$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft File: 855381EC93CF009732540F616E4905D544D838C8.mft (raw, json) Hash identifier: mvTBNbEv0zA/IjLoPCetfmwrYu+IbucR8EFkSCL9+5I= Subject key identifier: C6:AF:F3:DF:89:E8:63:97:7D:D6:95:D6:0C:1B:0D:70:37:BC:57:C1 Authority key identifier: 85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 Certificate issuer: /CN=855381EC93CF009732540F616E4905D544D838C8 Certificate serial: 0E477401EF8715F903C21D888E8162E87D5F1F16 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft Manifest number: 0188 Signing time: Mon 26 Oct 2026 18:48:58 +0000 Manifest this update: Mon 26 Oct 2026 18:43:58 +0000 Manifest next update: Fri 30 Oct 2026 01:45:58 +0000 Files and hashes: 1: 3135382e3134302e3235352e302f32342d3234203d3e2034383136.roa (hash: kE6wKBhuMjUgxfn0PWTZvjM6ZUZVSUsYT25Ok7nH0lY=) 2: 3135382e3134302e3235322e302f32332d3234203d3e203535393936.roa (hash: t9lcKguav4WXOmojUnQHYTiiMa8z1W3aaU9zrltKORw=) 3: 3135382e3134302e3235322e302f32332d3234203d3e20313331323734.roa (hash: TGnpfnQhsS1k/nAP16cg2KpYb7g3AjQiWgU6wkKWs+8=) 4: 3135382e3134302e3235342e302f32342d3234203d3e203535393936.roa (hash: NLHSvBrFcQ4h0w0Js8XZIXTtt8u1SFZTuDSqPn5KlaU=) 5: 855381EC93CF009732540F616E4905D544D838C8.crl (hash: 0zUVncJaZezOh1iZEiuEGtHzeoH6YYeaYgw24Pn1iNI=) 6: 3135382e3134302e3235322e302f32332d3234203d3e2034383136.roa (hash: /INl4ky3xjx7mEQ0U6bBoC5+zKf+ujMJbBuWVFGPcb0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 01:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:47:74:01:ef:87:15:f9:03:c2:1d:88:8e:81:62:e8:7d:5f:1f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855381EC93CF009732540F616E4905D544D838C8 Validity Not Before: Oct 26 18:43:58 2026 GMT Not After : Oct 30 01:45:58 2026 GMT Subject: CN=C6AFF3DF89E863977DD695D60C1B0D7037BC57C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e5:fa:e2:3b:73:6d:8f:64:7f:16:c7:d5:3d: 95:48:40:e0:91:83:3c:53:f9:64:c1:e2:e0:29:b4: 58:b9:6b:79:4e:fe:b9:16:36:56:b4:1f:e1:bd:72: ec:d7:ce:95:4e:8d:08:7b:75:5c:95:4d:d9:9c:35: 7b:bf:dc:76:04:f9:41:6c:1e:1d:9f:c3:0c:ca:28: d5:39:f2:dd:2f:ec:49:79:b5:7f:eb:a8:9e:95:4b: a3:d1:5c:3f:44:b8:8e:cd:de:c1:3c:ef:38:32:3d: 36:c0:c3:d6:cf:32:ab:3f:2e:87:36:65:ad:a1:0a: 8e:0e:37:40:ad:3e:19:f9:dd:6a:01:19:ff:30:00: 31:d7:02:54:27:28:4f:6c:9f:01:5a:d5:23:70:b3: 21:a5:05:23:d7:b2:0e:23:b4:1e:d2:96:d6:cc:98: 4e:02:9a:02:c5:9b:db:8b:0b:1e:cf:b3:28:9d:43: de:62:d1:49:ce:f4:1a:a2:d1:f0:27:35:e0:f2:26: 09:9c:cf:dd:27:a7:12:af:1c:8e:4b:40:b3:44:15: 56:c7:11:02:ef:63:7d:46:b3:54:ca:db:ab:8b:2a: 59:b1:00:f9:62:c3:78:e5:87:29:a5:a8:3d:12:64: f7:03:ce:09:4f:6b:6a:11:14:66:fc:6a:5c:65:38: af:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AF:F3:DF:89:E8:63:97:7D:D6:95:D6:0C:1B:0D:70:37:BC:57:C1 X509v3 Authority Key Identifier: keyid:85:53:81:EC:93:CF:00:97:32:54:0F:61:6E:49:05:D5:44:D8:38:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/855381EC93CF009732540F616E4905D544D838C8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/1/855381EC93CF009732540F616E4905D544D838C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:11:47:55:a5:f0:58:fc:7a:d9:6c:2b:b2:3c:66:ad:e5:19: df:cc:ee:61:91:29:18:78:c4:30:33:69:08:2f:c5:36:43:c2: 80:11:42:e0:14:09:6f:11:46:fb:8a:0e:6c:a1:77:b3:7a:41: 42:eb:a7:1f:a1:41:46:68:88:b1:7e:f2:bc:8d:4c:de:29:8b: f9:a8:5e:28:83:77:39:f3:27:8f:5a:c3:e4:90:84:c2:ad:38: 3c:ec:b4:a8:52:7b:ab:d8:24:3b:3f:17:8d:dc:2d:1e:dc:21: 0c:b5:e0:47:4a:c4:ad:fd:32:37:37:e2:e6:d4:cb:4a:79:c5: af:07:9d:5f:d7:8d:43:61:90:96:0e:64:39:a0:02:30:bf:07: d9:51:e9:0b:b0:15:ad:51:44:ba:de:26:71:11:53:70:6d:98: 88:c0:82:c8:16:98:00:32:b6:8d:05:c0:de:23:4b:60:df:70: d0:a0:ff:c5:97:b8:2c:e1:a4:84:b1:27:31:8f:c1:c4:50:fd: 14:ef:e7:0b:26:81:31:81:90:91:81:f0:26:01:65:e5:f9:4b: bb:c3:ab:83:17:00:d6:b5:83:9e:cf:16:df:1e:30:12:44:c2: ed:fa:4c:6c:ba:14:30:2d:75:de:5b:e0:83:ed:db:0a:f8:41: 43:e4:cd:34 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDkd0Ae+HFfkDwh2IjoFi6H1fHxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0 NEQ4MzhDODAeFw0yNjEwMjYxODQzNThaFw0yNjEwMzAwMTQ1NThaMDMxMTAvBgNV BAMTKEM2QUZGM0RGODlFODYzOTc3REQ2OTVENjBDMUIwRDcwMzdCQzU3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo5friO3Ntj2R/FsfVPZVIQOCR gzxT+WTB4uAptFi5a3lO/rkWNla0H+G9cuzXzpVOjQh7dVyVTdmcNXu/3HYE+UFs Hh2fwwzKKNU58t0v7El5tX/rqJ6VS6PRXD9EuI7N3sE87zgyPTbAw9bPMqs/Loc2 Za2hCo4ON0CtPhn53WoBGf8wADHXAlQnKE9snwFa1SNwsyGlBSPXsg4jtB7SltbM mE4CmgLFm9uLCx7PsyidQ95i0UnO9Bqi0fAnNeDyJgmcz90npxKvHI5LQLNEFVbH EQLvY31Gs1TK26uLKlmxAPliw3jlhymlqD0SZPcDzglPa2oRFGb8alxlOK8lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxq/z34noY5d91pXWDBsNcDe8V8EwHwYDVR0j BBgwFoAUhVOB7JPPAJcyVA9hbkkF1UTYOMgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8xLzg1NTM4MUVDOTNDRjAwOTczMjU0MEY2MTZFNDkw NUQ1NDREODM4QzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvODU1MzgxRUM5M0NGMDA5NzMyNTQwRjYxNkU0OTA1RDU0NEQ4MzhDOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMS84NTUzODFFQzkzQ0Yw MDk3MzI1NDBGNjE2RTQ5MDVENTQ0RDgzOEM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3xFHVaXwWPx6 2WwrsjxmreUZ38zuYZEpGHjEMDNpCC/FNkPCgBFC4BQJbxFG+4oObKF3s3pBQuun H6FBRmiIsX7yvI1M3imL+aheKIN3OfMnj1rD5JCEwq04POy0qFJ7q9gkOz8Xjdwt HtwhDLXgR0rErf0yNzfi5tTLSnnFrwedX9eNQ2GQlg5kOaACML8H2VHpC7AVrVFE ut4mcRFTcG2YiMCCyBaYADK2jQXA3iNLYN9w0KD/xZe4LOGkhLEnMY/BxFD9FO/n CyaBMYGQkYHwJgFl5flLu8OrgxcA1rWDns8W3x4wEkTC7fpMbLoUMC113lvgg+3b CvhBQ+TNNA== -----END CERTIFICATE-----Generated at Tue Oct 27 12:49:46 2026 by rpki-client