$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft File: A0234EE8675FA5228CCCF9670EE151D623AC6958.mft (raw, json) Hash identifier: c3JdCqZggoA52M+mkE1FZA7edIVRNoSAiOP2rJZ8UsU= Subject key identifier: 4E:3A:86:CD:2B:8D:00:A8:F6:2C:84:D4:1B:65:39:D5:A1:FB:71:E9 Authority key identifier: A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 Certificate issuer: /CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Certificate serial: 3126181CA7900A5B353CD42A937E8C6D5E00F34A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft Manifest number: 0141 Signing time: Fri 09 Oct 2026 21:28:49 +0000 Manifest this update: Fri 09 Oct 2026 21:23:49 +0000 Manifest next update: Mon 12 Oct 2026 23:48:49 +0000 Files and hashes: 1: A0234EE8675FA5228CCCF9670EE151D623AC6958.crl (hash: xGAWm9+m+v8r+uYVWUh37AuFfvZ3Ab1n9aBVAiNxdcE=) 2: 323430313a353138303a3a2f33322d3634203d3e2034343535.roa (hash: 16+K4Nibi1YK4aeI83ZsVLtABxPWdfuSNwCCv7kTTg0=) 3: 323430313a353138303a3a2f33322d3634203d3e203331323136.roa (hash: hByfJEGkoLosWu98+UyPe1GFHZyB6Lb+I72uzppAPPE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 23:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:26:18:1c:a7:90:0a:5b:35:3c:d4:2a:93:7e:8c:6d:5e:00:f3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0234EE8675FA5228CCCF9670EE151D623AC6958 Validity Not Before: Oct 9 21:23:49 2026 GMT Not After : Oct 12 23:48:49 2026 GMT Subject: CN=4E3A86CD2B8D00A8F62C84D41B6539D5A1FB71E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f4:84:30:fa:4e:64:f8:f8:15:a3:4c:1a:94: 4b:4c:a0:ce:c1:0b:39:9f:76:fa:39:36:b1:7f:af: 5c:9c:b9:c3:5c:4f:aa:53:91:16:5b:50:f0:a5:35: b2:4a:da:11:2c:0e:6b:ee:fe:7c:7e:dc:36:c7:af: a4:34:96:5e:ed:65:c3:e0:c3:5e:eb:8a:d5:bf:66: 5b:c9:cc:0c:77:23:89:93:67:76:2e:9b:f8:86:c3: dc:10:15:01:9e:01:ae:76:33:5d:c9:cc:af:92:fd: 2c:0e:ad:36:27:f2:25:b4:53:c2:0e:80:ac:0d:0d: c3:48:e3:14:c0:56:7e:31:e3:2d:1b:a8:80:61:39: 44:0a:1d:85:a4:77:fc:3a:28:eb:7c:0a:78:03:32: f8:4c:6e:e9:d3:45:45:e6:cc:41:c1:f5:a2:71:84: e9:10:43:45:22:20:9e:5d:61:9a:07:48:b5:14:a2: c2:15:36:8f:77:c3:c0:62:ab:bc:74:21:30:43:56: fb:44:04:da:8e:cc:90:82:9e:88:f4:32:b5:e1:b2: b6:1f:2c:4b:af:d9:96:cc:4f:c8:51:06:1a:a3:97: e8:5a:88:d4:93:3c:27:54:f1:7f:59:95:29:df:6b: a3:48:9f:d5:0a:a0:ee:b0:3d:50:b1:ca:62:8e:40: 81:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3A:86:CD:2B:8D:00:A8:F6:2C:84:D4:1B:65:39:D5:A1:FB:71:E9 X509v3 Authority Key Identifier: keyid:A0:23:4E:E8:67:5F:A5:22:8C:CC:F9:67:0E:E1:51:D6:23:AC:69:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0234EE8675FA5228CCCF9670EE151D623AC6958.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721728001/0/A0234EE8675FA5228CCCF9670EE151D623AC6958.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:14:e9:16:b1:f8:8b:96:71:86:c0:aa:e2:c0:ca:b8:7a:c7: bd:52:70:f9:92:31:68:8e:0d:d6:cf:d1:a0:02:96:98:a7:87: e5:30:7d:36:2f:51:37:b7:bf:33:df:77:38:c6:5a:e1:2d:49: 16:df:11:3b:04:09:e6:93:bb:e0:d7:aa:64:74:68:e3:66:e6: 3e:6d:6e:71:67:f1:53:0c:1d:86:d3:82:05:d4:4a:1f:2a:ab: a4:cf:2f:b6:ac:e4:b7:98:5f:f6:a3:01:1f:9a:13:e0:d2:d0: 3b:cf:13:4f:c1:7c:5f:66:d3:3b:f8:8d:c4:fb:52:02:42:ad: 84:fc:9b:cb:cd:d3:d1:84:0b:96:52:ac:33:a6:a0:21:97:07: 93:8a:a2:e0:ea:88:55:70:7f:af:f5:96:df:3a:36:9a:5d:be: 3c:b7:9e:13:07:7b:8a:7f:bc:b7:53:c1:4b:60:7e:8f:fb:40: ca:2c:fc:e2:1d:3a:74:08:0d:37:7a:57:fe:be:ce:7f:f1:3a: b5:36:b7:91:5d:3d:be:a5:92:93:2b:38:15:3f:2a:a1:63:85: fc:55:88:b5:f7:6e:41:14:af:10:97:1e:ff:af:5d:a3:8d:50: f0:07:26:69:1b:a2:b0:2d:1f:c8:ee:3f:03:6c:c8:cc:ee:23: 36:80:c8:fb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMSYYHKeQCls1PNQqk36MbV4A80owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYy M0FDNjk1ODAeFw0yNjEwMDkyMTIzNDlaFw0yNjEwMTIyMzQ4NDlaMDMxMTAvBgNV BAMTKDRFM0E4NkNEMkI4RDAwQThGNjJDODRENDFCNjUzOUQ1QTFGQjcxRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs9IQw+k5k+PgVo0walEtMoM7B Czmfdvo5NrF/r1ycucNcT6pTkRZbUPClNbJK2hEsDmvu/nx+3DbHr6Q0ll7tZcPg w17ritW/ZlvJzAx3I4mTZ3Yum/iGw9wQFQGeAa52M13JzK+S/SwOrTYn8iW0U8IO gKwNDcNI4xTAVn4x4y0bqIBhOUQKHYWkd/w6KOt8CngDMvhMbunTRUXmzEHB9aJx hOkQQ0UiIJ5dYZoHSLUUosIVNo93w8Biq7x0ITBDVvtEBNqOzJCCnoj0MrXhsrYf LEuv2ZbMT8hRBhqjl+haiNSTPCdU8X9ZlSnfa6NIn9UKoO6wPVCxymKOQIE1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTjqGzSuNAKj2LITUG2U51aH7cekwHwYDVR0j BBgwFoAUoCNO6GdfpSKMzPlnDuFR1iOsaVgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTcyODAwMS8wL0EwMjM0RUU4Njc1RkE1MjI4Q0NDRjk2NzBFRTE1 MUQ2MjNBQzY5NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAyMzRFRTg2NzVGQTUyMjhDQ0NGOTY3MEVFMTUxRDYyM0FDNjk1OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3MjgwMDEvMC9BMDIzNEVFODY3NUZB NTIyOENDQ0Y5NjcwRUUxNTFENjIzQUM2OTU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKhTpFrH4i5Zx hsCq4sDKuHrHvVJw+ZIxaI4N1s/RoAKWmKeH5TB9Ni9RN7e/M993OMZa4S1JFt8R OwQJ5pO74NeqZHRo42bmPm1ucWfxUwwdhtOCBdRKHyqrpM8vtqzkt5hf9qMBH5oT 4NLQO88TT8F8X2bTO/iNxPtSAkKthPyby83T0YQLllKsM6agIZcHk4qi4OqIVXB/ r/WW3zo2ml2+PLeeEwd7in+8t1PBS2B+j/tAyiz84h06dAgNN3pX/r7Of/E6tTa3 kV09vqWSkys4FT8qoWOF/FWItfduQRSvEJce/69do41Q8AcmaRuisC0fyO4/A2zI zO4jNoDI+w== -----END CERTIFICATE-----Generated at Sun Oct 11 07:35:11 2026 by rpki-client