$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft File: D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft (raw, json) Hash identifier: lDTbLsdmOhhjgeCZN+djKHWQTDlBSNSYvmL68NsUZvM= Subject key identifier: 9D:29:C7:50:72:52:CE:FF:01:B7:D3:9B:DA:E2:36:12:DD:35:A1:30 Authority key identifier: D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82 Certificate issuer: /CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682 Certificate serial: 21D6382B3E8915928D69F157D0603567D088F8A7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft Manifest number: CE Signing time: Tue 13 Oct 2026 21:33:16 +0000 Manifest this update: Tue 13 Oct 2026 21:28:16 +0000 Manifest next update: Sat 17 Oct 2026 06:47:16 +0000 Files and hashes: 1: 323430313a633032303a31343a3a2f34382d3438203d3e20313531323736.roa (hash: mr0/gxeIKI22glZxYzHulN1c0VopTHKnK1KsfVxMuu0=) 2: 323430313a633032303a383a3a2f34382d3438203d3e20313531323736.roa (hash: eVZvU/XBvUrHPOqvp05KEbICvOmQPEZy0GrpXcWtlJ0=) 3: D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl (hash: kYmeyVJoWpdfwzfl4yx9nLXhQogCcrynsBgFhe+Hnfg=) 4: 323430313a633032303a363a3a2f34382d3438203d3e20313531323736.roa (hash: WUqh1dTEpWIYsDvwBsYOOFvLpDV8qK8WxIPcIuTpcHk=) 5: 323430313a633032303a393a3a2f34382d3438203d3e20313531323736.roa (hash: y9w/RzzaFHn59WCWUDJU3dqWd9yUIoo7JskGYPVr5WQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 06:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d6:38:2b:3e:89:15:92:8d:69:f1:57:d0:60:35:67:d0:88:f8:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682 Validity Not Before: Oct 13 21:28:16 2026 GMT Not After : Oct 17 06:47:16 2026 GMT Subject: CN=9D29C7507252CEFF01B7D39BDAE23612DD35A130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:96:d3:71:43:17:0d:7c:67:14:97:b6:05:65: 6b:73:0a:b2:3a:9a:8f:3e:c0:f7:1b:c7:f9:ed:7a: c4:92:9e:1f:d5:ab:46:a7:6e:9c:c0:e0:3a:ea:85: b5:f0:0d:82:4e:2f:89:b8:6c:b7:15:4e:fc:a8:8d: 70:76:51:fe:3f:17:12:17:d7:82:a3:43:4d:30:35: 10:4c:3d:66:bc:c3:57:7e:d6:b7:91:fe:e4:16:75: 23:1e:fd:31:d6:a9:47:09:ba:1a:8e:5c:c6:25:b6: 79:f9:f8:c7:d6:06:4b:2b:ae:fd:47:b4:79:69:c7: 2d:93:e7:1c:d2:dd:34:5d:7c:25:88:d4:51:7f:0d: 71:69:40:18:f7:d6:7d:e1:89:2f:9a:e0:6f:2c:f9: 82:3b:03:91:b5:0c:fb:f8:21:dc:e5:05:3f:32:94: a5:71:47:fb:5d:54:b4:21:52:1d:65:2d:52:1a:b8: 9a:a4:87:a1:15:22:99:e2:74:e6:77:a9:7b:f8:88: 6a:a8:a7:9a:9a:84:ba:3f:5b:68:df:5c:82:b1:2c: bc:5f:ca:c3:9c:cb:b7:7e:d5:b6:83:93:b7:d5:6d: 38:b1:20:cf:28:5f:70:f2:49:95:15:88:2a:ce:06: 12:21:6d:9a:d4:9c:25:61:39:7c:7b:f8:a6:f7:da: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:29:C7:50:72:52:CE:FF:01:B7:D3:9B:DA:E2:36:12:DD:35:A1:30 X509v3 Authority Key Identifier: keyid:D0:8B:5F:D1:41:F6:E4:B4:E8:21:9F:F3:E8:D9:79:CA:4B:9A:D6:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096993931276582914/0/D08B5FD141F6E4B4E8219FF3E8D979CA4B9AD682.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:41:c1:56:08:a9:b9:9c:a2:0d:4f:06:9c:1b:e7:40:89:fb: e5:a0:75:16:de:e1:91:bc:a2:86:58:ee:8a:8e:39:5d:50:84: 41:b3:22:1b:69:4d:66:81:8f:80:d6:7a:ae:6c:dc:b4:21:9f: 23:ae:85:57:8c:b3:2f:39:b5:9a:c3:9b:0d:15:8c:ef:42:1d: 69:0b:5f:d2:e1:a2:77:bd:a4:8e:ed:9e:3c:9d:9c:65:92:3d: 83:4e:89:96:bf:67:05:e5:34:18:c2:a0:da:52:c6:32:d3:8a: c3:a9:f5:45:2e:d1:91:c1:05:b2:ad:bd:12:58:95:eb:0c:88: af:f9:ee:31:b8:06:31:1c:77:b1:4a:8e:0a:1c:fd:3c:17:43: 21:82:88:3d:48:0c:ea:73:d2:ba:72:7f:e5:64:23:54:3f:63: 85:d7:9a:d8:53:af:a5:a5:81:bf:c6:da:2e:1a:ec:1a:c0:74: 5d:11:ed:30:b0:31:f6:d3:8b:da:10:94:be:8c:5b:20:b3:f1: 51:7d:31:a5:7e:97:68:7a:66:ea:af:d8:48:26:cd:5e:71:bc: e1:f1:73:e0:91:51:e7:72:fa:f2:35:2d:55:57:00:fa:91:90: cf:b6:db:82:ed:f4:4e:c5:a7:67:d2:48:fe:cb:99:7e:48:7a: a8:4c:a2:70 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIdY4Kz6JFZKNafFX0GA1Z9CI+KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA4QjVGRDE0MUY2RTRCNEU4MjE5RkYzRThEOTc5Q0E0 QjlBRDY4MjAeFw0yNjEwMTMyMTI4MTZaFw0yNjEwMTcwNjQ3MTZaMDMxMTAvBgNV BAMTKDlEMjlDNzUwNzI1MkNFRkYwMUI3RDM5QkRBRTIzNjEyREQzNUExMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmltNxQxcNfGcUl7YFZWtzCrI6 mo8+wPcbx/ntesSSnh/Vq0anbpzA4DrqhbXwDYJOL4m4bLcVTvyojXB2Uf4/FxIX 14KjQ00wNRBMPWa8w1d+1reR/uQWdSMe/THWqUcJuhqOXMYltnn5+MfWBksrrv1H tHlpxy2T5xzS3TRdfCWI1FF/DXFpQBj31n3hiS+a4G8s+YI7A5G1DPv4IdzlBT8y lKVxR/tdVLQhUh1lLVIauJqkh6EVIpnidOZ3qXv4iGqop5qahLo/W2jfXIKxLLxf ysOcy7d+1baDk7fVbTixIM8oX3DySZUViCrOBhIhbZrUnCVhOXx7+Kb32jA5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnSnHUHJSzv8Bt9Ob2uI2Et01oTAwHwYDVR0j BBgwFoAU0Itf0UH25LToIZ/z6Nl5ykua1oIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk5MzkzMTI3NjU4MjkxNC8wL0QwOEI1RkQxNDFGNkU0QjRFODIxOUZGM0U4RDk3 OUNBNEI5QUQ2ODIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDA4QjVGRDE0MUY2RTRCNEU4MjE5RkYzRThEOTc5Q0E0QjlBRDY4Mi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5OTM5MzEyNzY1ODI5MTQvMC9EMDhCNUZEMTQxRjZF NEI0RTgyMTlGRjNFOEQ5NzlDQTRCOUFENjgyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfEHBVgipuZyi DU8GnBvnQIn75aB1Ft7hkbyihljuio45XVCEQbMiG2lNZoGPgNZ6rmzctCGfI66F V4yzLzm1msObDRWM70IdaQtf0uGid72kju2ePJ2cZZI9g06Jlr9nBeU0GMKg2lLG MtOKw6n1RS7RkcEFsq29EliV6wyIr/nuMbgGMRx3sUqOChz9PBdDIYKIPUgM6nPS unJ/5WQjVD9jhdea2FOvpaWBv8baLhrsGsB0XRHtMLAx9tOL2hCUvoxbILPxUX0x pX6XaHpm6q/YSCbNXnG84fFz4JFR53L68jUtVVcA+pGQz7bbgu30TsWnZ9JI/suZ fkh6qEyicA== -----END CERTIFICATE-----Generated at Wed Oct 14 15:09:34 2026 by rpki-client