$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft File: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft (raw, json) Hash identifier: 1nFD2LcJc8X6uJFgy/G+OYkG6Zdkb7m8hsvF7GLANXs= Subject key identifier: EF:1E:D8:B3:7E:EA:2C:9E:67:21:69:E8:4E:C4:3A:4E:D5:82:B9:1E Authority key identifier: D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E Certificate issuer: /CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E Certificate serial: 163D0C8B26B969245739279441142C26897931B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft Manifest number: A4 Signing time: Tue 13 Oct 2026 16:28:09 +0000 Manifest this update: Tue 13 Oct 2026 16:23:09 +0000 Manifest next update: Fri 16 Oct 2026 18:08:09 +0000 Files and hashes: 1: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl (hash: gsQg8qrvKTQBBIIDMKMlRPme3Gc1/XlzAzT+3TdYaRM=) 2: 3130332e3233322e3136362e302f32332d3233203d3e2039383038.roa (hash: wZgCkdZF56vtDndZBJDFwSUyJO2LVVtO+dAGyXmN1DQ=) 3: 323430313a313332303a3a2f33322d3332203d3e2039383038.roa (hash: gkXLtfsm57+1SLQOnZmPCOz2Uc/ydhDt+i+LwC+ujFg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 18:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:3d:0c:8b:26:b9:69:24:57:39:27:94:41:14:2c:26:89:79:31:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E Validity Not Before: Oct 13 16:23:09 2026 GMT Not After : Oct 16 18:08:09 2026 GMT Subject: CN=EF1ED8B37EEA2C9E672169E84EC43A4ED582B91E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:29:f7:fb:7a:19:69:6f:62:a9:f2:29:82:58: 45:e0:db:59:d2:1a:dc:08:82:0f:82:c9:94:5b:fd: f0:ae:24:32:02:40:25:73:15:8c:40:61:65:4e:89: 34:72:44:08:0e:3f:10:78:9c:4d:09:e9:85:41:bb: 26:15:b6:45:e0:b9:fb:1b:67:c3:db:58:b8:75:90: f4:26:c0:7a:34:65:d5:d7:14:c8:69:2e:c9:f9:44: 23:37:6e:1a:41:e8:42:91:86:3e:72:82:12:2e:ce: 09:71:d5:83:88:68:b0:3a:da:e0:b9:72:1c:f2:7a: bf:04:4a:44:4a:10:40:27:1b:0d:4c:aa:b2:7b:fd: 37:47:21:bb:f3:aa:9f:0c:52:bb:1a:c6:94:01:10: 7e:d5:6f:6a:f5:ae:f5:d4:86:22:ef:f1:db:6b:b3: 89:48:8c:ff:0c:b2:c3:01:2e:03:d0:df:c8:6b:96: 9c:17:e1:dd:10:49:a8:1c:c1:a9:9d:6d:5a:c0:38: 0f:34:cf:cb:d3:5c:3f:41:32:45:3e:ae:56:96:17: 79:42:3b:3b:70:4c:05:4c:88:86:31:f1:f9:25:bd: 08:e2:2a:cd:c1:33:95:4c:06:2d:d8:21:23:5c:6c: ff:72:2c:fb:0f:74:c3:fa:96:36:6d:15:90:c7:0f: bb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1E:D8:B3:7E:EA:2C:9E:67:21:69:E8:4E:C4:3A:4E:D5:82:B9:1E X509v3 Authority Key Identifier: keyid:D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:e7:57:35:92:f5:52:64:46:2b:40:07:15:d0:25:9f:6b:e8: f0:7c:1e:ca:91:1f:e1:a3:19:37:94:1a:ea:25:1b:a1:7a:2c: 1d:2a:7c:4a:53:46:99:2e:a2:e2:45:41:cf:f3:3f:3e:40:90: 10:b8:e8:6f:07:a3:3f:73:c5:3a:95:bc:d7:cc:d4:e2:39:64: 5d:7b:c5:85:08:a6:d2:a6:03:2a:c9:e0:82:fe:d8:aa:03:e9: 00:4f:fc:4e:9d:70:4b:9e:4e:80:9b:6b:4f:89:21:95:78:b5: 41:94:ab:2d:3e:76:8b:ca:27:da:17:2f:c9:1f:9a:9a:be:94: cb:ec:b3:7f:52:f9:56:48:8b:e1:c9:00:e8:6e:80:a5:00:99: 01:6c:9b:5e:13:b5:39:15:01:60:c1:1a:c8:5d:d2:5e:52:91: 91:fe:c3:ff:8e:e4:63:40:57:da:19:f6:22:f9:2c:2f:bb:2d: 17:56:5a:77:f0:1b:c5:e2:7f:8c:33:04:32:94:9a:2d:fc:25: 53:a2:73:38:44:dc:45:49:0b:a4:61:18:3e:15:a2:c5:0a:7a: 08:1a:9f:21:52:cb:30:b7:a5:7a:81:ef:08:b1:0d:62:5b:74: e6:b6:cd:36:25:f5:cd:9f:4b:62:b0:30:ff:d4:7d:5e:c5:63: 4e:e4:60:7e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFj0Miya5aSRXOSeUQRQsJol5MbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgy NzZFOUQwRTAeFw0yNjEwMTMxNjIzMDlaFw0yNjEwMTYxODA4MDlaMDMxMTAvBgNV BAMTKEVGMUVEOEIzN0VFQTJDOUU2NzIxNjlFODRFQzQzQTRFRDU4MkI5MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXKff7ehlpb2Kp8imCWEXg21nS GtwIgg+CyZRb/fCuJDICQCVzFYxAYWVOiTRyRAgOPxB4nE0J6YVBuyYVtkXgufsb Z8PbWLh1kPQmwHo0ZdXXFMhpLsn5RCM3bhpB6EKRhj5yghIuzglx1YOIaLA62uC5 chzyer8ESkRKEEAnGw1MqrJ7/TdHIbvzqp8MUrsaxpQBEH7Vb2r1rvXUhiLv8dtr s4lIjP8MssMBLgPQ38hrlpwX4d0QSagcwamdbVrAOA80z8vTXD9BMkU+rlaWF3lC OztwTAVMiIYx8fklvQjiKs3BM5VMBi3YISNcbP9yLPsPdMP6ljZtFZDHD7sHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7x7Ys37qLJ5nIWnoTsQ6TtWCuR4wHwYDVR0j BBgwFoAU0w+QifnqWDYAC4rkvghaiCdunQ4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzEwNjI1NDQ3MzM5NjI0MS8wL0QzMEY5MDg5RjlFQTU4MzYwMDBCOEFFNEJFMDg1 QTg4Mjc2RTlEMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgyNzZFOUQwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDcxMDYyNTQ0NzMzOTYyNDEvMC9EMzBGOTA4OUY5RUE1 ODM2MDAwQjhBRTRCRTA4NUE4ODI3NkU5RDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOdXNZL1UmRG K0AHFdAln2vo8HweypEf4aMZN5Qa6iUboXosHSp8SlNGmS6i4kVBz/M/PkCQELjo bwejP3PFOpW818zU4jlkXXvFhQim0qYDKsnggv7YqgPpAE/8Tp1wS55OgJtrT4kh lXi1QZSrLT52i8on2hcvyR+amr6Uy+yzf1L5VkiL4ckA6G6ApQCZAWybXhO1ORUB YMEayF3SXlKRkf7D/47kY0BX2hn2IvksL7stF1Zad/AbxeJ/jDMEMpSaLfwlU6Jz OETcRUkLpGEYPhWixQp6CBqfIVLLMLeleoHvCLENYlt05rbNNiX1zZ9LYrAw/9R9 XsVjTuRgfg== -----END CERTIFICATE-----Generated at Wed Oct 14 13:11:40 2026 by rpki-client