$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft File: C99930256B2681B676C3F969B9E070208697E59E.mft (raw, json) Hash identifier: dsCPfSd6FaGP4D2Vl/SXpSiE44SsfsLbTmTbK/Gz56k= Subject key identifier: 1C:B9:3E:CF:D2:29:25:0A:93:A3:22:6F:D4:74:AC:2E:E4:60:4D:46 Authority key identifier: C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E Certificate issuer: /CN=C99930256B2681B676C3F969B9E070208697E59E Certificate serial: 7C82B00F25031F4CBB514F57D526D538190E4B20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft Manifest number: CE Signing time: Sat 31 Oct 2026 21:09:42 +0000 Manifest this update: Sat 31 Oct 2026 21:04:42 +0000 Manifest next update: Wed 04 Nov 2026 05:50:42 +0000 Files and hashes: 1: C99930256B2681B676C3F969B9E070208697E59E.crl (hash: pUXLb9v5f+jXUVtbLGiJBaQGA0XQMNVaTZfYEcUE/j8=) 2: 3130332e3232332e3133322e302f32322d3232203d3e20313333373734.roa (hash: vN8yHwI46fYA/l1ygz8W/PzYzDVLVvVRqEe7rahUo3g=) 3: 3130332e3232332e3133322e302f32342d3234203d3e20313333373734.roa (hash: zyZSIrZQJV+xvNXDp3BEVkPjoRuBompddy6z7lE4MrA=) 4: 34352e3235342e32302e302f32322d3232203d3e20313333373734.roa (hash: ZJloOk6sDE753o+7/mUwoLrIvMNMTCjFQ6yK9+8AJEo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 05:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:82:b0:0f:25:03:1f:4c:bb:51:4f:57:d5:26:d5:38:19:0e:4b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C99930256B2681B676C3F969B9E070208697E59E Validity Not Before: Oct 31 21:04:42 2026 GMT Not After : Nov 4 05:50:42 2026 GMT Subject: CN=1CB93ECFD229250A93A3226FD474AC2EE4604D46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5a:12:7f:63:9c:e5:44:ff:d1:2b:54:ee:e9: 67:02:c4:6d:19:7c:d0:05:d5:8f:ab:c1:18:42:2d: bc:1e:0f:f9:de:4e:0d:7e:20:55:69:03:96:30:6c: 5c:9a:f1:9e:24:12:a4:64:ac:de:5e:fb:9a:b8:17: c9:f3:e5:76:29:7f:dd:b7:24:f9:6f:9b:c0:75:db: 10:d6:27:21:61:a0:2e:4f:c3:ac:02:57:b6:30:14: 76:eb:2c:d7:de:6c:af:cf:0f:a1:91:8d:99:35:20: fc:ff:55:e3:7c:1c:bb:d5:6e:0b:8d:fc:ee:b4:5a: 5d:9d:32:c4:16:cb:49:e1:dc:82:7f:20:ae:97:8b: 8a:11:68:5d:18:e7:f2:e4:11:cb:39:dc:02:4c:11: 87:1a:13:ae:57:7f:fe:24:89:4e:39:ba:39:5c:d0: 59:b6:2e:b2:c3:bf:57:9d:b0:92:32:2a:84:67:63: b2:d6:9e:81:b0:7d:32:20:6b:ec:a4:44:62:1c:fc: c0:f8:82:3f:d8:da:63:40:69:57:34:74:56:9b:cb: e7:f1:73:25:50:e7:c9:82:c3:10:78:69:46:5a:de: 81:43:52:3c:1a:59:ad:f0:04:7c:67:bb:a6:0c:fd: 2c:05:c9:c0:56:38:fe:9e:79:d3:96:39:b3:29:78: c4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B9:3E:CF:D2:29:25:0A:93:A3:22:6F:D4:74:AC:2E:E4:60:4D:46 X509v3 Authority Key Identifier: keyid:C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:8e:8e:53:81:a4:ec:ae:e5:39:5a:16:bf:e1:fe:dd:da:40: 61:3e:15:1d:5a:e1:f7:eb:47:fa:77:06:67:50:a2:eb:d2:fb: ee:97:69:be:e3:61:55:f5:1a:d1:aa:2a:52:a6:2c:86:27:12: 7c:20:0d:90:95:e5:f7:dc:10:d5:ac:0b:f3:27:21:b5:66:17: 4d:42:1e:e6:dc:a0:65:8f:14:18:32:a3:0d:ae:93:c5:7c:af: 26:56:de:02:f5:f8:44:ff:1b:14:6b:c7:bd:8b:1f:9b:f5:7d: 55:b8:fb:49:d9:7f:e9:3d:a7:f6:28:7c:30:01:ab:58:73:86: cb:92:35:34:57:ee:74:01:71:3f:2e:ec:d5:32:16:24:63:ff: 64:46:22:93:8e:ae:46:b2:76:2d:aa:2c:0c:a0:7e:e9:4f:26: 07:b4:71:58:03:ba:1c:2f:b6:1a:da:c0:27:5b:91:c1:ed:32: 46:3d:c4:3c:5b:dd:a7:e1:cc:8d:d7:7b:41:3d:19:ea:84:86: d6:63:0f:9a:32:cb:de:1c:a4:be:a5:0f:96:83:c3:50:ec:8f: 93:b3:db:12:64:c2:96:b5:22:48:e7:83:bf:89:37:30:cd:13: 1c:06:e8:19:30:0e:02:c8:3c:c2:66:95:73:05:a8:ec:f0:59: 15:80:da:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfIKwDyUDH0y7UU9X1SbVOBkOSyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4 Njk3RTU5RTAeFw0yNjEwMzEyMTA0NDJaFw0yNjExMDQwNTUwNDJaMDMxMTAvBgNV BAMTKDFDQjkzRUNGRDIyOTI1MEE5M0EzMjI2RkQ0NzRBQzJFRTQ2MDRENDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQWhJ/Y5zlRP/RK1Tu6WcCxG0Z fNAF1Y+rwRhCLbweD/neTg1+IFVpA5YwbFya8Z4kEqRkrN5e+5q4F8nz5XYpf923 JPlvm8B12xDWJyFhoC5Pw6wCV7YwFHbrLNfebK/PD6GRjZk1IPz/VeN8HLvVbguN /O60Wl2dMsQWy0nh3IJ/IK6Xi4oRaF0Y5/LkEcs53AJMEYcaE65Xf/4kiU45ujlc 0Fm2LrLDv1edsJIyKoRnY7LWnoGwfTIga+ykRGIc/MD4gj/Y2mNAaVc0dFaby+fx cyVQ58mCwxB4aUZa3oFDUjwaWa3wBHxnu6YM/SwFycBWOP6eedOWObMpeMTRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHLk+z9IpJQqToyJv1HSsLuRgTUYwHwYDVR0j BBgwFoAUyZkwJWsmgbZ2w/lpueBwIIaX5Z4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc5NDU3ODU4NjEwNzkwNi8wL0M5OTkzMDI1NkIyNjgxQjY3NkMzRjk2OUI5RTA3 MDIwODY5N0U1OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4Njk3RTU5RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3OTQ1Nzg1ODYxMDc5MDYvMC9DOTk5MzAyNTZCMjY4 MUI2NzZDM0Y5NjlCOUUwNzAyMDg2OTdFNTlFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZo6OU4Gk7K7l OVoWv+H+3dpAYT4VHVrh9+tH+ncGZ1Ci69L77pdpvuNhVfUa0aoqUqYshicSfCAN kJXl99wQ1awL8ychtWYXTUIe5tygZY8UGDKjDa6TxXyvJlbeAvX4RP8bFGvHvYsf m/V9Vbj7Sdl/6T2n9ih8MAGrWHOGy5I1NFfudAFxPy7s1TIWJGP/ZEYik46uRrJ2 LaosDKB+6U8mB7RxWAO6HC+2GtrAJ1uRwe0yRj3EPFvdp+HMjdd7QT0Z6oSG1mMP mjLL3hykvqUPloPDUOyPk7PbEmTClrUiSOeDv4k3MM0THAboGTAOAsg8wmaVcwWo 7PBZFYDapg== -----END CERTIFICATE-----Generated at Sun Nov 1 16:44:40 2026 by rpki-client