$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft File: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft (raw, json) Hash identifier: 7fVSp07hYqG/jH/bnH6S5qimVlNdTqTrlpvMlr+gW/E= Subject key identifier: B6:CC:7E:5D:BF:CC:DE:1C:95:7D:F3:FA:21:35:57:10:CD:09:C4:D9 Authority key identifier: 28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E Certificate issuer: /CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Certificate serial: 5E680463C905A1381EF1FA024BEB328EF640B402 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft Manifest number: CF Signing time: Mon 26 Oct 2026 05:48:27 +0000 Manifest this update: Mon 26 Oct 2026 05:43:27 +0000 Manifest next update: Thu 29 Oct 2026 09:18:27 +0000 Files and hashes: 1: 3230322e3133362e37322e302f32332d3233203d3e2034383437.roa (hash: 0UAAnHGmhpgwD4Y3MO/hfVMnkyeKLb0Kzm5dHFM3DRY=) 2: 289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl (hash: svNZ7UZAGxUVfRzW4km7goiklsmJixacpUK2hMzBejA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 09:18:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:68:04:63:c9:05:a1:38:1e:f1:fa:02:4b:eb:32:8e:f6:40:b4:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289251F0DCA3FF6ACE101E469CCB4C906CB60D6E Validity Not Before: Oct 26 05:43:27 2026 GMT Not After : Oct 29 09:18:27 2026 GMT Subject: CN=B6CC7E5DBFCCDE1C957DF3FA21355710CD09C4D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:56:13:76:a6:58:cd:8e:5f:c7:a5:e4:17:26: d0:fa:28:6b:e2:d1:a6:87:34:ed:03:e1:07:cd:0a: f8:4c:02:50:b2:f5:4e:2b:85:55:b2:9c:9d:17:88: 69:2f:e6:77:96:1d:fd:1e:b9:16:f3:81:47:b4:6e: ba:5a:ce:69:c7:18:ea:68:66:a9:45:96:ec:f4:73: 2a:ea:0c:df:9b:ca:60:f0:33:f7:1c:43:d1:63:1d: b0:4c:6c:7e:6f:f8:d3:a5:53:ef:73:e6:ae:4e:41: 4a:9f:33:98:47:32:b7:11:9b:2c:f1:c9:c2:ef:11: 07:47:7e:56:22:8f:4b:f2:08:bc:c2:a0:cb:3d:5f: 7c:10:06:ba:ff:f1:20:d0:9c:45:9b:ea:90:e6:33: 4b:89:70:42:c7:6b:56:45:1c:e4:35:b4:7f:04:96: 9b:cd:18:a7:ad:d2:2d:ac:bb:09:79:1c:26:54:7e: d6:cb:a0:ed:bb:12:b1:81:0a:a7:e2:1e:49:8a:ec: ce:f0:0f:7d:75:c2:72:b4:54:fb:fa:f0:26:0f:8f: 8a:c4:22:f5:f8:f4:4d:54:9f:ff:55:e3:2f:2c:66: 21:cd:da:fe:6d:b0:93:d4:c3:9a:c4:a6:0c:b8:b7: e1:6d:f1:ec:a0:2f:c9:58:de:f4:88:d5:01:a3:12: a0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CC:7E:5D:BF:CC:DE:1C:95:7D:F3:FA:21:35:57:10:CD:09:C4:D9 X509v3 Authority Key Identifier: keyid:28:92:51:F0:DC:A3:FF:6A:CE:10:1E:46:9C:CB:4C:90:6C:B6:0D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097328917783511042/0/289251F0DCA3FF6ACE101E469CCB4C906CB60D6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:6f:6f:1f:f1:2f:6a:01:b5:68:98:ee:e8:14:43:21:bb:cb: 9c:2e:df:d1:c3:be:64:78:a1:88:e3:64:96:1d:4f:66:36:06: 8d:77:15:61:be:3e:32:ec:3d:74:80:17:75:47:ec:58:bf:5e: c1:99:25:ed:d2:56:4e:51:f9:29:c0:25:c3:4b:1b:7b:7d:c9: ce:ec:63:4c:36:68:d0:ab:34:05:66:97:27:b7:8e:b8:22:56: 7c:29:84:36:ea:2b:a2:2e:b8:94:2d:11:a8:b7:5a:fc:8d:c8: ae:c2:3d:6f:bb:15:c4:ff:fb:4b:38:74:fe:88:48:0f:64:71: 68:76:8a:bb:62:96:c3:24:56:38:2c:5d:7b:cd:1c:9c:02:67: 62:1b:72:04:31:91:b0:f0:56:6c:93:1e:43:3b:98:fd:18:c1: f5:32:b7:70:45:36:ac:06:41:45:43:08:ad:60:18:3a:2c:c9: 77:c1:85:23:ef:c7:a9:87:9d:bb:bf:d2:08:a8:ec:42:5c:a5: 23:9e:a1:83:d7:de:ee:d7:16:f7:e9:7e:dd:09:00:be:17:aa: 88:42:df:ca:d5:7a:53:c6:9f:c4:c7:aa:11:80:f5:07:9c:64: 66:cd:d3:9a:e3:d0:37:bf:76:85:c6:3b:d0:d0:a6:de:1d:1e: 11:a8:b3:0e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXmgEY8kFoTge8foCS+syjvZAtAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2 Q0I2MEQ2RTAeFw0yNjEwMjYwNTQzMjdaFw0yNjEwMjkwOTE4MjdaMDMxMTAvBgNV BAMTKEI2Q0M3RTVEQkZDQ0RFMUM5NTdERjNGQTIxMzU1NzEwQ0QwOUM0RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4VhN2pljNjl/HpeQXJtD6KGvi 0aaHNO0D4QfNCvhMAlCy9U4rhVWynJ0XiGkv5neWHf0euRbzgUe0brpazmnHGOpo ZqlFluz0cyrqDN+bymDwM/ccQ9FjHbBMbH5v+NOlU+9z5q5OQUqfM5hHMrcRmyzx ycLvEQdHflYij0vyCLzCoMs9X3wQBrr/8SDQnEWb6pDmM0uJcELHa1ZFHOQ1tH8E lpvNGKet0i2suwl5HCZUftbLoO27ErGBCqfiHkmK7M7wD311wnK0VPv68CYPj4rE IvX49E1Un/9V4y8sZiHN2v5tsJPUw5rEpgy4t+Ft8eygL8lY3vSI1QGjEqDTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtsx+Xb/M3hyVffP6ITVXEM0JxNkwHwYDVR0j BBgwFoAUKJJR8Nyj/2rOEB5GnMtMkGy2DW4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzMyODkxNzc4MzUxMTA0Mi8wLzI4OTI1MUYwRENBM0ZGNkFDRTEwMUU0NjlDQ0I0 QzkwNkNCNjBENkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5MjUxRjBEQ0EzRkY2QUNFMTAxRTQ2OUNDQjRDOTA2Q0I2MEQ2RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTczMjg5MTc3ODM1MTEwNDIvMC8yODkyNTFGMERDQTNG RjZBQ0UxMDFFNDY5Q0NCNEM5MDZDQjYwRDZFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEG9vH/EvagG1 aJju6BRDIbvLnC7f0cO+ZHihiONklh1PZjYGjXcVYb4+Muw9dIAXdUfsWL9ewZkl 7dJWTlH5KcAlw0sbe33JzuxjTDZo0Ks0BWaXJ7eOuCJWfCmENuoroi64lC0RqLda /I3IrsI9b7sVxP/7Szh0/ohID2RxaHaKu2KWwyRWOCxde80cnAJnYhtyBDGRsPBW bJMeQzuY/RjB9TK3cEU2rAZBRUMIrWAYOizJd8GFI+/HqYedu7/SCKjsQlylI56h g9fe7tcW9+l+3QkAvheqiELfytV6U8afxMeqEYD1B5xkZs3TmuPQN792hcY70NCm 3h0eEaizDg== -----END CERTIFICATE-----Generated at Tue Oct 27 20:53:10 2026 by rpki-client