$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft File: 9684E4B95F47A986892F9930EF9D9E453227439F.mft (raw, json) Hash identifier: jz0t8I3ZwojKAh6irIhATO1vopn/aDe3tw+23GnDnYg= Subject key identifier: 70:31:44:DA:79:AF:B2:9E:96:60:6A:50:E0:FE:C1:43:29:64:58:9C Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F Certificate serial: 6549D9C7CDA5BBC6AB1EC0197F158A64EF80D606 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft Manifest number: 0146 Signing time: Mon 12 Oct 2026 14:57:02 +0000 Manifest this update: Mon 12 Oct 2026 14:52:02 +0000 Manifest next update: Fri 16 Oct 2026 00:22:02 +0000 Files and hashes: 1: 34332e3232372e382e302f32322d3232203d3e2030.roa (hash: rFWuKZANl9HR+2+j6XziWRcJMug5PNmcsitIIwWuKlA=) 2: 3130332e34312e302e302f32332d3233203d3e20313334373630.roa (hash: Y6ym5hhQgZvyhUCRDxWiIFvfMhKYw0X+/4gByoyJMXg=) 3: 3130332e34312e332e302f32342d3234203d3e20313331353734.roa (hash: WH7tyIEmjprytM6YWjBB9xp1Npd/pU0lhZCNIY+OwQk=) 4: 34332e3234392e3137302e302f32342d3234203d3e20313331353734.roa (hash: 0u75Dz9NUfxGKoMPcV5RDsGtZmNW5DPaSlMYJBChnT8=) 5: 34332e3234392e3136382e302f32332d3234203d3e20313531333032.roa (hash: 56mIz73y8Fag4vyUb19heMLIyjzwutiwremvkxG5UvY=) 6: 3130332e34312e302e302f32322d3232203d3e20313331353734.roa (hash: 9/QDE3gE/sRHkLVbxl56Vq/WuOTZKU48oTSiZX8DXK8=) 7: 3130332e3134332e31362e302f32332d3233203d3e20313334373630.roa (hash: 1g6t3exMx24cwEMgY2KveH3dixYd24sg7I/SmcDE884=) 8: 3130332e34312e3136342e302f32322d3232203d3e20313334373630.roa (hash: JGGbu1AchEm6gwsQvta+dJIpocamBYNAN8qvKm/lZk0=) 9: 9684E4B95F47A986892F9930EF9D9E453227439F.crl (hash: KMmLxAwy4dvGbtsg6fm7KkWlpVg3QKnwq5WZdA5nlyA=) 10: 34332e3234392e3137312e302f32342d3234203d3e20313331353734.roa (hash: uS/v5pS/8LsE1KboKlgwPa0r9AUO/FNI2ZRy4jqzFQo=) 11: 3130332e34312e322e302f32342d3234203d3e20313334373630.roa (hash: GHs4Ice+IXgOdXzh11tNCtQfPSNUyk6aC0/QcmPGzko=) 12: 3231312e3130312e3230382e302f32302d3230203d3e2030.roa (hash: dzhJetwhygZWORFnMAANn17o0nAIbSRkwyKQXtWL2bM=) 13: 34332e3234392e3137302e302f32332d3234203d3e20313531333032.roa (hash: TViUEFSUDt+dBd98dAM8WDyGrFeARupa+y25tQ3Xkpo=) 14: 3130332e34312e322e302f32342d3234203d3e20313331353734.roa (hash: MBRSyxBnowaE6dGwCKBTr8xjqRGqjbmJM8nSVaaIYEE=) 15: 3130332e34312e302e302f32342d3234203d3e20313331353734.roa (hash: TofZGKZXkXwQ1NVeXRbCcMAjpMcwrwDtI6F24dZ7WT0=) 16: 3130332e33392e3230302e302f32322d3234203d3e20313331353734.roa (hash: 5xMWNkW1klQcDp4QWHmfoXOnt2+cbg8IcOUQAYdb1Io=) 17: 3130332e34312e322e302f32332d3233203d3e20313334373630.roa (hash: SCN97S2wwNnV/ZgxJpPHs3iMMe/lJtzr3ZRPjKn4Z8M=) 18: 34332e3234392e3136382e302f32342d3234203d3e20313531333032.roa (hash: bFSMaDup9Ycm3OuQxmjkPRgJBcR+tRlpQ+vDKCyHYkA=) 19: 34332e3234392e3136392e302f32342d3234203d3e20313531333032.roa (hash: D6hWvznx4k3AsLSzPZQiMru4ALXwRjJERJ9OjTSouQE=) 20: 34332e3234392e3136382e302f32332d3234203d3e20313331353734.roa (hash: dIVnTnlidXm0fTkWWM5Bl7Vt6fCzb/q4QIPIzd/VdcQ=) 21: 34332e3235302e33322e302f32322d3232203d3e20313334373630.roa (hash: AQjaQMZN9JXVfWKQ/jLFTa4k1E9drRu7j1URRVSdUXo=) 22: 3130332e3134332e31382e302f32332d3233203d3e20313334373630.roa (hash: pzsCYGXeY52FfqmwZq5tlLMJLmom8MQOUPOwEibOqe0=) 23: 323430303a393632303a3a2f33322d3536203d3e20313331353734.roa (hash: UIdybOLdanzkw714KalMD+c6lUnXmyZyESW3lLcQRJk=) 24: 3130332e34312e332e302f32342d3234203d3e20313334373630.roa (hash: /j0LswSNXCsNpXgcRLD/3LdCZx3vSt9vIECErqtDi7w=) 25: 3130332e34312e312e302f32342d3234203d3e20313331353734.roa (hash: XLQFYLz+tc1UxhxL0QSQ9SLNiBHi7J4Tj9p/+uW97eg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 00:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:49:d9:c7:cd:a5:bb:c6:ab:1e:c0:19:7f:15:8a:64:ef:80:d6:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F Validity Not Before: Oct 12 14:52:02 2026 GMT Not After : Oct 16 00:22:02 2026 GMT Subject: CN=703144DA79AFB29E96606A50E0FEC1432964589C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:62:a6:7b:42:05:e3:47:c7:e7:04:6d:09: ff:e9:ec:1f:c0:9d:83:8e:31:e2:ce:07:f8:27:8b: 42:79:a9:35:46:46:a6:73:d9:3c:c5:32:16:bf:7f: fa:df:fb:f6:f5:50:a3:89:76:6b:60:06:ec:fc:fc: 84:b8:a6:7e:17:72:db:b6:c9:bf:42:d3:96:1c:f3: b6:c0:3d:97:c1:1f:5f:ae:ec:8b:69:02:0c:a6:a6: 65:f3:2a:3a:d8:5d:54:11:5e:2e:98:cf:39:a3:07: 01:c2:6a:74:60:1c:71:ee:a8:e8:0f:a3:77:ad:31: 8d:47:52:b1:54:f4:c6:91:2c:fc:e2:eb:8d:67:a2: 48:6b:12:ac:4d:84:c7:39:21:9f:f2:3d:cd:46:8f: 0a:f3:25:41:b6:ac:38:06:64:b9:6d:6e:c7:c7:9e: a9:b7:25:72:c8:45:8f:81:ae:42:4d:da:4d:4e:ca: f3:44:2b:e6:d0:57:f4:73:aa:54:fc:79:df:95:23: 2e:9f:c0:ee:19:45:ab:04:37:f2:60:ee:f7:06:20: e2:d7:de:68:70:65:70:55:4f:88:6f:6d:18:ff:ef: 7c:a8:bf:50:75:e3:70:6d:77:39:c1:16:4d:92:5b: e4:fe:83:e2:94:73:71:f7:a9:44:2b:23:ad:6e:4b: 1e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:31:44:DA:79:AF:B2:9E:96:60:6A:50:E0:FE:C1:43:29:64:58:9C X509v3 Authority Key Identifier: keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:86:15:03:68:b6:52:ca:7e:61:86:77:a2:aa:ef:f3:ee:11: 2f:69:34:8c:42:a2:9b:f0:f0:6a:78:cf:36:38:06:54:13:44: ec:fe:73:b6:e3:2a:93:a6:f7:a3:0f:6b:2a:65:97:8a:41:90: 22:a4:ea:40:44:91:f5:81:8e:37:a1:a5:35:d7:15:b7:29:96: 75:09:b3:61:f0:ec:73:e5:ca:0d:6d:28:3b:f8:cc:2a:42:54: 70:87:f0:35:fa:c0:35:a2:12:3f:b3:1e:3f:d0:05:60:2d:b8: 3a:a3:61:27:3d:cc:a1:1e:ef:a4:64:f1:b5:93:8a:ff:d9:6d: da:92:e8:a4:d5:04:34:f7:d5:cf:23:b1:e1:a4:43:d8:84:d4: c4:9f:51:40:b5:7c:a6:c7:f3:a8:3e:a4:38:19:c0:e7:b2:9c: 82:4c:ef:96:82:84:47:b6:21:94:21:65:52:58:ed:2d:df:cb: 12:f8:af:29:f9:aa:5e:69:8f:a4:39:53:07:5c:51:97:48:95: bb:79:dc:a2:03:75:13:90:3d:c1:c7:29:e5:1b:65:9d:64:a4: 85:56:95:87:bd:b6:21:31:fd:42:9b:93:1a:00:bb:18:11:3f: 62:bc:05:1f:da:fb:d2:4a:fe:73:18:c6:e0:0a:ae:d6:f5:4e: 58:2d:28:ae -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZUnZx82lu8arHsAZfxWKZO+A1gYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUz MjI3NDM5RjAeFw0yNjEwMTIxNDUyMDJaFw0yNjEwMTYwMDIyMDJaMDMxMTAvBgNV BAMTKDcwMzE0NERBNzlBRkIyOUU5NjYwNkE1MEUwRkVDMTQzMjk2NDU4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34GKme0IF40fH5wRtCf/p7B/A nYOOMeLOB/gni0J5qTVGRqZz2TzFMha/f/rf+/b1UKOJdmtgBuz8/IS4pn4Xctu2 yb9C05Yc87bAPZfBH1+u7ItpAgympmXzKjrYXVQRXi6YzzmjBwHCanRgHHHuqOgP o3etMY1HUrFU9MaRLPzi641nokhrEqxNhMc5IZ/yPc1GjwrzJUG2rDgGZLltbsfH nqm3JXLIRY+BrkJN2k1OyvNEK+bQV/RzqlT8ed+VIy6fwO4ZRasEN/Jg7vcGIOLX 3mhwZXBVT4hvbRj/73yov1B143BtdznBFk2SW+T+g+KUc3H3qUQrI61uSx7lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcDFE2nmvsp6WYGpQ4P7BQylkWJwwHwYDVR0j BBgwFoAUloTkuV9HqYaJL5kw752eRTInQ58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3Nzk5MDE0Ni8wLzk2ODRFNEI5NUY0N0E5ODY4OTJGOTkzMEVGOUQ5 RTQ1MzIyNzQzOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTY4NEU0Qjk1RjQ3QTk4Njg5MkY5OTMwRUY5RDlFNDUzMjI3NDM5Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc5OTAxNDYvMC85Njg0RTRCOTVGNDdB OTg2ODkyRjk5MzBFRjlEOUU0NTMyMjc0MzlGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIYVA2i2Usp+ YYZ3oqrv8+4RL2k0jEKim/DwanjPNjgGVBNE7P5ztuMqk6b3ow9rKmWXikGQIqTq QESR9YGON6GlNdcVtymWdQmzYfDsc+XKDW0oO/jMKkJUcIfwNfrANaISP7MeP9AF YC24OqNhJz3MoR7vpGTxtZOK/9lt2pLopNUENPfVzyOx4aRD2ITUxJ9RQLV8psfz qD6kOBnA57KcgkzvloKER7YhlCFlUljtLd/LEvivKfmqXmmPpDlTB1xRl0iVu3nc ogN1E5A9wccp5RtlnWSkhVaVh722ITH9QpuTGgC7GBE/YrwFH9r70kr+cxjG4Aqu 1vVOWC0org== -----END CERTIFICATE-----Generated at Wed Oct 14 23:14:50 2026 by rpki-client