$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft File: 3201C4351814E52EC594B407C57D52285AA52E6D.mft (raw, json) Hash identifier: oyWLEbrmB+PqKrZGfdfQycjLRPs21KPYspf7tVpXH3E= Subject key identifier: D8:78:D6:CB:6D:83:D2:87:2F:64:92:20:45:4F:C8:63:FE:64:BF:86 Authority key identifier: 32:01:C4:35:18:14:E5:2E:C5:94:B4:07:C5:7D:52:28:5A:A5:2E:6D Certificate issuer: /CN=3201C4351814E52EC594B407C57D52285AA52E6D Certificate serial: 52FBE19E0B37B2BE26B67E34261E26E68191A3B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft Manifest number: 84 Signing time: Wed 07 Oct 2026 11:06:07 +0000 Manifest this update: Wed 07 Oct 2026 11:01:07 +0000 Manifest next update: Sat 10 Oct 2026 22:20:07 +0000 Files and hashes: 1: 3201C4351814E52EC594B407C57D52285AA52E6D.crl (hash: AvYhvyZbrPrqddnjZxo5NfrR/rxgc9GhqaAMmc5dl3o=) 2: 3136332e3132382e3135322e302f32332d3233203d3e2030.roa (hash: eG2V3L8ngZytOIhFBaE+6vNlrSGpXtrAmShn5ATKyk0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.crl rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 22:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:fb:e1:9e:0b:37:b2:be:26:b6:7e:34:26:1e:26:e6:81:91:a3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3201C4351814E52EC594B407C57D52285AA52E6D Validity Not Before: Oct 7 11:01:07 2026 GMT Not After : Oct 10 22:20:07 2026 GMT Subject: CN=D878D6CB6D83D2872F649220454FC863FE64BF86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c8:65:91:36:4a:4b:4f:a2:6e:21:00:65:e3: b4:05:54:9c:6c:26:4c:61:66:b8:51:6f:54:40:96: d8:6c:89:76:55:70:15:2b:be:f1:96:d4:0f:b8:cb: 98:46:92:38:f0:fd:37:f9:76:00:e6:28:22:cc:22: ba:d0:0b:81:30:91:c6:3d:f1:09:9f:a3:49:a7:08: 43:e9:92:94:c9:a5:87:7f:23:8b:47:0d:25:ba:e7: b8:35:e0:01:23:de:17:73:ee:62:e2:40:89:59:aa: 17:95:46:40:b8:d8:f1:72:64:af:c3:4f:f1:6e:f3: 9d:df:d0:a0:8c:aa:39:5b:4b:54:b1:cf:8f:4e:42: 75:6b:f2:59:a9:e5:90:a4:5f:18:85:71:59:a1:b4: 53:2f:f9:42:51:3e:38:92:58:19:6c:cc:a9:d1:62: 50:dc:61:59:75:78:90:70:a3:42:02:41:1d:40:bb: af:d4:93:4c:c7:ce:4d:21:d7:7a:23:d3:a5:1b:76: 92:2e:01:9e:87:9f:f5:b1:ac:fb:c7:10:a8:60:12: 7e:ed:3a:b0:76:75:26:ef:98:35:f5:cf:5a:89:8f: 2e:39:2b:94:20:10:d6:cb:5c:94:64:b2:d5:9c:5a: 60:9c:71:b6:02:78:58:18:b0:44:3a:4b:d3:4b:d4: 8f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:78:D6:CB:6D:83:D2:87:2F:64:92:20:45:4F:C8:63:FE:64:BF:86 X509v3 Authority Key Identifier: keyid:32:01:C4:35:18:14:E5:2E:C5:94:B4:07:C5:7D:52:28:5A:A5:2E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1a:1c:b7:07:4e:3e:03:da:f4:c3:78:d0:16:e6:d7:3b:6f: 29:c1:63:41:b0:12:7f:01:4a:63:ea:85:cc:63:73:a4:ab:b1: c5:73:ae:ba:b2:e6:03:31:b3:63:57:5d:6c:99:95:5e:be:19: 23:9c:92:86:cd:d7:fa:af:2b:b9:ea:82:26:6f:91:4c:d1:0b: d3:40:a9:a8:a1:c4:a5:f1:ca:b6:55:7f:14:6e:2b:9a:41:2f: f0:2b:4b:57:51:fa:17:65:81:59:11:4f:05:b4:ef:60:c2:88: 27:3a:e6:b1:49:7c:6d:77:74:63:c8:ba:7c:de:e9:78:3e:84: 8c:f5:06:8f:65:4d:64:36:a1:b3:90:0c:a6:4a:df:1f:b2:b7: 3b:e1:99:c3:7e:8f:2c:8e:cc:d1:3d:7f:df:bb:0c:43:5e:6d: f5:b7:ef:1d:b8:64:28:55:c5:5b:93:ac:bd:83:86:e0:12:55: 0b:8c:ef:ae:97:7e:11:29:4f:2d:a6:f0:7f:16:c4:4c:05:74: 57:90:50:7a:58:14:53:03:8a:dd:18:72:eb:95:da:d7:82:90: 2f:d9:8f:01:91:2b:71:2c:f8:37:c7:6f:29:00:9c:d5:96:36: d1:95:6a:27:87:0c:04:9f:25:e4:2b:c3:08:24:5e:bb:7d:99: 06:77:76:df -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUvvhngs3sr4mtn40Jh4m5oGRo7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIwMUM0MzUxODE0RTUyRUM1OTRCNDA3QzU3RDUyMjg1 QUE1MkU2RDAeFw0yNjEwMDcxMTAxMDdaFw0yNjEwMTAyMjIwMDdaMDMxMTAvBgNV BAMTKEQ4NzhENkNCNkQ4M0QyODcyRjY0OTIyMDQ1NEZDODYzRkU2NEJGODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDayGWRNkpLT6JuIQBl47QFVJxs JkxhZrhRb1RAlthsiXZVcBUrvvGW1A+4y5hGkjjw/Tf5dgDmKCLMIrrQC4EwkcY9 8Qmfo0mnCEPpkpTJpYd/I4tHDSW657g14AEj3hdz7mLiQIlZqheVRkC42PFyZK/D T/Fu853f0KCMqjlbS1Sxz49OQnVr8lmp5ZCkXxiFcVmhtFMv+UJRPjiSWBlszKnR YlDcYVl1eJBwo0ICQR1Au6/Uk0zHzk0h13oj06UbdpIuAZ6Hn/WxrPvHEKhgEn7t OrB2dSbvmDX1z1qJjy45K5QgENbLXJRkstWcWmCccbYCeFgYsEQ6S9NL1I91AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2HjWy22D0ocvZJIgRU/IY/5kv4YwHwYDVR0j BBgwFoAUMgHENRgU5S7FlLQHxX1SKFqlLm0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg0OTI3MzY1ODI3NzkxMy8wLzMyMDFDNDM1MTgxNEU1MkVDNTk0QjQwN0M1N0Q1 MjI4NUFBNTJFNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzIwMUM0MzUxODE0RTUyRUM1OTRCNDA3QzU3RDUyMjg1QUE1MkU2RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NDkyNzM2NTgyNzc5MTMvMC8zMjAxQzQzNTE4MTRF NTJFQzU5NEI0MDdDNTdENTIyODVBQTUyRTZELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBoctwdOPgPa 9MN40Bbm1ztvKcFjQbASfwFKY+qFzGNzpKuxxXOuurLmAzGzY1ddbJmVXr4ZI5yS hs3X+q8rueqCJm+RTNEL00CpqKHEpfHKtlV/FG4rmkEv8CtLV1H6F2WBWRFPBbTv YMKIJzrmsUl8bXd0Y8i6fN7peD6EjPUGj2VNZDahs5AMpkrfH7K3O+GZw36PLI7M 0T1/37sMQ15t9bfvHbhkKFXFW5OsvYOG4BJVC4zvrpd+ESlPLabwfxbETAV0V5BQ elgUUwOK3Rhy65Xa14KQL9mPAZErcSz4N8dvKQCc1ZY20ZVqJ4cMBJ8l5CvDCCRe u32ZBnd23w== -----END CERTIFICATE-----Generated at Thu Oct 8 05:38:13 2026 by rpki-client