$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft File: CF709CC85A3788918F778EC5F4257016F4294457.mft (raw, json) Hash identifier: BUxemz0pRjp8OELMGc3Aojz8EbghfnK1+Cg/0Wbnyow= Subject key identifier: 80:FE:E0:99:2A:E7:3D:91:8F:D6:1C:17:AD:21:82:17:7F:8E:F2:43 Authority key identifier: CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 Certificate issuer: /CN=CF709CC85A3788918F778EC5F4257016F4294457 Certificate serial: 60F33DAF26EFC76CA6FE5DD16B49DC650BE2248C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft Manifest number: AE Signing time: Wed 14 Oct 2026 00:03:21 +0000 Manifest this update: Tue 13 Oct 2026 23:58:21 +0000 Manifest next update: Sat 17 Oct 2026 03:39:21 +0000 Files and hashes: 1: 34332e3234322e3135362e302f32322d3232203d3e2034383337.roa (hash: DXIJ4z4EqslXGtRbFgprkrYQTOPQJTbi60YLp+rEd2s=) 2: CF709CC85A3788918F778EC5F4257016F4294457.crl (hash: LAqMJ2kpniwG4pGmJDO/WioEK6dc/VCViQSfTmm/l4k=) 3: 3130332e33382e34302e302f32322d3232203d3e2034383337.roa (hash: 4GHv8joM/5RN0bEMErPJBuhi5iOtTFOrvEdUPol9R3o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 03:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f3:3d:af:26:ef:c7:6c:a6:fe:5d:d1:6b:49:dc:65:0b:e2:24:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF709CC85A3788918F778EC5F4257016F4294457 Validity Not Before: Oct 13 23:58:21 2026 GMT Not After : Oct 17 03:39:21 2026 GMT Subject: CN=80FEE0992AE73D918FD61C17AD2182177F8EF243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:91:20:ac:a7:66:47:98:b6:3c:31:b8:03: e0:b8:a8:e2:30:da:6d:21:43:ea:66:8b:9d:eb:3d: e6:bb:ca:d9:8c:05:a9:77:fc:88:a1:75:9d:11:f6: 64:cd:a8:56:c1:a2:78:b0:9d:45:b0:4e:f6:ea:34: a3:3a:4e:ac:92:22:da:49:79:99:5c:b5:bd:f9:c8: 20:63:e0:c2:72:75:1d:5f:80:38:27:86:5d:e2:d7: dc:0e:c2:73:ab:42:ac:02:29:5b:19:b0:69:6d:f0: 5f:0f:85:96:47:81:25:59:60:f9:af:65:2e:3b:2d: c1:88:32:0c:33:5a:7f:db:af:13:38:6a:24:c0:22: 5a:fe:f9:3f:7f:28:ed:02:0c:83:27:bf:b2:f2:55: 44:ef:a3:e2:9b:94:1e:05:4a:6a:c2:18:62:d7:46: d2:15:ea:79:7a:e9:88:74:fb:4d:9b:85:b6:0a:68: bd:22:fa:81:d5:12:36:85:3d:42:17:0e:71:c4:65: 5f:97:86:19:66:4c:df:f4:bd:0f:f4:c5:46:37:13: 57:4e:9c:92:e0:ab:d8:7d:37:e4:69:0c:d2:c8:70: de:18:f1:bd:09:1e:6f:c0:5b:e7:eb:36:bc:57:db: 56:12:39:af:79:4e:26:18:53:8f:14:db:78:21:dc: db:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FE:E0:99:2A:E7:3D:91:8F:D6:1C:17:AD:21:82:17:7F:8E:F2:43 X509v3 Authority Key Identifier: keyid:CF:70:9C:C8:5A:37:88:91:8F:77:8E:C5:F4:25:70:16:F4:29:44:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF709CC85A3788918F778EC5F4257016F4294457.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105017083869003783/0/CF709CC85A3788918F778EC5F4257016F4294457.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:25:da:08:64:05:cf:8f:6d:f8:dc:aa:c0:0f:53:c8:ba:7a: 9a:5e:5e:cc:cf:9d:ad:da:66:99:6f:7b:29:dd:de:27:f4:fe: 6d:c6:13:6b:17:6d:b3:d9:09:e3:9c:14:61:b8:6f:76:fe:5a: c2:22:42:cf:e5:e4:69:c3:e5:4d:9e:2e:f8:20:bf:67:be:9b: 0d:f9:e7:db:85:c4:17:15:51:29:53:f6:99:8d:52:ad:bd:ea: 30:08:15:8d:8a:e7:ff:00:6d:4e:37:ce:f6:86:ea:51:91:b8: e7:b2:27:4f:26:3f:d9:ba:3f:dc:dc:f2:37:6a:de:05:b6:51: 3d:89:06:e3:59:4a:9d:5d:1f:08:e6:e5:71:b5:42:6e:29:c6: 9a:27:19:33:43:c2:fe:0e:9b:c3:c6:f1:02:4c:bd:10:4f:4f: a7:88:ce:0a:ac:c1:5c:b7:89:7a:d3:d7:ba:5d:f0:b6:fc:e8: 27:82:c6:7c:e1:47:a1:2d:7c:14:39:1a:7e:9e:b0:2a:51:6f: ab:1d:f8:61:69:3c:13:d2:39:2f:e1:8d:4e:8e:47:94:7a:03: ba:a3:7b:0b:c3:98:ea:bc:d9:64:38:97:73:27:8a:93:31:c9: ed:06:49:6f:fc:1d:0b:3c:18:49:f7:13:dc:eb:8b:f6:9e:ee: 00:be:f9:3c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYPM9rybvx2ym/l3Ra0ncZQviJIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZG NDI5NDQ1NzAeFw0yNjEwMTMyMzU4MjFaFw0yNjEwMTcwMzM5MjFaMDMxMTAvBgNV BAMTKDgwRkVFMDk5MkFFNzNEOTE4RkQ2MUMxN0FEMjE4MjE3N0Y4RUYyNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6O5EgrKdmR5i2PDG4A+C4qOIw 2m0hQ+pmi53rPea7ytmMBal3/IihdZ0R9mTNqFbBoniwnUWwTvbqNKM6TqySItpJ eZlctb35yCBj4MJydR1fgDgnhl3i19wOwnOrQqwCKVsZsGlt8F8PhZZHgSVZYPmv ZS47LcGIMgwzWn/brxM4aiTAIlr++T9/KO0CDIMnv7LyVUTvo+KblB4FSmrCGGLX RtIV6nl66Yh0+02bhbYKaL0i+oHVEjaFPUIXDnHEZV+XhhlmTN/0vQ/0xUY3E1dO nJLgq9h9N+RpDNLIcN4Y8b0JHm/AW+frNrxX21YSOa95TiYYU48U23gh3NupAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgP7gmSrnPZGP1hwXrSGCF3+O8kMwHwYDVR0j BBgwFoAUz3CcyFo3iJGPd47F9CVwFvQpRFcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTAxNzA4Mzg2OTAwMzc4My8wL0NGNzA5Q0M4NUEzNzg4OTE4Rjc3OEVDNUY0MjU3 MDE2RjQyOTQ0NTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0Y3MDlDQzg1QTM3ODg5MThGNzc4RUM1RjQyNTcwMTZGNDI5NDQ1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUwMTcwODM4NjkwMDM3ODMvMC9DRjcwOUNDODVBMzc4 ODkxOEY3NzhFQzVGNDI1NzAxNkY0Mjk0NDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiXaCGQFz49t +NyqwA9TyLp6ml5ezM+drdpmmW97Kd3eJ/T+bcYTaxdts9kJ45wUYbhvdv5awiJC z+XkacPlTZ4u+CC/Z76bDfnn24XEFxVRKVP2mY1Srb3qMAgVjYrn/wBtTjfO9obq UZG457InTyY/2bo/3NzyN2reBbZRPYkG41lKnV0fCOblcbVCbinGmicZM0PC/g6b w8bxAky9EE9Pp4jOCqzBXLeJetPXul3wtvzoJ4LGfOFHoS18FDkafp6wKlFvqx34 YWk8E9I5L+GNTo5HlHoDuqN7C8OY6rzZZDiXcyeKkzHJ7QZJb/wdCzwYSfcT3OuL 9p7uAL75PA== -----END CERTIFICATE-----Generated at Fri Oct 16 04:07:35 2026 by rpki-client