$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft File: C89881B315F7E21BA948CF9CB11D1AC422106426.mft (raw, json) Hash identifier: +SiGCahXiMylx0dVw4288Ct8eio3ukiqG5byUZr2iWc= Subject key identifier: 3A:E4:E9:05:50:ED:DD:32:C9:E4:F0:96:B1:E6:06:B1:80:A6:A4:DE Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Certificate serial: 709DFCF521E02A7212879F79105B2B300C2F8A20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft Manifest number: E4 Signing time: Mon 26 Oct 2026 17:23:52 +0000 Manifest this update: Mon 26 Oct 2026 17:18:52 +0000 Manifest next update: Fri 30 Oct 2026 04:58:52 +0000 Files and hashes: 1: C89881B315F7E21BA948CF9CB11D1AC422106426.crl (hash: ZGUopvEz79p3KHyvtxBhxjsAGKcmCRO59zO1Mbxiv4s=) 2: AS150706.roa (hash: STUozDldmjWQWxL3PhQcntDrjXlCusCSutFc35uwO3o=) 3: AS4837.roa (hash: /wnhgOafB5DtiAvbyZ/OTq8M3pb+KDmkQs7HIrYzMBE=) 4: AS17621.roa (hash: q6GLMRFfZovhy9fwzDU68XceX1+3EZJr9c9/dNDOqbE=) 5: AS4811.roa (hash: yMoj7PxfBaSOZK1slJuYK11svJr6BItX+yIgQmO9cac=) 6: AS140292.roa (hash: OA3egY1a6abgZ6HObkk4XVPnHafmKObwIli1ifBRJKI=) 7: AS55994.roa (hash: lvw/fJg6fnJxbjOrSMPu1nRtN83ysUzQs94eNYmOzzY=) 8: AS138950.roa (hash: 7ICMiYl/IjsPpJzbcWBFmI2+SQd+D4pzZhR8Tlz7A+w=) 9: AS4812.roa (hash: JwArBKR9c9+eUcjjt41E6DRfeYOE5WTHhxmuraNcBBU=) 10: AS138421.roa (hash: RdvvuAurshEGrv/XsRePVcIvpxj95fP+i0U9+SbYq6g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 04:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:9d:fc:f5:21:e0:2a:72:12:87:9f:79:10:5b:2b:30:0c:2f:8a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Validity Not Before: Oct 26 17:18:52 2026 GMT Not After : Oct 30 04:58:52 2026 GMT Subject: CN=3AE4E90550EDDD32C9E4F096B1E606B180A6A4DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:3f:0e:79:c2:55:0c:22:33:76:7b:cc:c8: 17:13:9c:23:dd:b9:c1:38:41:36:67:23:c0:fc:7b: ee:07:9b:e9:99:d6:07:dd:80:0e:44:79:d6:f1:a3: a9:d5:03:f8:1b:0e:5f:28:01:63:3c:25:db:ff:e4: bc:83:e0:71:af:34:bf:6f:88:ca:ed:11:f2:52:e2: 22:29:2e:a4:95:6b:13:f6:9a:52:f3:1e:d6:34:7a: 8b:b3:5a:82:3b:f6:38:ae:ce:c3:c7:6e:f5:7e:7b: 3d:0c:5f:f9:fa:4c:29:44:98:4d:34:48:3d:fe:ca: 69:d8:5c:24:91:df:72:3c:95:0d:c6:ab:72:9e:15: f5:c5:c9:46:7d:fa:40:aa:6b:36:7b:14:0c:d6:68: 9e:57:d1:c2:ca:aa:db:7c:67:b1:18:68:b1:20:c8: eb:ce:53:c3:ae:ad:05:9f:a0:13:9b:53:30:a6:22: 8f:b6:66:a1:7b:fd:a6:4a:24:50:c3:4d:15:5a:11: 46:41:34:d5:64:bd:3e:bc:13:ac:4b:4a:84:ef:1b: af:8b:d3:88:25:6f:6e:7a:5b:e4:5c:8e:49:60:68: 38:d7:3f:55:4d:fd:ae:9f:48:e9:5b:67:23:ff:02: 1f:eb:a0:9f:c0:e2:48:d1:ff:05:88:98:b9:10:2c: 90:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E4:E9:05:50:ED:DD:32:C9:E4:F0:96:B1:E6:06:B1:80:A6:A4:DE X509v3 Authority Key Identifier: keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:c1:39:b2:5c:11:c6:d0:e0:64:7b:2f:7d:05:f8:73:64:b2: 5e:d9:a0:f2:fc:55:3c:9e:16:72:50:d1:aa:bf:2e:c0:54:52: 5c:e2:11:97:a4:1b:bf:32:2b:ed:52:73:82:ef:92:89:c6:4c: c2:99:3a:87:48:59:2e:1a:74:20:d3:0a:3d:2a:60:94:22:6c: f6:17:3e:a7:2d:38:7a:0c:c5:99:2e:1a:5b:70:c2:e1:32:fb: 46:c2:46:c2:e0:3a:d7:de:78:52:15:1b:97:8f:b7:e0:be:08: a5:12:f4:d8:3e:a2:04:d8:98:3b:73:81:44:15:c2:ea:bb:59: 8f:82:2e:ba:88:65:fd:b7:76:b5:5e:d5:bd:12:d9:f6:90:d8: 38:74:cd:5e:a8:bd:92:c6:ed:01:e1:0b:68:97:af:ef:22:35: be:78:34:9a:95:48:ee:f3:90:c2:37:0d:9e:7c:10:33:96:19: 6e:7d:b3:5a:0b:7c:22:58:7d:c5:3e:bf:bc:76:b8:55:97:45: 9e:f7:f0:82:c8:e8:8b:cc:af:de:3c:3d:c6:ee:1f:9d:0a:71: e5:90:49:f3:58:9e:ef:0f:4d:97:a9:f3:f8:5d:8f:be:d8:d1: ea:44:82:1b:e3:80:69:a9:c7:9c:d9:7c:43:32:d8:90:78:2a: 78:f6:ee:1e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcJ389SHgKnISh595EFsrMAwviiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy MjEwNjQyNjAeFw0yNjEwMjYxNzE4NTJaFw0yNjEwMzAwNDU4NTJaMDMxMTAvBgNV BAMTKDNBRTRFOTA1NTBFREREMzJDOUU0RjA5NkIxRTYwNkIxODBBNkE0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Zz8OecJVDCIzdnvMyBcTnCPd ucE4QTZnI8D8e+4Hm+mZ1gfdgA5Eedbxo6nVA/gbDl8oAWM8Jdv/5LyD4HGvNL9v iMrtEfJS4iIpLqSVaxP2mlLzHtY0eouzWoI79jiuzsPHbvV+ez0MX/n6TClEmE00 SD3+ymnYXCSR33I8lQ3Gq3KeFfXFyUZ9+kCqazZ7FAzWaJ5X0cLKqtt8Z7EYaLEg yOvOU8OurQWfoBObUzCmIo+2ZqF7/aZKJFDDTRVaEUZBNNVkvT68E6xLSoTvG6+L 04glb256W+RcjklgaDjXP1VN/a6fSOlbZyP/Ah/roJ/A4kjR/wWImLkQLJA1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOuTpBVDt3TLJ5PCWseYGsYCmpN4wHwYDVR0j BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzIwNjI5OTcxNjgxMzEvMC9DODk4ODFCMzE1RjdF MjFCQTk0OENGOUNCMTFEMUFDNDIyMTA2NDI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUsE5slwRxtDg ZHsvfQX4c2SyXtmg8vxVPJ4WclDRqr8uwFRSXOIRl6QbvzIr7VJzgu+SicZMwpk6 h0hZLhp0INMKPSpglCJs9hc+py04egzFmS4aW3DC4TL7RsJGwuA61954UhUbl4+3 4L4IpRL02D6iBNiYO3OBRBXC6rtZj4Iuuohl/bd2tV7VvRLZ9pDYOHTNXqi9ksbt AeELaJev7yI1vng0mpVI7vOQwjcNnnwQM5YZbn2zWgt8Ilh9xT6/vHa4VZdFnvfw gsjoi8yv3jw9xu4fnQpx5ZBJ81ie7w9Nl6nz+F2PvtjR6kSCG+OAaanHnNl8QzLY kHgqePbuHg== -----END CERTIFICATE-----Generated at Tue Oct 27 16:43:07 2026 by rpki-client