$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft File: 2F863C823D698CAFEC32C2822E4894974B574DD1.mft (raw, json) Hash identifier: NZnMS63L0jmUCo6fDObkCG6ArPzXJkFQswpxsf3YdKQ= Subject key identifier: 1E:45:5B:1E:C7:10:24:80:E1:F4:34:C6:18:69:A9:50:96:23:65:AD Authority key identifier: 2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 Certificate issuer: /CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Certificate serial: 76BA8017E3988932834E4F0597D4461C3A591320 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft Manifest number: D2 Signing time: Sun 11 Oct 2026 16:15:43 +0000 Manifest this update: Sun 11 Oct 2026 16:10:43 +0000 Manifest next update: Thu 15 Oct 2026 01:49:43 +0000 Files and hashes: 1: 3230322e3134332e31362e302f32332d3233203d3e203137363338.roa (hash: YCgdM602V6VLFoLFEu8zRiZThrkAwsRfaFxL09iXuD0=) 2: 2F863C823D698CAFEC32C2822E4894974B574DD1.crl (hash: YPaLJetnxSPjSHulzXv335EHWcqzYsopIQs8HcP0BI8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ba:80:17:e3:98:89:32:83:4e:4f:05:97:d4:46:1c:3a:59:13:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F863C823D698CAFEC32C2822E4894974B574DD1 Validity Not Before: Oct 11 16:10:43 2026 GMT Not After : Oct 15 01:49:43 2026 GMT Subject: CN=1E455B1EC7102480E1F434C61869A950962365AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1b:06:9d:8b:47:13:12:a0:e0:d9:58:05:fd: bf:f4:95:4f:8c:d1:fa:df:db:12:46:0d:ee:1c:3d: be:6d:29:5e:fd:43:06:f1:07:7b:f2:b9:63:5e:9e: 96:0a:cf:55:be:aa:37:cf:1c:91:1a:20:3f:ec:70: 2f:20:98:a6:b6:b8:ca:84:a4:a6:a5:17:0d:ea:16: d1:3a:d7:a9:43:b8:89:40:27:b5:88:c4:7f:6d:c9: 16:60:8c:46:e8:c9:87:cc:e0:d1:68:51:70:97:bb: 50:22:58:bf:77:1d:7e:45:ba:35:57:31:5e:7c:cd: 05:65:6b:39:73:ea:64:ce:63:9c:ec:1f:b8:d5:9c: ef:05:b9:b4:b9:b2:d6:f7:45:a6:86:94:f9:6c:c0: 06:f6:ba:fa:1c:9e:e8:78:38:cc:c0:4f:ff:aa:9b: 46:f0:c0:cb:04:67:78:4d:7d:a9:e0:54:4a:7a:27: e0:d1:ac:36:0a:bc:55:f5:15:8d:14:85:55:33:a3: e2:50:67:be:ff:7f:61:08:58:07:03:7c:eb:78:22: fb:bc:57:8c:d5:d3:d4:fe:05:d0:76:a3:33:c2:c4: 9d:43:65:d1:01:29:89:a9:6e:f8:0f:b2:0b:96:75: cf:72:0f:94:45:30:f3:68:b1:a5:d0:c3:99:29:37: a0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:45:5B:1E:C7:10:24:80:E1:F4:34:C6:18:69:A9:50:96:23:65:AD X509v3 Authority Key Identifier: keyid:2F:86:3C:82:3D:69:8C:AF:EC:32:C2:82:2E:48:94:97:4B:57:4D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F863C823D698CAFEC32C2822E4894974B574DD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094892088912248835/0/2F863C823D698CAFEC32C2822E4894974B574DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:21:73:1f:bf:73:b5:7d:f9:a0:e2:56:92:c1:b4:6c:82:34: 82:79:18:40:91:c0:75:5f:5a:42:46:e2:49:4a:2e:09:c0:20: 43:5f:dd:09:76:f6:4f:92:71:d8:ca:4d:dd:de:b8:00:49:77: a7:4c:4a:2e:20:e2:4b:78:4a:3f:cd:c0:32:07:db:7e:c0:cf: 0d:09:40:d9:39:86:27:b3:18:53:a3:c6:6a:0b:82:eb:57:ee: 3b:b5:3d:08:4c:84:e5:9b:81:d2:6a:a6:df:12:01:62:b9:69: 66:07:57:a1:b2:5e:80:1b:02:33:6d:9b:4d:90:3d:3a:88:08: df:57:b4:00:1f:24:2a:07:57:40:0b:9e:88:dd:ca:83:6c:55: d1:29:18:60:2a:34:04:64:3c:5e:dc:3c:b8:d3:d6:74:eb:2d: c4:15:c8:c4:79:6e:9d:c8:6d:fd:a2:63:af:6c:c8:84:3c:b8: e5:54:f7:92:e7:78:6c:32:b5:8a:34:b5:9c:af:ce:87:e4:f2: e9:22:d1:91:15:cf:88:ba:fa:0e:58:79:cc:fb:14:d3:7b:bc: 05:6a:33:11:46:e1:0c:b3:47:31:1b:d5:c7:5a:82:31:a7:b3: 55:0b:71:1d:fa:de:dd:35:26:e1:86:2b:8e:d1:bf:c2:d5:6b: 4a:fd:1d:7d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdrqAF+OYiTKDTk8Fl9RGHDpZEyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0 QjU3NEREMTAeFw0yNjEwMTExNjEwNDNaFw0yNjEwMTUwMTQ5NDNaMDMxMTAvBgNV BAMTKDFFNDU1QjFFQzcxMDI0ODBFMUY0MzRDNjE4NjlBOTUwOTYyMzY1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChGwadi0cTEqDg2VgF/b/0lU+M 0frf2xJGDe4cPb5tKV79QwbxB3vyuWNenpYKz1W+qjfPHJEaID/scC8gmKa2uMqE pKalFw3qFtE616lDuIlAJ7WIxH9tyRZgjEboyYfM4NFoUXCXu1AiWL93HX5FujVX MV58zQVlazlz6mTOY5zsH7jVnO8FubS5stb3RaaGlPlswAb2uvocnuh4OMzAT/+q m0bwwMsEZ3hNfangVEp6J+DRrDYKvFX1FY0UhVUzo+JQZ77/f2EIWAcDfOt4Ivu8 V4zV09T+BdB2ozPCxJ1DZdEBKYmpbvgPsguWdc9yD5RFMPNosaXQw5kpN6DzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHkVbHscQJIDh9DTGGGmpUJYjZa0wHwYDVR0j BBgwFoAUL4Y8gj1pjK/sMsKCLkiUl0tXTdEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5MjA4ODkxMjI0ODgzNS8wLzJGODYzQzgyM0Q2OThDQUZFQzMyQzI4MjJFNDg5 NDk3NEI1NzRERDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkY4NjNDODIzRDY5OENBRkVDMzJDMjgyMkU0ODk0OTc0QjU3NEREMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTIwODg5MTIyNDg4MzUvMC8yRjg2M0M4MjNENjk4 Q0FGRUMzMkMyODIyRTQ4OTQ5NzRCNTc0REQxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyFzH79ztX35 oOJWksG0bII0gnkYQJHAdV9aQkbiSUouCcAgQ1/dCXb2T5Jx2MpN3d64AEl3p0xK LiDiS3hKP83AMgfbfsDPDQlA2TmGJ7MYU6PGaguC61fuO7U9CEyE5ZuB0mqm3xIB YrlpZgdXobJegBsCM22bTZA9OogI31e0AB8kKgdXQAueiN3Kg2xV0SkYYCo0BGQ8 Xtw8uNPWdOstxBXIxHluncht/aJjr2zIhDy45VT3kud4bDK1ijS1nK/Oh+Ty6SLR kRXPiLr6Dlh5zPsU03u8BWozEUbhDLNHMRvVx1qCMaezVQtxHfre3TUm4YYrjtG/ wtVrSv0dfQ== -----END CERTIFICATE-----Generated at Tue Oct 13 20:46:15 2026 by rpki-client