$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft File: CFB23E5C25BCDF75B10365741E60EA1870019718.mft (raw, json) Hash identifier: SbUOlaDsouy9ryZwnbOWxnTgbYPKSNwSGSrckSwD8Jw= Subject key identifier: 12:1C:DA:E3:C2:6D:FC:40:79:67:C6:09:9C:81:DA:52:0F:82:D4:F3 Authority key identifier: CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 Certificate issuer: /CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Certificate serial: 79418E33CD1B15AEA5B3858D1E486226E608CE70 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft Manifest number: C3 Signing time: Wed 07 Oct 2026 01:55:39 +0000 Manifest this update: Wed 07 Oct 2026 01:50:39 +0000 Manifest next update: Sat 10 Oct 2026 13:02:39 +0000 Files and hashes: 1: 3135302e3234322e3136302e302f32322d3232203d3e2030.roa (hash: MKeIFb7EqWHM5PapPyd468bY98jUVD1BZFhXNfceQXU=) 2: CFB23E5C25BCDF75B10365741E60EA1870019718.crl (hash: FqkUbEebEPuOJYOftyta2JaxuOwP8rVhqC3FKxX9LAI=) 3: 323430363a643263303a3a2f33322d3332203d3e2030.roa (hash: FwOErwlAiR3u/ZG967hSx7vY8EONG5MybUZ/8LS5gRE=) 4: 323430323a313630303a3a2f33322d3332203d3e2030.roa (hash: ihJ1MFpKmDRf0Pi6slt2kz3wUesE+0iWX9y1H+GS2Dg=) 5: 3130332e3233352e3134302e302f32322d3232203d3e2030.roa (hash: KOOIm9R0YCCCAFgvNV64BXvgP060l23D5hOwzFbW7o0=) 6: 3130332e3135392e3133342e302f32332d3233203d3e2030.roa (hash: NsCWtPvZZPd11fxDgtHFGg5jBBb8km/B001wul3DeR4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 13:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:41:8e:33:cd:1b:15:ae:a5:b3:85:8d:1e:48:62:26:e6:08:ce:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Validity Not Before: Oct 7 01:50:39 2026 GMT Not After : Oct 10 13:02:39 2026 GMT Subject: CN=121CDAE3C26DFC407967C6099C81DA520F82D4F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:33:96:ac:2f:4b:4e:44:a2:63:1b:f7:32:1f: 06:89:d8:e9:11:93:df:ef:60:6a:0c:ca:0d:8f:bd: b7:bc:a9:2a:76:83:99:00:e2:24:10:2f:ec:cc:da: 73:84:62:53:1c:6e:00:8e:47:04:ee:25:70:59:f0: da:61:48:68:ec:b4:8b:69:cf:02:3b:c4:60:07:94: 32:58:c9:d4:3a:4f:1d:be:44:8b:21:ad:d8:9b:ca: 3c:56:db:78:2e:a8:d0:47:63:56:ff:73:06:24:a2: 91:44:ef:a8:d8:90:cf:22:9f:d7:dd:cb:3e:ef:15: 4a:aa:17:cc:36:ee:29:80:17:a0:f4:56:9d:98:4b: 3f:d1:af:f5:57:f8:73:36:67:d3:11:b8:57:41:c8: 96:60:25:57:9c:85:14:ae:78:31:94:39:79:3b:94: 9c:71:8e:df:58:2c:01:ca:65:c3:8a:bb:cd:8e:c3: 7f:b6:30:a3:4b:f6:b2:d1:98:da:77:ea:6e:2b:23: 6d:c0:40:44:4c:60:6f:70:d7:67:47:6c:cb:85:7c: a5:b1:30:9b:db:c1:d2:02:09:b9:91:3b:5f:db:2f: 0b:a4:5d:82:9c:38:71:f4:3f:f4:18:ca:95:c8:09: 59:5f:5f:e4:6f:a3:c2:49:4c:71:9f:b3:81:ab:e2: bd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1C:DA:E3:C2:6D:FC:40:79:67:C6:09:9C:81:DA:52:0F:82:D4:F3 X509v3 Authority Key Identifier: keyid:CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:63:1c:eb:96:0f:df:7f:f2:fa:da:48:1f:0f:53:aa:7f:c7: cd:e3:a8:86:7a:04:ac:02:66:86:1c:38:07:fd:2d:89:01:4a: 27:91:c0:05:2c:5a:5a:71:40:fc:8c:13:3f:10:07:70:dc:bc: 42:24:31:64:fe:b8:31:ce:7e:bf:28:da:f0:99:9f:0c:6a:52: 15:d8:44:18:fa:59:33:20:7b:f0:be:9a:29:1c:49:d6:9d:30: a8:c2:55:b3:f0:f2:93:18:47:e2:79:26:05:a6:72:ee:02:ed: 9c:01:7a:62:90:8a:4a:36:82:90:d6:70:af:b5:03:d4:1c:be: 4b:b0:cd:48:d1:bb:e9:09:45:42:b3:16:9d:5f:1e:a1:ed:a5: 0c:e6:19:92:5a:f5:c5:ff:b0:0c:d8:81:39:f2:70:c5:b5:d2: 9b:98:e1:55:d6:8f:36:60:e1:ca:6f:36:c7:ee:b7:20:fd:28: e5:29:a7:1b:e4:ab:5c:34:a5:17:4c:0c:09:a8:22:b4:c8:11: 7c:0d:89:75:1e:8b:0c:ae:a6:f3:28:e3:b6:63:46:ee:8d:88: 24:4d:e4:a7:1e:b7:e5:87:3e:b9:c8:42:9b:f7:53:50:3e:8c: bc:04:0a:46:24:e9:b8:f0:cc:d7:0d:7b:04:f5:57:5d:98:18: 8f:f3:0a:ca -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeUGOM80bFa6ls4WNHkhiJuYIznAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3 MDAxOTcxODAeFw0yNjEwMDcwMTUwMzlaFw0yNjEwMTAxMzAyMzlaMDMxMTAvBgNV BAMTKDEyMUNEQUUzQzI2REZDNDA3OTY3QzYwOTlDODFEQTUyMEY4MkQ0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3M5asL0tORKJjG/cyHwaJ2OkR k9/vYGoMyg2Pvbe8qSp2g5kA4iQQL+zM2nOEYlMcbgCORwTuJXBZ8NphSGjstItp zwI7xGAHlDJYydQ6Tx2+RIshrdibyjxW23guqNBHY1b/cwYkopFE76jYkM8in9fd yz7vFUqqF8w27imAF6D0Vp2YSz/Rr/VX+HM2Z9MRuFdByJZgJVechRSueDGUOXk7 lJxxjt9YLAHKZcOKu82Ow3+2MKNL9rLRmNp36m4rI23AQERMYG9w12dHbMuFfKWx MJvbwdICCbmRO1/bLwukXYKcOHH0P/QYypXICVlfX+Rvo8JJTHGfs4Gr4r2bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEhza48Jt/EB5Z8YJnIHaUg+C1PMwHwYDVR0j BBgwFoAUz7I+XCW833WxA2V0HmDqGHABlxgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODgzNDgyNDc2NTg5ODc1NC8wL0NGQjIzRTVDMjVCQ0RGNzVCMTAzNjU3NDFFNjBF QTE4NzAwMTk3MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3MDAxOTcxOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4MzQ4MjQ3NjU4OTg3NTQvMC9DRkIyM0U1QzI1QkNE Rjc1QjEwMzY1NzQxRTYwRUExODcwMDE5NzE4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGMc65YP33/y +tpIHw9Tqn/HzeOohnoErAJmhhw4B/0tiQFKJ5HABSxaWnFA/IwTPxAHcNy8QiQx ZP64Mc5+vyja8JmfDGpSFdhEGPpZMyB78L6aKRxJ1p0wqMJVs/DykxhH4nkmBaZy 7gLtnAF6YpCKSjaCkNZwr7UD1By+S7DNSNG76QlFQrMWnV8eoe2lDOYZklr1xf+w DNiBOfJwxbXSm5jhVdaPNmDhym82x+63IP0o5SmnG+SrXDSlF0wMCagitMgRfA2J dR6LDK6m8yjjtmNG7o2IJE3kpx635Yc+uchCm/dTUD6MvAQKRiTpuPDM1w17BPVX XZgYj/MKyg== -----END CERTIFICATE-----Generated at Thu Oct 8 12:21:59 2026 by rpki-client