$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft File: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft (raw, json) Hash identifier: ua5om/j+vjBw8669gWtEaAlKaEnYbVnp33Ebh0hRC3c= Subject key identifier: CC:C8:96:9E:DF:54:6B:04:04:E9:9A:4E:B8:A4:48:EC:7C:CB:05:96 Authority key identifier: 7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08 Certificate issuer: /CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608 Certificate serial: 41D04A03CB427481A8CF23F9FD0AC15AE793C8E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft Manifest number: D0 Signing time: Tue 13 Oct 2026 15:33:09 +0000 Manifest this update: Tue 13 Oct 2026 15:28:09 +0000 Manifest next update: Sat 17 Oct 2026 00:18:09 +0000 Files and hashes: 1: 7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl (hash: b1i7VoH7654Df3AaSTXhyijpPA+kaZCZVsC2Nh1s7Ik=) 2: 3130332e33362e3139322e302f32322d3232203d3e203233363530.roa (hash: M765CopqZf6j7SPn53UaW0BZUmGFf3AOcTsTTNyVaoA=) 3: 3130332e33362e3230302e302f32322d3232203d3e203233363530.roa (hash: 8dDfwQ79qdpVpYeaUnX/qx0QM5Ju+lrPZd8Vtd9vWpk=) 4: 3130332e33362e3230342e302f32322d3232203d3e203233363530.roa (hash: Nz+r/dZKAwE/9JB0MxhKtZjDSMYb6nHSikzBbLCS+DM=) 5: 3130332e33362e3139362e302f32322d3232203d3e203233363530.roa (hash: IZ4XVYgqKmGtS8wgseXWsX65eKc4WUGyUyoHldRsixk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 00:18:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:d0:4a:03:cb:42:74:81:a8:cf:23:f9:fd:0a:c1:5a:e7:93:c8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A2916B9A2FE507E9FFA811881C2B78189FE7608 Validity Not Before: Oct 13 15:28:09 2026 GMT Not After : Oct 17 00:18:09 2026 GMT Subject: CN=CCC8969EDF546B0404E99A4EB8A448EC7CCB0596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ca:ff:22:63:32:8b:fa:11:17:84:96:69:66: 8f:18:c9:0e:16:14:ce:46:b4:3a:71:30:2e:e9:c7: 20:d5:f8:11:d6:8c:0f:16:82:73:5b:fb:36:6a:7e: 7a:a9:5e:48:5f:ff:1a:cb:6a:f2:28:d7:de:6f:db: 91:4d:2a:9a:e3:fa:1f:5b:2c:4e:32:43:79:4b:8a: f0:22:7c:dc:27:a2:b3:b8:ad:c8:56:cf:ec:16:26: fa:1e:86:85:6f:ce:1c:2d:59:08:0b:36:20:c2:ca: 3a:db:61:93:71:13:6d:60:2c:90:e0:31:80:1c:81: c8:cd:62:48:a6:7f:b9:ee:5d:5f:b5:a2:af:44:77: 74:82:7e:99:a8:e6:ff:56:42:d3:cb:05:71:cd:d0: 37:5e:ca:a0:2f:39:84:42:0e:fb:10:97:0c:c5:c8: 87:d6:b0:e0:19:23:d6:c4:fb:e8:90:02:1d:8d:13: ad:bf:8a:b9:a6:4c:96:9e:3c:f6:c4:99:db:06:bf: 1f:b4:95:9c:08:71:ee:83:5f:cb:d9:2a:63:0c:be: 71:c1:64:32:38:a7:2c:4a:d6:b9:2e:bd:8c:d6:73: cd:1c:52:83:00:00:f6:03:a1:a4:96:c7:09:77:43: 2c:f3:70:03:27:51:fb:54:ed:af:d2:44:d8:fa:31: e9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C8:96:9E:DF:54:6B:04:04:E9:9A:4E:B8:A4:48:EC:7C:CB:05:96 X509v3 Authority Key Identifier: keyid:7A:29:16:B9:A2:FE:50:7E:9F:FA:81:18:81:C2:B7:81:89:FE:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7A2916B9A2FE507E9FFA811881C2B78189FE7608.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096319979105681411/0/7A2916B9A2FE507E9FFA811881C2B78189FE7608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:bc:f0:47:fe:8c:b4:5f:09:7d:c7:4d:f6:76:0d:d0:65:c9: 1b:d0:eb:5a:ca:fe:d5:d1:99:61:64:18:01:42:b7:30:c3:35: 31:13:1a:8c:f1:06:3e:01:88:5d:6b:dc:2d:b0:b7:13:64:cd: 00:0c:03:f8:12:f8:fa:e5:96:d3:fc:e3:ec:ec:eb:6a:10:19: 7d:cd:c2:55:9e:e3:66:7a:38:ad:58:bb:a0:1b:92:86:dc:05: bc:0c:43:0b:36:fd:33:46:00:c8:61:5c:37:3f:61:65:25:c5: 02:6d:63:d9:94:02:78:dc:28:49:0c:ca:f4:64:89:48:90:26: 7f:2a:a3:5b:06:f9:72:cc:6e:b8:fd:d1:5b:32:e1:10:20:77: c6:90:e4:b7:e1:60:0e:1f:e2:0f:fc:ae:e1:d7:10:77:0b:43: 1f:59:be:e8:e5:14:8a:0c:2b:c8:e7:8e:f2:80:3f:cd:a9:50: 38:ea:4a:6c:70:2e:f2:5a:92:4f:7b:96:ff:83:66:da:a3:4b: fd:7f:a6:75:b6:c6:bb:44:b0:7d:b4:bc:d4:03:b4:b6:f0:2a: 14:08:c2:7f:bd:ff:c8:11:af:46:ce:d9:57:a0:19:9f:ae:b2: 5d:a1:7c:91:e3:ae:3f:3d:17:62:a0:82:81:e6:3c:0e:6c:2b: d3:bb:ea:56 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQdBKA8tCdIGozyP5/QrBWueTyOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4 OUZFNzYwODAeFw0yNjEwMTMxNTI4MDlaFw0yNjEwMTcwMDE4MDlaMDMxMTAvBgNV BAMTKENDQzg5NjlFREY1NDZCMDQwNEU5OUE0RUI4QTQ0OEVDN0NDQjA1OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgyv8iYzKL+hEXhJZpZo8YyQ4W FM5GtDpxMC7pxyDV+BHWjA8WgnNb+zZqfnqpXkhf/xrLavIo195v25FNKprj+h9b LE4yQ3lLivAifNwnorO4rchWz+wWJvoehoVvzhwtWQgLNiDCyjrbYZNxE21gLJDg MYAcgcjNYkimf7nuXV+1oq9Ed3SCfpmo5v9WQtPLBXHN0DdeyqAvOYRCDvsQlwzF yIfWsOAZI9bE++iQAh2NE62/irmmTJaePPbEmdsGvx+0lZwIce6DX8vZKmMMvnHB ZDI4pyxK1rkuvYzWc80cUoMAAPYDoaSWxwl3QyzzcAMnUftU7a/SRNj6Men9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzMiWnt9UawQE6ZpOuKRI7HzLBZYwHwYDVR0j BBgwFoAUeikWuaL+UH6f+oEYgcK3gYn+dggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMxOTk3OTEwNTY4MTQxMS8wLzdBMjkxNkI5QTJGRTUwN0U5RkZBODExODgxQzJC NzgxODlGRTc2MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0EyOTE2QjlBMkZFNTA3RTlGRkE4MTE4ODFDMkI3ODE4OUZFNzYwOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMTk5NzkxMDU2ODE0MTEvMC83QTI5MTZCOUEyRkU1 MDdFOUZGQTgxMTg4MUMyQjc4MTg5RkU3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLzwR/6MtF8J fcdN9nYN0GXJG9DrWsr+1dGZYWQYAUK3MMM1MRMajPEGPgGIXWvcLbC3E2TNAAwD +BL4+uWW0/zj7OzrahAZfc3CVZ7jZno4rVi7oBuShtwFvAxDCzb9M0YAyGFcNz9h ZSXFAm1j2ZQCeNwoSQzK9GSJSJAmfyqjWwb5csxuuP3RWzLhECB3xpDkt+FgDh/i D/yu4dcQdwtDH1m+6OUUigwryOeO8oA/zalQOOpKbHAu8lqST3uW/4Nm2qNL/X+m dbbGu0SwfbS81AO0tvAqFAjCf73/yBGvRs7ZV6AZn66yXaF8keOuPz0XYqCCgeY8 Dmwr07vqVg== -----END CERTIFICATE-----Generated at Wed Oct 14 09:08:58 2026 by rpki-client