$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft File: 18841C63CD89383303F1BA048085C2212B03B0BD.mft (raw, json) Hash identifier: op9iRViut/r7MgtEZngbBwhrLHBz5H6Kfkfj5DzHWYs= Subject key identifier: 32:98:5E:C4:5E:9F:F9:6D:37:39:00:2E:DB:EE:AF:E3:36:86:9A:C1 Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD Certificate serial: 76C6B60BAAE0CF1F917E6047851ABCDFB0AD6584 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft Manifest number: 0172 Signing time: Wed 04 Nov 2026 00:13:34 +0000 Manifest this update: Wed 04 Nov 2026 00:08:34 +0000 Manifest next update: Sat 07 Nov 2026 11:05:34 +0000 Files and hashes: 1: 3132302e33312e302e302f31382d3234203d3e2030.roa (hash: Vx9rNGqe/qspYPFAK4aaD69Ln0YuLKP40YKY8O5iDoU=) 2: 3132302e33312e3135322e302f32312d3234203d3e2030.roa (hash: FsvCZUbaG3hRlZH6kUmFkegVgxRRyCSmMilMjQWqGss=) 3: 3132302e33312e37322e302f32312d3234203d3e2030.roa (hash: GCRq2g97fXKgccfqVlP1xogDjkOMDLxnRQ6MgzSCYvs=) 4: 3132302e33312e36342e302f32332d3234203d3e2030.roa (hash: 7QhBSr3zxLPMAQ/Xu9Ikk4uLl2pwkEVBRp6apl1fuYM=) 5: 3131322e37332e3132382e302f32322d3234203d3e20333938373034.roa (hash: MdOhlCBAEVr8mcWOdJADYfQQFdivj4/VdgSUXqpzjzs=) 6: 3131322e37332e302e302f31362d3234203d3e2036303739.roa (hash: ic+bMYpwvMXyG0wzfRi9FvZLLUsrr5cGyKDq1YgtaI0=) 7: 3131392e33382e3132382e302f31382d3234203d3e2030.roa (hash: bt3UYw+1AatIAMHbGLWYWBwPSL7RH6mMPYGsF/VCSVQ=) 8: 3131322e37332e302e302f31362d3234203d3e20323135353935.roa (hash: Q3QhgmMW/rCek5Iq3n4eTNvmTG379sxYdNigmgh3/Aw=) 9: 3132302e33312e3134382e302f32322d3234203d3e2030.roa (hash: x3jptYc/NSd1RqPdXdARBG58Cgg7lBo0R8DX+OtEZGA=) 10: 3132302e33312e3139322e302f31382d3234203d3e2030.roa (hash: zneDd+D0qba/NMI1b4Dwh5lgN9WENVTPsJNFHtC+fBc=) 11: 3131322e37332e302e302f31362d3234203d3e2032393134.roa (hash: GUOSdxXdq2ZCoFEWX4kUxEqTgxp4mGF6Tfwsv8ROglg=) 12: 18841C63CD89383303F1BA048085C2212B03B0BD.crl (hash: aDXo1jcF+CtNOUpUftlNJJrYsYfs0vz10r4IpNEV4ZU=) 13: 3132302e33312e38302e302f32302d3234203d3e2030.roa (hash: zlPgx8svUOkP6QDvnXsR/wJyPXALOkehhcLKiX1FHDQ=) 14: 3131322e37332e302e302f31362d3234203d3e2039333138.roa (hash: ATZ0tE1Da7tgOWKPtuupM0upyFDxi0IfpNzaEjY+UOw=) 15: 3132302e33312e3134352e302f32342d3234203d3e2030.roa (hash: xX26RFz/Bq41UW3iRcZ/ng875Kl0I6J4i5WdOJY9HN0=) 16: 3132302e33312e39362e302f31392d3234203d3e2030.roa (hash: xQ4R/wnGcu+0HON4qZPLwL2kbRSaYBA6QoHUQZOeOB8=) 17: 3131322e37332e302e302f31362d3234203d3e2039343537.roa (hash: CA1EM4DqlM9Dg2v/2bjs6kYasg7l2AnSBSDJR7UX2kM=) 18: 3131322e37332e302e302f31362d3234203d3e20333938373034.roa (hash: UNzDlcbKrTZljDk9qpnBAtnIZ9As6OiMLBqsjONpdqU=) 19: 3131322e37332e302e302f31362d3234203d3e2039333034.roa (hash: lWS9dlaXVpnifPvi54jbTcf/VdN7VYeL0YdJMjg+n7k=) 20: 3132302e33312e3136302e302f31392d3234203d3e2030.roa (hash: 25WWbovNyEjrH0J2T0Na4+TXs/ZZYTEQWAlYhfam2iE=) 21: 3132302e33312e3134362e302f32332d3234203d3e2030.roa (hash: 9t7aUa47CAxmq6LpXdIxR3Z0JJuovCo23iMtWVoITJw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 11:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c6:b6:0b:aa:e0:cf:1f:91:7e:60:47:85:1a:bc:df:b0:ad:65:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD Validity Not Before: Nov 4 00:08:34 2026 GMT Not After : Nov 7 11:05:34 2026 GMT Subject: CN=32985EC45E9FF96D3739002EDBEEAFE336869AC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:33:9d:7b:a3:54:c5:a0:be:6a:75:48:ae:f2: fa:a4:45:7d:ed:f3:0a:72:7a:19:ce:07:54:d5:d6: 43:91:7e:50:5b:8b:cc:d2:7f:6e:3d:76:a2:d9:c0: 84:68:86:2d:49:dd:8a:7f:32:c8:07:9e:d5:bd:0a: 1e:d4:fe:40:37:64:01:1f:64:58:38:dd:93:95:c3: 2f:98:fd:98:9a:b3:22:54:86:b7:39:17:b3:81:09: 78:54:c0:d2:96:2a:7d:f3:19:79:28:77:dc:4f:ee: 73:50:6f:6c:63:bb:65:d6:56:e0:fc:40:87:f7:3a: f2:fd:06:d3:b6:e3:23:da:e0:4c:8d:85:34:13:0c: 9b:22:1f:d2:87:29:fb:ce:40:ed:3b:71:58:69:1d: 4a:d4:ac:ee:2e:2e:b3:d0:59:61:e4:3d:b0:68:c3: e3:7c:30:35:6b:af:67:31:24:87:7f:34:1c:4a:15: 57:a5:dc:bd:d7:57:6f:ee:68:6e:41:6e:15:0c:bb: db:83:11:66:b4:e5:a6:0e:d5:d3:04:b8:be:cb:05: 1e:60:13:4c:2e:cb:b9:c6:8b:fb:12:6a:49:8c:6c: 6a:67:ff:71:a0:49:15:9a:05:0c:a3:21:60:c2:ac: 35:1a:76:bd:fb:cf:f0:ed:8e:c3:8a:5f:7a:b0:34: 57:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:98:5E:C4:5E:9F:F9:6D:37:39:00:2E:DB:EE:AF:E3:36:86:9A:C1 X509v3 Authority Key Identifier: keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:55:15:ef:23:a2:0e:44:35:2d:fb:d7:d9:5c:ab:1c:d7:ef: 90:26:c5:16:bf:4d:39:dc:52:79:0c:46:22:fc:23:89:ba:db: cb:a0:c8:ab:7a:e9:f0:37:a3:35:44:40:63:8a:b9:f3:e0:50: 97:9c:1b:f5:61:26:20:ce:de:59:3c:2f:35:87:ea:3c:ac:81: e0:c9:8c:90:de:4b:01:cd:55:bd:0c:44:e8:78:0a:36:8c:36: 4c:2e:1b:36:c3:fe:e3:ea:fb:f3:47:da:38:de:7c:02:e3:60: ef:14:60:ca:86:64:14:b6:58:01:6a:f4:b4:e6:b9:e3:96:fd: 25:4e:13:8a:78:d2:9b:a8:fc:63:fa:b8:e2:9c:4a:e0:04:49: 71:79:90:62:f8:98:4f:42:15:a1:ca:7c:2a:b5:cf:db:4c:05: 87:c1:62:82:fa:1e:cc:81:9d:7f:71:23:93:0d:9f:80:63:61: 45:e4:cc:95:88:b7:1d:04:3b:0d:6b:38:41:fa:8c:5b:2c:91: 59:be:a5:12:29:21:e4:1f:89:15:b2:f6:c0:07:15:56:38:4c: d9:8b:3e:53:ee:82:51:93:81:f9:c3:ae:7b:81:5f:61:33:74: 4d:8f:f8:19:5f:4e:e2:e4:af:3f:bc:f8:78:31:5d:37:0d:25: 70:3a:e9:1f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdsa2C6rgzx+RfmBHhRq837CtZYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy QjAzQjBCRDAeFw0yNjExMDQwMDA4MzRaFw0yNjExMDcxMTA1MzRaMDMxMTAvBgNV BAMTKDMyOTg1RUM0NUU5RkY5NkQzNzM5MDAyRURCRUVBRkUzMzY4NjlBQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtM517o1TFoL5qdUiu8vqkRX3t 8wpyehnOB1TV1kORflBbi8zSf249dqLZwIRohi1J3Yp/MsgHntW9Ch7U/kA3ZAEf ZFg43ZOVwy+Y/ZiasyJUhrc5F7OBCXhUwNKWKn3zGXkod9xP7nNQb2xju2XWVuD8 QIf3OvL9BtO24yPa4EyNhTQTDJsiH9KHKfvOQO07cVhpHUrUrO4uLrPQWWHkPbBo w+N8MDVrr2cxJId/NBxKFVel3L3XV2/uaG5BbhUMu9uDEWa05aYO1dMEuL7LBR5g E0wuy7nGi/sSakmMbGpn/3GgSRWaBQyjIWDCrDUadr37z/DtjsOKX3qwNFfdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMphexF6f+W03OQAu2+6v4zaGmsEwHwYDVR0j BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1ODYxNzkvMC8xODg0MUM2M0NEODkz ODMzMDNGMUJBMDQ4MDg1QzIyMTJCMDNCMEJELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx1UV7yOiDkQ1 LfvX2VyrHNfvkCbFFr9NOdxSeQxGIvwjibrby6DIq3rp8DejNURAY4q58+BQl5wb 9WEmIM7eWTwvNYfqPKyB4MmMkN5LAc1VvQxE6HgKNow2TC4bNsP+4+r780faON58 AuNg7xRgyoZkFLZYAWr0tOa545b9JU4TinjSm6j8Y/q44pxK4ARJcXmQYviYT0IV ocp8KrXP20wFh8FigvoezIGdf3Ejkw2fgGNhReTMlYi3HQQ7DWs4QfqMWyyRWb6l Eikh5B+JFbL2wAcVVjhM2Ys+U+6CUZOB+cOue4FfYTN0TY/4GV9O4uSvP7z4eDFd Nw0lcDrpHw== -----END CERTIFICATE-----Generated at Thu Nov 5 15:21:41 2026 by rpki-client