$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft File: C99930256B2681B676C3F969B9E070208697E59E.mft (raw, json) Hash identifier: dwWxd+wnaTxiXIaSE2t41Ij9FHreZQa8JePg12U3fXU= Subject key identifier: 04:0B:33:6C:33:CF:9E:FC:3F:7F:CE:53:40:9A:5C:0D:EB:12:BE:AA Authority key identifier: C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E Certificate issuer: /CN=C99930256B2681B676C3F969B9E070208697E59E Certificate serial: 44D117476CCF47F9B210E452005B05CCA3175D53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft Manifest number: CC Signing time: Tue 27 Oct 2026 09:14:32 +0000 Manifest this update: Tue 27 Oct 2026 09:09:32 +0000 Manifest next update: Fri 30 Oct 2026 14:42:32 +0000 Files and hashes: 1: 34352e3235342e32302e302f32322d3232203d3e20313333373734.roa (hash: ZJloOk6sDE753o+7/mUwoLrIvMNMTCjFQ6yK9+8AJEo=) 2: 3130332e3232332e3133322e302f32322d3232203d3e20313333373734.roa (hash: vN8yHwI46fYA/l1ygz8W/PzYzDVLVvVRqEe7rahUo3g=) 3: 3130332e3232332e3133322e302f32342d3234203d3e20313333373734.roa (hash: zyZSIrZQJV+xvNXDp3BEVkPjoRuBompddy6z7lE4MrA=) 4: C99930256B2681B676C3F969B9E070208697E59E.crl (hash: t3QHnaNznM6qY15XDesBNxVEu7r0G3kLKxWVwwoN3i4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 14:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d1:17:47:6c:cf:47:f9:b2:10:e4:52:00:5b:05:cc:a3:17:5d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C99930256B2681B676C3F969B9E070208697E59E Validity Not Before: Oct 27 09:09:32 2026 GMT Not After : Oct 30 14:42:32 2026 GMT Subject: CN=040B336C33CF9EFC3F7FCE53409A5C0DEB12BEAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bc:d1:bd:27:59:47:75:12:7f:9a:a6:ed:d0: 93:74:02:30:2d:0c:69:d2:80:2b:ab:6f:b5:35:ab: 72:68:46:e3:20:2b:26:9e:e7:49:91:38:5a:54:40: b9:17:9c:e1:81:b0:ff:49:bb:32:0e:d5:84:e1:9e: 1b:13:6c:dd:b5:6b:07:79:3b:49:66:46:d6:37:2e: df:18:d3:c7:9c:1a:43:e0:5b:f4:e4:82:19:43:3f: 6a:63:0d:78:b2:ca:fd:75:ce:b7:9d:55:ff:56:25: f2:89:3a:c9:f1:3d:7b:a1:42:ce:38:dc:8c:a3:63: 87:f3:4a:41:8e:21:62:e3:d1:20:7d:38:b5:07:18: d7:84:aa:dc:51:f4:f2:97:4f:f8:4b:4a:fd:39:0f: 76:c5:14:02:df:56:fe:eb:f6:cd:f1:c0:31:49:13: 22:ce:27:1c:7e:92:bd:93:22:1d:4d:a2:7d:9f:a5: 9e:68:52:75:60:1b:f9:84:15:49:2a:6b:fb:ab:8c: 48:1a:89:3e:46:13:82:33:fc:29:77:b9:94:24:01: 30:7d:25:29:f5:24:24:6b:cd:ed:d6:f0:55:7e:33: d9:8e:c1:a6:e4:7c:7e:f7:2e:ca:0c:a0:c3:a3:19: 09:84:30:73:22:37:94:f4:88:9e:08:ec:1f:a8:b6: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0B:33:6C:33:CF:9E:FC:3F:7F:CE:53:40:9A:5C:0D:EB:12:BE:AA X509v3 Authority Key Identifier: keyid:C9:99:30:25:6B:26:81:B6:76:C3:F9:69:B9:E0:70:20:86:97:E5:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C99930256B2681B676C3F969B9E070208697E59E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098794578586107906/0/C99930256B2681B676C3F969B9E070208697E59E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:53:2a:c4:66:b4:65:7c:59:a2:43:8f:83:d2:1f:18:8e:26: b4:22:6a:30:dd:97:fd:9e:97:54:52:5e:5f:9e:a2:35:8a:ed: 0e:c8:bd:fb:7c:27:06:06:58:c2:41:6c:47:8f:0b:13:b2:d5: 48:4f:5b:a8:93:bf:b0:d2:c8:86:a4:5d:a7:d1:1e:ab:96:59: 42:1c:be:20:4e:04:40:cb:9f:8b:f5:ac:c1:07:1e:bf:ec:28: 92:11:4e:b1:24:a3:73:cf:eb:8d:09:0b:27:b2:3f:10:a4:e6: 79:6b:a4:ab:03:3f:83:53:a9:ad:cf:90:62:b7:52:ab:e8:0d: 68:10:de:2f:cf:a8:7e:6e:da:52:4f:72:3a:b1:eb:65:eb:71: 8c:d4:9d:02:c1:25:81:7d:2b:a3:f7:69:b5:99:15:22:b6:a5: 01:c1:5a:9b:6f:b8:d8:b6:f5:3c:80:30:6e:ee:25:f7:99:24: 39:13:0a:17:3d:eb:c2:da:a0:9b:9d:5b:26:ed:45:f9:18:d3: 90:d5:f2:8e:0f:cf:c7:b8:97:4e:82:de:f4:30:63:50:a2:3c: 76:51:d6:84:97:49:f6:de:a3:78:ab:f5:f9:d1:80:e6:54:9c: 02:a4:14:7c:e0:b7:e6:9c:f1:4c:2b:f5:2e:4f:05:71:b6:f8: 21:f2:df:16 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURNEXR2zPR/myEORSAFsFzKMXXVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4 Njk3RTU5RTAeFw0yNjEwMjcwOTA5MzJaFw0yNjEwMzAxNDQyMzJaMDMxMTAvBgNV BAMTKDA0MEIzMzZDMzNDRjlFRkMzRjdGQ0U1MzQwOUE1QzBERUIxMkJFQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9vNG9J1lHdRJ/mqbt0JN0AjAt DGnSgCurb7U1q3JoRuMgKyae50mROFpUQLkXnOGBsP9JuzIO1YThnhsTbN21awd5 O0lmRtY3Lt8Y08ecGkPgW/TkghlDP2pjDXiyyv11zredVf9WJfKJOsnxPXuhQs44 3IyjY4fzSkGOIWLj0SB9OLUHGNeEqtxR9PKXT/hLSv05D3bFFALfVv7r9s3xwDFJ EyLOJxx+kr2TIh1Non2fpZ5oUnVgG/mEFUkqa/urjEgaiT5GE4Iz/Cl3uZQkATB9 JSn1JCRrze3W8FV+M9mOwabkfH73LsoMoMOjGQmEMHMiN5T0iJ4I7B+otl7HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBAszbDPPnvw/f85TQJpcDesSvqowHwYDVR0j BBgwFoAUyZkwJWsmgbZ2w/lpueBwIIaX5Z4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODc5NDU3ODU4NjEwNzkwNi8wL0M5OTkzMDI1NkIyNjgxQjY3NkMzRjk2OUI5RTA3 MDIwODY5N0U1OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzk5OTMwMjU2QjI2ODFCNjc2QzNGOTY5QjlFMDcwMjA4Njk3RTU5RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg3OTQ1Nzg1ODYxMDc5MDYvMC9DOTk5MzAyNTZCMjY4 MUI2NzZDM0Y5NjlCOUUwNzAyMDg2OTdFNTlFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvFMqxGa0ZXxZ okOPg9IfGI4mtCJqMN2X/Z6XVFJeX56iNYrtDsi9+3wnBgZYwkFsR48LE7LVSE9b qJO/sNLIhqRdp9Eeq5ZZQhy+IE4EQMufi/WswQcev+wokhFOsSSjc8/rjQkLJ7I/ EKTmeWukqwM/g1Oprc+QYrdSq+gNaBDeL8+ofm7aUk9yOrHrZetxjNSdAsElgX0r o/dptZkVIralAcFam2+42Lb1PIAwbu4l95kkORMKFz3rwtqgm51bJu1F+RjTkNXy jg/Px7iXToLe9DBjUKI8dlHWhJdJ9t6jeKv1+dGA5lScAqQUfOC35pzxTCv1Lk8F cbb4IfLfFg== -----END CERTIFICATE-----Generated at Wed Oct 28 19:36:49 2026 by rpki-client