$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft File: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft (raw, json) Hash identifier: PTScHIkKUTe1JKUPm1ZIeGZAg8ZjmhDAGAfLNV1zMjc= Subject key identifier: 1D:5C:5B:42:24:E3:DD:61:B0:20:29:B9:2B:91:47:B5:74:9A:93:A9 Authority key identifier: 78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2 Certificate issuer: /CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2 Certificate serial: 4D119B6B65EB7FBBD72FF395FDDEDBF641435184 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft Manifest number: D9 Signing time: Wed 04 Nov 2026 06:13:52 +0000 Manifest this update: Wed 04 Nov 2026 06:08:52 +0000 Manifest next update: Sat 07 Nov 2026 07:07:52 +0000 Files and hashes: 1: 78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl (hash: SRHGqxJyHnnr8UELC7pr/cbt/yzfsn5CH+rjKvjO8Hw=) 2: 3130332e3130302e36382e302f32342d3234203d3e203138303133.roa (hash: 9trCS61WlxDaNjMFMf8I2A9wFsbGb5ZIy9HUL4He9I8=) 3: 3130332e3130302e36382e302f32322d3232203d3e203138303133.roa (hash: PJcdHxZUkxUJ5eSTf+6JwcxmvZhevGkLH+Ukzra3EM0=) 4: 3130332e3130302e36392e302f32342d3234203d3e203334383036.roa (hash: YOo3KwHO0mDTJklq0+ndi7BlQyxKck09aQjPrXjLSVg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Nov 2026 07:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:11:9b:6b:65:eb:7f:bb:d7:2f:f3:95:fd:de:db:f6:41:43:51:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2 Validity Not Before: Nov 4 06:08:52 2026 GMT Not After : Nov 7 07:07:52 2026 GMT Subject: CN=1D5C5B4224E3DD61B02029B92B9147B5749A93A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fb:ec:88:4b:78:71:bd:e0:1f:56:73:ee:9d: 0a:b7:1d:a9:8d:29:c5:2b:64:15:e4:11:7c:42:2c: f0:33:4b:15:a5:27:63:41:90:13:d2:8f:35:54:db: 03:1f:71:79:00:d9:0c:82:48:ee:22:11:be:c5:cb: 7a:5a:c4:76:ef:89:8a:e5:5c:97:2e:78:74:7e:e1: 05:a5:8c:b7:3c:06:f6:57:9b:33:e1:e4:b9:4f:9d: 72:d4:a0:d0:d0:bd:f4:60:42:68:fd:06:c2:26:78: c3:9b:9e:a9:75:07:97:4c:e5:e4:a0:6a:9d:ca:2d: 6c:62:c2:45:c5:7d:b6:0d:2f:b7:1f:7b:45:fd:fc: 5d:a8:66:ff:25:94:45:6a:83:2d:0e:63:a6:35:5b: 5e:eb:ba:12:2a:64:e4:c8:35:4b:2e:93:49:4f:37: aa:b3:11:46:d7:d6:cb:53:43:27:a2:1c:3c:24:fa: 97:7c:1c:8b:25:54:e5:d8:15:15:46:67:0b:0b:63: dd:bf:17:66:90:bf:b5:b2:c0:c3:a2:2b:67:95:89: c4:12:ce:75:83:8c:93:91:83:21:27:bb:9f:80:2a: de:ce:b5:6e:73:95:6e:b3:3d:28:b5:a6:ac:a2:76: f7:b8:1b:4d:13:51:71:32:5e:86:97:96:ba:b0:13: 07:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5C:5B:42:24:E3:DD:61:B0:20:29:B9:2B:91:47:B5:74:9A:93:A9 X509v3 Authority Key Identifier: keyid:78:71:4A:ED:87:28:1E:4F:55:A6:7C:5D:42:E8:FD:F0:FE:B1:FF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096374162261278723/0/78714AED87281E4F55A67C5D42E8FDF0FEB1FFB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:81:20:66:cc:f7:1d:ed:56:61:17:ce:3f:4f:fd:82:07:14: e8:5e:de:68:c2:93:2f:71:f1:0e:fa:b2:2d:96:68:06:83:37: 3a:a4:f2:28:ed:35:2b:0e:05:94:67:da:9c:fb:92:c7:f4:d5: 54:55:f4:69:10:fe:5f:0a:83:1d:a5:e4:7d:0f:a7:0b:9b:9b: 32:c4:bd:16:4e:a3:ad:78:46:65:13:df:b2:2c:eb:80:ff:8f: 31:fd:f2:8d:95:1f:af:06:32:2f:2d:d2:35:61:5d:37:a2:e5: a0:e7:80:61:b7:cb:b3:66:76:dd:a6:21:bd:b6:6e:b2:8d:61: ea:9c:a8:4e:b5:22:5a:69:73:42:d9:f6:15:4d:cc:f8:d7:2b: 34:7b:0f:02:79:d5:80:39:4b:50:da:55:7c:a6:88:47:60:fb: cf:5a:eb:be:ae:01:98:74:b8:19:39:34:11:65:e9:57:d7:51: 57:65:9b:cd:76:e4:d1:e6:1d:f1:e9:e3:27:9c:ad:c4:f1:ec: c9:93:78:75:1b:20:78:86:83:08:9e:f8:b4:f2:f3:7f:e2:f3: e2:66:bb:b5:8a:ae:16:fe:16:f8:be:d0:55:68:ca:06:6c:4f: 2d:d7:8d:04:2c:5f:9e:1e:7e:a9:e7:47:73:6b:12:bd:5d:9b: 81:23:dc:93 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTRGba2Xrf7vXL/OV/d7b9kFDUYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3MTRBRUQ4NzI4MUU0RjU1QTY3QzVENDJFOEZERjBG RUIxRkZCMjAeFw0yNjExMDQwNjA4NTJaFw0yNjExMDcwNzA3NTJaMDMxMTAvBgNV BAMTKDFENUM1QjQyMjRFM0RENjFCMDIwMjlCOTJCOTE0N0I1NzQ5QTkzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD++yIS3hxveAfVnPunQq3HamN KcUrZBXkEXxCLPAzSxWlJ2NBkBPSjzVU2wMfcXkA2QyCSO4iEb7Fy3paxHbviYrl XJcueHR+4QWljLc8BvZXmzPh5LlPnXLUoNDQvfRgQmj9BsImeMObnql1B5dM5eSg ap3KLWxiwkXFfbYNL7cfe0X9/F2oZv8llEVqgy0OY6Y1W17ruhIqZOTINUsuk0lP N6qzEUbX1stTQyeiHDwk+pd8HIslVOXYFRVGZwsLY92/F2aQv7WywMOiK2eVicQS znWDjJORgyEnu5+AKt7OtW5zlW6zPSi1pqyidve4G00TUXEyXoaXlrqwEweVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHVxbQiTj3WGwICm5K5FHtXSak6kwHwYDVR0j BBgwFoAUeHFK7YcoHk9VpnxdQuj98P6x/7IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM3NDE2MjI2MTI3ODcyMy8wLzc4NzE0QUVEODcyODFFNEY1NUE2N0M1RDQyRThG REYwRkVCMUZGQjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzg3MTRBRUQ4NzI4MUU0RjU1QTY3QzVENDJFOEZERjBGRUIxRkZCMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNzQxNjIyNjEyNzg3MjMvMC83ODcxNEFFRDg3Mjgx RTRGNTVBNjdDNUQ0MkU4RkRGMEZFQjFGRkIyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4EgZsz3He1W YRfOP0/9ggcU6F7eaMKTL3HxDvqyLZZoBoM3OqTyKO01Kw4FlGfanPuSx/TVVFX0 aRD+XwqDHaXkfQ+nC5ubMsS9Fk6jrXhGZRPfsizrgP+PMf3yjZUfrwYyLy3SNWFd N6LloOeAYbfLs2Z23aYhvbZuso1h6pyoTrUiWmlzQtn2FU3M+NcrNHsPAnnVgDlL UNpVfKaIR2D7z1rrvq4BmHS4GTk0EWXpV9dRV2WbzXbk0eYd8enjJ5ytxPHsyZN4 dRsgeIaDCJ74tPLzf+Lz4ma7tYquFv4W+L7QVWjKBmxPLdeNBCxfnh5+qedHc2sS vV2bgSPckw== -----END CERTIFICATE-----Generated at Thu Nov 5 11:31:54 2026 by rpki-client