$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft File: 7E97B2869243296A265D98767FC04F1998D143DE.mft (raw, json) Hash identifier: 9sC+fTePJ7P3hp2fBx3pV+ziYQ/OyP7oZxGW6JDXvTQ= Subject key identifier: 6F:F3:2D:67:FF:CB:63:85:F5:8A:36:B7:7A:26:76:A1:77:57:D4:F2 Authority key identifier: 7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE Certificate issuer: /CN=7E97B2869243296A265D98767FC04F1998D143DE Certificate serial: 489E73741BA9013F9443B8BE8C1CD0B50A4F07DC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft Manifest number: BA Signing time: Mon 12 Oct 2026 06:51:44 +0000 Manifest this update: Mon 12 Oct 2026 06:46:44 +0000 Manifest next update: Thu 15 Oct 2026 14:20:44 +0000 Files and hashes: 1: 3130332e3233332e3133382e302f32332d3233203d3e203633363937.roa (hash: uOCqEKaImN5wNlAYjTqBY4smG8MJ0enpKts3XJnKdC4=) 2: 3130332e3233332e3133382e302f32342d3234203d3e203633363937.roa (hash: rm3DnKUZiRzyrB9MIhtg+3yts5DolytZ1bDtJ/yPMew=) 3: 3130332e3233332e3133362e302f32332d3233203d3e203633363936.roa (hash: KQvWBZXWCR3Q1jOkECmr3kjMcu1iG3s8aIgIPbrTDHI=) 4: 7E97B2869243296A265D98767FC04F1998D143DE.crl (hash: c8lY0I3h13TM5Drn5zc1Zy4F+8JWkJ8B88vE6yV1bSk=) 5: 3130332e3233332e3133362e302f32342d3234203d3e203633363936.roa (hash: RfspFMxmIvUaZoDDu4Mh9YLmEtrO/QrKQVLqrxLFw3U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 14:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:9e:73:74:1b:a9:01:3f:94:43:b8:be:8c:1c:d0:b5:0a:4f:07:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E97B2869243296A265D98767FC04F1998D143DE Validity Not Before: Oct 12 06:46:44 2026 GMT Not After : Oct 15 14:20:44 2026 GMT Subject: CN=6FF32D67FFCB6385F58A36B77A2676A17757D4F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fa:7b:02:91:6d:08:8f:e0:86:41:0b:59:f8: 8a:47:37:64:db:a0:e8:d0:7d:ef:1b:2a:af:f8:3b: 3f:91:e2:9c:9e:92:7e:84:7b:b4:55:4a:61:58:e4: b7:52:0d:ea:de:30:1e:e8:4b:ae:a8:10:40:d6:f1: 6f:99:0b:0f:c6:1b:d9:62:a9:6d:0b:0f:4f:3c:f4: a3:3a:13:e1:d3:de:56:43:df:7e:ca:40:67:b7:e2: 9a:09:91:f3:cc:71:15:a4:49:0a:bc:5f:83:80:99: 28:21:74:a4:b9:74:82:43:c0:e5:23:e9:46:8f:da: 18:cf:b0:3a:e8:78:6a:70:1b:6e:25:17:85:5f:f1: 21:33:14:4f:e6:3c:86:26:73:a1:93:bd:ba:86:de: eb:72:ee:1e:63:b6:1f:be:85:58:32:68:53:61:64: ab:83:29:16:c3:ae:d4:36:76:f4:3a:c2:39:66:ff: ed:de:3d:b4:13:23:ac:21:d6:4c:44:98:13:d1:5a: ed:3d:dc:4e:ca:c4:3d:4a:a8:2e:6f:5f:1a:28:39: 39:39:af:d5:d1:cd:37:f5:e1:d6:0d:82:7f:68:b0: a8:90:dd:66:98:11:50:87:f0:09:7c:11:d9:04:04: 9e:a2:ea:19:31:06:76:7d:40:e6:24:d3:58:68:f9: 60:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F3:2D:67:FF:CB:63:85:F5:8A:36:B7:7A:26:76:A1:77:57:D4:F2 X509v3 Authority Key Identifier: keyid:7E:97:B2:86:92:43:29:6A:26:5D:98:76:7F:C0:4F:19:98:D1:43:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7E97B2869243296A265D98767FC04F1998D143DE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101012581839011843/0/7E97B2869243296A265D98767FC04F1998D143DE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8e:52:89:e6:4d:5f:eb:2f:ee:33:27:e1:de:0d:64:28:4f: aa:80:91:ad:70:c0:27:40:6a:f5:dd:5b:e2:80:91:66:4c:b5: 46:19:c6:7d:b7:40:dd:5c:4b:a8:bd:c3:14:bf:71:a5:2f:c3: ac:06:82:af:68:94:d6:e3:ff:b2:e6:9d:a9:74:44:5b:c6:cf: c4:e9:7e:8d:61:77:df:f7:d3:40:6c:30:fa:44:be:bf:d4:34: 3e:3a:b2:84:9f:0f:6c:ee:ab:b6:c0:6a:ea:3c:fd:7c:e7:03: 90:b0:d4:cc:f1:4c:98:c0:06:f0:98:d5:e7:fc:18:e2:87:0c: 07:ad:ff:2e:10:3c:26:a0:f6:79:a8:4c:07:3f:53:32:5f:a6: b2:03:9b:2b:dc:a4:da:10:fd:0e:cf:cb:60:9d:77:26:f1:a1: 0a:44:03:98:86:72:c1:8e:7c:7b:2c:bb:06:a6:5e:78:a6:ec: f6:24:a8:31:b0:43:af:9e:00:87:76:88:7c:33:08:3b:dd:19: 94:28:f0:f3:4b:87:b5:20:0c:04:1c:cc:06:fc:c2:b4:68:9c: 34:bd:12:43:96:91:60:6c:ea:0c:be:30:f1:7b:66:8c:66:e2: f7:3e:35:58:48:4c:95:a1:43:10:57:1e:03:80:cd:52:a8:ea: 68:c4:29:19 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSJ5zdBupAT+UQ7i+jBzQtQpPB9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5 OEQxNDNERTAeFw0yNjEwMTIwNjQ2NDRaFw0yNjEwMTUxNDIwNDRaMDMxMTAvBgNV BAMTKDZGRjMyRDY3RkZDQjYzODVGNThBMzZCNzdBMjY3NkExNzc1N0Q0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx+nsCkW0Ij+CGQQtZ+IpHN2Tb oOjQfe8bKq/4Oz+R4pyekn6Ee7RVSmFY5LdSDereMB7oS66oEEDW8W+ZCw/GG9li qW0LD0889KM6E+HT3lZD337KQGe34poJkfPMcRWkSQq8X4OAmSghdKS5dIJDwOUj 6UaP2hjPsDroeGpwG24lF4Vf8SEzFE/mPIYmc6GTvbqG3uty7h5jth++hVgyaFNh ZKuDKRbDrtQ2dvQ6wjlm/+3ePbQTI6wh1kxEmBPRWu093E7KxD1KqC5vXxooOTk5 r9XRzTf14dYNgn9osKiQ3WaYEVCH8Al8EdkEBJ6i6hkxBnZ9QOYk01ho+WCZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUb/MtZ//LY4X1ija3eiZ2oXdX1PIwHwYDVR0j BBgwFoAUfpeyhpJDKWomXZh2f8BPGZjRQ94wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTAxMjU4MTgzOTAxMTg0My8wLzdFOTdCMjg2OTI0MzI5NkEyNjVEOTg3NjdGQzA0 RjE5OThEMTQzREUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvN0U5N0IyODY5MjQzMjk2QTI2NUQ5ODc2N0ZDMDRGMTk5OEQxNDNERS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEwMTI1ODE4MzkwMTE4NDMvMC83RTk3QjI4NjkyNDMy OTZBMjY1RDk4NzY3RkMwNEYxOTk4RDE0M0RFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbI5SieZNX+sv 7jMn4d4NZChPqoCRrXDAJ0Bq9d1b4oCRZky1RhnGfbdA3VxLqL3DFL9xpS/DrAaC r2iU1uP/suadqXREW8bPxOl+jWF33/fTQGww+kS+v9Q0PjqyhJ8PbO6rtsBq6jz9 fOcDkLDUzPFMmMAG8JjV5/wY4ocMB63/LhA8JqD2eahMBz9TMl+msgObK9yk2hD9 Ds/LYJ13JvGhCkQDmIZywY58eyy7BqZeeKbs9iSoMbBDr54Ah3aIfDMIO90ZlCjw 80uHtSAMBBzMBvzCtGicNL0SQ5aRYGzqDL4w8XtmjGbi9z41WEhMlaFDEFceA4DN UqjqaMQpGQ== -----END CERTIFICATE-----Generated at Wed Oct 14 10:24:59 2026 by rpki-client