$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft File: 0503C0DCF2359A63935CA42978F7E95CF29425AD.mft (raw, json) Hash identifier: CANFdtYNdErzzEOMzWDk8wRPxwC/Wj2SFY22NsK4jNw= Subject key identifier: EF:8F:2E:38:4E:E8:7B:AB:A6:7E:1B:D7:F4:40:A7:9A:14:FF:68:81 Authority key identifier: 05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD Certificate issuer: /CN=0503C0DCF2359A63935CA42978F7E95CF29425AD Certificate serial: 1C4F802E7FA27B70688B1F786E1C216B211FF9AF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft Manifest number: D7 Signing time: Sat 31 Oct 2026 03:33:52 +0000 Manifest this update: Sat 31 Oct 2026 03:28:52 +0000 Manifest next update: Tue 03 Nov 2026 14:11:52 +0000 Files and hashes: 1: 0503C0DCF2359A63935CA42978F7E95CF29425AD.crl (hash: vuQJJF0sVI0AzIqQ4pXwC4WNPSFsh8miO+dcPK5WKTg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 15:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:4f:80:2e:7f:a2:7b:70:68:8b:1f:78:6e:1c:21:6b:21:1f:f9:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0503C0DCF2359A63935CA42978F7E95CF29425AD Validity Not Before: Oct 31 03:28:52 2026 GMT Not After : Nov 3 14:11:52 2026 GMT Subject: CN=EF8F2E384EE87BABA67E1BD7F440A79A14FF6881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9d:7c:3a:df:77:f9:80:a8:f4:14:1d:21:54: 03:3b:58:87:a1:96:21:7a:f0:c7:e6:b3:40:06:75: cd:da:22:e2:64:3f:11:e0:59:a6:df:a5:56:ef:8d: 26:73:54:23:1c:5f:fd:e1:9e:70:c2:aa:54:0a:bc: 67:42:86:03:64:7f:4f:6f:87:7e:c2:0c:1c:a9:eb: 1f:53:b3:9b:b9:c0:62:26:4b:8a:8e:ce:9d:d1:ed: 36:b5:ee:c2:72:87:dd:50:58:45:e1:89:f6:a4:3f: c4:01:31:cf:75:40:1a:a6:03:27:1a:5f:b2:0a:de: 92:d5:f6:7b:c7:a5:e8:f4:97:b0:69:ca:b2:fd:ce: ab:0f:99:22:de:f7:6c:4f:90:46:fe:5f:54:01:e7: 30:b4:ae:c7:9b:cd:f7:83:3b:7a:df:70:5a:3c:78: 34:38:bf:4c:cc:fd:d9:d5:72:4a:b3:f5:91:98:f9: c4:85:d1:2e:b4:99:42:56:2e:e3:28:42:2e:da:a8: a5:4b:a9:33:9f:43:a2:0e:58:97:a7:cb:83:b7:64: 7c:4b:c1:7c:97:88:af:25:c4:55:8e:4b:18:0d:16: 94:35:9e:10:ee:02:73:f6:71:4b:18:c1:af:9e:6c: c8:db:79:ad:b7:0c:5b:65:18:2f:4b:4a:c2:f0:60: c8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8F:2E:38:4E:E8:7B:AB:A6:7E:1B:D7:F4:40:A7:9A:14:FF:68:81 X509v3 Authority Key Identifier: keyid:05:03:C0:DC:F2:35:9A:63:93:5C:A4:29:78:F7:E9:5C:F2:94:25:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/0/0503C0DCF2359A63935CA42978F7E95CF29425AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e6:16:0b:6c:04:aa:88:08:cb:c4:48:b3:0f:ee:e6:42:40: 41:22:0f:63:ef:c2:ce:98:8e:84:b3:32:44:52:10:a6:8f:a2: b9:c9:e0:49:b2:30:cc:07:4f:76:95:2a:f6:e5:27:2d:ac:9c: 01:1d:39:c8:d1:be:4f:75:8d:6d:b6:87:a8:80:4f:b6:6f:1d: 30:c1:6a:d3:80:f5:25:e2:6a:d4:8d:63:16:67:aa:e1:15:f1: 1c:90:dc:2b:d5:7a:48:d4:c0:f0:6e:23:58:ad:08:7e:48:ef: 43:54:67:27:ca:3b:91:f4:f0:b9:ef:bb:ca:d2:e0:b8:2a:c7: 47:f3:de:04:3c:87:cf:23:a5:c0:28:68:b3:19:b6:8c:4f:02: d4:19:92:d4:8d:10:e0:ae:de:0f:a8:b2:93:56:9c:5a:bf:93: b1:1f:94:aa:86:d2:86:1e:29:9c:30:33:1b:6e:b5:c5:0a:e7: 9c:5e:ff:38:52:7b:b2:64:0d:c3:ef:22:5a:7f:34:1c:bb:56: 2f:7f:29:44:c7:06:b5:26:df:82:cb:e0:17:2d:21:e4:5a:7f: 47:16:9e:d8:22:c4:e0:23:e6:af:e5:f9:81:6b:31:2a:7f:af: fb:2a:aa:a4:b5:5d:06:47:b3:d1:13:46:02:35:bd:10:40:96: 4c:83:bd:0e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHE+ALn+ie3Boix94bhwhayEf+a8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNG Mjk0MjVBRDAeFw0yNjEwMzEwMzI4NTJaFw0yNjExMDMxNDExNTJaMDMxMTAvBgNV BAMTKEVGOEYyRTM4NEVFODdCQUJBNjdFMUJEN0Y0NDBBNzlBMTRGRjY4ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQnXw633f5gKj0FB0hVAM7WIeh liF68Mfms0AGdc3aIuJkPxHgWabfpVbvjSZzVCMcX/3hnnDCqlQKvGdChgNkf09v h37CDByp6x9Ts5u5wGImS4qOzp3R7Ta17sJyh91QWEXhifakP8QBMc91QBqmAyca X7IK3pLV9nvHpej0l7BpyrL9zqsPmSLe92xPkEb+X1QB5zC0rsebzfeDO3rfcFo8 eDQ4v0zM/dnVckqz9ZGY+cSF0S60mUJWLuMoQi7aqKVLqTOfQ6IOWJeny4O3ZHxL wXyXiK8lxFWOSxgNFpQ1nhDuAnP2cUsYwa+ebMjbea23DFtlGC9LSsLwYMiXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU748uOE7oe6umfhvX9ECnmhT/aIEwHwYDVR0j BBgwFoAUBQPA3PI1mmOTXKQpePfpXPKUJa0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMwMTE0OTM3MzM5OTA0MS8wLzA1MDNDMERDRjIzNTlBNjM5MzVDQTQyOTc4RjdF OTVDRjI5NDI1QUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMDUwM0MwRENGMjM1OUE2MzkzNUNBNDI5NzhGN0U5NUNGMjk0MjVBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMDExNDkzNzMzOTkwNDEvMC8wNTAzQzBEQ0YyMzU5 QTYzOTM1Q0E0Mjk3OEY3RTk1Q0YyOTQyNUFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeYWC2wEqogI y8RIsw/u5kJAQSIPY+/CzpiOhLMyRFIQpo+iucngSbIwzAdPdpUq9uUnLaycAR05 yNG+T3WNbbaHqIBPtm8dMMFq04D1JeJq1I1jFmeq4RXxHJDcK9V6SNTA8G4jWK0I fkjvQ1RnJ8o7kfTwue+7ytLguCrHR/PeBDyHzyOlwChosxm2jE8C1BmS1I0Q4K7e D6iyk1acWr+TsR+UqobShh4pnDAzG261xQrnnF7/OFJ7smQNw+8iWn80HLtWL38p RMcGtSbfgsvgFy0h5Fp/Rxae2CLE4CPmr+X5gWsxKn+v+yqqpLVdBkez0RNGAjW9 EECWTIO9Dg== -----END CERTIFICATE-----Generated at Sun Nov 1 02:07:33 2026 by rpki-client