$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft File: B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft (raw, json) Hash identifier: fMSUzm5iGxb1Gc3SQ8MwUuSf8h9MYjqOvAuruvRRd8s= Subject key identifier: 76:6C:1C:AF:92:69:F1:8C:14:DC:DA:83:B5:3C:0F:5F:53:2D:47:89 Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 394EDB69301C2FB23CB23DBFD50494BE030B272B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft Manifest number: D5 Signing time: Mon 26 Oct 2026 07:48:33 +0000 Manifest this update: Mon 26 Oct 2026 07:43:33 +0000 Manifest next update: Thu 29 Oct 2026 16:11:33 +0000 Files and hashes: 1: 34332e3233312e3136362e302f32342d3234203d3e2034383038.roa (hash: Pb8V+5FTCdgjn6SiwLlLtlSOYYlOhjvC3VA+VAV8O8c=) 2: 34332e3233312e3136352e302f32342d3234203d3e2034383038.roa (hash: d/XWda+qAId3HrqJLJ/ELxQxJigM0ZDtn3cu5cPMToM=) 3: 34332e3233312e3136332e302f32342d3234203d3e203539303435.roa (hash: HlBnZJtRyN9WWrXETRSPEzDLZRrvouzm35CF758gaP0=) 4: 3130332e3233342e35362e302f32342d3234203d3e2034383337.roa (hash: 81y+N8iirHBRsPfSRpGYFqPsiFIpyNpIgp6HeQiYS5w=) 5: 323430333a343238303a3a2f34382d3438203d3e203539303435.roa (hash: A9wLbcJvXASqzaeNLxcQMZsYx9mTSfRFmMcvE8+RJRg=) 6: 34332e3233312e3136342e302f32342d3234203d3e2034383038.roa (hash: uyXBkHjNtSnoZeCj7/Cxh8i8AfdLFlQpCwN7RMB6PU8=) 7: B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl (hash: STmZXf69TbA5KQTU+pYdHJpxdwbtVVBNAGwNuF3eWm4=) 8: 323430333a343238303a3a2f34382d3438203d3e2034383038.roa (hash: ULN0wtNAWUAoiI/+nHBlAPQmAmTvce/5E9zhhIxyRyk=) 9: 34332e3233312e3136392e302f32342d3234203d3e203233373234.roa (hash: vohP9zABgWu50ks5+/FiNfLsUoOf43m8skFJ6SSVAxs=) 10: 34332e3233312e3136302e302f32342d3234203d3e203539303435.roa (hash: k8nCn4GHRCXa4bAadqGp/HXrDu2HbCC1RzZ2PjlcArw=) 11: 3130332e3233342e35362e302f32322d3232203d3e2034383337.roa (hash: m6QWCJVxxGzot6OqoJwSEys5DCxqMAuQiUrRofADMgg=) 12: 34332e3233312e3136302e302f32342d3234203d3e2034383038.roa (hash: eMSzssgVCrnjIF6VL8PSJ+HoJtZ3e3YyeZ8hFIcqN/Y=) 13: 3130332e3232372e3132302e302f32332d3233203d3e2034383337.roa (hash: Sx+7NoTmtU5tLHhBcnSWpMNO747BDHdsVxguRe0fQqw=) 14: 34332e3233312e3136332e302f32342d3234203d3e203233373234.roa (hash: pcpus7lziotmJzbcDYGefZ16mC5ZQevR5pHmZItnRKo=) 15: 34332e3233312e3136382e302f32342d3234203d3e203539303435.roa (hash: B4/9VepgzCAqS2VDHVYZOohdO8xJ6CFEpvbnisx0SuY=) 16: 34332e3233312e3136312e302f32342d3234203d3e2034383038.roa (hash: 8nIeiB251IaYlgVWGWgYRtlBq7njmt2I6qe1VI8ltrQ=) 17: 34332e3233312e3136322e302f32342d3234203d3e203539303435.roa (hash: le6HeP8YIpiihcpiK4OmSEaq5HwNDyRlkrLrogtJAfM=) 18: 34332e3233312e3136392e302f32342d3234203d3e203539303435.roa (hash: 4bufmTh61WaAmqfKiVanOVT2UB50zhRGG1caW8ZhWoI=) 19: 323430333a343238303a3a2f34382d3438203d3e203233373234.roa (hash: JU3XnXtyT8UelE8ZUTUzJFF4EsTcd3qBE1P0ThkMbkc=) 20: 3130332e3232372e3132332e302f32342d3234203d3e203233373234.roa (hash: 0AJrwoJqWyS7mm02LUhjXruCkjbSDcdGfNe21l9Twws=) 21: 34332e3233312e3136322e302f32342d3234203d3e2034383038.roa (hash: ejDFxPmWT+05HCia7pY1Rse7RbdQUNfTamQE0Gdm3Jo=) 22: 34332e3233312e3136312e302f32342d3234203d3e203233373234.roa (hash: rjzSBfM4QFloW2G0lnm7U5heJ8Y10odYzplLbPiFyvw=) 23: 34332e3233312e3136302e302f32342d3234203d3e203233373234.roa (hash: 24FDnRvLCzn0ANWhhM/3WAQ1SR667x669CQVFjAXkT8=) 24: 34332e3233312e3137312e302f32342d3234203d3e203539303435.roa (hash: EUbA6Gg+pJUPRNOqrh6PFcQ/lcvsOyFkVpMhKtDxR5Y=) 25: 34332e3233312e3136312e302f32342d3234203d3e203539303435.roa (hash: 358nj2S4xIzsoF5ZCAuIBT3be/At+L9A5PxfyFNWokY=) 26: 34332e3233312e3136372e302f32342d3234203d3e2034383038.roa (hash: MQCBmxAJSDHPnHo1i75aRqt3aiM6O3RFbLkUM1Vtt/Q=) 27: 34332e3233312e3136372e302f32342d3234203d3e203233373234.roa (hash: A2ZcgYufZNsYqIVGV/dEfam7F/PbIk4Us5BfawUJzrQ=) 28: 34332e3233312e3137302e302f32342d3234203d3e203539303435.roa (hash: ON/OMHXBvndmKDHTVNcxmsA4rCStsITi7ntUN0vX/M0=) 29: 34332e3233312e3136382e302f32342d3234203d3e203233373234.roa (hash: FERWDVlfu2BkKhCRK6RX8fqrYkNHGQ7nNw4fQbLjZLY=) 30: 34332e3233312e3136392e302f32342d3234203d3e2034383038.roa (hash: WC6hkAfwb7PGjQi+Xc5kuTF3CQ7uP1+avO0icjfJOuI=) 31: 34332e3233312e3136352e302f32342d3234203d3e203539303435.roa (hash: P2w3Cn8q6VBjPyjAE+aGySX201BOvmk4osx5NsrSLsM=) 32: 34332e3233312e3136382e302f32342d3234203d3e2034383038.roa (hash: eO91F7hb156INMh0wkLF9i4co0ne3A8qbTScqpey0H8=) 33: 34332e3233312e3136332e302f32342d3234203d3e2034383038.roa (hash: DcHKH8AMXCvgpm186lSssTzK4qmxlvaVy6ZMdS2SLbo=) 34: 34332e3233312e3137302e302f32342d3234203d3e2034383038.roa (hash: 9m6TuvcMhFLuF6l6KNP/vCLSN7cJPoFDY1yMsJdOZms=) 35: 3130332e3233342e35372e302f32342d3234203d3e2034383337.roa (hash: vdF+HI1oNr6kqh078qMmmr8oRIUvuhnWsColzplNCkA=) 36: 3130332e3232372e3132322e302f32342d3234203d3e203233373234.roa (hash: /gTohF8KvDpAztOs0o8krBaVNqaJojl9cS4McTId4nk=) 37: 34332e3233312e3136362e302f32342d3234203d3e203539303435.roa (hash: 7js4KyKImpomSg+LF70j2/SfmbowekJ3CaRqBA+USmU=) 38: 34332e3233312e3136372e302f32342d3234203d3e203539303435.roa (hash: /9Rp3paE32Mb7xbU1V9yI0KtWtVbueQdmeDgHK5tXtQ=) 39: 34332e3233312e3137302e302f32342d3234203d3e203233373234.roa (hash: DQqP/JMnMTlVRUIOIfUyrIq2HzHGNivtyoIhGcE1fgU=) 40: 34332e3233312e3136322e302f32342d3234203d3e203233373234.roa (hash: BdQR9FXri1FMEeb1fzW3vWWtY74O1uVL20hYCCh8JN8=) 41: 34332e3233312e3136342e302f32342d3234203d3e203539303435.roa (hash: TRXaBDgn4/52ym6X+l5H4r05polWjFlZPvb9W1ytskA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 03:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4e:db:69:30:1c:2f:b2:3c:b2:3d:bf:d5:04:94:be:03:0b:27:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: Oct 26 07:43:33 2026 GMT Not After : Oct 29 16:11:33 2026 GMT Subject: CN=766C1CAF9269F18C14DCDA83B53C0F5F532D4789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7b:70:10:d2:82:fa:19:cd:48:1d:cd:51:97: 4e:c8:24:d6:88:09:05:d5:a7:27:69:a6:ce:62:4e: 21:04:04:ba:7e:04:6e:78:f1:3c:ab:04:4c:5d:e6: 52:3b:81:71:71:d7:55:9b:cc:bf:12:ef:5f:8d:dc: 99:aa:9c:dc:86:33:18:3f:15:d3:07:a6:f8:bf:fa: f2:cd:e4:2d:2a:d1:21:a7:14:96:38:19:7f:71:9a: b9:88:45:84:c3:e4:8e:38:49:b6:54:80:1a:83:bd: a8:0a:64:64:40:56:3b:a6:f8:67:70:67:fc:f4:c6: fd:38:c9:f0:84:0e:ea:3b:cd:6c:12:80:02:f6:ed: 4a:60:32:50:14:23:64:73:36:36:9f:33:44:5b:b9: 3d:25:42:a2:5d:c7:de:b0:7c:94:99:d5:97:ed:4a: b2:de:a7:ac:92:d6:67:31:58:23:c9:34:34:b9:6c: f7:43:a0:e4:15:e2:1b:f4:b7:1e:8d:56:11:e3:ab: be:b9:93:68:85:aa:9c:fc:df:5b:c7:5c:5f:0a:a6: 75:b8:5a:0b:63:e1:55:8f:ac:8c:64:a8:ec:fc:01: 81:b1:42:fc:18:1d:97:eb:77:44:07:24:c8:f5:74: 08:50:66:42:a8:cf:d3:77:cf:df:6f:d1:7c:7d:99: 33:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6C:1C:AF:92:69:F1:8C:14:DC:DA:83:B5:3C:0F:5F:53:2D:47:89 X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:4d:9d:f0:93:83:13:02:ce:c2:79:30:34:a6:2a:05:0e:a7: bf:f6:19:78:05:11:03:6f:dc:a0:9d:cb:81:c9:13:05:13:fe: f8:02:9b:c6:4a:f1:db:bb:30:1d:f6:16:cf:8e:2b:cf:8b:ab: e2:57:ea:55:b8:33:e4:04:a7:e8:da:fc:2e:d0:29:5f:2e:33: 7b:75:67:86:09:15:b2:3e:b7:3c:e0:c8:c0:b6:45:c3:ec:d5: ff:ac:f7:a8:c0:32:7b:9b:da:0a:c8:0a:d0:77:93:7a:b1:a0: e9:9f:ce:ef:a1:64:2f:b1:06:98:70:49:91:4f:15:f0:34:9d: ed:cc:8d:b4:e2:70:70:ab:4a:b9:f7:a2:7e:61:09:24:30:02: cc:f5:3a:aa:00:71:ed:f7:99:61:d5:53:c3:70:57:06:92:40: 9f:8b:da:fb:d9:fa:07:54:c8:5d:a8:f4:2d:35:ec:44:5f:56: b1:7e:42:c9:72:55:ae:a3:e1:11:a3:fb:7d:cf:96:aa:56:6a: 61:fd:db:0b:31:92:98:a2:ca:b8:e3:2d:ee:89:a9:c9:c7:8d: 24:13:34:ae:85:6a:50:9a:bd:24:5e:9d:73:f2:95:3f:af:a0: ae:d5:26:84:fb:e0:7a:f4:55:ae:03:07:0c:4d:5e:56:df:55: 7e:84:04:c7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOU7baTAcL7I8sj2/1QSUvgMLJyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjEwMjYwNzQzMzNaFw0yNjEwMjkxNjExMzNaMDMxMTAvBgNV BAMTKDc2NkMxQ0FGOTI2OUYxOEMxNERDREE4M0I1M0MwRjVGNTMyRDQ3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVe3AQ0oL6Gc1IHc1Rl07IJNaI CQXVpydpps5iTiEEBLp+BG548TyrBExd5lI7gXFx11WbzL8S71+N3JmqnNyGMxg/ FdMHpvi/+vLN5C0q0SGnFJY4GX9xmrmIRYTD5I44SbZUgBqDvagKZGRAVjum+Gdw Z/z0xv04yfCEDuo7zWwSgAL27UpgMlAUI2RzNjafM0RbuT0lQqJdx96wfJSZ1Zft SrLep6yS1mcxWCPJNDS5bPdDoOQV4hv0tx6NVhHjq765k2iFqpz831vHXF8KpnW4 Wgtj4VWPrIxkqOz8AYGxQvwYHZfrd0QHJMj1dAhQZkKoz9N3z99v0Xx9mTOfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdmwcr5Jp8YwU3NqDtTwPX1MtR4kwHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNDc0MzA3NDgxNzYzODcvMC9CNjg4RTgwRjg5Q0FF QzZBOEM4NEE3RTUxODM4NDI0Mjg3QUJDQTg5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApU2d8JODEwLO wnkwNKYqBQ6nv/YZeAURA2/coJ3LgckTBRP++AKbxkrx27swHfYWz44rz4ur4lfq Vbgz5ASn6Nr8LtApXy4ze3VnhgkVsj63PODIwLZFw+zV/6z3qMAye5vaCsgK0HeT erGg6Z/O76FkL7EGmHBJkU8V8DSd7cyNtOJwcKtKufeifmEJJDACzPU6qgBx7feZ YdVTw3BXBpJAn4va+9n6B1TIXaj0LTXsRF9WsX5CyXJVrqPhEaP7fc+WqlZqYf3b CzGSmKLKuOMt7ompyceNJBM0roVqUJq9JF6dc/KVP6+grtUmhPvgevRVrgMHDE1e Vt9VfoQExw== -----END CERTIFICATE-----Generated at Mon Oct 26 11:41:34 2026 by rpki-client