$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft File: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft (raw, json) Hash identifier: tThbQbsW4UFBCoG3wVYVNQXV00Hos8OT4YGqwq6Qf+8= Subject key identifier: 79:58:F2:7B:C5:97:2F:47:D0:C0:A6:B5:12:CB:E3:D9:AD:FF:F7:91 Authority key identifier: D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF Certificate issuer: /CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Certificate serial: 0B70014E1AA61C3CF23219F0F9712E82094596DD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft Manifest number: D2 Signing time: Sat 24 Oct 2026 03:36:07 +0000 Manifest this update: Sat 24 Oct 2026 03:31:07 +0000 Manifest next update: Tue 27 Oct 2026 07:30:07 +0000 Files and hashes: 1: D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl (hash: mc9GpJI0TWJ2u2Dcw5Sfqvowi0/Svg7LFtAZYHRdQCE=) 2: 3136302e3139312e302e302f32342d3234203d3e2034383038.roa (hash: edLxyl2ii3sEkVs34LHXdis/3sCK01AMTd29uv6dR74=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 07:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:70:01:4e:1a:a6:1c:3c:f2:32:19:f0:f9:71:2e:82:09:45:96:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF Validity Not Before: Oct 24 03:31:07 2026 GMT Not After : Oct 27 07:30:07 2026 GMT Subject: CN=7958F27BC5972F47D0C0A6B512CBE3D9ADFFF791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1b:58:7c:b4:5b:f4:69:69:96:71:b7:2f:31: 25:44:4c:91:6b:5f:ef:18:0d:dd:45:93:a8:b9:b6: 50:b3:11:96:d7:cd:05:da:43:62:1e:78:0a:04:d8: a1:bb:bf:0e:d8:ed:48:ce:03:e3:3b:38:38:86:86: 4c:cc:26:70:3a:5a:d6:70:3f:fc:ee:e2:52:6a:6f: d3:2b:92:84:45:93:8d:bc:33:62:24:63:e9:3a:7b: 79:a4:bb:d7:2b:ee:d8:d9:47:2f:ee:45:23:d1:5a: a8:87:94:b5:b5:69:2f:b4:e2:f0:54:94:b5:29:f3: d1:61:b9:f9:8d:f9:37:63:b8:6c:3b:6b:d1:26:79: 16:26:8f:9e:7e:b6:5e:f3:3d:a4:a7:27:f2:24:3e: a6:61:6d:a7:8f:9b:8d:d8:e3:a7:4e:ba:6d:97:b2: 86:64:7a:d0:2a:c3:cb:04:f1:dc:b4:1c:0d:72:68: 47:2b:c6:db:01:78:95:d4:ff:db:ca:36:40:1c:65: 65:31:5f:84:2e:8f:fa:7c:0e:48:98:0b:03:07:48: 4b:06:d5:41:29:e7:0b:fc:a3:1d:ed:50:c4:2a:1b: a4:8e:0f:f5:46:f5:c8:f9:6c:05:58:a1:9f:1e:19: 2c:cb:4c:4f:31:5b:51:1f:99:ca:ac:56:6e:53:5d: 8d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:58:F2:7B:C5:97:2F:47:D0:C0:A6:B5:12:CB:E3:D9:AD:FF:F7:91 X509v3 Authority Key Identifier: keyid:D0:78:9A:D5:AD:54:B8:4B:9B:AA:37:F7:D9:64:D5:A8:A2:C2:87:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/0/D0789AD5AD54B84B9BAA37F7D964D5A8A2C287DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:e8:7a:d9:0b:f2:7b:20:28:31:e6:26:ca:77:03:b3:86:79: ec:0f:87:59:d6:de:d0:c4:d9:9b:86:2c:47:9c:ea:7e:c3:b5: 39:81:20:7a:76:0e:be:a9:7f:2c:3d:5a:cc:b8:6c:68:36:23: 20:8c:16:b7:cc:5a:fd:bc:56:f5:ae:fd:40:72:b2:ff:fc:02: 62:43:cd:e7:c5:ac:5c:06:77:24:fb:26:7e:2b:74:c2:61:1e: 0d:26:13:38:88:96:e9:6e:fe:38:fa:b7:98:64:b0:84:aa:99: b4:9d:ec:24:96:ed:0b:ac:32:fa:40:28:7a:21:bf:4d:b7:6c: d7:2c:ea:11:b8:85:d1:74:84:52:88:1b:07:35:91:74:d1:0f: 94:b6:5f:8c:72:ad:ca:f8:77:19:32:28:56:21:73:b1:22:5f: 4a:0c:92:ab:26:b0:8c:cc:bd:19:3f:d3:5a:93:8d:e9:d0:08: cf:4d:fa:83:c2:2e:56:b5:df:29:dc:7d:bf:a3:81:99:02:47: 6a:fe:be:cf:11:0f:8b:f9:b0:77:c8:0b:13:14:80:16:03:2f: 02:19:0a:72:31:78:3c:0a:4b:7c:74:be:3b:9c:05:07:f5:8d: 1e:19:f3:00:5b:3c:61:cf:77:29:42:77:71:30:8e:e2:36:65: 06:b1:f2:eb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUC3ABThqmHDzyMhnw+XEugglFlt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThB MkMyODdERjAeFw0yNjEwMjQwMzMxMDdaFw0yNjEwMjcwNzMwMDdaMDMxMTAvBgNV BAMTKDc5NThGMjdCQzU5NzJGNDdEMEMwQTZCNTEyQ0JFM0Q5QURGRkY3OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMG1h8tFv0aWmWcbcvMSVETJFr X+8YDd1Fk6i5tlCzEZbXzQXaQ2IeeAoE2KG7vw7Y7UjOA+M7ODiGhkzMJnA6WtZw P/zu4lJqb9MrkoRFk428M2IkY+k6e3mku9cr7tjZRy/uRSPRWqiHlLW1aS+04vBU lLUp89FhufmN+TdjuGw7a9EmeRYmj55+tl7zPaSnJ/IkPqZhbaePm43Y46dOum2X soZketAqw8sE8dy0HA1yaEcrxtsBeJXU/9vKNkAcZWUxX4Quj/p8DkiYCwMHSEsG 1UEp5wv8ox3tUMQqG6SOD/VG9cj5bAVYoZ8eGSzLTE8xW1EfmcqsVm5TXY3bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeVjye8WXL0fQwKa1Esvj2a3/95EwHwYDVR0j BBgwFoAU0Hia1a1UuEubqjf32WTVqKLCh98wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8wL0QwNzg5QUQ1QUQ1NEI4NEI5QkFBMzdGN0Q5NjRE NUE4QTJDMjg3REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvRDA3ODlBRDVBRDU0Qjg0QjlCQUEzN0Y3RDk2NEQ1QThBMkMyODdERi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMC9EMDc4OUFENUFENTRC ODRCOUJBQTM3RjdEOTY0RDVBOEEyQzI4N0RGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Oh62QvyeyAo MeYmyncDs4Z57A+HWdbe0MTZm4YsR5zqfsO1OYEgenYOvql/LD1azLhsaDYjIIwW t8xa/bxW9a79QHKy//wCYkPN58WsXAZ3JPsmfit0wmEeDSYTOIiW6W7+OPq3mGSw hKqZtJ3sJJbtC6wy+kAoeiG/Tbds1yzqEbiF0XSEUogbBzWRdNEPlLZfjHKtyvh3 GTIoViFzsSJfSgySqyawjMy9GT/TWpON6dAIz036g8IuVrXfKdx9v6OBmQJHav6+ zxEPi/mwd8gLExSAFgMvAhkKcjF4PApLfHS+O5wFB/WNHhnzAFs8Yc93KUJ3cTCO 4jZlBrHy6w== -----END CERTIFICATE-----Generated at Mon Oct 26 10:09:28 2026 by rpki-client