$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft File: E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft (raw, json) Hash identifier: 4wgMAHSjeuI6qY1QDkGwySPSu7wQoc4F/BuG6CPDWHs= Subject key identifier: 38:FF:29:F1:27:DE:18:0D:9A:91:F5:3E:1B:69:30:44:68:52:20:97 Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Certificate serial: 5E865280FAAA5A1600A3BB8DC153F36C38465BE9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft Manifest number: E2 Signing time: Mon 26 Oct 2026 12:38:42 +0000 Manifest this update: Mon 26 Oct 2026 12:33:42 +0000 Manifest next update: Thu 29 Oct 2026 18:44:42 +0000 Files and hashes: 1: AS58466.roa (hash: onBVv54zU+fifJMqJLlLT5PjMTHT1naY/xWE99SHHKs=) 2: AS56040.roa (hash: tVA43wmUt+A+FVm7xKq2eFE3EsL8rO65+DeveNNNVRk=) 3: E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl (hash: rvSe8K1q6jiemWw4VUvwgy10COHY/L45n8gbkJDl//Q=) 4: AS135391.roa (hash: OwlCXhq3ct5HY0L/JGkpNJUvk5HjfYzH4Zcih23X4Jo=) 5: AS134764.roa (hash: xBe/goNb1fufTCb9L8wWUBYbiFdPALUFLhszW5C/vLo=) 6: AS38730.roa (hash: R6GUDNjhj7Y2lemEXh2qBIc7qq98BsfLVSYfayFPICM=) 7: AS38370.roa (hash: r67f/FHpksh2pXDDienni8fvzhcRro11FYuwh2hDxos=) 8: AS4134.roa (hash: pbBEiZBvdlrzSkUwoE6zC9388fVOYjGShgHk6XRCmy8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 18:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:86:52:80:fa:aa:5a:16:00:a3:bb:8d:c1:53:f3:6c:38:46:5b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Validity Not Before: Oct 26 12:33:42 2026 GMT Not After : Oct 29 18:44:42 2026 GMT Subject: CN=38FF29F127DE180D9A91F53E1B69304468522097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:06:e5:ab:2a:aa:14:3d:ed:5a:e8:02:72: 7e:5c:2a:80:98:84:b2:ae:94:8a:54:cb:71:80:8e: 20:50:43:e6:53:9e:40:92:6e:eb:80:83:8a:b2:b1: 0b:a2:88:8d:84:53:80:39:65:ac:3c:04:2b:69:05: a3:34:33:d1:2d:7b:8c:49:8d:58:ed:93:7a:1f:6b: 4b:36:3a:65:a7:0c:d7:51:e3:34:f5:ee:95:b0:bb: 9d:b7:15:ba:4f:c5:ad:b1:f5:4a:10:81:63:3e:1d: 7b:82:6f:ce:8b:1e:1f:b2:9a:6d:52:d8:72:12:28: c4:6d:94:0e:2a:2a:4d:8c:38:b8:9e:30:80:33:6a: af:e5:9f:0d:70:7c:46:1f:4b:ce:03:da:1e:24:8d: 00:5a:8a:f1:ca:11:e9:8e:3a:00:21:57:0a:78:16: cf:84:17:a6:c2:b8:36:fc:67:38:11:d8:ab:0e:d0: 36:21:af:36:33:2c:b7:80:d9:59:1d:d7:24:21:fe: 00:cd:0c:9c:e4:9f:a9:01:f7:76:8b:7c:48:30:f4: 96:04:32:ac:32:04:41:41:d2:4a:a2:e4:4c:92:27: c0:06:77:e4:fd:28:8e:30:b8:31:3c:dd:9e:c6:21: a1:31:55:56:9c:3f:58:ed:34:54:7d:58:03:32:c7: 89:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FF:29:F1:27:DE:18:0D:9A:91:F5:3E:1B:69:30:44:68:52:20:97 X509v3 Authority Key Identifier: keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:59:7b:1b:49:8d:ec:18:d3:ab:a5:ca:01:94:3e:f5:da:32: 28:fd:a2:45:7d:e1:ab:9e:c7:79:ba:35:2b:49:41:6b:20:ec: cc:bb:14:e1:99:60:5a:2f:3c:30:1d:71:2a:a9:58:d3:ba:8f: 20:7e:68:2e:48:de:8f:38:d8:2f:2e:ba:ee:32:aa:fa:b7:62: 21:12:e6:dd:ff:e2:0d:07:53:ad:ae:fd:5f:6f:a1:f6:f3:1c: 48:ea:ce:2f:fc:e5:c0:a7:bc:4d:35:3a:76:00:9b:5d:32:21: 5e:4c:79:c8:ae:f7:a6:a1:49:e4:ee:49:5a:57:66:fe:7f:d8: be:53:55:aa:ef:60:fb:95:e8:76:43:9f:a9:90:01:9b:bf:1b: 37:6e:cd:44:70:97:e3:5e:30:a2:d3:f3:6b:a7:ab:1b:00:1e: eb:d2:7c:ed:f3:82:64:9a:c1:fd:62:84:28:12:f0:de:59:a7: 42:83:40:95:71:27:79:c7:63:7c:23:b3:dd:a9:9d:3e:5b:57: 18:40:84:09:57:9c:0d:cb:39:52:b0:87:ec:4b:5b:82:00:7c: f8:20:95:f2:c0:d2:6c:9d:a2:fe:c4:ec:7a:f7:fb:36:75:07: b1:57:0d:b7:01:c9:56:34:99:eb:ed:74:f9:8e:18:37:58:3a: 21:39:3c:a5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXoZSgPqqWhYAo7uNwVPzbDhGW+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD MUE4NjlFNjAeFw0yNjEwMjYxMjMzNDJaFw0yNjEwMjkxODQ0NDJaMDMxMTAvBgNV BAMTKDM4RkYyOUYxMjdERTE4MEQ5QTkxRjUzRTFCNjkzMDQ0Njg1MjIwOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtmgblqyqqFD3tWugCcn5cKoCY hLKulIpUy3GAjiBQQ+ZTnkCSbuuAg4qysQuiiI2EU4A5Zaw8BCtpBaM0M9Ete4xJ jVjtk3ofa0s2OmWnDNdR4zT17pWwu523FbpPxa2x9UoQgWM+HXuCb86LHh+ymm1S 2HISKMRtlA4qKk2MOLieMIAzaq/lnw1wfEYfS84D2h4kjQBaivHKEemOOgAhVwp4 Fs+EF6bCuDb8ZzgR2KsO0DYhrzYzLLeA2Vkd1yQh/gDNDJzkn6kB93aLfEgw9JYE MqwyBEFB0kqi5EySJ8AGd+T9KI4wuDE83Z7GIaExVVacP1jtNFR9WAMyx4mfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOP8p8SfeGA2akfU+G2kwRGhSIJcwHwYDVR0j BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0 MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNzUzMzA3NzczNTAxNDYvMC9FM0UwQzc3NEUzQjJC QzU4NzkwRTc0OTk4MzdBNDE1NUMxQTg2OUU2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVl7G0mN7BjT q6XKAZQ+9doyKP2iRX3hq57Hebo1K0lBayDszLsU4ZlgWi88MB1xKqlY07qPIH5o LkjejzjYLy667jKq+rdiIRLm3f/iDQdTra79X2+h9vMcSOrOL/zlwKe8TTU6dgCb XTIhXkx5yK73pqFJ5O5JWldm/n/YvlNVqu9g+5XodkOfqZABm78bN27NRHCX414w otPza6erGwAe69J87fOCZJrB/WKEKBLw3lmnQoNAlXEnecdjfCOz3amdPltXGECE CVecDcs5UrCH7EtbggB8+CCV8sDSbJ2i/sTsevf7NnUHsVcNtwHJVjSZ6+10+Y4Y N1g6ITk8pQ== -----END CERTIFICATE-----Generated at Wed Oct 28 04:37:09 2026 by rpki-client