$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft File: 5ACF72DA32919503D15480832BA57EB063AE113B.mft (raw, json) Hash identifier: aKGk5rgzMUGsXEdKddap7NsHpUpETErTLl236Me/eiw= Subject key identifier: 49:49:9B:99:C9:04:C6:C9:CA:2A:3C:22:48:7B:AB:70:68:20:B7:06 Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B Certificate serial: 2B6114BE254E5D7A02C068EEC4ACBCA2F89E499B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft Manifest number: D0 Signing time: Wed 14 Oct 2026 20:54:32 +0000 Manifest this update: Wed 14 Oct 2026 20:49:32 +0000 Manifest next update: Sun 18 Oct 2026 03:59:32 +0000 Files and hashes: 1: 3130332e34362e38302e302f32302d3230203d3e203539303337.roa (hash: VM9UgyFDP8OacfKzHanvtWsJQyUyLRlw9EFxofOZsdA=) 2: 3130332e34362e39362e302f31392d3139203d3e203539303337.roa (hash: 4ho5GfdYPdk7Q9EI+slTRKjHENffO7eayNCTJEvE6Iw=) 3: 34332e3232372e3135362e302f32342d3234203d3e203539303337.roa (hash: f8k2uHJkxlDOHk6U2wcq6Y9MtTN6Ns1VpmNNEm8tdvI=) 4: 3130332e34362e31322e302f32322d3232203d3e203539303337.roa (hash: ywzwxdSlzCtlBPbJIW2oRBJRpuYa2If5IjjWIHmsM5Q=) 5: 34332e3232382e362e302f32342d3234203d3e203539303337.roa (hash: nxwj9rXkme8ywNqPqilfOQRX08ia+zFuoJP/pXWEMu8=) 6: 34332e3232382e382e302f32312d3231203d3e203539303337.roa (hash: PHN/5/xP2k7xFIXMNFI3gkfrjNxg+7yOL+A3kfav0kw=) 7: 34332e3232372e3136302e302f32302d3230203d3e203539303337.roa (hash: mYKkDD8Z0mIsKYeGiTjEGbCj6sBVC9uFi50oRb7vO8w=) 8: 3130332e34362e31362e302f32302d3230203d3e203539303337.roa (hash: L1X3KvJMBCddXtzpgZGgETHC1CyJALdanfpgny8ufvQ=) 9: 34332e3232382e36342e302f32312d3231203d3e203539303337.roa (hash: LDzIRzb+kpK0iSRjCFPcMNG5IzX1u7FVWHoKXtw3pVg=) 10: 34332e3232372e3139342e302f32332d3233203d3e203539303337.roa (hash: FvxvtfB1pPaIDUCFL2kbFsszoKdUHIds2+TRH0JsnZk=) 11: 34332e3232372e3230382e302f32312d3231203d3e203539303337.roa (hash: bo1ZP0YzQU1rJ2s6NixhslV0CR6fL1oWv36KgCoRWTA=) 12: 34332e3232382e302e302f32322d3232203d3e203539303337.roa (hash: WIIM6WznzsN69nFg27fgZKP/ipX97t44tdGInDFlG60=) 13: 34332e3232372e3139362e302f32322d3232203d3e203539303337.roa (hash: 7zw6/gtCTl50gOBT8n2iBD5ACi9b6uueqr2xJfludOs=) 14: 34332e3232372e3137362e302f32312d3231203d3e203539303337.roa (hash: gGI6VfwnsWiX6Xt4eelEH9yUymsgRx5+rq1tGILXWuw=) 15: 34332e3232372e3135322e302f32322d3232203d3e203539303337.roa (hash: QIz3TKxpZgnoUcA1hl9WKpzeLVBTQ+JGjmxOuKy4GrQ=) 16: 3130332e34362e3132382e302f32312d3231203d3e203539303337.roa (hash: gUAtSKWCG2dmoSdNr2GAVffzXAEmzrCj2y4haWCVI/Y=) 17: 3130332e34362e36342e302f32322d3232203d3e203539303337.roa (hash: PP+OXL9whfeB4jl7/Wt2OAcPI9dw/FLp5oC1kYScsfs=) 18: 34332e3232382e342e302f32332d3233203d3e203539303337.roa (hash: kzKiIsvxw3cDPYwwGMRS7ndjvujNgDjAr1FO8WGOxg0=) 19: 3130332e34362e33322e302f31392d3139203d3e203539303337.roa (hash: NcQzYetXCMxeJYxBzuzgBArjI8Q+AwsvzNwE+2b9lw0=) 20: 3130332e34362e36382e302f32342d3234203d3e203539303337.roa (hash: hWv/xnaXctv4tbQZt1+mHXpK7XR8uORN9eAUseujZyA=) 21: 34332e3232352e3138302e302f32322d3232203d3e203539303337.roa (hash: SEJHMfLUSI9Nyo4CW7SdPMIHAjmkg8cZO26hzd1up1E=) 22: 34332e3232382e34302e302f32312d3231203d3e203539303337.roa (hash: qeXeR1451IWjM2MaVOFH13EgA6uzkpa7Bb5PHeLdhv0=) 23: 34332e3232382e34382e302f32302d3230203d3e203539303337.roa (hash: CzpiszzKgANc2Lot7VkDYrpJHE4Ux4uH0np9rBUcL3c=) 24: 3130332e34362e37322e302f32312d3231203d3e203539303337.roa (hash: oKFr93oc522lAnBsLoH0ODIBsn4nvsSfOPo/OuULMAs=) 25: 34332e3232382e32342e302f32312d3231203d3e203539303337.roa (hash: +Mmz62MyqPj7tvMxl3lF/Y1asGlPdV6BhH2hlmm7ZV4=) 26: 34332e3232372e3139322e302f32332d3233203d3e203539303337.roa (hash: vU4pF90ZrGQ3zsddjP+GRqubXjtS7E3VQnB1xgLN5W4=) 27: 34332e3232372e3231362e302f32312d3231203d3e203539303337.roa (hash: eOdDSpohvIQaRUhNCKd/AludGOi6DkSOuO5M4MbkIhU=) 28: 34332e3233302e37322e302f32322d3232203d3e203539303337.roa (hash: bPz3VrGQ0lJMgjUZRCwdL4EUgo9KQg3aX63XFyyxHYo=) 29: 3130332e34362e3133362e302f32322d3232203d3e203539303337.roa (hash: D2kMyrr7bw9DRjkS5nUJqTdgGRDaclhkEIprxy+b880=) 30: 34332e3232372e3230302e302f32312d3231203d3e203539303337.roa (hash: hTp3pYGtwIReZ3YlyeCyX6yn0YsVyG831tK3z0ykMWU=) 31: 5ACF72DA32919503D15480832BA57EB063AE113B.crl (hash: 6cNOLm0yKszOB10metK0vENe0Jzq42MoUAqUcw0VgjA=) 32: 323430333a316638303a3a2f33322d3332203d3e2030.roa (hash: C3n5OWMLpoak4RJkrmKLGOTFE9VB8zAehVX31CssZ0Y=) 33: 3130332e34342e3134342e302f32332d3233203d3e203539303337.roa (hash: ydpc8OpnVnfHvAryBOlT6Mz/3uQLnQeuyTk6X+FwZF8=) 34: 3130332e34392e3130382e302f32322d3232203d3e203539303337.roa (hash: Pe7NMueOxrfJXqC0NHkvbeXsXiRDcuwLlpUM9Y9uVJQ=) 35: 34332e3232372e3135382e302f32332d3233203d3e203539303337.roa (hash: xLUQrK7HXMisNWpcI4murhTAbAVLoUH7WMnjC6mgx+k=) 36: 3130332e34342e3134362e302f32332d3233203d3e203539303337.roa (hash: HNLmQn8lLO9Uu02GIjGzPHKTe0HMbM+3HCSS9Z1OiFk=) 37: 34332e3232382e31362e302f32312d3231203d3e203539303337.roa (hash: rgr3Igl4YqRPWKPLPI5NqRfuCLNo98whE5uG5eCp4KY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:61:14:be:25:4e:5d:7a:02:c0:68:ee:c4:ac:bc:a2:f8:9e:49:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B Validity Not Before: Oct 14 20:49:32 2026 GMT Not After : Oct 18 03:59:32 2026 GMT Subject: CN=49499B99C904C6C9CA2A3C22487BAB706820B706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:dd:22:ad:c0:7a:17:96:48:51:07:3f:f5: 92:95:54:b2:03:42:5a:2a:44:55:ed:66:22:12:d5: 4a:54:0a:59:3f:6e:3d:84:3f:91:ca:f8:36:53:37: e8:0a:f7:78:c2:99:8d:5a:a3:0a:8c:8d:60:38:ae: 3d:8e:29:b8:28:3c:8f:a7:89:69:3f:96:86:97:f0: 4d:82:10:3e:5e:c0:88:91:ff:06:1a:d4:3e:33:6b: 68:35:c4:47:74:e5:1f:bf:65:32:97:4d:96:c0:97: b7:fd:c5:08:63:22:88:42:a2:ba:ff:cb:b6:e5:c1: 6f:ad:43:70:0f:88:ab:b0:a7:5c:16:ae:4c:21:af: f3:e0:7e:0d:bb:e6:65:9c:63:4e:77:77:03:1e:1e: 37:ba:ff:e8:d9:67:18:5b:e9:db:27:29:3a:a1:36: 07:9c:95:1a:8d:84:a1:24:a6:d5:8a:f0:9f:dd:ba: 25:01:9d:de:b6:31:d8:f3:d7:15:79:2b:fd:b0:65: b8:c3:6b:29:97:c4:c0:23:0b:cc:fd:10:d1:11:9d: 0c:fd:20:b7:6d:48:bb:b6:e6:68:15:d6:04:29:23: 8e:70:f2:d0:a5:88:ed:92:4a:c2:bf:4f:cc:99:e7: 57:83:4c:59:65:57:9f:13:ef:52:15:8b:ec:ea:68: a1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:49:9B:99:C9:04:C6:C9:CA:2A:3C:22:48:7B:AB:70:68:20:B7:06 X509v3 Authority Key Identifier: keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b7:ae:44:db:e9:e2:a3:e0:50:6b:88:e9:5c:be:40:36:17: da:97:ae:bc:62:40:59:6a:b4:ef:16:37:c4:44:aa:d3:ca:44: c6:ba:ea:e6:ec:cd:af:ad:25:33:b7:7a:8e:2f:30:04:d2:33: 77:49:76:c4:72:96:96:7e:a8:23:04:1a:90:59:40:c2:37:ae: 84:11:5c:ca:08:e5:dd:73:b9:a3:08:51:86:04:10:7b:65:f0: c4:55:54:7e:76:65:d4:48:89:22:8d:b9:fe:b9:25:b7:a1:de: 14:85:3d:f3:53:a1:f5:e8:a0:a2:5a:b5:a1:82:b3:78:7b:c1: 1d:4a:4f:b0:a5:82:c8:00:c5:37:91:d0:d0:e1:4b:b3:08:52: 1c:fa:db:a8:40:16:91:70:e1:b4:f1:be:a1:78:21:84:66:bf: 8b:c4:1f:cc:59:6b:71:92:28:6a:2e:80:e9:68:eb:89:20:f1: d4:f6:17:01:cb:6a:e9:c9:ea:df:d5:d6:b4:28:66:d9:0c:21: a0:d1:39:76:aa:2b:95:32:7f:fe:38:50:6b:90:bc:ff:e3:ad: dc:a5:84:30:75:e0:23:a2:81:57:36:65:3b:91:60:d3:2a:0f: 48:71:05:49:af:9e:b5:b4:b5:b3:32:a3:22:d5:22:6b:ba:21: 3b:cd:0c:f9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUK2EUviVOXXoCwGjuxKy8ovieSZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2 M0FFMTEzQjAeFw0yNjEwMTQyMDQ5MzJaFw0yNjEwMTgwMzU5MzJaMDMxMTAvBgNV BAMTKDQ5NDk5Qjk5QzkwNEM2QzlDQTJBM0MyMjQ4N0JBQjcwNjgyMEI3MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2P90ircB6F5ZIUQc/9ZKVVLID QloqRFXtZiIS1UpUClk/bj2EP5HK+DZTN+gK93jCmY1aowqMjWA4rj2OKbgoPI+n iWk/loaX8E2CED5ewIiR/wYa1D4za2g1xEd05R+/ZTKXTZbAl7f9xQhjIohCorr/ y7blwW+tQ3APiKuwp1wWrkwhr/Pgfg275mWcY053dwMeHje6/+jZZxhb6dsnKTqh NgeclRqNhKEkptWK8J/duiUBnd62Mdjz1xV5K/2wZbjDaymXxMAjC8z9ENERnQz9 ILdtSLu25mgV1gQpI45w8tCliO2SSsK/T8yZ51eDTFllV58T71IVi+zqaKFrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSUmbmckExsnKKjwiSHurcGggtwYwHwYDVR0j BBgwFoAUWs9y2jKRlQPRVICDK6V+sGOuETswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMwMTE0OTM3MzM5OTA0MS8xLzVBQ0Y3MkRBMzI5MTk1MDNEMTU0ODA4MzJCQTU3 RUIwNjNBRTExM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2M0FFMTEzQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMDExNDkzNzMzOTkwNDEvMS81QUNGNzJEQTMyOTE5 NTAzRDE1NDgwODMyQkE1N0VCMDYzQUUxMTNCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOreuRNvp4qPg UGuI6Vy+QDYX2peuvGJAWWq07xY3xESq08pExrrq5uzNr60lM7d6ji8wBNIzd0l2 xHKWln6oIwQakFlAwjeuhBFcygjl3XO5owhRhgQQe2XwxFVUfnZl1EiJIo25/rkl t6HeFIU981Oh9eigolq1oYKzeHvBHUpPsKWCyADFN5HQ0OFLswhSHPrbqEAWkXDh tPG+oXghhGa/i8QfzFlrcZIoai6A6WjriSDx1PYXActq6cnq39XWtChm2QwhoNE5 dqorlTJ//jhQa5C8/+Ot3KWEMHXgI6KBVzZlO5Fg0yoPSHEFSa+etbS1szKjItUi a7ohO80M+Q== -----END CERTIFICATE-----Generated at Thu Oct 15 03:08:43 2026 by rpki-client