$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft File: A85A1C61546E7F0064133F83A79B3D7456C0703F.mft (raw, json) Hash identifier: X787FZLHEtFIlrTaFFLxO7A4KqL6shqhK64PGk5oF7M= Subject key identifier: 8B:3C:2B:C0:7A:11:0F:1E:CE:78:B7:79:F6:74:B8:D0:7E:7E:CE:F6 Authority key identifier: A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F Certificate issuer: /CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Certificate serial: 26E4BB13589BF8D71ED578AC213F1152C275A739 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft Manifest number: D0 Signing time: Tue 27 Oct 2026 04:24:20 +0000 Manifest this update: Tue 27 Oct 2026 04:19:20 +0000 Manifest next update: Fri 30 Oct 2026 10:41:20 +0000 Files and hashes: 1: 3130332e3231392e32342e302f32322d3332203d3e203536303436.roa (hash: LUJrThvOU4gKzLEtKBQ4hTtnmPaX8XkwYRZk3puZR5o=) 2: A85A1C61546E7F0064133F83A79B3D7456C0703F.crl (hash: T6SwSSSq1qSz9PVJy4/NbP6WeKiKlLSL5//PkMZDZw8=) 3: 34352e3235302e32382e302f32322d3332203d3e203536303436.roa (hash: GZtlY1tritWfrSejhvMzZ72bL1yVAlN9+Gv4wEbY0/o=) 4: 34352e3131392e36342e302f32322d3332203d3e203536303436.roa (hash: WPcmjUjk2Ce6x2TcHeiJNuQWa8c2p+i0Qm6fLx4jh3U=) 5: 3130332e35392e3131362e302f32322d3332203d3e203536303436.roa (hash: z/8kNskWsFn8k8HuWnULgvgDX6UnX61lg4tmI5mSyNI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 10:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e4:bb:13:58:9b:f8:d7:1e:d5:78:ac:21:3f:11:52:c2:75:a7:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A85A1C61546E7F0064133F83A79B3D7456C0703F Validity Not Before: Oct 27 04:19:20 2026 GMT Not After : Oct 30 10:41:20 2026 GMT Subject: CN=8B3C2BC07A110F1ECE78B779F674B8D07E7ECEF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3b:f6:94:19:e5:e6:8c:61:07:4b:25:f4:09: b3:5b:c2:e2:17:86:0a:b6:06:52:5f:ad:6b:1c:df: d7:db:77:19:e3:3c:60:4f:83:3f:25:71:94:69:c7: d2:a2:34:32:15:80:7e:be:05:1d:f0:51:83:74:0b: 0d:33:74:c6:b7:c7:d2:9a:18:9d:d6:ac:fe:a5:ed: ec:74:34:cd:87:7a:a1:22:38:a3:b7:fb:ee:20:1b: 06:05:75:a1:60:0c:a2:aa:d8:06:b4:d5:c1:8a:2e: be:65:9b:a3:53:40:83:a8:e2:a6:c9:84:f1:b9:3b: 36:41:48:41:d1:71:3d:85:07:1f:0f:7c:e3:72:26: 3a:fc:d2:c9:29:13:51:96:09:1b:41:1e:2b:78:9a: 63:ec:7d:11:c5:8a:75:0c:1f:ce:ea:25:6e:7d:52: cb:a5:6a:19:f3:07:72:66:48:a9:47:78:5b:92:b4: 91:66:b0:61:f5:f0:b2:05:46:0d:52:e0:fc:71:07: 15:03:fe:0e:14:d1:e6:b3:ac:4e:82:b2:94:91:59: c2:36:6b:c5:e0:90:54:40:c7:a1:48:a6:d5:b4:6d: e1:bd:23:d3:8b:bc:23:f7:12:9e:55:76:fe:3d:74: cf:71:f3:57:1d:17:66:a7:2d:bc:cd:9a:60:df:73: cc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3C:2B:C0:7A:11:0F:1E:CE:78:B7:79:F6:74:B8:D0:7E:7E:CE:F6 X509v3 Authority Key Identifier: keyid:A8:5A:1C:61:54:6E:7F:00:64:13:3F:83:A7:9B:3D:74:56:C0:70:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A85A1C61546E7F0064133F83A79B3D7456C0703F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704155977842691/0/A85A1C61546E7F0064133F83A79B3D7456C0703F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:4a:7a:7b:0f:7f:13:2a:66:c2:31:41:fe:e1:bc:ea:37:88: 7d:b5:a7:b6:03:2a:9e:d1:7b:0b:cb:bc:c2:ce:3b:6b:de:1a: a7:ef:32:59:fa:e6:1e:a9:e0:95:65:ed:f6:95:bc:1d:99:62: 3d:82:b6:f7:8f:78:25:27:80:61:a4:8f:74:82:08:0d:18:6a: 5d:38:28:6c:92:cc:9e:95:82:e4:cd:2a:bc:cd:cb:13:55:04: ed:c2:0c:e1:b0:37:f1:49:0c:d7:bf:c0:85:01:66:a1:d5:d1: 30:29:bd:f0:76:27:1b:15:74:e0:95:5b:87:22:f6:42:b9:82: d1:67:91:76:98:34:53:27:4a:9d:f7:bb:a3:6d:a5:59:6a:40: dd:27:10:1d:0a:11:5f:c8:76:d6:be:b2:1e:dc:18:e6:04:d6: af:90:bd:a2:45:8c:48:f7:f6:92:96:c1:8e:13:a7:6e:3c:fb: 97:aa:bb:a3:68:5d:07:23:c1:df:07:ae:db:6e:3e:5f:a1:7a: e4:83:25:f1:d3:98:65:5b:e5:86:eb:10:80:e3:35:e6:56:cc: 4b:5e:d0:b5:04:cc:a9:fc:ea:fd:04:2a:e6:8f:17:8d:bc:f0: 13:87:6e:a3:83:93:3d:d2:f3:af:ab:eb:0a:86:82:cb:f6:d4: 07:e9:cf:7f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJuS7E1ib+Nce1XisIT8RUsJ1pzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1 NkMwNzAzRjAeFw0yNjEwMjcwNDE5MjBaFw0yNjEwMzAxMDQxMjBaMDMxMTAvBgNV BAMTKDhCM0MyQkMwN0ExMTBGMUVDRTc4Qjc3OUY2NzRCOEQwN0U3RUNFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcO/aUGeXmjGEHSyX0CbNbwuIX hgq2BlJfrWsc39fbdxnjPGBPgz8lcZRpx9KiNDIVgH6+BR3wUYN0Cw0zdMa3x9Ka GJ3WrP6l7ex0NM2HeqEiOKO3++4gGwYFdaFgDKKq2Aa01cGKLr5lm6NTQIOo4qbJ hPG5OzZBSEHRcT2FBx8PfONyJjr80skpE1GWCRtBHit4mmPsfRHFinUMH87qJW59 UsulahnzB3JmSKlHeFuStJFmsGH18LIFRg1S4PxxBxUD/g4U0eazrE6CspSRWcI2 a8XgkFRAx6FIptW0beG9I9OLvCP3Ep5Vdv49dM9x81cdF2anLbzNmmDfc8y5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUizwrwHoRDx7OeLd59nS40H5+zvYwHwYDVR0j BBgwFoAUqFocYVRufwBkEz+Dp5s9dFbAcD8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcwNDE1NTk3Nzg0MjY5MS8wL0E4NUExQzYxNTQ2RTdGMDA2NDEzM0Y4M0E3OUIz RDc0NTZDMDcwM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg1QTFDNjE1NDZFN0YwMDY0MTMzRjgzQTc5QjNENzQ1NkMwNzAzRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY3MDQxNTU5Nzc4NDI2OTEvMC9BODVBMUM2MTU0NkU3 RjAwNjQxMzNGODNBNzlCM0Q3NDU2QzA3MDNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkp6ew9/Eypm wjFB/uG86jeIfbWntgMqntF7C8u8ws47a94ap+8yWfrmHqnglWXt9pW8HZliPYK2 9494JSeAYaSPdIIIDRhqXTgobJLMnpWC5M0qvM3LE1UE7cIM4bA38UkM17/AhQFm odXRMCm98HYnGxV04JVbhyL2QrmC0WeRdpg0UydKnfe7o22lWWpA3ScQHQoRX8h2 1r6yHtwY5gTWr5C9okWMSPf2kpbBjhOnbjz7l6q7o2hdByPB3weu224+X6F65IMl 8dOYZVvlhusQgOM15lbMS17QtQTMqfzq/QQq5o8XjbzwE4duo4OTPdLzr6vrCoaC y/bUB+nPfw== -----END CERTIFICATE-----Generated at Tue Oct 27 16:40:36 2026 by rpki-client