$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft File: B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft (raw, json) Hash identifier: jGkWwv+H8vB/ZEq0j+XgngTU0UbgWIPL0uWFJT82Rbg= Subject key identifier: BE:34:9C:61:FF:13:DA:C8:58:14:F9:0C:20:A7:7A:39:F0:1D:0C:6F Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 5C3B0C67B99CDDE6EB7D66CD0EACE33E1A0D94DD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft Manifest number: C1 Signing time: Thu 10 Sep 2026 15:16:48 +0000 Manifest this update: Thu 10 Sep 2026 15:11:48 +0000 Manifest next update: Sun 13 Sep 2026 23:23:48 +0000 Files and hashes: 1: 34332e3233312e3137302e302f32342d3234203d3e2034383038.roa (hash: 9m6TuvcMhFLuF6l6KNP/vCLSN7cJPoFDY1yMsJdOZms=) 2: 34332e3233312e3136302e302f32342d3234203d3e203233373234.roa (hash: 24FDnRvLCzn0ANWhhM/3WAQ1SR667x669CQVFjAXkT8=) 3: 34332e3233312e3136312e302f32342d3234203d3e2034383038.roa (hash: 8nIeiB251IaYlgVWGWgYRtlBq7njmt2I6qe1VI8ltrQ=) 4: 34332e3233312e3136302e302f32342d3234203d3e2034383038.roa (hash: eMSzssgVCrnjIF6VL8PSJ+HoJtZ3e3YyeZ8hFIcqN/Y=) 5: 34332e3233312e3136392e302f32342d3234203d3e203539303435.roa (hash: 4bufmTh61WaAmqfKiVanOVT2UB50zhRGG1caW8ZhWoI=) 6: 34332e3233312e3136382e302f32342d3234203d3e2034383038.roa (hash: eO91F7hb156INMh0wkLF9i4co0ne3A8qbTScqpey0H8=) 7: 34332e3233312e3136372e302f32342d3234203d3e2034383038.roa (hash: MQCBmxAJSDHPnHo1i75aRqt3aiM6O3RFbLkUM1Vtt/Q=) 8: 34332e3233312e3136362e302f32342d3234203d3e203539303435.roa (hash: 7js4KyKImpomSg+LF70j2/SfmbowekJ3CaRqBA+USmU=) 9: 34332e3233312e3137302e302f32342d3234203d3e203539303435.roa (hash: ON/OMHXBvndmKDHTVNcxmsA4rCStsITi7ntUN0vX/M0=) 10: 34332e3233312e3136382e302f32342d3234203d3e203233373234.roa (hash: FERWDVlfu2BkKhCRK6RX8fqrYkNHGQ7nNw4fQbLjZLY=) 11: 34332e3233312e3137312e302f32342d3234203d3e203539303435.roa (hash: EUbA6Gg+pJUPRNOqrh6PFcQ/lcvsOyFkVpMhKtDxR5Y=) 12: 34332e3233312e3136322e302f32342d3234203d3e2034383038.roa (hash: ejDFxPmWT+05HCia7pY1Rse7RbdQUNfTamQE0Gdm3Jo=) 13: 3130332e3233342e35372e302f32342d3234203d3e2034383337.roa (hash: vdF+HI1oNr6kqh078qMmmr8oRIUvuhnWsColzplNCkA=) 14: 34332e3233312e3136332e302f32342d3234203d3e203233373234.roa (hash: pcpus7lziotmJzbcDYGefZ16mC5ZQevR5pHmZItnRKo=) 15: 34332e3233312e3136372e302f32342d3234203d3e203233373234.roa (hash: A2ZcgYufZNsYqIVGV/dEfam7F/PbIk4Us5BfawUJzrQ=) 16: B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl (hash: 7cG8vr0pZR/SXRZwhfv1JMVxWf+qtTWqzYSlYTkHaiM=) 17: 34332e3233312e3136332e302f32342d3234203d3e2034383038.roa (hash: DcHKH8AMXCvgpm186lSssTzK4qmxlvaVy6ZMdS2SLbo=) 18: 34332e3233312e3136352e302f32342d3234203d3e203539303435.roa (hash: P2w3Cn8q6VBjPyjAE+aGySX201BOvmk4osx5NsrSLsM=) 19: 34332e3233312e3136322e302f32342d3234203d3e203539303435.roa (hash: le6HeP8YIpiihcpiK4OmSEaq5HwNDyRlkrLrogtJAfM=) 20: 34332e3233312e3136392e302f32342d3234203d3e203233373234.roa (hash: vohP9zABgWu50ks5+/FiNfLsUoOf43m8skFJ6SSVAxs=) 21: 34332e3233312e3136322e302f32342d3234203d3e203233373234.roa (hash: BdQR9FXri1FMEeb1fzW3vWWtY74O1uVL20hYCCh8JN8=) 22: 3130332e3232372e3132322e302f32342d3234203d3e203233373234.roa (hash: /gTohF8KvDpAztOs0o8krBaVNqaJojl9cS4McTId4nk=) 23: 34332e3233312e3136342e302f32342d3234203d3e2034383038.roa (hash: uyXBkHjNtSnoZeCj7/Cxh8i8AfdLFlQpCwN7RMB6PU8=) 24: 323430333a343238303a3a2f34382d3438203d3e203539303435.roa (hash: A9wLbcJvXASqzaeNLxcQMZsYx9mTSfRFmMcvE8+RJRg=) 25: 34332e3233312e3136352e302f32342d3234203d3e2034383038.roa (hash: d/XWda+qAId3HrqJLJ/ELxQxJigM0ZDtn3cu5cPMToM=) 26: 34332e3233312e3136392e302f32342d3234203d3e2034383038.roa (hash: WC6hkAfwb7PGjQi+Xc5kuTF3CQ7uP1+avO0icjfJOuI=) 27: 34332e3233312e3136362e302f32342d3234203d3e2034383038.roa (hash: Pb8V+5FTCdgjn6SiwLlLtlSOYYlOhjvC3VA+VAV8O8c=) 28: 3130332e3233342e35362e302f32322d3232203d3e2034383337.roa (hash: m6QWCJVxxGzot6OqoJwSEys5DCxqMAuQiUrRofADMgg=) 29: 34332e3233312e3136332e302f32342d3234203d3e203539303435.roa (hash: HlBnZJtRyN9WWrXETRSPEzDLZRrvouzm35CF758gaP0=) 30: 3130332e3232372e3132332e302f32342d3234203d3e203233373234.roa (hash: 0AJrwoJqWyS7mm02LUhjXruCkjbSDcdGfNe21l9Twws=) 31: 3130332e3232372e3132302e302f32332d3233203d3e2034383337.roa (hash: Sx+7NoTmtU5tLHhBcnSWpMNO747BDHdsVxguRe0fQqw=) 32: 3130332e3233342e35362e302f32342d3234203d3e2034383337.roa (hash: 81y+N8iirHBRsPfSRpGYFqPsiFIpyNpIgp6HeQiYS5w=) 33: 323430333a343238303a3a2f34382d3438203d3e2034383038.roa (hash: ULN0wtNAWUAoiI/+nHBlAPQmAmTvce/5E9zhhIxyRyk=) 34: 34332e3233312e3136342e302f32342d3234203d3e203539303435.roa (hash: TRXaBDgn4/52ym6X+l5H4r05polWjFlZPvb9W1ytskA=) 35: 323430333a343238303a3a2f34382d3438203d3e203233373234.roa (hash: JU3XnXtyT8UelE8ZUTUzJFF4EsTcd3qBE1P0ThkMbkc=) 36: 34332e3233312e3136372e302f32342d3234203d3e203539303435.roa (hash: /9Rp3paE32Mb7xbU1V9yI0KtWtVbueQdmeDgHK5tXtQ=) 37: 34332e3233312e3136382e302f32342d3234203d3e203539303435.roa (hash: B4/9VepgzCAqS2VDHVYZOohdO8xJ6CFEpvbnisx0SuY=) 38: 34332e3233312e3137302e302f32342d3234203d3e203233373234.roa (hash: DQqP/JMnMTlVRUIOIfUyrIq2HzHGNivtyoIhGcE1fgU=) 39: 34332e3233312e3136312e302f32342d3234203d3e203539303435.roa (hash: 358nj2S4xIzsoF5ZCAuIBT3be/At+L9A5PxfyFNWokY=) 40: 34332e3233312e3136302e302f32342d3234203d3e203539303435.roa (hash: k8nCn4GHRCXa4bAadqGp/HXrDu2HbCC1RzZ2PjlcArw=) 41: 34332e3233312e3136312e302f32342d3234203d3e203233373234.roa (hash: rjzSBfM4QFloW2G0lnm7U5heJ8Y10odYzplLbPiFyvw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:3b:0c:67:b9:9c:dd:e6:eb:7d:66:cd:0e:ac:e3:3e:1a:0d:94:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: Sep 10 15:11:48 2026 GMT Not After : Sep 13 23:23:48 2026 GMT Subject: CN=BE349C61FF13DAC85814F90C20A77A39F01D0C6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:eb:5a:f6:0f:1d:81:66:f0:74:00:04:58:24: 65:da:39:6e:ad:64:a9:89:bf:d9:39:c7:49:77:09: 0d:49:85:ec:85:28:59:46:9e:f6:54:1a:df:5d:86: e3:96:c2:03:3a:af:22:06:57:30:89:c4:6f:5e:9e: 69:be:d8:06:f0:2a:c7:06:e2:72:c7:57:8e:4f:af: 36:6b:f7:bb:c5:17:df:26:6c:ee:6b:3c:a7:37:3a: 6d:f6:31:75:ff:3c:1d:95:fa:96:20:a4:45:ba:5c: e5:e7:29:5e:26:1d:30:8a:5f:fd:9d:d0:8d:1f:1b: 88:99:94:6b:3f:b2:7f:2f:f1:fc:18:73:d5:ea:0e: 32:11:f1:3e:17:b4:02:3f:6c:9a:39:cb:82:b5:88: 72:d2:67:62:5a:e0:3f:c5:bc:ed:56:51:66:38:75: d5:48:ce:db:52:9c:3f:92:9f:05:80:c1:e6:b6:fe: b5:df:f5:9d:36:91:36:c4:87:10:f0:dd:20:8c:5b: 88:36:79:08:22:a3:e5:e7:b7:85:43:82:61:5d:fe: 66:80:8f:8b:f6:36:a6:46:cb:3a:ae:cb:b7:fb:70: 03:8d:7c:4e:00:11:cb:bd:a8:9f:9b:97:01:a3:20: 86:17:ca:49:bf:59:df:c1:4b:0f:34:0e:e3:8f:88: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:34:9C:61:FF:13:DA:C8:58:14:F9:0C:20:A7:7A:39:F0:1D:0C:6F X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:1a:b9:57:36:40:54:8e:41:5a:a2:11:c8:17:18:1f:24:15: c0:92:ac:04:02:04:53:d1:9a:a0:0a:15:03:f7:c1:d5:cb:c8: bb:e0:39:bd:33:8e:ad:dc:e5:19:f9:12:ac:17:a7:35:6d:26: 60:ec:36:e3:d7:15:f2:83:7a:d8:6b:31:2e:a7:95:0d:71:a2: 1c:20:51:93:a0:8a:a1:40:74:b3:cf:a2:fe:e8:70:54:0e:86: 8a:05:0b:40:3e:6c:a2:64:0e:79:6c:20:6a:bb:26:ed:ad:eb: 50:0d:30:5c:7f:f5:73:f0:a6:d4:53:72:a6:4f:c3:b4:9f:a4: e9:0d:20:a0:73:37:a4:ae:8e:7c:a7:49:94:17:53:7b:fd:01: 02:09:17:50:c5:6c:d9:e8:2a:a2:a3:dc:f6:d8:26:55:b4:09: e3:60:ed:a1:48:b1:b1:2b:ed:f8:65:b5:09:b2:b0:4d:68:5c: 24:b2:0e:a4:ec:74:51:0d:d9:c2:8f:f0:18:05:7f:ec:ae:44: 36:38:a0:6b:3e:cc:96:23:eb:32:2b:ce:d2:de:32:f0:21:f8: d5:f7:35:bf:42:08:fa:68:26:2f:15:f6:25:08:ec:98:07:20: a7:94:15:cd:38:11:f2:83:20:fd:63:31:8e:48:93:e3:de:5f: 48:da:b7:f7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXDsMZ7mc3ebrfWbNDqzjPhoNlN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA5MTAxNTExNDhaFw0yNjA5MTMyMzIzNDhaMDMxMTAvBgNV BAMTKEJFMzQ5QzYxRkYxM0RBQzg1ODE0RjkwQzIwQTc3QTM5RjAxRDBDNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS61r2Dx2BZvB0AARYJGXaOW6t ZKmJv9k5x0l3CQ1JheyFKFlGnvZUGt9dhuOWwgM6ryIGVzCJxG9enmm+2AbwKscG 4nLHV45PrzZr97vFF98mbO5rPKc3Om32MXX/PB2V+pYgpEW6XOXnKV4mHTCKX/2d 0I0fG4iZlGs/sn8v8fwYc9XqDjIR8T4XtAI/bJo5y4K1iHLSZ2Ja4D/FvO1WUWY4 ddVIzttSnD+SnwWAwea2/rXf9Z02kTbEhxDw3SCMW4g2eQgio+Xnt4VDgmFd/maA j4v2NqZGyzquy7f7cAONfE4AEcu9qJ+blwGjIIYXykm/Wd/BSw80DuOPiH1lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvjScYf8T2shYFPkMIKd6OfAdDG8wHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDc0MzA3NDgxNzYzODcvMC9CNjg4RTgwRjg5Q0FF QzZBOEM4NEE3RTUxODM4NDI0Mjg3QUJDQTg5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxq5VzZAVI5B WqIRyBcYHyQVwJKsBAIEU9GaoAoVA/fB1cvIu+A5vTOOrdzlGfkSrBenNW0mYOw2 49cV8oN62GsxLqeVDXGiHCBRk6CKoUB0s8+i/uhwVA6GigULQD5somQOeWwgarsm 7a3rUA0wXH/1c/Cm1FNypk/DtJ+k6Q0goHM3pK6OfKdJlBdTe/0BAgkXUMVs2egq oqPc9tgmVbQJ42DtoUixsSvt+GW1CbKwTWhcJLIOpOx0UQ3Zwo/wGAV/7K5ENjig az7MliPrMivO0t4y8CH41fc1v0II+mgmLxX2JQjsmAcgp5QVzTgR8oMg/WMxjkiT 495fSNq39w== -----END CERTIFICATE-----Generated at Thu Sep 10 17:41:58 2026 by rpki-client