$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft File: C2DA49E3A7421A170AB2589567E7C29841F7D385.mft (raw, json) Hash identifier: Z27lVNVhnUmpXSS+0H0YNXZEM5e4Xrwr7VvBO1Ro084= Subject key identifier: 78:11:6B:AD:97:38:61:20:9F:36:4C:66:7D:A5:09:EC:7E:B6:60:3C Authority key identifier: C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 Certificate issuer: /CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Certificate serial: 3E9B7C53E868798A0775F23D71B5EBA73CCA275F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft Manifest number: DB Signing time: Mon 26 Oct 2026 19:24:01 +0000 Manifest this update: Mon 26 Oct 2026 19:19:01 +0000 Manifest next update: Fri 30 Oct 2026 05:30:01 +0000 Files and hashes: 1: C2DA49E3A7421A170AB2589567E7C29841F7D385.crl (hash: 8Dc8LAzI9lDY2Cgay5uNYT6BJj7fDZ/et5KIQ8JlFec=) 2: 3136302e3235302e39312e302f32342d3234203d3e2030.roa (hash: I01ky8XkMCzc3U3eB94acbcUgoqzrThF0fyrFH1PSns=) 3: 3136302e3235302e39302e302f32342d3234203d3e2030.roa (hash: K1QDkUk1IphA/GflzuMhC8hun3fH4ROmohlTCdV9p9U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 21:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:9b:7c:53:e8:68:79:8a:07:75:f2:3d:71:b5:eb:a7:3c:ca:27:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2DA49E3A7421A170AB2589567E7C29841F7D385 Validity Not Before: Oct 26 19:19:01 2026 GMT Not After : Oct 30 05:30:01 2026 GMT Subject: CN=78116BAD973861209F364C667DA509EC7EB6603C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e0:d1:d2:8f:67:99:3e:dc:b6:6b:f9:73:0a: 96:bc:1f:8d:c6:82:9f:dd:2d:3c:c0:17:1c:8b:78: 19:65:28:64:a7:85:45:25:ca:dd:e7:c3:30:86:36: c7:d7:d5:8c:95:5c:7f:44:37:12:c5:4e:7a:ec:2c: 0a:a8:66:fa:9d:b6:4d:c4:21:ca:7f:72:3c:6b:7c: b1:ad:25:29:3a:c1:d5:07:a1:42:0e:d2:ad:04:4d: e5:84:6d:57:1a:f7:15:f5:16:c5:b4:65:15:4b:dd: 41:1d:14:3d:6e:43:99:b0:83:3f:10:65:bc:2b:81: b9:24:71:52:10:b1:2b:c9:bb:c3:ae:03:ac:b1:fd: 58:2f:3e:a7:18:ec:9e:ea:bc:d4:1e:e3:3f:8a:5e: 0f:e4:db:8e:fa:c1:77:b5:6a:c5:0a:3a:d0:80:49: 87:93:2b:8e:36:d6:a6:2d:39:45:90:f1:86:c7:d0: aa:c0:9c:44:49:13:31:88:d0:b2:20:49:9d:23:5d: 56:ba:9e:bc:71:49:ac:a1:ac:d9:e4:b7:5c:d5:c9: 1e:9c:e6:bb:ec:dd:15:8f:6d:81:bf:15:f2:81:6a: 02:d1:3d:61:29:8c:85:5f:cd:90:42:81:56:b0:aa: ed:64:94:6f:f2:19:25:47:ed:d9:8a:99:18:9e:ac: 37:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:11:6B:AD:97:38:61:20:9F:36:4C:66:7D:A5:09:EC:7E:B6:60:3C X509v3 Authority Key Identifier: keyid:C2:DA:49:E3:A7:42:1A:17:0A:B2:58:95:67:E7:C2:98:41:F7:D3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/0/C2DA49E3A7421A170AB2589567E7C29841F7D385.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d1:22:35:96:0e:e3:08:10:54:c3:36:19:54:64:50:84:17: 11:33:eb:f2:cb:c0:bf:a3:2a:44:ab:d6:db:ac:1c:b4:4f:d1: e1:56:94:25:f4:33:16:57:d3:23:03:ff:4c:86:2e:57:66:bb: bc:f5:9c:e6:08:b6:24:50:b1:76:30:94:5b:83:1f:43:8e:37: 44:29:0b:58:61:cf:a3:28:a6:9f:82:3b:8f:9b:fa:b2:ab:8a: 74:00:d2:48:70:43:41:f8:c3:8a:1b:d0:32:1f:43:73:9e:cf: 6c:64:0c:60:91:1f:2b:0a:0d:f4:51:83:93:5d:10:df:48:3c: 3e:5d:e1:c3:9a:f3:50:73:11:84:96:f9:d6:ea:2c:8d:78:1a: d1:0b:8a:6c:47:7c:cd:99:3a:c3:9d:75:65:e8:4f:92:29:d4: f5:6f:7d:d6:ad:f3:7a:41:84:7a:cf:f2:67:fe:10:11:10:f7: 3d:81:38:02:47:5b:2a:bb:47:e5:d9:76:ad:68:e3:84:18:e6: bd:1e:eb:01:6c:f2:d5:d0:99:34:cd:b7:0b:af:2e:b6:f2:0c: b5:c2:3f:a1:63:12:97:95:4f:0e:24:fc:67:3d:a1:9c:e3:26: 1a:49:f8:b3:7a:f4:ca:ae:7d:7d:69:2d:fb:cc:85:39:c1:5d: cf:4e:0d:d8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPpt8U+hoeYoHdfI9cbXrpzzKJ18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0 MUY3RDM4NTAeFw0yNjEwMjYxOTE5MDFaFw0yNjEwMzAwNTMwMDFaMDMxMTAvBgNV BAMTKDc4MTE2QkFEOTczODYxMjA5RjM2NEM2NjdEQTUwOUVDN0VCNjYwM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd4NHSj2eZPty2a/lzCpa8H43G gp/dLTzAFxyLeBllKGSnhUUlyt3nwzCGNsfX1YyVXH9ENxLFTnrsLAqoZvqdtk3E Icp/cjxrfLGtJSk6wdUHoUIO0q0ETeWEbVca9xX1FsW0ZRVL3UEdFD1uQ5mwgz8Q ZbwrgbkkcVIQsSvJu8OuA6yx/VgvPqcY7J7qvNQe4z+KXg/k2476wXe1asUKOtCA SYeTK4421qYtOUWQ8YbH0KrAnERJEzGI0LIgSZ0jXVa6nrxxSayhrNnkt1zVyR6c 5rvs3RWPbYG/FfKBagLRPWEpjIVfzZBCgVawqu1klG/yGSVH7dmKmRierDcnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeBFrrZc4YSCfNkxmfaUJ7H62YDwwHwYDVR0j BBgwFoAUwtpJ46dCGhcKsliVZ+fCmEH304UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8wL0MyREE0OUUzQTc0MjFBMTcwQUIyNTg5NTY3RTdD Mjk4NDFGN0QzODUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzJEQTQ5RTNBNzQyMUExNzBBQjI1ODk1NjdFN0MyOTg0MUY3RDM4NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMC9DMkRBNDlFM0E3NDIx QTE3MEFCMjU4OTU2N0U3QzI5ODQxRjdEMzg1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitEiNZYO4wgQ VMM2GVRkUIQXETPr8svAv6MqRKvW26wctE/R4VaUJfQzFlfTIwP/TIYuV2a7vPWc 5gi2JFCxdjCUW4MfQ443RCkLWGHPoyimn4I7j5v6squKdADSSHBDQfjDihvQMh9D c57PbGQMYJEfKwoN9FGDk10Q30g8Pl3hw5rzUHMRhJb51uosjXga0QuKbEd8zZk6 w511ZehPkinU9W991q3zekGEes/yZ/4QERD3PYE4AkdbKrtH5dl2rWjjhBjmvR7r AWzy1dCZNM23C68utvIMtcI/oWMSl5VPDiT8Zz2hnOMmGkn4s3r0yq59fWkt+8yF OcFdz04N2A== -----END CERTIFICATE-----Generated at Tue Oct 27 04:46:23 2026 by rpki-client