69:89:14:71:94:e5:c3:96:64:1b:d7:4e:2d:52:fd: d0:c8:fd:05 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVFTLstnJN22yGihpZ8IiPU8Io+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1 MjMyMjZCRTAeFw0yNjEwMTUwNzI2MjlaFw0yNjEwMTgxMDE0MjlaMDMxMTAvBgNV BAMTKEE2MTI4OTE5RkFBODRGNDgzMjU5NEE2NEY5NkE4QjQ1OEI5RDBBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhei0wp9KuGW2kcihAU+TOAkB uAwTnwcZGlgMawsO/WMbGzMZyqo3b/qlrFIsxN8aKEZ7Hb9HY4KQYOGc4XI7J0I/ LV1SFSedC4ATlXzlN1vPPsoGv/xGeNdupUFVPjdwS91RpQB+7HqQW+l/pcJoqZgE wBawrloS3vxx5CPCcj8C87ysAQHEbF31nOrjuz93eAkKePTwKAlYiEXom7rLpAGE Yab5U5OTzD89aKo7lFpTnoOUF0AHdGAiNYT9xUWbSH2JvlqSQD1CMmlyL+M9R7U5 dThhT7x7LStEe+J/zNOi5ZoGJGwTuw6DjW4rLMyn7bX3RAsDuGE0INQjqoe5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUphKJGfqoT0gyWUpk+WqLRYudCjgwHwYDVR0j BBgwFoAUKXBwihtzvCvy/2zX85fFNlIyJr4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMDMyMDcyMjU0MjU5NC8wLzI5NzA3MDhBMUI3M0JDMkJGMkZGNkNEN0YzOTdD NTM2NTIzMjI2QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk3MDcwOEExQjczQkMyQkYyRkY2Q0Q3RjM5N0M1MzY1MjMyMjZCRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5MTAzMjA3MjI1NDI1OTQvMC8yOTcwNzA4QTFCNzNC QzJCRjJGRjZDRDdGMzk3QzUzNjUyMzIyNkJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAo4yu27HrqB m95i5pTRT5ECPVrIwkv5H4a25R4JvESdTW6mfgBDxm3Wg4i0AxCI1Rve4o4tCSFM Q+B67mfyE5sCCuv+LHMmdm3U7S2/HHa1ESJ+TJf7GupOkZ2sZLPCHrRuVmDk0VCK 8Hbs9HmPWZTza0ESLRMcAcmIgUFa5wsdE3N3qKGyybFf5N+LUn6FJxo8YbL57MXj mrah14ElUxtYu2emiH7qpvf4it1RYv8arfdFQqTRbY8rH7Ywl/92QiNqUbGdnPaV lLpBe7Huostjo5jB5VobRMyyr7XuMpqA6heyhHMgaJd7rDkgaYkUcZTlw5ZkG9dO LVL90Mj9BQ== -----END CERTIFICATE-----Generated at Thu Oct 15 15:32:38 2026 by rpki-client