$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft File: EACB7B50F338DF2794EBA3F618C7233B2283E644.mft (raw, json) Hash identifier: k42yivLkpPUDnD5CfpRQlTdbeDxhwYRE4eN8q2iDJy8= Subject key identifier: D1:0B:4C:8F:91:9E:10:5A:A3:80:07:69:6B:81:FA:88:C6:7C:14:EA Authority key identifier: EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44 Certificate issuer: /CN=A9143CB30000/serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644 Certificate serial: 080A896CF5321C6EFC6E55E9FBC1C48615E9F2E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft Manifest number: 0B5A Signing time: Tue 27 Oct 2026 08:05:30 +0000 Manifest this update: Tue 27 Oct 2026 08:00:30 +0000 Manifest next update: Fri 30 Oct 2026 10:00:30 +0000 Files and hashes: 1: AS140979.roa (hash: w40fw02i0MoyGm66OaSz+GodX4Pac//xvh+HdgKfrOo=) 2: AS17622.roa (hash: LqBUIvzi65+1/O4FTw1ICN87DYCS8XRFtqIAicnVMBQ=) 3: AS17623.roa (hash: ok0SVNffWIUl+8bljlGbmUGi8UJwBf/riL8wEf8lmtc=) 4: AS136958.roa (hash: itcr1ClEzj1IhHty+wJhgdKhy54GDFiyT6kZBJqI/Ks=) 5: AS138421.roa (hash: J9yMxI6USC+ksSFB2Qwi+mpP/CqZ/DZx2XXXcFz1maw=) 6: AS134543.roa (hash: MELig0IcX+ocQa+yzUyUoz5isjH3xHJmJR07ZrXFGNo=) 7: AS140717.roa (hash: rfEwRyW7PARyZuu3TKBv4tlT8bMGb5eRco7yTFvzC1w=) 8: EACB7B50F338DF2794EBA3F618C7233B2283E644.crl (hash: HEW8wOYiiLCymTLVe3smyarc8VaGVg1NjdcoIla93xY=) 9: AS17816.roa (hash: KPds3CefqCxiErf/THYatUvwdimjh2SQJqBDe0yEgBk=) 10: AS4837.roa (hash: zHaMAYve+2PCnEtXqQ8K96TcAw9reFXkvjJIWnT3c5A=) 11: AS135061.roa (hash: nxBwVTRQeGzN5n3l5G/G5VC41BPbCHTVYRHW042BCJI=) 12: AS17621.roa (hash: nigGl1ZWAK68Hn1+1KJUhGoGrt0TdRUFEwhwOHn5ArI=) 13: AS9929.roa (hash: ue6kwGp/3TwHl25DS4+DughTQyLpyqCnwXQt8FaG17Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0a:89:6c:f5:32:1c:6e:fc:6e:55:e9:fb:c1:c4:86:15:e9:f2:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=EACB7B50F338DF2794EBA3F618C7233B2283E644 Validity Not Before: Oct 27 08:00:30 2026 GMT Not After : Oct 30 10:00:30 2026 GMT Subject: CN=D10B4C8F919E105AA38007696B81FA88C67C14EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f7:0e:b4:3d:f8:21:7e:0c:57:e0:e9:50:ae: 96:a5:32:67:df:9c:6a:6d:59:27:ee:8e:f3:b6:ef: 5c:3b:97:3a:55:85:a2:d1:9c:76:8b:ff:a2:d1:f5: 45:41:c9:4e:bd:1a:20:06:96:74:2c:ec:0e:aa:7f: 8c:d0:d7:6b:54:91:55:9d:cd:f5:78:3a:11:60:41: 18:8a:86:a6:62:42:0e:df:98:5d:68:45:e7:f6:cc: 88:53:78:60:3d:2d:60:a3:f0:bf:dd:19:6a:0a:05: 36:a0:4a:ae:7b:c0:28:a9:8a:23:76:86:5f:fc:0f: 05:4f:d7:70:5d:66:5c:e0:7e:f3:f7:1f:5a:d2:6d: 28:38:08:8c:f7:81:33:12:b2:49:6b:84:a5:e2:78: d1:e6:05:5e:93:23:aa:00:ff:9d:6f:3a:a1:02:cf: b9:02:7a:60:31:c2:c5:61:be:82:7b:30:8a:f2:58: 02:9f:c9:69:02:a6:c6:c9:c6:62:06:53:8c:d1:83: b8:3a:09:fc:b1:4a:d8:64:5c:19:1f:87:cb:d9:66: 6f:37:63:83:48:d2:11:c5:72:ff:8b:f2:5b:39:b5: af:4a:0f:e2:a1:c7:4b:cf:b2:e1:c9:b7:77:8f:cf: c8:c6:12:3c:75:5f:f4:33:d5:bf:c0:c8:e9:64:6e: c0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0B:4C:8F:91:9E:10:5A:A3:80:07:69:6B:81:FA:88:C6:7C:14:EA X509v3 Authority Key Identifier: keyid:EA:CB:7B:50:F3:38:DF:27:94:EB:A3:F6:18:C7:23:3B:22:83:E6:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6st7UPM43yeU66P2GMcjOyKD5kQ.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/0/EACB7B50F338DF2794EBA3F618C7233B2283E644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:13:b6:90:dc:db:03:9e:ae:b8:c7:ed:97:5b:bf:8c:d1:cb: 1b:1e:e9:89:a3:dc:6a:47:e6:ca:25:a9:66:bb:e5:2d:8f:09: 09:05:44:d5:62:1f:f0:6e:3f:50:4d:e0:5c:2b:4f:0a:42:58: 49:57:00:3b:38:90:09:59:27:af:34:2d:75:64:5e:17:e9:b4: 28:82:58:11:1a:54:f2:3c:96:dd:1c:14:28:a1:5a:b5:bb:74: 19:dc:86:92:c9:88:7d:3f:bc:ab:b9:ab:86:82:02:c4:5d:47: 6a:31:cd:1f:e1:73:4e:21:a5:01:77:7c:a9:a4:38:e4:ab:3f: 28:76:9d:e6:4e:55:ad:1f:53:6b:fd:6a:3b:55:5a:13:8c:40: 94:64:61:06:69:ee:ea:84:3a:ff:ac:0f:5b:75:79:ad:b4:aa: 9b:92:64:f3:3b:c5:aa:97:0d:a5:09:ef:32:b0:95:5e:63:ce: 4f:c9:14:a1:6a:dc:03:fc:6a:4c:2b:a5:0a:50:c8:68:da:bd: 0f:76:d8:fa:6f:12:a3:a3:cb:8c:9c:aa:46:3e:00:0b:de:82: ce:5e:52:03:3b:61:b5:db:e1:5c:cf:ba:81:59:76:1b:aa:41: d4:ce:c3:e9:04:11:b5:e0:87:bb:d8:2d:f5:4c:ce:cb:f2:36: bb:4d:38:fe -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUCAqJbPUyHG78blXp+8HEhhXp8uQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyhFQUNCN0I1MEYz MzhERjI3OTRFQkEzRjYxOEM3MjMzQjIyODNFNjQ0MB4XDTI2MTAyNzA4MDAzMFoX DTI2MTAzMDEwMDAzMFowMzExMC8GA1UEAxMoRDEwQjRDOEY5MTlFMTA1QUEzODAw NzY5NkI4MUZBODhDNjdDMTRFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJf3DrQ9+CF+DFfg6VCulqUyZ9+cam1ZJ+6O87bvXDuXOlWFotGcdov/otH1 RUHJTr0aIAaWdCzsDqp/jNDXa1SRVZ3N9Xg6EWBBGIqGpmJCDt+YXWhF5/bMiFN4 YD0tYKPwv90ZagoFNqBKrnvAKKmKI3aGX/wPBU/XcF1mXOB+8/cfWtJtKDgIjPeB MxKySWuEpeJ40eYFXpMjqgD/nW86oQLPuQJ6YDHCxWG+gnswivJYAp/JaQKmxsnG YgZTjNGDuDoJ/LFK2GRcGR+Hy9lmbzdjg0jSEcVy/4vyWzm1r0oP4qHHS8+y4cm3 d4/PyMYSPHVf9DPVv8DI6WRuwKsCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBTRC0yP kZ4QWqOAB2lrgfqIxnwU6jAfBgNVHSMEGDAWgBTqy3tQ8zjfJ5Tro/YYxyM7IoPm RDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzAvRUFDQjdC NTBGMzM4REYyNzk0RUJBM0Y2MThDNzIzM0IyMjgzRTY0NC5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvNnN0N1VQTTQz eWVVNjZQMkdNY2pPeUtENWtRLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5 NTM0MjU5My8wL0VBQ0I3QjUwRjMzOERGMjc5NEVCQTNGNjE4QzcyMzNCMjI4M0U2 NDQubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAtE7aQ3NsDnq64x+2XW7+M0csbHumJo9xqR+bKJalmu+Ut jwkJBUTVYh/wbj9QTeBcK08KQlhJVwA7OJAJWSevNC11ZF4X6bQoglgRGlTyPJbd HBQooVq1u3QZ3IaSyYh9P7yruauGggLEXUdqMc0f4XNOIaUBd3yppDjkqz8odp3m TlWtH1Nr/Wo7VVoTjECUZGEGae7qhDr/rA9bdXmttKqbkmTzO8Wqlw2lCe8ysJVe Y85PyRShatwD/GpMK6UKUMho2r0Pdtj6bxKjo8uMnKpGPgAL3oLOXlIDO2G12+Fc z7qBWXYbqkHUzsPpBBG14Ie72C31TM7L8ja7TTj+ -----END CERTIFICATE-----Generated at Wed Oct 28 10:30:59 2026 by rpki-client