$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft File: F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft (raw, json) Hash identifier: Q+UFSqyM3oPFw1uiJrY9sBqM2gXAhkJAMu8YmRpY7E0= Subject key identifier: 02:AB:71:6F:25:B6:9B:62:AB:04:EF:F4:AC:CA:DA:57:AC:30:CB:A6 Authority key identifier: F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 Certificate issuer: /CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Certificate serial: 1C579E7B988504576EB0020CC3C3967E687B0D20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft Manifest number: C7 Signing time: Mon 26 Oct 2026 10:58:40 +0000 Manifest this update: Mon 26 Oct 2026 10:53:40 +0000 Manifest next update: Thu 29 Oct 2026 16:45:40 +0000 Files and hashes: 1: 3130332e39302e3137362e302f32322d3232203d3e2034383038.roa (hash: rewDp5XA3tfKBFOlfn+0M99oxcphkJa+FJUlVr1EWOI=) 2: 3130332e3134322e3233342e302f32332d3233203d3e2034383038.roa (hash: bK38O+wDDBO753c5azCJn5pqUThQEDZ04zoRei8ZckI=) 3: F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl (hash: f40djOxRc8HYXyB3JrSw0Azvq92wkItU0UwweQp+WqY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 16:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:57:9e:7b:98:85:04:57:6e:b0:02:0c:c3:c3:96:7e:68:7b:0d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F24654F9C42053F2D945BF872C0FAADA9A2BD645 Validity Not Before: Oct 26 10:53:40 2026 GMT Not After : Oct 29 16:45:40 2026 GMT Subject: CN=02AB716F25B69B62AB04EFF4ACCADA57AC30CBA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cc:39:0c:b7:8c:c6:ff:93:d0:73:4c:7a:3e: f2:af:8f:48:9a:a4:b3:a4:48:e6:54:0a:6f:49:56: 7c:2d:d1:fd:6b:5b:91:ee:82:b6:a8:15:cf:23:76: 18:8c:d3:1a:ee:03:26:bf:e7:c0:f6:6c:34:1e:95: 2f:87:65:3e:5d:fe:80:3f:ef:a0:c4:bd:b5:22:16: ef:60:56:06:03:9e:63:e0:ce:09:73:86:1c:48:a4: 42:d1:86:e2:fe:54:d4:b0:61:90:f0:fd:d8:d2:03: 66:68:85:24:dc:9d:34:1f:04:94:70:18:f7:b6:c8: 5d:05:96:a2:ef:f6:47:fc:fd:89:f5:d2:f0:c1:40: 84:e2:a2:d3:f7:c4:2d:61:42:56:68:19:7c:8c:ee: f5:e7:82:61:2f:34:ba:80:f5:be:e3:d5:89:91:0b: 43:5c:e2:57:14:9f:e5:ae:d0:47:00:90:e2:82:a3: f1:7a:2f:00:d4:e8:10:11:94:26:e8:94:10:4e:c2: 4f:d9:6a:97:77:31:93:53:3d:76:b0:29:c6:74:15: 95:10:dd:9d:05:74:9d:a1:1d:fa:1d:23:e2:0b:d7: 42:2f:03:97:61:df:ff:32:de:65:a5:61:26:57:bb: 36:74:1e:38:e9:b1:69:20:73:b3:91:64:ad:c4:59: ac:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AB:71:6F:25:B6:9B:62:AB:04:EF:F4:AC:CA:DA:57:AC:30:CB:A6 X509v3 Authority Key Identifier: keyid:F2:46:54:F9:C4:20:53:F2:D9:45:BF:87:2C:0F:AA:DA:9A:2B:D6:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F24654F9C42053F2D945BF872C0FAADA9A2BD645.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099994663160381441/0/F24654F9C42053F2D945BF872C0FAADA9A2BD645.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:c7:d2:65:14:54:5b:3f:9a:05:d8:5d:18:32:49:c3:ed:32: 4d:41:1a:fe:29:48:99:5c:2a:b0:97:0e:d5:c1:4f:e8:c5:a5: 7f:20:9c:c9:e9:35:45:16:70:9b:50:d3:92:dd:94:3d:58:57: d8:9d:9f:fe:26:51:ac:e5:48:a0:82:95:e0:5a:08:d3:06:f7: c0:bf:28:14:76:13:c7:82:41:2f:52:df:5f:9b:e9:9a:5f:58: 25:53:f0:2d:be:a7:ca:4f:96:db:b1:02:81:64:27:e6:cd:76: 76:de:94:fe:56:68:66:37:47:4c:d1:9f:0e:c2:c1:fa:7f:73: 69:0b:90:a1:1f:2e:0f:b0:47:26:7c:cf:75:74:9c:7f:99:d5: 71:44:2f:c3:0b:bc:81:2f:4d:31:44:e2:7a:be:5b:6b:d6:dc: 64:6c:b7:d7:70:8c:db:6f:ed:b1:0b:ca:97:4b:47:c4:88:09: 32:1c:b7:04:26:7c:b7:41:fd:45:58:57:14:ae:7e:58:c2:1d: 70:b9:31:e0:0d:0c:2c:0b:54:ad:59:8e:01:1c:64:c2:7c:1f: 8a:38:12:24:31:6e:dc:51:29:65:67:c0:6b:8d:eb:d5:86:c5: a0:16:53:89:dc:f3:b2:42:4e:47:e1:e8:bb:71:ad:6a:d1:38: e4:dc:bb:b0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHFeee5iFBFdusAIMw8OWfmh7DSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5 QTJCRDY0NTAeFw0yNjEwMjYxMDUzNDBaFw0yNjEwMjkxNjQ1NDBaMDMxMTAvBgNV BAMTKDAyQUI3MTZGMjVCNjlCNjJBQjA0RUZGNEFDQ0FEQTU3QUMzMENCQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVzDkMt4zG/5PQc0x6PvKvj0ia pLOkSOZUCm9JVnwt0f1rW5HugraoFc8jdhiM0xruAya/58D2bDQelS+HZT5d/oA/ 76DEvbUiFu9gVgYDnmPgzglzhhxIpELRhuL+VNSwYZDw/djSA2ZohSTcnTQfBJRw GPe2yF0FlqLv9kf8/Yn10vDBQITiotP3xC1hQlZoGXyM7vXngmEvNLqA9b7j1YmR C0Nc4lcUn+Wu0EcAkOKCo/F6LwDU6BARlCbolBBOwk/Zapd3MZNTPXawKcZ0FZUQ 3Z0FdJ2hHfodI+IL10IvA5dh3/8y3mWlYSZXuzZ0HjjpsWkgc7ORZK3EWaxbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAqtxbyW2m2KrBO/0rMraV6wwy6YwHwYDVR0j BBgwFoAU8kZU+cQgU/LZRb+HLA+q2por1kUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTk5NDY2MzE2MDM4MTQ0MS8wL0YyNDY1NEY5QzQyMDUzRjJEOTQ1QkY4NzJDMEZB QURBOUEyQkQ2NDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjI0NjU0RjlDNDIwNTNGMkQ5NDVCRjg3MkMwRkFBREE5QTJCRDY0NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk5OTQ2NjMxNjAzODE0NDEvMC9GMjQ2NTRGOUM0MjA1 M0YyRDk0NUJGODcyQzBGQUFEQTlBMkJENjQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5cfSZRRUWz+a BdhdGDJJw+0yTUEa/ilImVwqsJcO1cFP6MWlfyCcyek1RRZwm1DTkt2UPVhX2J2f /iZRrOVIoIKV4FoI0wb3wL8oFHYTx4JBL1LfX5vpml9YJVPwLb6nyk+W27ECgWQn 5s12dt6U/lZoZjdHTNGfDsLB+n9zaQuQoR8uD7BHJnzPdXScf5nVcUQvwwu8gS9N MUTier5ba9bcZGy313CM22/tsQvKl0tHxIgJMhy3BCZ8t0H9RVhXFK5+WMIdcLkx 4A0MLAtUrVmOARxkwnwfijgSJDFu3FEpZWfAa43r1YbFoBZTidzzskJOR+Hou3Gt atE45Ny7sA== -----END CERTIFICATE-----Generated at Tue Oct 27 08:42:12 2026 by rpki-client