$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft File: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft (raw, json) Hash identifier: lEX5WPJ1vWff9iD10h6aAS+zJkWV4ylc1mn61GwBJ5A= Subject key identifier: 9A:A1:12:4F:20:44:52:7A:E4:8A:85:1B:A0:7D:6A:DA:B8:1D:6C:E6 Authority key identifier: A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B Certificate issuer: /CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Certificate serial: 1A158AA586BA106C506EA26FE9FCCAB4CE8D280A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft Manifest number: D5 Signing time: Mon 26 Oct 2026 18:48:58 +0000 Manifest this update: Mon 26 Oct 2026 18:43:58 +0000 Manifest next update: Thu 29 Oct 2026 20:14:58 +0000 Files and hashes: 1: 3130332e3234362e382e302f32322d3232203d3e2034383337.roa (hash: 378gDWpe2Upn/8JChX6sgkJeHsAHSbEmRu0FvijF8Ak=) 2: 3130332e352e33362e302f32322d3232203d3e20313436383034.roa (hash: COjqgWsphuImH4PxuZavaGMWKv5+Mn4I1naiAEbTGvw=) 3: A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl (hash: HFBY5NLsQYOamkhMbjJJ7FKveIVo5orTC5Z65kAADg0=) 4: 3130332e3234362e3132342e302f32322d3232203d3e20313436383034.roa (hash: WE8+pTZ5S7UlnIvQQt2EwPWAgIn53j0ya6ispmhqRo8=) 5: 34352e3132302e3134302e302f32322d3232203d3e20313436383034.roa (hash: C5IoIDXsiVzDtG0jHDsZEeiVvmF1F7nfEOq0sQ0YHns=) 6: 3130332e3234362e3135322e302f32322d3232203d3e2034383337.roa (hash: TYMvRP8H57trbvzGCEYABh6fzOINS3SRdnWTsOOJTPk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 20:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:15:8a:a5:86:ba:10:6c:50:6e:a2:6f:e9:fc:ca:b4:ce:8d:28:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Validity Not Before: Oct 26 18:43:58 2026 GMT Not After : Oct 29 20:14:58 2026 GMT Subject: CN=9AA1124F2044527AE48A851BA07D6ADAB81D6CE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d5:bc:55:10:82:39:f7:e1:25:6a:21:d6:cc: a3:0e:4b:e0:62:a3:93:ae:4e:d4:76:0a:54:5d:12: 1f:cf:38:70:bc:b2:f3:c6:3d:b5:85:b6:37:a2:dd: f5:dc:89:f1:47:87:e9:c9:aa:24:70:cd:a0:ba:fa: 2b:a0:68:07:2b:1d:f9:d5:b9:f6:55:21:59:2f:eb: b9:cc:aa:46:06:6c:dd:d1:9a:a5:7c:9b:a5:10:4a: af:5a:54:67:4f:66:13:ae:b6:62:a9:d5:1c:37:b7: 5d:17:cd:5d:ec:16:01:bb:ea:4a:0a:46:4e:2b:eb: b4:e0:7c:8f:c6:74:94:7d:64:22:65:26:81:32:46: c5:5d:2b:37:b3:f9:e1:fa:be:62:11:df:82:03:12: 58:a0:f6:93:ea:a9:f2:8a:5a:de:95:f0:1e:18:9d: d2:fe:53:1f:c3:c5:17:64:53:7b:6b:3d:2f:85:8d: fa:3d:6b:9c:bc:72:e6:65:63:15:95:e4:98:28:94: cf:b4:b6:dc:ed:52:6c:ee:02:0c:f9:6c:7d:21:8c: 2a:6a:e9:2e:2b:9e:d6:06:49:0d:99:1a:ed:ff:71: 2f:8d:29:93:97:bf:59:24:38:9a:b1:82:0e:56:5b: a1:55:32:88:e0:ac:dc:bd:d4:07:3b:48:17:84:8f: 15:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A1:12:4F:20:44:52:7A:E4:8A:85:1B:A0:7D:6A:DA:B8:1D:6C:E6 X509v3 Authority Key Identifier: keyid:A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:12:d5:d4:19:ea:a8:10:63:7a:77:c4:b3:47:16:5c:50:57: e9:a2:43:9b:1d:bc:23:fd:8f:7d:a6:54:f9:30:35:90:2a:28: 29:8b:3a:75:4b:88:8b:a1:60:50:a5:a6:00:d0:bd:c1:28:36: fb:45:b8:85:1b:17:ba:9d:4d:99:aa:1b:7c:8b:b3:2b:2e:2e: 03:18:d5:7c:f8:2e:4a:b6:d0:f0:5a:3e:65:2b:61:a3:5f:42: b8:cb:a7:0e:e0:df:af:f9:ab:34:20:fc:01:f2:01:b5:67:cd: 42:31:29:db:64:dc:52:01:b5:7b:e0:a7:6d:f7:e0:a6:a6:6d: 2c:13:9f:25:21:9b:e2:e5:40:56:1f:d1:65:bf:42:a8:12:b9: 34:e0:d5:a6:76:1b:40:29:1a:24:cd:e9:bc:41:fb:05:6a:69: 03:b8:dc:a2:67:53:2c:ca:36:57:29:c7:62:4f:48:07:4e:e4: be:e1:f3:fb:14:07:5a:86:cb:ed:23:05:7d:d5:93:07:5f:3e: 34:85:70:d1:c9:e5:84:51:c0:14:5d:f8:36:56:80:a5:a2:bd: 55:32:c7:23:c7:6e:53:f4:5c:9b:00:d2:32:43:6e:60:e8:9e: 91:0b:2e:ee:5b:da:1c:ba:da:0a:c5:b9:01:e7:26:74:c7:2f: 75:1a:5a:72 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGhWKpYa6EGxQbqJv6fzKtM6NKAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJF QTI4Q0MwQjAeFw0yNjEwMjYxODQzNThaFw0yNjEwMjkyMDE0NThaMDMxMTAvBgNV BAMTKDlBQTExMjRGMjA0NDUyN0FFNDhBODUxQkEwN0Q2QURBQjgxRDZDRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ1bxVEII59+ElaiHWzKMOS+Bi o5OuTtR2ClRdEh/POHC8svPGPbWFtjei3fXcifFHh+nJqiRwzaC6+iugaAcrHfnV ufZVIVkv67nMqkYGbN3RmqV8m6UQSq9aVGdPZhOutmKp1Rw3t10XzV3sFgG76koK Rk4r67TgfI/GdJR9ZCJlJoEyRsVdKzez+eH6vmIR34IDElig9pPqqfKKWt6V8B4Y ndL+Ux/DxRdkU3trPS+Fjfo9a5y8cuZlYxWV5JgolM+0ttztUmzuAgz5bH0hjCpq 6S4rntYGSQ2ZGu3/cS+NKZOXv1kkOJqxgg5WW6FVMojgrNy91Ac7SBeEjxVTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmqESTyBEUnrkioUboH1q2rgdbOYwHwYDVR0j BBgwFoAUqIWseT+14Cw68TWMjdI0EuoozAswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzODMzMTQ5Nzc0MjMzOC8wL0E4ODVBQzc5M0ZCNUUwMkMzQUYxMzU4QzhERDIz NDEyRUEyOENDMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJFQTI4Q0MwQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzgzMzE0OTc3NDIzMzgvMC9BODg1QUM3OTNGQjVF MDJDM0FGMTM1OEM4REQyMzQxMkVBMjhDQzBCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1xLV1BnqqBBj enfEs0cWXFBX6aJDmx28I/2PfaZU+TA1kCooKYs6dUuIi6FgUKWmANC9wSg2+0W4 hRsXup1NmaobfIuzKy4uAxjVfPguSrbQ8Fo+ZStho19CuMunDuDfr/mrNCD8AfIB tWfNQjEp22TcUgG1e+CnbffgpqZtLBOfJSGb4uVAVh/RZb9CqBK5NODVpnYbQCka JM3pvEH7BWppA7jcomdTLMo2VynHYk9IB07kvuHz+xQHWobL7SMFfdWTB18+NIVw 0cnlhFHAFF34NlaApaK9VTLHI8duU/RcmwDSMkNuYOiekQsu7lvaHLraCsW5Aecm dMcvdRpacg== -----END CERTIFICATE-----Generated at Tue Oct 27 15:49:42 2026 by rpki-client