$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft File: 5F00140F672D031D0607493A021A46F1A9475AE8.mft (raw, json) Hash identifier: jO5bt0Ld9pgLwnLqm5PSIv3/GE4iKvTEbvYAVzUmqw0= Subject key identifier: F0:2D:78:DE:36:54:E8:02:77:C5:09:0F:8E:A4:9B:BA:C4:77:C9:C0 Authority key identifier: 5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8 Certificate issuer: /CN=5F00140F672D031D0607493A021A46F1A9475AE8 Certificate serial: 706EBD173B300364491401417742C574F5E611C8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft Manifest number: D1 Signing time: Thu 15 Oct 2026 05:36:25 +0000 Manifest this update: Thu 15 Oct 2026 05:31:25 +0000 Manifest next update: Sun 18 Oct 2026 15:02:25 +0000 Files and hashes: 1: 5F00140F672D031D0607493A021A46F1A9475AE8.crl (hash: XsWo2u07LUSCfi97z1X7KKmMXWumr5Jf61Tq1bPyfd0=) 2: 3130332e3133322e3231322e302f32342d3234203d3e20313337373539.roa (hash: 26nl4bikGp2Ci9HCEbZJ7fOjhWzaLL4wYwu2l9/Jgao=) 3: 3130332e3133322e3231332e302f32342d3234203d3e20313337373539.roa (hash: CKziFNu0LqXNWZ/lBrbX59kZ+YgYSz+Zo35FHCpodYY=) 4: 3130332e3133322e3231352e302f32342d3234203d3e20313337373539.roa (hash: hBscGvJr4AnNB3Ne2DqjxOugixWWQhpfuAEh32znKV0=) 5: 3130332e3133322e3231342e302f32342d3234203d3e20313337373539.roa (hash: U7ZbArWBWfu8/5lcAVKldcUla2gFMo1Yu6PSfWaHzL8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 15:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:6e:bd:17:3b:30:03:64:49:14:01:41:77:42:c5:74:f5:e6:11:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F00140F672D031D0607493A021A46F1A9475AE8 Validity Not Before: Oct 15 05:31:25 2026 GMT Not After : Oct 18 15:02:25 2026 GMT Subject: CN=F02D78DE3654E80277C5090F8EA49BBAC477C9C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:13:1f:2c:b0:c1:cb:e7:8f:8b:f4:e1:3d:50: 9e:71:a3:c2:dc:06:ef:e5:7f:66:90:3c:36:c9:88: 95:d3:02:4f:23:c7:20:5d:b0:94:47:af:30:2b:9e: 28:10:00:e1:ca:60:b3:f0:a5:d6:3c:95:c6:a6:70: 30:f3:08:42:c0:b2:72:6b:85:62:b0:ed:e3:3f:62: 58:dc:d0:3b:18:7e:ce:17:97:56:18:7e:5d:5f:1e: c7:92:15:6d:d3:07:0a:16:d8:f7:29:a2:df:0b:4d: 79:ca:84:45:1e:72:0d:9a:e6:42:24:a7:9e:0b:3d: c0:3b:40:b2:53:79:c8:c0:27:45:6f:b4:11:ed:70: a0:33:b6:2d:e4:79:97:bd:2f:90:ed:7c:61:ba:5f: 00:5d:98:2c:e2:72:df:20:ce:54:8d:20:41:3a:0e: 3e:d7:aa:8e:8c:72:c0:0e:ce:97:7a:d7:e9:b5:b9: ca:c3:7d:a2:c4:23:a4:11:5c:75:41:3b:1c:8a:43: 39:02:5e:70:f8:ed:34:57:73:8d:48:03:f3:11:86: c6:c8:e0:ee:17:b6:4c:f0:a8:0d:e4:db:f9:eb:8b: 5d:6d:e8:4f:a3:08:2f:6f:2f:c6:8f:53:f4:c6:73: dc:76:d3:4b:bd:f0:0c:e4:a7:89:1b:3f:dc:50:a4: d5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2D:78:DE:36:54:E8:02:77:C5:09:0F:8E:A4:9B:BA:C4:77:C9:C0 X509v3 Authority Key Identifier: keyid:5F:00:14:0F:67:2D:03:1D:06:07:49:3A:02:1A:46:F1:A9:47:5A:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F00140F672D031D0607493A021A46F1A9475AE8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095881215065456642/0/5F00140F672D031D0607493A021A46F1A9475AE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:50:b9:87:6f:ac:70:66:ca:ee:39:fc:3a:c2:62:59:f5:f2: 36:8f:ec:0e:02:4c:a3:38:c9:38:e9:29:6f:bd:6d:e1:fe:99: c5:56:bb:5c:41:34:8c:e3:46:4a:4a:5b:ec:82:c8:c4:bd:99: d8:46:9b:e6:10:a1:bc:45:2b:ee:9c:b9:7f:1d:0a:eb:93:a8: 34:5f:82:e5:35:97:65:b3:ab:33:92:0c:47:bc:25:c3:88:c0: 8e:81:1d:89:5e:d7:0b:bd:c3:51:80:35:fc:ab:c7:bd:ed:9c: 5f:94:68:8f:83:9a:47:87:08:c7:73:d9:34:49:6a:25:12:87: 6d:0c:fc:ee:b2:7f:ce:b2:92:89:64:43:2f:d8:d8:52:0b:04: e8:70:ef:0b:1c:e2:bb:09:d6:21:31:51:3b:c5:3c:cf:fe:5e: c6:5c:d0:c9:02:eb:6d:a4:51:36:88:68:87:f2:db:9c:a0:ea: a4:8d:11:22:bb:77:2c:cd:86:61:30:04:dd:cc:ca:85:cf:ad: cc:9a:53:9a:cf:73:e0:bd:7e:aa:b8:4b:b8:06:a4:a3:4c:7d: 78:ea:35:15:e2:e6:34:01:04:43:56:19:14:c1:55:45:cd:2d: 46:ea:b2:9b:1b:1d:0a:1e:d6:db:fb:6e:99:13:59:51:0b:08: ca:eb:4b:4c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcG69FzswA2RJFAFBd0LFdPXmEcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYwMDE0MEY2NzJEMDMxRDA2MDc0OTNBMDIxQTQ2RjFB OTQ3NUFFODAeFw0yNjEwMTUwNTMxMjVaFw0yNjEwMTgxNTAyMjVaMDMxMTAvBgNV BAMTKEYwMkQ3OERFMzY1NEU4MDI3N0M1MDkwRjhFQTQ5QkJBQzQ3N0M5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKEx8ssMHL54+L9OE9UJ5xo8Lc Bu/lf2aQPDbJiJXTAk8jxyBdsJRHrzArnigQAOHKYLPwpdY8lcamcDDzCELAsnJr hWKw7eM/Yljc0DsYfs4Xl1YYfl1fHseSFW3TBwoW2Pcpot8LTXnKhEUecg2a5kIk p54LPcA7QLJTecjAJ0VvtBHtcKAzti3keZe9L5DtfGG6XwBdmCzict8gzlSNIEE6 Dj7Xqo6McsAOzpd61+m1ucrDfaLEI6QRXHVBOxyKQzkCXnD47TRXc41IA/MRhsbI 4O4XtkzwqA3k2/nri11t6E+jCC9vL8aPU/TGc9x200u98Azkp4kbP9xQpNV7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8C143jZU6AJ3xQkPjqSbusR3ycAwHwYDVR0j BBgwFoAUXwAUD2ctAx0GB0k6AhpG8alHWugwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4MTIxNTA2NTQ1NjY0Mi8wLzVGMDAxNDBGNjcyRDAzMUQwNjA3NDkzQTAyMUE0 NkYxQTk0NzVBRTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUYwMDE0MEY2NzJEMDMxRDA2MDc0OTNBMDIxQTQ2RjFBOTQ3NUFFOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4ODEyMTUwNjU0NTY2NDIvMC81RjAwMTQwRjY3MkQw MzFEMDYwNzQ5M0EwMjFBNDZGMUE5NDc1QUU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1C5h2+scGbK 7jn8OsJiWfXyNo/sDgJMozjJOOkpb71t4f6ZxVa7XEE0jONGSkpb7ILIxL2Z2Eab 5hChvEUr7py5fx0K65OoNF+C5TWXZbOrM5IMR7wlw4jAjoEdiV7XC73DUYA1/KvH ve2cX5Roj4OaR4cIx3PZNElqJRKHbQz87rJ/zrKSiWRDL9jYUgsE6HDvCxziuwnW ITFRO8U8z/5exlzQyQLrbaRRNohoh/LbnKDqpI0RIrt3LM2GYTAE3czKhc+tzJpT ms9z4L1+qrhLuAako0x9eOo1FeLmNAEEQ1YZFMFVRc0tRuqymxsdCh7W2/tumRNZ UQsIyutLTA== -----END CERTIFICATE-----Generated at Thu Oct 15 16:29:28 2026 by rpki-client