$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft File: 1332FF90625961F264C4C1697510C8D39E9865D7.mft (raw, json) Hash identifier: tDY0zUMOED33EbkUHMaaNaLCDClWsA+3xd0F88b992A= Subject key identifier: 5E:2D:FC:62:52:27:78:38:FD:44:5C:9D:7C:D1:53:1C:19:13:8B:E0 Authority key identifier: 13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7 Certificate issuer: /CN=1332FF90625961F264C4C1697510C8D39E9865D7 Certificate serial: 23BE5D38B68B243B819743D3C2A8BDC7D87B774D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft Manifest number: D3 Signing time: Wed 14 Oct 2026 01:28:23 +0000 Manifest this update: Wed 14 Oct 2026 01:23:23 +0000 Manifest next update: Sat 17 Oct 2026 13:27:23 +0000 Files and hashes: 1: 3130332e3132322e34382e302f32322d3232203d3e20313337373838.roa (hash: SbHyx5JcXCPgWqbXvh1lU44U3Nytrtx2FQt2UAWIA9Q=) 2: 1332FF90625961F264C4C1697510C8D39E9865D7.crl (hash: k7QVGP5vc/5x+Llpk3IgaiNDOp1DMeoor7aVKsN0PcE=) 3: 3130332e3131372e3232302e302f32322d3232203d3e20313337373838.roa (hash: +BUcGZOQFiD6PT+iLY28PJeBHvjqy0X2J6YfTJqs3Lc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.crl rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 13:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:be:5d:38:b6:8b:24:3b:81:97:43:d3:c2:a8:bd:c7:d8:7b:77:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1332FF90625961F264C4C1697510C8D39E9865D7 Validity Not Before: Oct 14 01:23:23 2026 GMT Not After : Oct 17 13:27:23 2026 GMT Subject: CN=5E2DFC6252277838FD445C9D7CD1531C19138BE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:76:ee:a3:09:57:90:19:2e:1b:fa:96:5c:e1: 60:6c:2f:c8:1f:68:67:a7:05:5d:1f:78:03:d1:f1: 7e:95:1b:6e:41:a5:ed:84:6b:6e:49:ac:79:e1:32: e1:64:ce:b9:c1:15:09:2e:22:e7:04:84:78:7c:a0: 76:bd:be:3e:f8:03:52:d5:df:cf:1c:8a:38:87:32: c0:da:f1:99:1c:80:13:b5:3a:ef:fe:7f:8c:34:a1: 8e:92:fa:61:3f:b1:ba:4f:f6:35:9c:45:c2:2c:7e: 36:90:7b:ae:9c:40:be:d0:03:f4:97:ee:95:ae:60: 3a:2e:a4:a4:fd:03:fb:52:ac:27:5d:dd:b9:a8:64: 5b:d6:77:90:19:3f:ae:1a:16:e9:09:a3:48:85:9d: 80:40:dc:70:eb:2d:58:28:e1:4c:42:5d:4f:4a:bf: 57:44:9f:c6:07:33:81:fe:6a:17:06:fb:0e:2c:c2: b0:13:f9:b7:2e:a7:22:e8:07:a8:77:ae:72:1b:c6: 38:0e:46:70:3a:bd:2d:6e:d7:10:10:1c:09:99:2c: 9f:53:ff:e2:90:62:bf:cd:79:14:89:a6:2b:4b:39: f0:d2:94:cd:10:d3:fd:a4:ce:6c:1a:cc:6b:a7:ac: 8f:e3:1b:1e:81:74:ca:1a:8d:17:fd:8c:c9:fe:d5: 23:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2D:FC:62:52:27:78:38:FD:44:5C:9D:7C:D1:53:1C:19:13:8B:E0 X509v3 Authority Key Identifier: keyid:13:32:FF:90:62:59:61:F2:64:C4:C1:69:75:10:C8:D3:9E:98:65:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1332FF90625961F264C4C1697510C8D39E9865D7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094913563501264899/0/1332FF90625961F264C4C1697510C8D39E9865D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:6b:f2:02:68:3f:54:c5:40:55:7c:ce:96:0f:72:39:c6:c8: fe:28:ab:5e:be:c1:7a:17:65:97:d7:c9:f8:3e:5d:23:72:fb: e7:d5:36:82:01:cf:87:51:4f:13:3d:ba:49:53:bb:8d:5a:17: b2:b1:58:8f:1f:bf:ad:58:31:65:36:31:bb:51:c1:08:48:9b: 46:f6:06:bb:34:b3:16:51:8c:1f:b3:f2:0a:b6:fc:24:e6:96: ab:10:0f:2f:0a:37:d2:5e:44:f5:4f:5a:08:88:23:37:5f:90: 64:ee:11:23:56:ec:77:4d:25:b9:78:74:db:fe:8e:95:59:60: 88:44:cd:c2:9a:6b:6b:df:1d:b1:34:1e:c1:a0:b6:d8:dc:ec: 04:25:29:f8:b6:0c:e3:6a:f9:95:8c:c4:3e:c3:b1:d8:b7:30: db:81:1e:06:68:49:d2:f0:2c:85:ab:60:d2:d7:ae:c2:5e:91: 8e:8b:33:b0:fd:ed:b2:08:10:ab:cb:66:00:a0:ac:26:ef:d7: 33:86:16:4e:94:65:a0:25:21:e7:11:43:6f:d1:be:6c:ca:5c: bd:d0:c4:4d:31:b3:15:82:70:f4:01:ed:60:6c:d5:45:fb:89: 61:ca:fc:f1:86:10:40:c0:f8:4a:7c:ee:b5:07:a4:ca:a5:21: 97:50:cc:bf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUI75dOLaLJDuBl0PTwqi9x9h7d00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMzMkZGOTA2MjU5NjFGMjY0QzRDMTY5NzUxMEM4RDM5 RTk4NjVENzAeFw0yNjEwMTQwMTIzMjNaFw0yNjEwMTcxMzI3MjNaMDMxMTAvBgNV BAMTKDVFMkRGQzYyNTIyNzc4MzhGRDQ0NUM5RDdDRDE1MzFDMTkxMzhCRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChdu6jCVeQGS4b+pZc4WBsL8gf aGenBV0feAPR8X6VG25Bpe2Ea25JrHnhMuFkzrnBFQkuIucEhHh8oHa9vj74A1LV 388cijiHMsDa8ZkcgBO1Ou/+f4w0oY6S+mE/sbpP9jWcRcIsfjaQe66cQL7QA/SX 7pWuYDoupKT9A/tSrCdd3bmoZFvWd5AZP64aFukJo0iFnYBA3HDrLVgo4UxCXU9K v1dEn8YHM4H+ahcG+w4swrAT+bcupyLoB6h3rnIbxjgORnA6vS1u1xAQHAmZLJ9T /+KQYr/NeRSJpitLOfDSlM0Q0/2kzmwazGunrI/jGx6BdMoajRf9jMn+1SOBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXi38YlIneDj9RFydfNFTHBkTi+AwHwYDVR0j BBgwFoAUEzL/kGJZYfJkxMFpdRDI056YZdcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDkxMzU2MzUwMTI2NDg5OS8wLzEzMzJGRjkwNjI1OTYxRjI2NEM0QzE2OTc1MTBD OEQzOUU5ODY1RDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTMzMkZGOTA2MjU5NjFGMjY0QzRDMTY5NzUxMEM4RDM5RTk4NjVENy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ5MTM1NjM1MDEyNjQ4OTkvMC8xMzMyRkY5MDYyNTk2 MUYyNjRDNEMxNjk3NTEwQzhEMzlFOTg2NUQ3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmvyAmg/VMVA VXzOlg9yOcbI/iirXr7Behdll9fJ+D5dI3L759U2ggHPh1FPEz26SVO7jVoXsrFY jx+/rVgxZTYxu1HBCEibRvYGuzSzFlGMH7PyCrb8JOaWqxAPLwo30l5E9U9aCIgj N1+QZO4RI1bsd00luXh02/6OlVlgiETNwppra98dsTQewaC22NzsBCUp+LYM42r5 lYzEPsOx2Lcw24EeBmhJ0vAshatg0teuwl6RjoszsP3tsggQq8tmAKCsJu/XM4YW TpRloCUh5xFDb9G+bMpcvdDETTGzFYJw9AHtYGzVRfuJYcr88YYQQMD4SnzutQek yqUhl1DMvw== -----END CERTIFICATE-----Generated at Thu Oct 15 21:10:38 2026 by rpki-client