$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft File: 1A5D93C2B21C390D054872B547EF671BC1112ED5.mft (raw, json) Hash identifier: 8xX2tJ3DlrQRLRVMC41x1fT4eJyP6Zyb/11ej6rzWXg= Subject key identifier: E0:D2:E2:BC:B5:4D:B2:1A:35:D7:03:5D:4E:88:B2:67:9E:00:1D:AA Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 Certificate issuer: /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Certificate serial: 0324F0026BAE40D10BB23B51FA9D4D3DF97E49A0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft Manifest number: 013C Signing time: Wed 14 Oct 2026 05:23:35 +0000 Manifest this update: Wed 14 Oct 2026 05:18:35 +0000 Manifest next update: Sat 17 Oct 2026 10:56:35 +0000 Files and hashes: 1: 34332e3232382e37362e302f32322d3232203d3e20313334373635.roa (hash: 0QQ3acV5OGPw111O9u72jjimK1i0jbUIJPcTkw6FNnE=) 2: 34332e3235342e3235322e302f32322d3232203d3e20313334373635.roa (hash: YBGoT8mUzeyt/JC8Sh5jlyNBlqC5ecvmhtvHHC0j9gM=) 3: 3130332e32332e382e302f32322d3232203d3e20313334373635.roa (hash: ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=) 4: 1A5D93C2B21C390D054872B547EF671BC1112ED5.crl (hash: ym2X5TwbV54Ymb/SnMbugiwmUMMNCG1iD2dgHH2OXKo=) 5: 3130332e34372e38302e302f32322d3232203d3e20313334373635.roa (hash: kU8ZpTrXY6JeDmKQWJ4S005IDbAoloAT2cFKH9NDoa4=) 6: 3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa (hash: ZjwDDfmeHi1TdKdCeuuvzyOYx2ipxq03Vh0SPR2jC34=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 10:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:24:f0:02:6b:ae:40:d1:0b:b2:3b:51:fa:9d:4d:3d:f9:7e:49:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Validity Not Before: Oct 14 05:18:35 2026 GMT Not After : Oct 17 10:56:35 2026 GMT Subject: CN=E0D2E2BCB54DB21A35D7035D4E88B2679E001DAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5f:1a:f7:6f:8d:9c:7a:dc:ca:df:23:50:94: bc:b7:07:dd:b0:de:c6:01:88:f3:16:b5:3f:ad:bc: 1c:6c:c9:38:84:33:bf:69:9d:bf:e5:4d:f5:3c:b3: 2b:34:ba:cd:c9:87:4e:18:77:e1:20:77:a0:1d:cc: d6:1e:c3:15:87:fd:f4:6b:42:a1:4c:61:c5:8c:62: ca:5e:b3:c2:67:61:0c:59:0c:fa:eb:2a:f3:1c:c7: 5b:44:27:d9:d5:94:71:76:28:98:5b:c4:e6:82:b4: 6b:93:59:4e:29:f7:93:86:5b:03:d0:b7:a7:4c:27: 15:93:52:7c:95:e7:ed:1c:0f:eb:c9:02:6f:15:f4: 88:27:59:a5:cb:da:af:43:1a:1b:11:23:e9:ac:dc: c4:4b:ca:c2:87:34:d7:a2:35:14:13:97:bd:3c:7c: db:47:18:17:82:c3:c1:2b:43:cb:41:42:d2:4b:08: 4f:e5:9e:22:14:50:18:52:36:86:f1:15:3c:69:2e: 91:9d:87:65:2d:ac:f4:13:2f:d5:43:6e:e5:92:11: 20:01:23:0f:0e:96:b3:29:a0:b0:cb:11:97:d3:99: 78:2d:d4:95:fa:46:e9:70:7c:8a:c7:36:cb:9e:03: bf:80:16:45:af:ba:6b:2b:2e:89:ab:5f:45:78:4b: 8e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D2:E2:BC:B5:4D:B2:1A:35:D7:03:5D:4E:88:B2:67:9E:00:1D:AA X509v3 Authority Key Identifier: keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:0d:df:3f:9e:77:fe:79:ae:64:80:20:fd:bc:d1:fa:0d:70: d1:4e:ec:30:be:b0:dc:1c:91:04:28:1e:fd:59:c5:9f:5a:31: ab:70:ba:f5:97:b8:7e:80:53:29:a8:61:b7:bd:5e:48:83:ee: b6:b1:83:08:ff:2c:3c:6a:1f:b0:6b:79:49:ec:18:8a:ca:68: 27:61:f3:fb:be:d6:ac:f4:23:42:51:ac:83:8f:c2:bb:bb:61: 2e:30:f6:7d:05:49:c9:cc:e1:98:c2:a7:c3:73:7a:44:37:f9: 23:14:1c:c4:31:7a:8c:b3:36:82:1f:32:3d:fa:8e:9e:e3:7b: 47:cf:02:ca:d5:ce:83:62:92:5d:a8:f7:f7:25:43:7b:7b:87: 5d:10:f2:f7:c1:6e:89:e6:a8:6c:84:ff:51:cb:d8:68:63:2b: cd:c4:7c:73:01:21:f7:f9:be:73:5c:65:ab:18:73:85:35:3b: e5:c7:ea:ec:d8:f1:d7:7b:68:35:ac:2d:30:10:83:12:f4:02: d8:1b:5b:98:6b:14:7a:a5:8d:63:9d:b2:17:d9:19:0b:50:76: 0b:b4:4f:49:fb:bd:ba:a1:47:20:8e:7b:83:23:1e:79:40:de: db:e3:7f:af:6b:75:1b:6c:5c:46:b5:a9:57:c6:f8:da:8d:b4: fd:7c:0b:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAyTwAmuuQNELsjtR+p1NPfl+SaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJD MTExMkVENTAeFw0yNjEwMTQwNTE4MzVaFw0yNjEwMTcxMDU2MzVaMDMxMTAvBgNV BAMTKEUwRDJFMkJDQjU0REIyMUEzNUQ3MDM1RDRFODhCMjY3OUUwMDFEQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Xxr3b42cetzK3yNQlLy3B92w 3sYBiPMWtT+tvBxsyTiEM79pnb/lTfU8sys0us3Jh04Yd+Egd6AdzNYewxWH/fRr QqFMYcWMYspes8JnYQxZDPrrKvMcx1tEJ9nVlHF2KJhbxOaCtGuTWU4p95OGWwPQ t6dMJxWTUnyV5+0cD+vJAm8V9IgnWaXL2q9DGhsRI+ms3MRLysKHNNeiNRQTl708 fNtHGBeCw8ErQ8tBQtJLCE/lniIUUBhSNobxFTxpLpGdh2UtrPQTL9VDbuWSESAB Iw8OlrMpoLDLEZfTmXgt1JX6RulwfIrHNsueA7+AFkWvumsrLomrX0V4S45BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4NLivLVNsho11wNdToiyZ54AHaowHwYDVR0j BBgwFoAUGl2TwrIcOQ0FSHK1R+9nG8ERLtUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODM1MzUzOC8wLzFBNUQ5M0MyQjIxQzM5MEQwNTQ4NzJCNTQ3RUY2 NzFCQzExMTJFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJDMTExMkVENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgzNTM1MzgvMC8xQTVEOTNDMkIyMUMz OTBEMDU0ODcyQjU0N0VGNjcxQkMxMTEyRUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyg3fP553/nmu ZIAg/bzR+g1w0U7sML6w3ByRBCge/VnFn1oxq3C69Ze4foBTKahht71eSIPutrGD CP8sPGofsGt5SewYispoJ2Hz+77WrPQjQlGsg4/Cu7thLjD2fQVJyczhmMKnw3N6 RDf5IxQcxDF6jLM2gh8yPfqOnuN7R88CytXOg2KSXaj39yVDe3uHXRDy98Fuieao bIT/UcvYaGMrzcR8cwEh9/m+c1xlqxhzhTU75cfq7Njx13toNawtMBCDEvQC2Btb mGsUeqWNY52yF9kZC1B2C7RPSfu9uqFHII57gyMeeUDe2+N/r2t1G2xcRrWpV8b4 2o20/XwLMQ== -----END CERTIFICATE-----Generated at Thu Oct 15 13:25:10 2026 by rpki-client