$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.mft File: 315716FC30019F539EC77C931D00EAAABC7835C2.mft (raw, json) Hash identifier: IPSdjXoYWdQ0Ndpx4E+cE66lZwkMHQsCCIMZVFxJeHc= Subject key identifier: D2:C7:F7:AE:3A:B3:EA:D4:16:3F:22:8E:0C:E9:FD:C1:90:2B:FD:4F Authority key identifier: 31:57:16:FC:30:01:9F:53:9E:C7:7C:93:1D:00:EA:AA:BC:78:35:C2 Certificate issuer: /CN=315716FC30019F539EC77C931D00EAAABC7835C2 Certificate serial: 3EF8BC7E536CDFB0029C1F6E659FD04B593A605F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/315716FC30019F539EC77C931D00EAAABC7835C2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.mft Manifest number: 34 Signing time: Mon 26 Oct 2026 02:13:19 +0000 Manifest this update: Mon 26 Oct 2026 02:08:19 +0000 Manifest next update: Thu 29 Oct 2026 03:20:19 +0000 Files and hashes: 1: 315716FC30019F539EC77C931D00EAAABC7835C2.crl (hash: FFZ56/DOl15Q+FolPlO1y9IW0iSBGtBP7IZ3eYpdh+c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.crl rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/315716FC30019F539EC77C931D00EAAABC7835C2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 03:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f8:bc:7e:53:6c:df:b0:02:9c:1f:6e:65:9f:d0:4b:59:3a:60:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=315716FC30019F539EC77C931D00EAAABC7835C2 Validity Not Before: Oct 26 02:08:19 2026 GMT Not After : Oct 29 03:20:19 2026 GMT Subject: CN=D2C7F7AE3AB3EAD4163F228E0CE9FDC1902BFD4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:55:e0:2c:ba:3a:9e:63:89:8f:78:aa:b1:76: 25:49:29:39:37:df:05:6e:bd:c9:21:89:c7:c4:19: 16:28:43:34:c3:cd:fa:3e:03:f5:c2:90:03:8d:5c: 99:90:a2:97:99:d5:65:74:fe:29:50:26:fd:a8:63: b6:df:67:75:b5:d0:2a:f5:63:8e:c9:7c:04:f8:8a: ea:6e:3b:0f:e1:5f:ba:fe:58:4e:60:4c:24:59:61: 70:7c:d4:56:8d:1d:31:a6:7b:c4:be:34:67:a2:90: 35:4f:18:26:52:ac:df:e8:25:9c:af:12:6d:a8:5c: ab:e5:53:bc:b4:45:1b:5d:7a:4b:ea:2c:6a:cd:bc: 87:93:7a:7d:9a:2c:e1:cb:05:70:88:77:18:a6:67: ca:e9:c9:b8:ed:f4:76:e9:e0:0e:c5:bd:47:81:b2: 38:a4:76:c3:d8:45:79:dc:b8:c7:f8:f4:81:06:3a: 7b:fc:26:35:54:a1:4f:10:78:10:66:2d:73:42:3a: 76:c8:16:d4:29:9a:42:30:93:42:b7:45:39:eb:00: 72:e7:90:fc:74:2c:5e:4d:35:02:aa:8e:0b:8f:57: b1:e4:ef:b1:ed:6d:79:ea:b0:7b:cb:d5:e6:7a:d9: 84:9b:55:a5:12:b0:21:44:ea:70:1e:5c:d0:93:4f: ce:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C7:F7:AE:3A:B3:EA:D4:16:3F:22:8E:0C:E9:FD:C1:90:2B:FD:4F X509v3 Authority Key Identifier: keyid:31:57:16:FC:30:01:9F:53:9E:C7:7C:93:1D:00:EA:AA:BC:78:35:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/315716FC30019F539EC77C931D00EAAABC7835C2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1139095267102949421/0/315716FC30019F539EC77C931D00EAAABC7835C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:34:52:ca:87:d2:42:4c:5b:f5:7e:88:d7:bc:87:8d:aa:9f: ea:4f:84:e3:01:ea:90:4a:ba:1d:d6:18:aa:90:95:d3:41:1c: 20:b9:ba:d0:c3:b8:71:84:d5:c6:83:cf:f3:94:37:1e:1e:ee: bf:6f:32:67:27:29:50:d6:39:6b:ab:3a:12:66:9d:38:4c:60: d9:ea:c8:eb:d9:76:5e:7b:1b:29:96:90:e9:71:4d:15:b5:d9: 31:53:92:b9:cf:eb:d1:96:62:26:3e:9d:8a:7c:22:98:64:c2: 28:e3:22:94:75:00:a7:d8:1b:bd:9b:32:4e:b7:82:c9:1e:a7: 85:1e:7a:26:69:88:62:1d:7d:55:0d:2a:97:e7:bf:dc:77:74: 59:f1:02:ca:72:a6:d9:6a:84:72:5f:da:6f:34:86:f3:bf:f4: 08:1a:be:d5:de:d1:78:36:b8:8f:59:0c:c7:47:61:07:41:47: d6:ba:87:73:f9:ae:3a:3b:8f:c0:ba:4e:7a:89:04:ae:84:15: d9:a0:c8:d2:db:e9:a8:61:33:5b:0d:cf:03:89:b8:bb:8a:cb: ed:74:10:d4:86:0e:27:13:94:aa:5f:89:a8:17:6d:53:8d:45: df:98:dd:65:64:34:5f:e3:d6:9d:61:bd:19:91:7a:87:57:1a: e1:a0:47:0e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPvi8flNs37ACnB9uZZ/QS1k6YF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1NzE2RkMzMDAxOUY1MzlFQzc3QzkzMUQwMEVBQUFC Qzc4MzVDMjAeFw0yNjEwMjYwMjA4MTlaFw0yNjEwMjkwMzIwMTlaMDMxMTAvBgNV BAMTKEQyQzdGN0FFM0FCM0VBRDQxNjNGMjI4RTBDRTlGREMxOTAyQkZENEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6VeAsujqeY4mPeKqxdiVJKTk3 3wVuvckhicfEGRYoQzTDzfo+A/XCkAONXJmQopeZ1WV0/ilQJv2oY7bfZ3W10Cr1 Y47JfAT4iupuOw/hX7r+WE5gTCRZYXB81FaNHTGme8S+NGeikDVPGCZSrN/oJZyv Em2oXKvlU7y0RRtdekvqLGrNvIeTen2aLOHLBXCIdximZ8rpybjt9Hbp4A7FvUeB sjikdsPYRXncuMf49IEGOnv8JjVUoU8QeBBmLXNCOnbIFtQpmkIwk0K3RTnrAHLn kPx0LF5NNQKqjguPV7Hk77HtbXnqsHvL1eZ62YSbVaUSsCFE6nAeXNCTT85DAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0sf3rjqz6tQWPyKODOn9wZAr/U8wHwYDVR0j BBgwFoAUMVcW/DABn1Oex3yTHQDqqrx4NcIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz OTA5NTI2NzEwMjk0OTQyMS8wLzMxNTcxNkZDMzAwMTlGNTM5RUM3N0M5MzFEMDBF QUFBQkM3ODM1QzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMzE1NzE2RkMzMDAxOUY1MzlFQzc3QzkzMUQwMEVBQUFCQzc4MzVDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzkwOTUyNjcxMDI5NDk0MjEvMC8zMTU3MTZGQzMwMDE5 RjUzOUVDNzdDOTMxRDAwRUFBQUJDNzgzNUMyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljRSyofSQkxb 9X6I17yHjaqf6k+E4wHqkEq6HdYYqpCV00EcILm60MO4cYTVxoPP85Q3Hh7uv28y ZycpUNY5a6s6EmadOExg2erI69l2XnsbKZaQ6XFNFbXZMVOSuc/r0ZZiJj6dinwi mGTCKOMilHUAp9gbvZsyTreCyR6nhR56JmmIYh19VQ0ql+e/3Hd0WfECynKm2WqE cl/abzSG87/0CBq+1d7ReDa4j1kMx0dhB0FH1rqHc/muOjuPwLpOeokEroQV2aDI 0tvpqGEzWw3PA4m4u4rL7XQQ1IYOJxOUql+JqBdtU41F35jdZWQ0X+PWnWG9GZF6 h1ca4aBHDg== -----END CERTIFICATE-----Generated at Tue Oct 27 18:51:57 2026 by rpki-client