$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft File: F0F3E3439565B918CE50D05087491A23A7E8FF40.mft (raw, json) Hash identifier: F/we6dEc0Y6IJz1Kprz0MG3KUnH6qAgzXW12LMSxDz4= Subject key identifier: 53:2E:13:3E:F6:23:95:85:16:3C:B8:86:04:26:25:4E:71:AB:AA:94 Authority key identifier: F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 Certificate issuer: /CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Certificate serial: 74887355B7C0F6EA51A94C24722B4A282EB9F782 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft Manifest number: D1 Signing time: Wed 14 Oct 2026 04:33:33 +0000 Manifest this update: Wed 14 Oct 2026 04:28:33 +0000 Manifest next update: Sat 17 Oct 2026 08:26:33 +0000 Files and hashes: 1: 3230332e3131382e3234382e302f32322d3232203d3e203435303731.roa (hash: nsVtxkR/+GBz1gKXYRUuPMhNEkH95+hyumzsZS9hdyc=) 2: F0F3E3439565B918CE50D05087491A23A7E8FF40.crl (hash: Tx8XNrYRQthqearqBfma/15LoHHZxKSnRHSjUMNZj7s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 08:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:88:73:55:b7:c0:f6:ea:51:a9:4c:24:72:2b:4a:28:2e:b9:f7:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F0F3E3439565B918CE50D05087491A23A7E8FF40 Validity Not Before: Oct 14 04:28:33 2026 GMT Not After : Oct 17 08:26:33 2026 GMT Subject: CN=532E133EF6239585163CB8860426254E71ABAA94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:df:ec:51:97:ca:7e:23:37:22:f6:ae:5d:fc: 7f:74:f3:be:08:fa:fd:1f:58:4d:31:3e:23:39:49: 71:41:be:e7:cd:34:71:67:87:f2:76:5f:d9:db:f4: 23:5d:cc:d2:cb:c1:df:b7:92:f5:ac:9c:01:8f:d1: d9:b7:17:45:1f:e5:17:4e:81:c4:66:b4:5b:74:c6: 05:44:ad:aa:b3:63:8b:6f:52:e2:1a:58:d3:a0:0b: 89:b6:73:88:ac:a1:c3:da:09:90:fa:ba:3b:1f:ea: 46:4c:8f:ef:b8:bc:9f:41:36:00:fb:b0:75:89:84: a7:3b:2a:60:2e:85:d7:92:ad:c7:18:6e:cb:a0:ef: 85:a8:7f:fb:ad:2c:69:eb:4f:b2:49:4a:39:8d:32: 58:e1:0f:d7:05:df:db:cf:8f:36:4c:fd:64:12:6f: 4d:d7:fe:53:cd:75:c7:dd:c4:78:5e:86:97:93:ae: 15:ac:6c:cd:e7:10:eb:2f:83:15:7b:d3:70:06:71: e9:35:13:7e:60:a5:de:db:a1:12:76:b3:46:d4:51: d4:df:d6:b2:b1:28:21:52:32:da:16:b7:be:cc:fc: 5c:f8:d1:77:b5:7c:21:a8:84:57:81:95:f8:3e:dc: a9:fc:1c:c5:61:3e:76:84:ec:db:0b:81:6d:48:5b: 52:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2E:13:3E:F6:23:95:85:16:3C:B8:86:04:26:25:4E:71:AB:AA:94 X509v3 Authority Key Identifier: keyid:F0:F3:E3:43:95:65:B9:18:CE:50:D0:50:87:49:1A:23:A7:E8:FF:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F0F3E3439565B918CE50D05087491A23A7E8FF40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036477839179777/0/F0F3E3439565B918CE50D05087491A23A7E8FF40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fd:9a:49:6b:d5:04:98:b0:9a:73:8e:2e:b1:8c:ed:1f:1f: 08:19:d0:dd:4d:0b:6c:9b:bd:97:3f:8a:bc:77:85:40:6b:d0: 57:bb:d6:85:61:7c:61:4c:fe:46:2e:14:36:6f:48:24:4c:d0: d7:b9:27:81:55:71:80:72:9d:4f:f7:c7:86:08:64:01:3b:4b: ae:23:3b:94:2b:0e:6f:fe:76:dc:94:e1:d7:48:92:7e:7b:6b: 43:6b:8e:c5:4e:54:5b:10:2f:5f:cb:31:04:6a:a9:82:b0:04: 5b:f4:77:33:2f:89:31:23:60:36:6e:75:90:1d:45:80:d1:58: a8:cd:01:c2:7d:80:80:44:ac:b8:c1:c2:3a:04:03:bd:f3:2d: 0f:0a:66:35:d8:ce:bb:b5:ee:f7:60:fc:54:fb:0d:ae:93:c5: bc:53:bf:65:d0:34:d5:fd:ef:e0:c8:73:bf:f9:4f:bd:3c:b6: ed:06:84:20:d2:77:21:ce:c3:6b:32:70:8c:a2:db:f3:c6:4b: 98:15:00:87:6e:df:78:b5:c0:c8:e2:d2:64:da:f4:d9:a4:ba: 72:82:0f:bf:69:89:c1:cb:c0:d0:63:4c:30:61:0f:42:cc:0a: 84:b7:15:e9:7a:f4:f6:ca:29:4e:d4:3d:55:cd:af:23:17:7e: 93:db:58:08 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdIhzVbfA9upRqUwkcitKKC6594IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNB N0U4RkY0MDAeFw0yNjEwMTQwNDI4MzNaFw0yNjEwMTcwODI2MzNaMDMxMTAvBgNV BAMTKDUzMkUxMzNFRjYyMzk1ODUxNjNDQjg4NjA0MjYyNTRFNzFBQkFBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3+xRl8p+Izci9q5d/H90874I +v0fWE0xPiM5SXFBvufNNHFnh/J2X9nb9CNdzNLLwd+3kvWsnAGP0dm3F0Uf5RdO gcRmtFt0xgVEraqzY4tvUuIaWNOgC4m2c4isocPaCZD6ujsf6kZMj++4vJ9BNgD7 sHWJhKc7KmAuhdeSrccYbsug74Wof/utLGnrT7JJSjmNMljhD9cF39vPjzZM/WQS b03X/lPNdcfdxHhehpeTrhWsbM3nEOsvgxV703AGcek1E35gpd7boRJ2s0bUUdTf 1rKxKCFSMtoWt77M/Fz40Xe1fCGohFeBlfg+3Kn8HMVhPnaE7NsLgW1IW1KXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUy4TPvYjlYUWPLiGBCYlTnGrqpQwHwYDVR0j BBgwFoAU8PPjQ5VluRjOUNBQh0kaI6fo/0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjQ3NzgzOTE3OTc3Ny8wL0YwRjNFMzQzOTU2NUI5MThDRTUwRDA1MDg3NDkx QTIzQTdFOEZGNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjBGM0UzNDM5NTY1QjkxOENFNTBEMDUwODc0OTFBMjNBN0U4RkY0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwMzY0Nzc4MzkxNzk3NzcvMC9GMEYzRTM0Mzk1NjVC OTE4Q0U1MEQwNTA4NzQ5MUEyM0E3RThGRjQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmv2aSWvVBJiw mnOOLrGM7R8fCBnQ3U0LbJu9lz+KvHeFQGvQV7vWhWF8YUz+Ri4UNm9IJEzQ17kn gVVxgHKdT/fHhghkATtLriM7lCsOb/523JTh10iSfntrQ2uOxU5UWxAvX8sxBGqp grAEW/R3My+JMSNgNm51kB1FgNFYqM0Bwn2AgESsuMHCOgQDvfMtDwpmNdjOu7Xu 92D8VPsNrpPFvFO/ZdA01f3v4Mhzv/lPvTy27QaEINJ3Ic7DazJwjKLb88ZLmBUA h27feLXAyOLSZNr02aS6coIPv2mJwcvA0GNMMGEPQswKhLcV6Xr09sopTtQ9Vc2v Ixd+k9tYCA== -----END CERTIFICATE-----Generated at Wed Oct 14 20:27:47 2026 by rpki-client