$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft File: 7F04F6FCE22750607E54E558E039E0F551D3135D.mft (raw, json) Hash identifier: xE4G8NuwMXV/Jo8/ClFxN5CH0DKvPm0wza1mVK5BnLs= Subject key identifier: 68:9E:66:88:A1:BC:A0:76:3C:B2:B9:48:A8:59:D5:08:FA:6E:D9:05 Authority key identifier: 7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D Certificate issuer: /CN=7F04F6FCE22750607E54E558E039E0F551D3135D Certificate serial: 5D2691BB9BF602A15E5C687B37822899ACF81910 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft Manifest number: CB Signing time: Mon 12 Oct 2026 16:27:08 +0000 Manifest this update: Mon 12 Oct 2026 16:22:08 +0000 Manifest next update: Fri 16 Oct 2026 02:43:08 +0000 Files and hashes: 1: 3130332e312e32302e302f32322d3232203d3e203233383431.roa (hash: VysPkdD4l/g9blPW2SJoFaVCrMMxGsdFC4KZtokwYps=) 2: 3231312e3134382e3136302e302f31392d3139203d3e203233383431.roa (hash: bMsjW1jbE0mk/8BJ/0nz3O3UXsGlGA3e6jddE9uPDS4=) 3: 3232312e3132392e302e302f31362d3136203d3e203233383431.roa (hash: LXzAf6+hhsdt/TNw4PFtDGl7SS8I2bBwjZ8Gp200CMo=) 4: 323430313a636130303a3a2f33322d3332203d3e203233383431.roa (hash: Su8W1ryH6AcZbU5mbEZVZDmU61kG94jGmfhPCm2jvgw=) 5: 7F04F6FCE22750607E54E558E039E0F551D3135D.crl (hash: TRwyR3/OuuvTxzcBTtdgWkHXXk+Yhrtq/OfUL4qRyt8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:26:91:bb:9b:f6:02:a1:5e:5c:68:7b:37:82:28:99:ac:f8:19:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F04F6FCE22750607E54E558E039E0F551D3135D Validity Not Before: Oct 12 16:22:08 2026 GMT Not After : Oct 16 02:43:08 2026 GMT Subject: CN=689E6688A1BCA0763CB2B948A859D508FA6ED905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:55:9f:5f:70:b7:d8:f6:21:78:97:d9:ed:6c: 81:b6:df:31:57:06:c8:7f:10:c4:ba:8d:ef:b8:a6: 60:a7:df:73:59:43:0b:fa:ea:84:b9:df:89:93:d0: 38:09:88:97:cf:f4:63:ae:8c:b9:d8:f5:be:6c:b4: 58:33:82:18:62:a1:e5:63:a7:59:e1:4b:62:e3:b3: 46:43:e2:a3:94:ba:a6:49:9f:ab:af:82:9c:5e:0a: 8d:09:91:4f:89:c4:db:19:29:9a:41:46:22:35:5d: 98:16:cc:84:6c:cd:f5:2b:a7:03:55:93:d1:6f:74: f8:d6:9f:d2:85:56:2b:b9:e0:37:42:37:53:22:0a: a8:70:f6:33:63:59:c1:37:e0:ba:0c:bd:9f:ec:8b: 90:40:7d:76:27:cf:ab:7a:2c:2b:15:18:ab:1d:3f: 24:bc:9a:83:2e:80:f3:17:a6:b8:a6:26:12:04:2d: 39:12:aa:18:2f:98:e1:8e:40:ba:49:2a:53:5c:32: a2:1e:04:23:38:d6:03:8c:b6:b5:9a:a3:6b:0c:ef: c0:ff:5d:27:ad:a6:81:6c:42:b9:70:54:25:46:a8: 7c:a1:2c:a9:94:5c:9d:bb:d5:93:10:0e:84:f4:b4: 3b:2e:07:df:54:3f:cc:b8:56:96:1d:43:ad:8f:48: 2a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9E:66:88:A1:BC:A0:76:3C:B2:B9:48:A8:59:D5:08:FA:6E:D9:05 X509v3 Authority Key Identifier: keyid:7F:04:F6:FC:E2:27:50:60:7E:54:E5:58:E0:39:E0:F5:51:D3:13:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7F04F6FCE22750607E54E558E039E0F551D3135D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096603204424105986/0/7F04F6FCE22750607E54E558E039E0F551D3135D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:a5:b3:6c:99:72:d1:d5:d6:08:7d:8d:cf:ef:c3:a6:ad:fb: 34:02:ef:51:1a:b7:c6:e4:41:02:dd:92:c5:26:0e:58:7c:4e: 8b:a0:0e:b6:5f:b9:9e:bf:3e:57:cb:53:64:43:e5:45:86:ae: f7:40:98:24:40:2e:0a:02:8b:15:04:b0:38:42:0d:8a:48:48: 10:5d:bd:06:1c:4d:d6:35:f8:1a:9e:ed:cc:3a:cf:7d:46:7b: 4e:76:05:d4:e3:c0:a2:26:09:2e:b0:37:f7:a6:73:3a:d5:33: f1:e1:64:ad:fd:62:0e:f7:c2:dd:16:b0:bc:2f:92:f5:36:0c: dc:1d:4d:aa:e0:27:11:2b:09:fe:8b:35:f2:9f:d9:64:75:29: 66:1d:72:3f:24:38:2e:b0:7b:00:f3:ce:d6:83:1c:e0:ea:f9: f1:9c:83:ee:3d:12:70:4c:94:88:29:30:b6:15:ec:42:61:b2: 5c:45:cb:b8:bf:40:03:21:05:d4:01:c1:81:c1:dd:f2:9f:3f: 7b:a2:19:02:6f:95:bb:94:44:f7:77:ea:ec:92:d8:9c:df:13: 75:c2:d1:82:03:a0:33:b3:3c:33:e5:ba:ad:e2:14:fb:3d:85: 8f:dd:2e:6c:48:6b:65:53:c1:22:6e:c6:2d:9c:6c:82:d1:e1: 43:47:d4:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXSaRu5v2AqFeXGh7N4Iomaz4GRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0YwNEY2RkNFMjI3NTA2MDdFNTRFNTU4RTAzOUUwRjU1 MUQzMTM1RDAeFw0yNjEwMTIxNjIyMDhaFw0yNjEwMTYwMjQzMDhaMDMxMTAvBgNV BAMTKDY4OUU2Njg4QTFCQ0EwNzYzQ0IyQjk0OEE4NTlENTA4RkE2RUQ5MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVZ9fcLfY9iF4l9ntbIG23zFX Bsh/EMS6je+4pmCn33NZQwv66oS534mT0DgJiJfP9GOujLnY9b5stFgzghhioeVj p1nhS2Ljs0ZD4qOUuqZJn6uvgpxeCo0JkU+JxNsZKZpBRiI1XZgWzIRszfUrpwNV k9FvdPjWn9KFViu54DdCN1MiCqhw9jNjWcE34LoMvZ/si5BAfXYnz6t6LCsVGKsd PyS8moMugPMXprimJhIELTkSqhgvmOGOQLpJKlNcMqIeBCM41gOMtrWao2sM78D/ XSetpoFsQrlwVCVGqHyhLKmUXJ271ZMQDoT0tDsuB99UP8y4VpYdQ62PSCo5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaJ5miKG8oHY8srlIqFnVCPpu2QUwHwYDVR0j BBgwFoAUfwT2/OInUGB+VOVY4Dng9VHTE10wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYwMzIwNDQyNDEwNTk4Ni8wLzdGMDRGNkZDRTIyNzUwNjA3RTU0RTU1OEUwMzlF MEY1NTFEMzEzNUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0YwNEY2RkNFMjI3NTA2MDdFNTRFNTU4RTAzOUUwRjU1MUQzMTM1RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MDMyMDQ0MjQxMDU5ODYvMC83RjA0RjZGQ0UyMjc1 MDYwN0U1NEU1NThFMDM5RTBGNTUxRDMxMzVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqWzbJly0dXW CH2Nz+/Dpq37NALvURq3xuRBAt2SxSYOWHxOi6AOtl+5nr8+V8tTZEPlRYau90CY JEAuCgKLFQSwOEINikhIEF29BhxN1jX4Gp7tzDrPfUZ7TnYF1OPAoiYJLrA396Zz OtUz8eFkrf1iDvfC3RawvC+S9TYM3B1NquAnESsJ/os18p/ZZHUpZh1yPyQ4LrB7 APPO1oMc4Or58ZyD7j0ScEyUiCkwthXsQmGyXEXLuL9AAyEF1AHBgcHd8p8/e6IZ Am+Vu5RE93fq7JLYnN8TdcLRggOgM7M8M+W6reIU+z2Fj90ubEhrZVPBIm7GLZxs gtHhQ0fUCQ== -----END CERTIFICATE-----Generated at Wed Oct 14 03:11:51 2026 by rpki-client