$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft File: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft (raw, json) Hash identifier: DLn1d2XGL7EknU50zntNH/QUbR8rnwnzDWT2t9jGCmY= Subject key identifier: 8A:32:62:15:AA:0E:3B:82:DE:2A:9D:0F:5B:9C:26:22:52:62:01:53 Authority key identifier: A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC Certificate issuer: /CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Certificate serial: 2749D28154309649C0CC6C8ACFA3C53642146618 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft Manifest number: D3 Signing time: Tue 13 Oct 2026 12:48:02 +0000 Manifest this update: Tue 13 Oct 2026 12:43:02 +0000 Manifest next update: Fri 16 Oct 2026 19:07:02 +0000 Files and hashes: 1: 3130332e3137302e342e302f32332d3233203d3e2034383136.roa (hash: YfS7Kt8clW/eJGF52X+YXAfT1z1Tx1XMXPtb2Qa9vKU=) 2: 3130332e3137302e342e302f32342d3234203d3e2034383136.roa (hash: hSNLNQfMyyPIEy3FNApslXZYFlxGq5H4UAU40MPlMqM=) 3: 3130332e3137302e352e302f32342d3234203d3e2034383136.roa (hash: Z+WCsVa8vpGSdv/j12ozL1JGdG7SKuVWZI7M4QvuGFI=) 4: A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl (hash: pP8nR1zVpPrwi+YyGn0Icaahly60GroGh+exC01t+wk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:49:d2:81:54:30:96:49:c0:cc:6c:8a:cf:a3:c5:36:42:14:66:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Validity Not Before: Oct 13 12:43:02 2026 GMT Not After : Oct 16 19:07:02 2026 GMT Subject: CN=8A326215AA0E3B82DE2A9D0F5B9C262252620153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:35:0b:d8:a8:92:ff:64:dc:62:21:9e:32:1e: 76:0e:4e:29:bb:89:66:83:e8:4a:d8:f6:aa:39:c1: a2:6a:f1:e8:5f:44:54:44:28:42:30:4b:9c:6c:58: 0f:7f:ce:68:bc:02:09:c5:20:1a:d1:28:d5:f6:aa: 86:df:71:e2:05:db:40:dc:7f:db:ca:58:42:c2:f7: eb:d0:ce:b0:58:56:2c:26:c9:ee:20:48:19:47:c6: 57:3d:3b:fc:2e:27:9c:bb:fa:a4:d3:39:2c:b2:e8: 5b:b6:a7:b4:6d:28:69:36:93:99:a7:17:6c:4e:fd: 2a:f1:15:d0:e6:9c:19:43:e6:ea:dc:c1:d3:d9:5f: 7d:86:b1:04:df:00:75:b3:b0:8c:df:43:11:0f:34: 94:5b:d8:db:49:af:20:5b:bf:9e:a4:d6:5d:48:2d: d9:4c:51:7e:25:70:a1:12:0d:ac:24:6b:d6:1e:74: 22:4a:34:14:6d:6d:1e:ad:2e:9d:bb:56:02:b6:22: 95:09:da:c1:34:0f:fc:2d:46:9b:07:c6:12:32:b8: f2:d1:1a:aa:25:c0:2f:ce:ec:86:e0:41:7b:77:ea: 5d:1a:c1:03:a5:a3:c0:ef:ae:6c:3f:67:0c:26:84: 98:9d:a5:9c:99:4c:b0:ae:0f:fa:cf:48:31:a3:aa: 01:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:32:62:15:AA:0E:3B:82:DE:2A:9D:0F:5B:9C:26:22:52:62:01:53 X509v3 Authority Key Identifier: keyid:A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b8:52:38:e8:3b:0b:4a:93:8b:e3:ec:6f:a9:83:8c:96:34: 43:59:3f:b3:13:6b:6c:6c:58:6d:94:dd:c0:d3:c9:1a:ac:e6: 42:5e:9f:57:fb:d1:ca:09:ee:ed:ae:82:51:aa:d7:43:ac:9b: f1:7c:4e:56:4b:8c:ba:99:c9:e1:84:95:63:48:c3:09:21:cf: 68:55:70:4e:88:75:2a:40:60:1d:98:c0:2e:41:8c:bc:70:b4: cc:c4:75:c8:8b:69:46:75:c8:c1:36:04:c5:b0:43:cf:f7:ce: c6:3e:88:11:60:af:c4:2a:93:40:f9:ca:5b:3e:25:27:a6:af: 6c:40:f3:67:f9:c3:88:f2:63:3d:e0:f0:7d:a8:f2:1d:84:e2: 4f:4b:46:d2:3c:89:6a:39:c9:4d:b6:7a:5b:71:66:60:91:6b: 4b:e7:83:31:97:7b:60:03:ec:a6:1d:db:39:86:17:68:be:52: 8b:f8:34:7e:25:16:60:90:9f:1c:f1:2b:43:ca:81:07:e4:0f: 10:ad:cc:6e:fa:8a:46:89:0c:ce:d9:8c:55:ea:1e:17:81:40: c3:3a:5e:e2:2a:27:10:d5:b6:ff:e7:67:2d:79:a6:fb:28:4b: 36:c2:ad:88:55:2c:d5:22:b3:19:b9:04:bb:9f:ea:01:fc:c4: ea:71:fc:60 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ0nSgVQwlknAzGyKz6PFNkIUZhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0 QTFCNDJFQzAeFw0yNjEwMTMxMjQzMDJaFw0yNjEwMTYxOTA3MDJaMDMxMTAvBgNV BAMTKDhBMzI2MjE1QUEwRTNCODJERTJBOUQwRjVCOUMyNjIyNTI2MjAxNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbNQvYqJL/ZNxiIZ4yHnYOTim7 iWaD6ErY9qo5waJq8ehfRFREKEIwS5xsWA9/zmi8AgnFIBrRKNX2qobfceIF20Dc f9vKWELC9+vQzrBYViwmye4gSBlHxlc9O/wuJ5y7+qTTOSyy6Fu2p7RtKGk2k5mn F2xO/SrxFdDmnBlD5urcwdPZX32GsQTfAHWzsIzfQxEPNJRb2NtJryBbv56k1l1I LdlMUX4lcKESDawka9YedCJKNBRtbR6tLp27VgK2IpUJ2sE0D/wtRpsHxhIyuPLR GqolwC/O7IbgQXt36l0awQOlo8Dvrmw/ZwwmhJidpZyZTLCuD/rPSDGjqgF5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUijJiFaoOO4LeKp0PW5wmIlJiAVMwHwYDVR0j BBgwFoAUoBVhla3PMyd22Wqc4tejbEobQuwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMTc0NDY2MjgwNjUyOS8wL0EwMTU2MTk1QURDRjMzMjc3NkQ5NkE5Q0UyRDdB MzZDNEExQjQyRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0QTFCNDJFQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4MjE3NDQ2NjI4MDY1MjkvMC9BMDE1NjE5NUFEQ0Yz MzI3NzZEOTZBOUNFMkQ3QTM2QzRBMUI0MkVDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7hSOOg7C0qT i+Psb6mDjJY0Q1k/sxNrbGxYbZTdwNPJGqzmQl6fV/vRygnu7a6CUarXQ6yb8XxO VkuMupnJ4YSVY0jDCSHPaFVwToh1KkBgHZjALkGMvHC0zMR1yItpRnXIwTYExbBD z/fOxj6IEWCvxCqTQPnKWz4lJ6avbEDzZ/nDiPJjPeDwfajyHYTiT0tG0jyJajnJ TbZ6W3FmYJFrS+eDMZd7YAPsph3bOYYXaL5Si/g0fiUWYJCfHPErQ8qBB+QPEK3M bvqKRokMztmMVeoeF4FAwzpe4ionENW2/+dnLXmm+yhLNsKtiFUs1SKzGbkEu5/q AfzE6nH8YA== -----END CERTIFICATE-----Generated at Tue Oct 13 18:49:08 2026 by rpki-client