$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft File: 5CFD6F5150236B766305D5CD47F180D751FBED31.mft (raw, json) Hash identifier: ruf5iU5tiYAoiHv7M6sVW19nvnV45FxzDbrALNq+YNM= Subject key identifier: 3C:CA:4C:08:A2:AA:01:AB:A4:12:EA:CF:2B:74:5B:D3:A8:41:9F:BC Authority key identifier: 5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 Certificate issuer: /CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Certificate serial: 42166B7C20007AD4821878B755EE182F1EECC9B0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft Manifest number: CE Signing time: Tue 27 Oct 2026 09:09:31 +0000 Manifest this update: Tue 27 Oct 2026 09:04:31 +0000 Manifest next update: Fri 30 Oct 2026 15:08:31 +0000 Files and hashes: 1: 3136332e36312e3137382e302f32332d3233203d3e2034383136.roa (hash: kzkct/XMGGZmPvSWm/qwliS7VkV51M4mNi2s4idW3VI=) 2: 5CFD6F5150236B766305D5CD47F180D751FBED31.crl (hash: mFuqmZlu4EUSKc571bYe+ZR0S1xljhRSq0jCM6dOgN4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 11:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:16:6b:7c:20:00:7a:d4:82:18:78:b7:55:ee:18:2f:1e:ec:c9:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CFD6F5150236B766305D5CD47F180D751FBED31 Validity Not Before: Oct 27 09:04:31 2026 GMT Not After : Oct 30 15:08:31 2026 GMT Subject: CN=3CCA4C08A2AA01ABA412EACF2B745BD3A8419FBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7a:4c:92:be:6c:35:e2:9a:b4:f6:c1:64:a4: 45:ee:55:30:e5:53:23:e2:e1:eb:c8:04:32:99:5a: 5c:3f:bc:88:8d:73:62:68:80:d5:d7:15:b7:e1:b8: 38:b8:8b:1c:0a:b0:4a:8f:c3:cf:5d:f3:a7:f7:11: 16:34:ab:df:23:f2:2a:98:57:53:14:b8:b3:1e:5c: 17:f5:38:21:20:cc:25:fc:50:42:03:20:8e:a1:73: 1e:16:c1:31:6b:9d:ef:2e:d6:4f:d2:e0:10:fe:7c: 48:c7:96:21:47:fa:3b:34:ea:01:0f:5f:6c:e4:df: b4:ec:7c:26:03:23:51:a4:e7:9a:12:74:1e:50:8a: 22:9d:18:c2:db:b7:3e:28:3a:6f:ba:22:bb:a0:f8: 4d:1e:a2:ad:9c:f8:6d:e5:36:7f:6f:3f:58:5f:0c: bb:59:51:21:22:04:18:e1:13:0d:ce:31:6e:21:a8: e1:a0:92:cc:47:d1:2c:50:f3:9a:83:bc:41:39:54: cb:1b:04:fb:4b:84:6f:fb:d3:a0:07:91:80:88:0f: 94:15:5d:14:ae:b6:56:9f:bf:8b:d9:44:37:60:d3: b6:8e:cc:f7:2c:7e:36:78:02:4b:51:e0:a2:88:94: f3:7f:2d:52:3e:5a:21:33:1a:16:ee:b5:78:34:97: ed:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:CA:4C:08:A2:AA:01:AB:A4:12:EA:CF:2B:74:5B:D3:A8:41:9F:BC X509v3 Authority Key Identifier: keyid:5C:FD:6F:51:50:23:6B:76:63:05:D5:CD:47:F1:80:D7:51:FB:ED:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5CFD6F5150236B766305D5CD47F180D751FBED31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097423735075373059/0/5CFD6F5150236B766305D5CD47F180D751FBED31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:7c:af:9d:70:22:88:7c:01:36:f1:be:58:7b:42:f6:53:3b: 35:cb:82:8a:2b:bd:7e:50:a9:99:da:5b:53:72:8a:6d:f8:49: af:a8:25:1f:1d:b0:13:27:46:07:04:49:f8:a5:b8:82:25:25: ab:a5:8f:05:0e:c3:7f:65:c3:99:4e:5e:40:d8:fd:7d:1d:c9: b2:8f:f8:50:6f:c0:b4:52:85:77:51:7f:12:3e:cc:24:9b:dd: 17:c6:2e:ea:c3:15:46:5e:e4:f2:3f:14:24:4c:92:d6:cf:68: 04:67:e3:88:a4:0d:21:aa:6c:61:48:06:bb:13:0f:a5:14:93: 4c:a2:1f:f3:e9:60:44:2c:cc:b9:c4:ff:30:1c:a7:11:58:f6: 4e:2e:9d:e2:91:34:2f:55:31:b1:7e:10:ab:4b:a7:76:e6:01: 90:a0:c3:0d:c9:08:bd:65:ad:d5:a0:7b:f6:6b:25:45:43:e3: 48:30:1c:6b:d3:3b:8d:62:a8:47:c5:c5:d7:7c:4f:8a:1d:f2: b8:eb:c0:9c:f6:a2:c4:78:69:f3:12:73:59:67:56:23:7f:cb: 87:89:d3:6f:db:31:44:aa:4c:af:21:9d:ea:79:10:2f:9c:39: df:9c:99:09:b1:07:90:0d:10:94:f0:97:54:be:8a:75:a4:65: 10:9f:89:d4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQhZrfCAAetSCGHi3Ve4YLx7sybAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1 MUZCRUQzMTAeFw0yNjEwMjcwOTA0MzFaFw0yNjEwMzAxNTA4MzFaMDMxMTAvBgNV BAMTKDNDQ0E0QzA4QTJBQTAxQUJBNDEyRUFDRjJCNzQ1QkQzQTg0MTlGQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRekySvmw14pq09sFkpEXuVTDl UyPi4evIBDKZWlw/vIiNc2JogNXXFbfhuDi4ixwKsEqPw89d86f3ERY0q98j8iqY V1MUuLMeXBf1OCEgzCX8UEIDII6hcx4WwTFrne8u1k/S4BD+fEjHliFH+js06gEP X2zk37TsfCYDI1Gk55oSdB5QiiKdGMLbtz4oOm+6Irug+E0eoq2c+G3lNn9vP1hf DLtZUSEiBBjhEw3OMW4hqOGgksxH0SxQ85qDvEE5VMsbBPtLhG/706AHkYCID5QV XRSutlafv4vZRDdg07aOzPcsfjZ4AktR4KKIlPN/LVI+WiEzGhbutXg0l+3bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPMpMCKKqAaukEurPK3Rb06hBn7wwHwYDVR0j BBgwFoAUXP1vUVAja3ZjBdXNR/GA11H77TEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQyMzczNTA3NTM3MzA1OS8wLzVDRkQ2RjUxNTAyMzZCNzY2MzA1RDVDRDQ3RjE4 MEQ3NTFGQkVEMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUNGRDZGNTE1MDIzNkI3NjYzMDVENUNENDdGMTgwRDc1MUZCRUQzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTc0MjM3MzUwNzUzNzMwNTkvMC81Q0ZENkY1MTUwMjM2 Qjc2NjMwNUQ1Q0Q0N0YxODBENzUxRkJFRDMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3yvnXAiiHwB NvG+WHtC9lM7NcuCiiu9flCpmdpbU3KKbfhJr6glHx2wEydGBwRJ+KW4giUlq6WP BQ7Df2XDmU5eQNj9fR3Jso/4UG/AtFKFd1F/Ej7MJJvdF8Yu6sMVRl7k8j8UJEyS 1s9oBGfjiKQNIapsYUgGuxMPpRSTTKIf8+lgRCzMucT/MBynEVj2Ti6d4pE0L1Ux sX4Qq0unduYBkKDDDckIvWWt1aB79mslRUPjSDAca9M7jWKoR8XF13xPih3yuOvA nPaixHhp8xJzWWdWI3/Lh4nTb9sxRKpMryGd6nkQL5w535yZCbEHkA0QlPCXVL6K daRlEJ+J1A== -----END CERTIFICATE-----Generated at Wed Oct 28 04:53:03 2026 by rpki-client