$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft File: 601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft (raw, json) Hash identifier: D9x+j83hG2LFGswKkVLi5a9+atQsu2A4F5Ud5aEIMkQ= Subject key identifier: 8E:B0:2E:08:7C:EE:5A:20:F1:FB:BE:34:14:84:65:2F:BC:BE:87:29 Authority key identifier: 60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E Certificate issuer: /CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E Certificate serial: 746ECB7E5143BFBA95E7A98E26AA0F400B014BCD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft Manifest number: D2 Signing time: Wed 14 Oct 2026 20:19:30 +0000 Manifest this update: Wed 14 Oct 2026 20:14:30 +0000 Manifest next update: Sat 17 Oct 2026 22:53:30 +0000 Files and hashes: 1: 323430353a393838303a3a2f33322d3332203d3e2030.roa (hash: /XSBz2YauMRg8MSFkadncF+Xb/VKcdTSZjiZ3GisOqo=) 2: 3138322e34392e302e302f31362d3136203d3e2030.roa (hash: VcnWubwyz4XXsy5ib4o3aMuT/7BWYwmSEQsMbdX4oJM=) 3: 323430353a393730303a3a2f33322d3332203d3e2030.roa (hash: b+fcHzb/W5/fimiES+nchVhDT38rC5UajNjNb4ZygPk=) 4: 3130332e3235322e3130342e302f32322d3232203d3e2030.roa (hash: LbvUNBbkkW0aewjviCw2bvPKR6Kgliws3ypDPVSBx14=) 5: 34332e3234372e3135322e302f32322d3232203d3e2030.roa (hash: 1pk6tiEHf9kNqPoegfgckkczUu2VR2BfY6u9CKdeHko=) 6: 3130332e3232302e3130382e302f32322d3232203d3e2030.roa (hash: eweMT2DqhbhsogWgs3Ls5JTkhPjH5PVagqQGefKB424=) 7: 601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl (hash: BY8404+OfoL30TvPPh5oxop2dfSm5SuYeuOmJHE1Nz8=) 8: 3130332e3232302e3131362e302f32322d3232203d3e2030.roa (hash: if/xm2ZmxEWHRHPBv5cvIrLrrTMi5u7rlBXqn+knNDE=) 9: 3130332e33302e39362e302f32322d3232203d3e2030.roa (hash: wZLSzYpHhbp1Z9qyC1a2LGCTkcXv5D87rPj068v2abM=) 10: 34352e3235312e3134382e302f32322d3232203d3e2030.roa (hash: hgzzmAJZR3a6NXzfmlpD1wxFTR8mhcdKXPB/DalEBzY=) 11: 34352e3235312e3134342e302f32322d3232203d3e2030.roa (hash: UHhl5vIywlR9EF1SuP2tWpZscGg6dt5K75MIQmmozxM=) 12: 34332e3234372e3233322e302f32322d3232203d3e2030.roa (hash: HvknGg3jtHTLMLRmwKj2Fju4EA01k6DXU/KhVvFuIHQ=) 13: 323430353a393938303a3a2f33322d3332203d3e2030.roa (hash: GA+g1A5a2HBFT7Hhy5u0IBn7+mkbJWeKKCXdtRL2bVU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 22:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:6e:cb:7e:51:43:bf:ba:95:e7:a9:8e:26:aa:0f:40:0b:01:4b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E Validity Not Before: Oct 14 20:14:30 2026 GMT Not After : Oct 17 22:53:30 2026 GMT Subject: CN=8EB02E087CEE5A20F1FBBE341484652FBCBE8729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8c:6c:5b:a1:b5:f7:a5:11:a3:c9:68:cc:c1: 14:e3:41:18:f3:6c:b6:32:df:59:53:a2:9f:56:4d: 3f:09:f7:bd:44:dd:be:e6:de:56:c8:b3:13:b9:ca: 6f:33:a7:1a:63:be:6c:39:91:9c:4f:29:5d:ad:ef: 87:86:90:2f:e5:0e:c5:eb:cd:b6:d0:f8:9b:49:51: c3:45:ac:53:14:5c:a5:21:4f:fa:34:5a:18:c3:e3: 83:31:c9:63:3d:15:03:89:7e:aa:e2:5c:a1:42:ac: 3d:81:09:80:29:a5:7b:b7:e4:89:3b:a9:13:5b:41: d8:02:1f:b7:3b:fb:f0:cc:8e:7f:7c:97:b7:46:8a: 3a:b1:44:05:1a:b3:76:5a:00:2a:d1:c4:a7:b9:3f: 0c:67:97:10:49:9f:46:23:d1:e0:b4:d3:30:ef:48: 63:50:eb:46:ec:f4:95:82:66:8b:b5:52:9f:31:fc: d3:19:0b:86:e0:a1:63:14:00:e0:49:07:1f:31:28: fd:73:22:0a:a9:ee:5b:cb:6a:a6:12:c0:d0:ac:bb: 85:27:c3:4e:63:37:b6:88:68:d1:f9:45:c4:0f:41: 61:a2:c7:85:57:7a:1b:00:5b:60:45:e8:0d:a4:f0: 5e:12:4f:e4:0c:65:53:80:68:0f:3f:7d:e6:d5:46: 56:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B0:2E:08:7C:EE:5A:20:F1:FB:BE:34:14:84:65:2F:BC:BE:87:29 X509v3 Authority Key Identifier: keyid:60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:78:7a:b9:93:b8:9e:f3:dd:39:97:95:af:a7:ca:54:95:fe: 34:bb:38:d8:84:70:80:bc:60:a2:96:48:7e:e6:fc:b9:a1:83: a8:db:98:3b:cc:59:dc:6d:8c:db:9d:25:14:e6:8d:88:4c:33: d8:ea:f9:12:87:d8:8b:46:cc:1d:55:e7:a7:00:28:e3:ce:06: dd:32:36:eb:19:4d:ca:64:62:9c:64:9e:fe:b4:ee:f2:93:ec: f6:36:31:5a:36:b2:ca:14:4a:54:0a:ba:3d:b8:6c:f9:c5:64: a2:74:8f:71:9e:6a:ff:c8:f3:37:ce:80:9a:a4:0d:b3:61:a4: 77:a6:36:f4:ec:87:03:e2:15:6f:8f:f8:b6:c7:75:7f:59:86: 10:b4:aa:a5:78:4c:54:0b:14:29:0f:17:5b:73:43:73:32:b1: ba:f7:ef:1e:18:d3:c9:af:b8:19:0d:3b:80:0d:05:e2:5e:55: 11:dd:01:a4:49:9d:f6:6e:f0:ff:86:0c:4c:0a:63:03:79:62: d7:45:64:29:9a:c0:a0:93:81:73:3b:11:f4:8a:db:ac:6d:23: c5:5e:e4:29:ad:18:f6:cf:fa:9e:33:25:e5:6e:4b:a4:10:84: e6:7f:25:6f:75:62:f1:72:5d:2e:f4:d1:b6:ef:7c:a1:20:09: 86:04:fe:00 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdG7LflFDv7qV56mOJqoPQAsBS80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxQTlBOEEzQjUwNUE1RUUyMjgzMjQzRjdBQkU3QTZG NTRFREM0RTAeFw0yNjEwMTQyMDE0MzBaFw0yNjEwMTcyMjUzMzBaMDMxMTAvBgNV BAMTKDhFQjAyRTA4N0NFRTVBMjBGMUZCQkUzNDE0ODQ2NTJGQkNCRTg3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7jGxbobX3pRGjyWjMwRTjQRjz bLYy31lTop9WTT8J971E3b7m3lbIsxO5ym8zpxpjvmw5kZxPKV2t74eGkC/lDsXr zbbQ+JtJUcNFrFMUXKUhT/o0WhjD44MxyWM9FQOJfqriXKFCrD2BCYAppXu35Ik7 qRNbQdgCH7c7+/DMjn98l7dGijqxRAUas3ZaACrRxKe5PwxnlxBJn0Yj0eC00zDv SGNQ60bs9JWCZou1Up8x/NMZC4bgoWMUAOBJBx8xKP1zIgqp7lvLaqYSwNCsu4Un w05jN7aIaNH5RcQPQWGix4VXehsAW2BF6A2k8F4ST+QMZVOAaA8/febVRlYlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjrAuCHzuWiDx+740FIRlL7y+hykwHwYDVR0j BBgwFoAUYBqaijtQWl7iKDJD96vnpvVO3E4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ5ODg2MzYwMDg5Mzk1NC8wLzYwMUE5QThBM0I1MDVBNUVFMjI4MzI0M0Y3QUJF N0E2RjU0RURDNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjAxQTlBOEEzQjUwNUE1RUUyMjgzMjQzRjdBQkU3QTZGNTRFREM0RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ0OTg4NjM2MDA4OTM5NTQvMC82MDFBOUE4QTNCNTA1 QTVFRTIyODMyNDNGN0FCRTdBNkY1NEVEQzRFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXh6uZO4nvPd OZeVr6fKVJX+NLs42IRwgLxgopZIfub8uaGDqNuYO8xZ3G2M250lFOaNiEwz2Or5 EofYi0bMHVXnpwAo484G3TI26xlNymRinGSe/rTu8pPs9jYxWjayyhRKVAq6Pbhs +cVkonSPcZ5q/8jzN86AmqQNs2Gkd6Y29OyHA+IVb4/4tsd1f1mGELSqpXhMVAsU KQ8XW3NDczKxuvfvHhjTya+4GQ07gA0F4l5VEd0BpEmd9m7w/4YMTApjA3li10Vk KZrAoJOBczsR9IrbrG0jxV7kKa0Y9s/6njMl5W5LpBCE5n8lb3Vi8XJdLvTRtu98 oSAJhgT+AA== -----END CERTIFICATE-----Generated at Thu Oct 15 14:22:30 2026 by rpki-client