$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft File: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft (raw, json) Hash identifier: SlGq9+dgAJaVWnK7MrOEsLqTYdxguNP4gXHfWGc70/I= Subject key identifier: BD:5E:02:21:D5:37:DA:D1:84:05:2F:AB:1E:C4:B8:D0:A5:0F:65:24 Authority key identifier: 71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 Certificate issuer: /CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Certificate serial: 12BAAF21177F3974DC4C3B1E1C1D3E435DF9CA71 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft Manifest number: BA Signing time: Mon 12 Oct 2026 12:01:56 +0000 Manifest this update: Mon 12 Oct 2026 11:56:56 +0000 Manifest next update: Thu 15 Oct 2026 14:35:56 +0000 Files and hashes: 1: 3130332e3134372e3132342e302f32342d3234203d3e203137363231.roa (hash: h0YZk3m9PfR3qf/OG78Z8ldBE8xpriz8QQrGcV+RdXA=) 2: 3130332e3134372e3132342e302f32342d3234203d3e2034383132.roa (hash: RTIL7pSBicBirhk5lHYPd9ZAXm/vBtAaCSHa5kDDI8k=) 3: 71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl (hash: t8yzH6ulIBgosEKP4HSpSGqjmd+7ShS67g1CjoLG7Ps=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 14:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ba:af:21:17:7f:39:74:dc:4c:3b:1e:1c:1d:3e:43:5d:f9:ca:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71EA1C8B2E9DD939FDA693CF00BB78605B206B03 Validity Not Before: Oct 12 11:56:56 2026 GMT Not After : Oct 15 14:35:56 2026 GMT Subject: CN=BD5E0221D537DAD184052FAB1EC4B8D0A50F6524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f5:40:f8:c1:ac:6a:95:07:40:fb:a5:e0:d3: 90:c1:d2:df:10:5c:22:5c:fd:27:64:07:9e:ea:ea: da:75:5f:6c:96:8b:83:db:f6:0e:af:31:38:bf:2e: 54:de:d8:a2:2f:77:8a:ac:1c:87:f5:b8:ec:7b:26: a2:cf:47:ec:61:fc:0b:98:6d:ed:67:d1:6c:11:f7: a1:9b:a8:65:39:3a:d1:b2:0a:c8:79:71:bf:f1:2e: 22:14:21:18:28:53:75:c1:54:97:ab:65:e8:54:c5: ff:f7:fb:16:5b:a3:1e:19:6b:36:6a:15:01:bd:84: 3d:05:f8:78:cc:0e:6a:3d:8e:b2:37:87:ac:ae:03: 09:73:3c:ac:d4:72:37:a9:3e:3c:e4:8d:38:7d:b5: a6:dc:ee:b4:22:6a:bf:fe:61:ad:a3:8e:8e:24:a2: 62:5f:f4:65:a3:4d:1e:1c:b1:05:be:e7:27:c8:97: df:e6:0c:8c:0c:1b:42:87:a0:e2:97:2d:0c:ac:f4: 7a:5e:b3:6a:13:5c:ea:4b:cf:4d:1a:a3:64:ec:c9: 9c:a3:12:ad:98:39:26:51:54:14:a6:f5:04:a5:10: 75:74:6a:60:ac:be:66:71:0f:be:0c:e0:20:db:80: 6f:fd:11:d6:18:1c:9d:d9:4e:4d:c7:95:02:2f:6d: d8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5E:02:21:D5:37:DA:D1:84:05:2F:AB:1E:C4:B8:D0:A5:0F:65:24 X509v3 Authority Key Identifier: keyid:71:EA:1C:8B:2E:9D:D9:39:FD:A6:93:CF:00:BB:78:60:5B:20:6B:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101412082315689991/0/71EA1C8B2E9DD939FDA693CF00BB78605B206B03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:95:d1:ed:7c:25:ac:35:48:6b:e5:d7:0c:c3:77:fa:23:6f: 78:cc:46:f4:21:e7:4b:71:b4:0d:4c:49:82:0f:10:57:d7:e2: 3d:7e:1e:3d:2b:74:92:ec:49:e8:28:b2:73:ca:31:96:9d:b1: 8b:c2:4f:07:be:fb:33:47:e5:41:0b:11:bf:b0:3f:51:c4:6b: c4:cb:9d:75:1e:d3:5e:e3:31:46:35:ef:23:00:f9:b5:4d:32: 82:76:21:e4:3e:18:2e:30:37:d9:c4:37:cc:36:f1:76:a9:ae: 90:63:62:7a:34:73:15:04:fc:8c:6c:e2:3a:db:04:f2:d2:9b: e5:8e:aa:df:93:dd:a6:4f:e9:fe:d7:f2:70:f2:d0:31:a8:2a: 4c:16:d9:b0:22:ff:23:27:9f:e9:9e:56:a5:40:68:ce:2e:02: 4b:bd:68:b1:59:77:3b:b1:72:08:ca:b9:83:9b:8e:89:46:73: 53:51:8d:ff:10:41:fa:a5:f4:d0:bd:db:ed:07:10:71:9e:91: 78:29:af:5b:6c:c3:ec:96:de:c3:8a:96:31:84:76:2d:80:6b: 09:8f:48:cf:a8:c8:c8:ed:04:8c:35:b0:1c:7e:9a:40:c0:93: 43:fb:87:24:ae:d5:99:86:60:16:4b:76:37:ef:bf:54:3e:da: 60:b5:ae:b1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUErqvIRd/OXTcTDseHB0+Q135ynEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1 QjIwNkIwMzAeFw0yNjEwMTIxMTU2NTZaFw0yNjEwMTUxNDM1NTZaMDMxMTAvBgNV BAMTKEJENUUwMjIxRDUzN0RBRDE4NDA1MkZBQjFFQzRCOEQwQTUwRjY1MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh9UD4waxqlQdA+6Xg05DB0t8Q XCJc/SdkB57q6tp1X2yWi4Pb9g6vMTi/LlTe2KIvd4qsHIf1uOx7JqLPR+xh/AuY be1n0WwR96GbqGU5OtGyCsh5cb/xLiIUIRgoU3XBVJerZehUxf/3+xZbox4ZazZq FQG9hD0F+HjMDmo9jrI3h6yuAwlzPKzUcjepPjzkjTh9tabc7rQiar/+Ya2jjo4k omJf9GWjTR4csQW+5yfIl9/mDIwMG0KHoOKXLQys9Hpes2oTXOpLz00ao2TsyZyj Eq2YOSZRVBSm9QSlEHV0amCsvmZxD74M4CDbgG/9EdYYHJ3ZTk3HlQIvbdi1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvV4CIdU32tGEBS+rHsS40KUPZSQwHwYDVR0j BBgwFoAUceociy6d2Tn9ppPPALt4YFsgawMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTQxMjA4MjMxNTY4OTk5MS8wLzcxRUExQzhCMkU5REQ5MzlGREE2OTNDRjAwQkI3 ODYwNUIyMDZCMDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFFQTFDOEIyRTlERDkzOUZEQTY5M0NGMDBCQjc4NjA1QjIwNkIwMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDE0MTIwODIzMTU2ODk5OTEvMC83MUVBMUM4QjJFOURE OTM5RkRBNjkzQ0YwMEJCNzg2MDVCMjA2QjAzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJXR7XwlrDVI a+XXDMN3+iNveMxG9CHnS3G0DUxJgg8QV9fiPX4ePSt0kuxJ6Ciyc8oxlp2xi8JP B777M0flQQsRv7A/UcRrxMuddR7TXuMxRjXvIwD5tU0ygnYh5D4YLjA32cQ3zDbx dqmukGNiejRzFQT8jGziOtsE8tKb5Y6q35Pdpk/p/tfycPLQMagqTBbZsCL/Iyef 6Z5WpUBozi4CS71osVl3O7FyCMq5g5uOiUZzU1GN/xBB+qX00L3b7QcQcZ6ReCmv W2zD7Jbew4qWMYR2LYBrCY9Iz6jIyO0EjDWwHH6aQMCTQ/uHJK7VmYZgFkt2N++/ VD7aYLWusQ== -----END CERTIFICATE-----Generated at Wed Oct 14 13:24:32 2026 by rpki-client