$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft File: 0503C0DCF2359A63935CA42978F7E95CF29425AD.mft (raw, json) Hash identifier: 4x0Me3qSJ75Gf+u/NAMv1UrqTxqmBgU1Mxl6Zt3NXMU= Subject key identifier: AF:93:44:C4:CD:E2:81:30:4D:6D:94:3A:88:E3:38:1E:28:15:67:E3 Authority key identifier: 05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD Certificate issuer: /CN=0503C0DCF2359A63935CA42978F7E95CF29425AD Certificate serial: 43D6F1F945BD12D04C0549A9698620BE2C228349 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft Manifest number: D6 Signing time: Wed 28 Oct 2026 21:51:34 +0000 Manifest this update: Wed 28 Oct 2026 21:46:34 +0000 Manifest next update: Sun 01 Nov 2026 03:30:34 +0000 Files and hashes: 1: 0503C0DCF2359A63935CA42978F7E95CF29425AD.crl (hash: 9P2OW1+Vdxv6HNJvVAzXV4LtOg9obA3nWkrOh9OvZ3E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 03:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d6:f1:f9:45:bd:12:d0:4c:05:49:a9:69:86:20:be:2c:22:83:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0503C0DCF2359A63935CA42978F7E95CF29425AD Validity Not Before: Oct 28 21:46:34 2026 GMT Not After : Nov 1 03:30:34 2026 GMT Subject: CN=AF9344C4CDE281304D6D943A88E3381E281567E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:03:61:cd:9d:16:9e:0c:a3:2d:3b:4f:87:fc: 04:22:32:00:d4:2e:a5:ec:fa:37:2d:97:19:f6:74: db:70:f2:d5:11:08:3c:fb:cc:08:7c:7e:29:29:c7: 7f:29:63:d1:fb:1e:19:04:ce:77:29:1a:5b:42:a1: 75:e2:16:8b:b9:93:e1:93:91:2b:43:cd:49:6c:23: f9:4d:cd:6c:e5:09:92:ef:e6:cc:ea:60:cb:72:66: 47:20:46:59:bc:f5:a6:2e:20:f4:9c:52:9d:d6:b1: e8:a5:1b:df:02:9b:f6:3f:44:7a:0c:43:ff:f8:53: a4:67:65:e0:a9:eb:37:24:b0:f9:e0:6d:5c:23:26: 6a:1d:5f:72:2e:e7:22:78:7c:83:e8:4b:9d:79:43: f8:54:45:4b:66:59:12:39:70:f7:d8:9e:68:f4:1c: 41:53:3f:c9:77:ad:30:4a:33:6f:58:9e:3f:91:33: c2:f1:fa:0c:b3:18:2d:de:3d:85:b9:5b:75:96:c6: ec:ee:50:09:b3:a0:e6:be:f6:8b:76:5a:8d:ef:29: 32:b2:de:72:46:3a:1f:de:f6:64:4d:69:e6:2f:74: 4d:d6:83:d7:be:1e:97:ff:19:60:c1:3a:71:45:ca: 90:a7:1c:44:8f:4f:4e:e1:56:18:5a:55:04:ea:de: 25:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:93:44:C4:CD:E2:81:30:4D:6D:94:3A:88:E3:38:1E:28:15:67:E3 X509v3 Authority Key Identifier: keyid:05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f8:f9:99:72:4c:95:1a:35:ee:47:8c:d5:14:b5:33:0e:86: 60:1e:55:5d:a5:6f:e3:0f:9f:ea:47:4d:16:c2:70:5b:76:aa: 6e:ef:a0:6c:91:3a:fd:5f:50:17:2e:59:a5:d9:a6:5e:bb:41: 9a:d8:a7:61:9d:7f:c9:5e:f7:0f:5b:7f:63:29:3a:32:f7:1d: 58:76:b0:3c:cb:34:7d:e0:73:fb:9c:d5:63:72:dd:d0:39:6b: 1b:77:1a:56:85:f7:4e:e2:95:65:67:f4:02:fb:8b:3b:0f:cf: a0:30:b1:34:3d:e7:84:b1:1f:9e:95:cd:8f:93:73:97:6d:b5: 9e:51:f5:a7:df:5e:bb:d3:a7:b8:2d:c7:1f:5c:d2:a1:12:e7: 7a:a7:41:58:18:a8:8a:0a:f4:37:4c:07:ce:6b:09:42:a3:9e: e2:0e:3d:31:72:95:c4:9b:14:f2:6a:26:19:38:6d:6c:42:39: 40:9e:99:c2:d7:c5:29:6a:b6:96:dc:1d:89:62:bd:36:a4:b1: 37:5b:f1:d9:48:0c:e1:fd:3f:08:a6:e5:39:8b:8e:ab:46:a9: a9:58:82:0d:cb:95:7c:27:bf:fc:31:9e:0c:36:f0:dc:64:ea: 20:a2:8c:24:6d:82:f6:f8:20:74:99:c1:42:aa:50:2e:e4:9e: 65:88:c0:d8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ9bx+UW9EtBMBUmpaYYgviwig0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNG Mjk0MjVBRDAeFw0yNjEwMjgyMTQ2MzRaFw0yNjExMDEwMzMwMzRaMDMxMTAvBgNV BAMTKEFGOTM0NEM0Q0RFMjgxMzA0RDZEOTQzQTg4RTMzODFFMjgxNTY3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYA2HNnRaeDKMtO0+H/AQiMgDU LqXs+jctlxn2dNtw8tURCDz7zAh8fikpx38pY9H7HhkEzncpGltCoXXiFou5k+GT kStDzUlsI/lNzWzlCZLv5szqYMtyZkcgRlm89aYuIPScUp3WseilG98Cm/Y/RHoM Q//4U6RnZeCp6zcksPngbVwjJmodX3Iu5yJ4fIPoS515Q/hURUtmWRI5cPfYnmj0 HEFTP8l3rTBKM29Ynj+RM8Lx+gyzGC3ePYW5W3WWxuzuUAmzoOa+9ot2Wo3vKTKy 3nJGOh/e9mRNaeYvdE3Wg9e+Hpf/GWDBOnFFypCnHESPT07hVhhaVQTq3iWhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUr5NExM3igTBNbZQ6iOM4HigVZ+MwHwYDVR0j BBgwFoAUBQPA3PI1mmOTXKQpePfpXPKUJa0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMwMTE0OTM3MzM5OTA0MS8wLzA1MDNDMERDRjIzNTlBNjM5MzVDQTQyOTc4RjdF OTVDRjI5NDI1QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNGMjk0MjVBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMDExNDkzNzMzOTkwNDEvMC8wNTAzQzBEQ0YyMzU5 QTYzOTM1Q0E0Mjk3OEY3RTk1Q0YyOTQyNUFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfj5mXJMlRo1 7keM1RS1Mw6GYB5VXaVv4w+f6kdNFsJwW3aqbu+gbJE6/V9QFy5ZpdmmXrtBmtin YZ1/yV73D1t/Yyk6MvcdWHawPMs0feBz+5zVY3Ld0DlrG3caVoX3TuKVZWf0AvuL Ow/PoDCxND3nhLEfnpXNj5Nzl221nlH1p99eu9OnuC3HH1zSoRLneqdBWBioigr0 N0wHzmsJQqOe4g49MXKVxJsU8momGThtbEI5QJ6ZwtfFKWq2ltwdiWK9NqSxN1vx 2UgM4f0/CKblOYuOq0apqViCDcuVfCe//DGeDDbw3GTqIKKMJG2C9vggdJnBQqpQ LuSeZYjA2A== -----END CERTIFICATE-----Generated at Fri Oct 30 05:12:40 2026 by rpki-client