$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft File: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft (raw, json) Hash identifier: Qq/o+RfWFed02a2zR5r3xmI6BnWDCXIScXfuxXGiSb4= Subject key identifier: B7:B3:FA:29:C6:6C:51:C0:F7:5D:17:F0:BE:45:DC:A5:9D:53:FD:27 Authority key identifier: D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E Certificate issuer: /CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E Certificate serial: 6C03DBF40583B4C898973CF68D4CD3AA0A3441E2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft Manifest number: A5 Signing time: Thu 15 Oct 2026 18:11:53 +0000 Manifest this update: Thu 15 Oct 2026 18:06:53 +0000 Manifest next update: Sun 18 Oct 2026 19:53:53 +0000 Files and hashes: 1: 3130332e3233322e3136362e302f32332d3233203d3e2039383038.roa (hash: wZgCkdZF56vtDndZBJDFwSUyJO2LVVtO+dAGyXmN1DQ=) 2: 323430313a313332303a3a2f33322d3332203d3e2039383038.roa (hash: gkXLtfsm57+1SLQOnZmPCOz2Uc/ydhDt+i+LwC+ujFg=) 3: D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl (hash: 8fjBKQ6JdjwMmVgK8xnXjZcktnSYac7R5II/g21REjc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 17:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:03:db:f4:05:83:b4:c8:98:97:3c:f6:8d:4c:d3:aa:0a:34:41:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D30F9089F9EA5836000B8AE4BE085A88276E9D0E Validity Not Before: Oct 15 18:06:53 2026 GMT Not After : Oct 18 19:53:53 2026 GMT Subject: CN=B7B3FA29C66C51C0F75D17F0BE45DCA59D53FD27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c8:02:45:0d:34:02:43:1f:67:90:30:1b:e2: 22:e3:0c:ad:f8:8f:b0:77:a5:50:4d:e3:24:3f:ab: 11:a2:d5:c2:cd:c3:c6:31:c4:d1:4b:7d:c7:cc:2f: d4:9e:1b:77:89:2b:1d:48:64:6d:b6:f5:77:69:b0: 07:5b:10:cd:fe:33:9e:01:40:8a:5d:db:0c:88:0b: 0f:87:37:63:ed:7a:49:b9:9b:88:f6:51:dd:67:ee: 74:10:15:78:ad:5f:fa:6d:05:0e:a5:e0:57:66:b9: 4e:3c:2c:b9:64:08:ad:19:fb:bd:41:7e:e6:2e:c2: bc:79:04:2b:d7:38:ab:08:1f:3b:a0:ac:f9:5f:31: 06:9f:5c:b3:67:5e:d2:50:37:2c:8e:2f:f9:18:ca: 29:8f:05:53:8c:ab:af:04:bb:61:41:46:79:c2:5f: 6b:a6:87:da:77:b4:e4:35:df:af:df:fc:99:d0:e8: 5f:29:ed:b2:9d:ed:df:fd:f8:e8:27:dd:74:8e:48: ec:bf:54:5f:99:1f:95:a0:22:e1:ca:26:2e:63:c1: 26:a3:45:e8:02:0e:82:33:e0:ad:7a:1d:72:43:a1: 4b:33:82:fd:94:75:35:bb:20:2f:a0:ec:eb:45:de: c2:45:b5:22:e4:42:90:df:c5:98:6d:ff:60:ae:3c: 9a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B3:FA:29:C6:6C:51:C0:F7:5D:17:F0:BE:45:DC:A5:9D:53:FD:27 X509v3 Authority Key Identifier: keyid:D3:0F:90:89:F9:EA:58:36:00:0B:8A:E4:BE:08:5A:88:27:6E:9D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107106254473396241/0/D30F9089F9EA5836000B8AE4BE085A88276E9D0E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a5:33:f9:ec:11:77:bc:e4:d1:96:d2:d1:38:e6:da:04:14: 98:a7:22:3d:99:c4:5e:5a:ad:e3:de:92:d1:7e:ea:3c:b1:75: 10:8f:dc:51:fb:f3:38:b2:0e:c9:35:c2:e0:a4:1c:74:9e:0e: b0:03:d3:25:c1:58:5b:72:dd:6f:51:36:83:b0:96:37:54:24: ed:a1:91:c2:8d:db:be:96:4a:f7:1a:24:da:09:42:2b:a7:53: c3:b8:5b:e4:fb:05:80:44:98:3d:c1:37:58:14:ca:21:fb:4c: 5b:04:62:35:3a:ac:24:33:a6:4e:4f:64:9f:dd:f3:6e:ae:61: c7:f4:0a:e6:70:a8:93:75:5e:77:28:44:b6:d9:04:be:e7:a5: 0d:bc:3e:6a:0b:27:ba:7c:40:36:49:ae:7f:e6:75:3d:c1:e9: 6f:d7:3b:d7:99:65:53:73:fd:72:54:bc:84:7a:5b:ac:49:9c: 68:e4:07:71:48:51:f2:88:ae:d8:bd:aa:8e:5d:d0:ea:bb:27: 10:64:c9:3b:a4:ad:43:0c:f7:e1:66:68:34:93:1a:da:b4:ac: bd:b5:c3:e4:2f:39:f5:4d:ab:ac:1b:94:94:5f:ff:a4:12:dc: 7c:e5:da:6f:b4:55:c6:1f:50:18:6e:39:26:d5:52:fb:0c:88: 32:01:e8:b5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbAPb9AWDtMiYlzz2jUzTqgo0QeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgy NzZFOUQwRTAeFw0yNjEwMTUxODA2NTNaFw0yNjEwMTgxOTUzNTNaMDMxMTAvBgNV BAMTKEI3QjNGQTI5QzY2QzUxQzBGNzVEMTdGMEJFNDVEQ0E1OUQ1M0ZEMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJyAJFDTQCQx9nkDAb4iLjDK34 j7B3pVBN4yQ/qxGi1cLNw8YxxNFLfcfML9SeG3eJKx1IZG229XdpsAdbEM3+M54B QIpd2wyICw+HN2Ptekm5m4j2Ud1n7nQQFXitX/ptBQ6l4FdmuU48LLlkCK0Z+71B fuYuwrx5BCvXOKsIHzugrPlfMQafXLNnXtJQNyyOL/kYyimPBVOMq68Eu2FBRnnC X2umh9p3tOQ136/f/JnQ6F8p7bKd7d/9+Ogn3XSOSOy/VF+ZH5WgIuHKJi5jwSaj RegCDoIz4K16HXJDoUszgv2UdTW7IC+g7OtF3sJFtSLkQpDfxZht/2CuPJrbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUt7P6KcZsUcD3XRfwvkXcpZ1T/ScwHwYDVR0j BBgwFoAU0w+QifnqWDYAC4rkvghaiCdunQ4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzEwNjI1NDQ3MzM5NjI0MS8wL0QzMEY5MDg5RjlFQTU4MzYwMDBCOEFFNEJFMDg1 QTg4Mjc2RTlEMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDMwRjkwODlGOUVBNTgzNjAwMEI4QUU0QkUwODVBODgyNzZFOUQwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDcxMDYyNTQ0NzMzOTYyNDEvMC9EMzBGOTA4OUY5RUE1 ODM2MDAwQjhBRTRCRTA4NUE4ODI3NkU5RDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6Uz+ewRd7zk 0ZbS0Tjm2gQUmKciPZnEXlqt496S0X7qPLF1EI/cUfvzOLIOyTXC4KQcdJ4OsAPT JcFYW3Ldb1E2g7CWN1Qk7aGRwo3bvpZK9xok2glCK6dTw7hb5PsFgESYPcE3WBTK IftMWwRiNTqsJDOmTk9kn93zbq5hx/QK5nCok3VedyhEttkEvuelDbw+agsnunxA Nkmuf+Z1PcHpb9c715llU3P9clS8hHpbrEmcaOQHcUhR8oiu2L2qjl3Q6rsnEGTJ O6StQwz34WZoNJMa2rSsvbXD5C859U2rrBuUlF//pBLcfOXab7RVxh9QGG45JtVS +wyIMgHotQ== -----END CERTIFICATE-----Generated at Thu Oct 15 21:10:57 2026 by rpki-client