$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft File: 1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft (raw, json) Hash identifier: 27L1QhDD2HgQ8D1EgPbl8maWFbWCg/WJzNy2U8pj+3k= Subject key identifier: CA:35:08:EB:5E:CE:45:F1:6D:B0:D9:C5:EF:8C:45:71:06:21:8F:71 Authority key identifier: 1C:0A:7C:94:4D:B9:9C:44:19:C3:E2:89:FF:A9:80:FF:82:2B:8B:71 Certificate issuer: /CN=1C0A7C944DB99C4419C3E289FFA980FF822B8B71 Certificate serial: 3BDB11A53E489F3D8FF6D9902396E5C9AB723141 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft Manifest number: 7F Signing time: Wed 14 Oct 2026 19:19:27 +0000 Manifest this update: Wed 14 Oct 2026 19:14:27 +0000 Manifest next update: Sun 18 Oct 2026 03:12:27 +0000 Files and hashes: 1: 3131372e3130332e3132382e302f32302d3234203d3e203338333537.roa (hash: u7LzJQwy+fgwt4WDTFIyv8MHQBC/pA/j8q1mwwgHXuo=) 2: 1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl (hash: gSFg/Ci3duGZVEhexv+CJJzLSF5IfQP6PLuXeoZMOWk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 03:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:db:11:a5:3e:48:9f:3d:8f:f6:d9:90:23:96:e5:c9:ab:72:31:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C0A7C944DB99C4419C3E289FFA980FF822B8B71 Validity Not Before: Oct 14 19:14:27 2026 GMT Not After : Oct 18 03:12:27 2026 GMT Subject: CN=CA3508EB5ECE45F16DB0D9C5EF8C457106218F71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:33:af:f6:c2:ef:83:ad:39:74:25:6c:21:08: 0a:f2:f1:d0:47:3b:b8:fb:ef:d4:07:50:4a:3f:46: 3c:84:f9:0e:cb:78:02:2f:f8:40:5c:98:2e:d8:46: ed:13:80:33:c7:2c:60:da:8d:40:74:2f:10:30:2c: e8:a7:be:a4:83:f6:02:f0:81:12:99:08:aa:7c:66: fb:e0:69:7b:d4:17:1f:c3:07:73:ba:67:44:7e:f6: 9b:1b:e8:4d:ce:a9:c8:4e:34:9f:96:85:d2:1c:9c: 2e:6d:4a:25:65:e3:b8:a2:3e:d5:75:79:0e:24:d9: e9:2f:18:b6:44:5b:4a:78:51:a6:c5:2a:20:7c:11: c7:5e:fb:9c:08:92:59:4a:34:6e:1b:7a:c1:32:28: b9:84:e0:6b:86:c2:a3:99:33:48:ad:c9:91:ed:af: be:09:82:db:4a:0e:20:ab:ea:a7:35:63:05:ad:61: af:72:c7:48:07:09:b8:3f:7e:89:fe:39:a6:1d:ec: 2e:8c:4d:ef:2c:15:40:ac:b7:63:96:fb:51:ca:f2: 26:98:d9:06:b5:d0:f2:83:31:e8:19:8f:e2:67:89: d2:df:da:70:38:e5:46:9e:d5:7c:6b:5b:fa:2e:9f: a4:aa:24:cf:df:4d:97:1d:fc:68:f8:b4:6b:91:a4: e3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:35:08:EB:5E:CE:45:F1:6D:B0:D9:C5:EF:8C:45:71:06:21:8F:71 X509v3 Authority Key Identifier: keyid:1C:0A:7C:94:4D:B9:9C:44:19:C3:E2:89:FF:A9:80:FF:82:2B:8B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117322892590186521/0/1C0A7C944DB99C4419C3E289FFA980FF822B8B71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:46:94:19:a8:1a:27:c0:92:b8:b0:76:6c:4e:e3:e9:ff:7b: 22:04:0b:f0:40:c2:11:11:81:d2:d2:5c:66:42:30:63:a7:0e: 33:b2:7b:73:b8:79:2f:82:06:7a:f4:1f:72:24:40:3d:57:c3: f0:fd:08:2b:87:79:64:8a:b5:1d:1c:5c:4e:f9:20:e8:d1:ea: ce:84:2c:a7:0e:65:5a:7a:b5:5f:e9:91:47:12:e4:9a:0a:a8: 31:f3:31:0c:61:d0:5e:fb:5a:55:5b:25:b2:df:cc:b5:aa:ae: 22:12:74:20:ff:aa:8d:b1:42:d4:06:32:84:d5:65:5c:66:eb: ab:8d:3e:73:81:f7:77:14:6a:11:60:e2:1c:7b:af:be:07:0b: 47:09:13:2d:49:3f:69:14:1f:26:16:75:7f:31:71:ff:62:a4: 72:77:bd:48:8a:99:c7:57:de:06:81:a9:94:f2:e7:93:9b:2b: 42:cb:b3:1c:63:34:11:74:7a:40:f1:59:8a:a8:b5:cb:ba:e6: ae:67:f3:ad:01:28:9a:63:bb:ff:35:5f:99:4c:f2:0a:02:df: 78:ed:12:17:8c:32:19:f7:e4:0c:6e:ea:71:a3:56:6a:eb:f8: de:91:5b:1c:7d:8f:34:9a:dc:db:35:67:f8:c5:18:64:2f:9a: 8a:0d:21:25 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO9sRpT5Inz2P9tmQI5blyatyMUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMwQTdDOTQ0REI5OUM0NDE5QzNFMjg5RkZBOTgwRkY4 MjJCOEI3MTAeFw0yNjEwMTQxOTE0MjdaFw0yNjEwMTgwMzEyMjdaMDMxMTAvBgNV BAMTKENBMzUwOEVCNUVDRTQ1RjE2REIwRDlDNUVGOEM0NTcxMDYyMThGNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkM6/2wu+DrTl0JWwhCAry8dBH O7j779QHUEo/RjyE+Q7LeAIv+EBcmC7YRu0TgDPHLGDajUB0LxAwLOinvqSD9gLw gRKZCKp8ZvvgaXvUFx/DB3O6Z0R+9psb6E3OqchONJ+WhdIcnC5tSiVl47iiPtV1 eQ4k2ekvGLZEW0p4UabFKiB8Ecde+5wIkllKNG4besEyKLmE4GuGwqOZM0ityZHt r74JgttKDiCr6qc1YwWtYa9yx0gHCbg/fon+OaYd7C6MTe8sFUCst2OW+1HK8iaY 2Qa10PKDMegZj+JnidLf2nA45Uae1XxrW/oun6SqJM/fTZcd/Gj4tGuRpOP3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyjUI617ORfFtsNnF74xFcQYhj3EwHwYDVR0j BBgwFoAUHAp8lE25nEQZw+KJ/6mA/4Iri3EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzMyMjg5MjU5MDE4NjUyMS8wLzFDMEE3Qzk0NERCOTlDNDQxOUMzRTI4OUZGQTk4 MEZGODIyQjhCNzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUMwQTdDOTQ0REI5OUM0NDE5QzNFMjg5RkZBOTgwRkY4MjJCOEI3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTczMjI4OTI1OTAxODY1MjEvMC8xQzBBN0M5NDREQjk5 QzQ0MTlDM0UyODlGRkE5ODBGRjgyMkI4QjcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEaUGagaJ8CS uLB2bE7j6f97IgQL8EDCERGB0tJcZkIwY6cOM7J7c7h5L4IGevQfciRAPVfD8P0I K4d5ZIq1HRxcTvkg6NHqzoQspw5lWnq1X+mRRxLkmgqoMfMxDGHQXvtaVVslst/M taquIhJ0IP+qjbFC1AYyhNVlXGbrq40+c4H3dxRqEWDiHHuvvgcLRwkTLUk/aRQf JhZ1fzFx/2Kkcne9SIqZx1feBoGplPLnk5srQsuzHGM0EXR6QPFZiqi1y7rmrmfz rQEommO7/zVfmUzyCgLfeO0SF4wyGffkDG7qcaNWauv43pFbHH2PNJrc2zVn+MUY ZC+aig0hJQ== -----END CERTIFICATE-----Generated at Fri Oct 16 04:09:55 2026 by rpki-client