$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft File: 158B95F55D548B072B42C2C2820ACE7D9908E60F.mft (raw, json) Hash identifier: GJsEnjb7df7mR23gGhDve1/C3kKsaqU40oPtrXw6qQY= Subject key identifier: 90:B2:0A:3B:C7:C7:8C:A0:85:4D:79:9D:6E:8D:9A:AB:22:71:18:3E Authority key identifier: 15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F Certificate issuer: /CN=158B95F55D548B072B42C2C2820ACE7D9908E60F Certificate serial: 04AFC8FE74E3D24487AFB82EB9AA99204A5BE4BE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft Manifest number: B2 Signing time: Thu 10 Sep 2026 12:11:32 +0000 Manifest this update: Thu 10 Sep 2026 12:06:32 +0000 Manifest next update: Sun 13 Sep 2026 17:44:32 +0000 Files and hashes: 1: 34332e3234372e36382e302f32322d3232203d3e20313335303631.roa (hash: sZKR1aSpK2bfOPYuVGIDfBr4OmtJuXL3mW99K3THAoc=) 2: 34332e3234372e36382e302f32322d3232203d3e20313334313936.roa (hash: BOrnJuBQWWbSNEwWS9msbaKMlsq7KEpqAJujOnLFNU8=) 3: 3130332e3233382e3138382e302f32322d3232203d3e203539303732.roa (hash: MJV3liXPzb+8HJt4Ngb1akXn1l5wwQw1ddvEgcsiGwE=) 4: 34332e3235342e3135362e302f32322d3232203d3e2034383136.roa (hash: U7lk/seyK5wsmf9rpNYFQ60FADMFiDu0J8En0AwUKps=) 5: 3130332e32342e3137362e302f32322d3232203d3e2034383136.roa (hash: JjMQBoGwSlzFw0HyUckCXXshRc+6JJT58uH4bfroxMk=) 6: 3130332e32342e3137362e302f32322d3232203d3e203539303732.roa (hash: T83A0nhY2rHA4sN3mO3P5tUJfQ79vOxGS+0CJKHN3qI=) 7: 3130332e3233382e3138382e302f32322d3232203d3e2034383136.roa (hash: IN2IWp9b73L95UufodS/94IdWqlYTDWZOnKKI30WHGM=) 8: 34332e3235342e3135362e302f32322d3232203d3e203539303732.roa (hash: 6gR0ZPFuNC294r5LAsw0olROZtYwrJv5AXDoSLqwLXc=) 9: 34332e3234372e36382e302f32322d3232203d3e203539303732.roa (hash: HFam681MVql7io9x8AgabYOuz1bqi/F3PX9muXtUEIY=) 10: 34332e3234372e36382e302f32322d3232203d3e2034383136.roa (hash: RgvI0XhO3XacBu3wOvzmrHKrZIWSkSXKoEV6lCdxrrM=) 11: 3130332e3233382e3138382e302f32322d3232203d3e20313335303631.roa (hash: xJ7VcowKTFAh+WOZ79sCa/KDiTGsKX9YSHQBCzfiaTk=) 12: 158B95F55D548B072B42C2C2820ACE7D9908E60F.crl (hash: AryhJnqLgZb/52Krqn8pCyzoai6JiAI4K802Zfg13aE=) 13: 34332e3235342e3135362e302f32322d3232203d3e20313335303631.roa (hash: 6gCPRqIsIGqs9K+MX9psHeijf0HFSORn3xh/W/ZUVN8=) 14: 3130332e32342e3137362e302f32322d3232203d3e20313335303631.roa (hash: sXBIyQqRHVSZNcPR9Xrj9U2Y6sS9BHJ6YoFqJ54U90c=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:af:c8:fe:74:e3:d2:44:87:af:b8:2e:b9:aa:99:20:4a:5b:e4:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158B95F55D548B072B42C2C2820ACE7D9908E60F Validity Not Before: Sep 10 12:06:32 2026 GMT Not After : Sep 13 17:44:32 2026 GMT Subject: CN=90B20A3BC7C78CA0854D799D6E8D9AAB2271183E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f2:1a:52:03:d7:a5:97:a0:69:e1:c8:83:75: 77:fb:50:ab:7a:88:42:c7:d6:54:91:5f:d1:fd:1e: 80:49:52:ae:fc:46:ec:12:69:85:b1:7a:91:ca:09: e3:37:96:eb:4d:bc:b9:1e:b8:a5:72:ed:4a:9c:14: 56:80:1a:89:ca:4b:e8:3a:68:e5:ca:e4:7c:0c:51: 2a:e4:6b:20:3c:30:76:04:ad:db:13:71:a2:2f:48: ce:75:d2:6b:5b:52:7a:56:9e:04:9c:a7:f2:42:d7: 8a:76:cc:bd:8c:82:f0:b8:c1:87:11:f5:24:b6:32: ee:55:b3:de:a0:58:6c:7d:a6:a8:3c:96:1b:5a:b1: 05:8e:80:58:e2:c3:f0:3c:33:17:92:20:26:3d:72: 33:b9:3c:56:45:85:b4:00:43:d7:98:27:65:58:b8: bc:ef:f9:10:82:03:fa:06:0c:03:d7:57:29:c6:b2: 39:af:71:76:66:99:8a:57:2d:18:0c:c6:3b:10:b7: 29:e2:55:c1:17:62:ab:33:ae:b9:56:fe:24:27:1b: 34:36:75:4b:56:d2:86:0f:42:e7:58:15:d9:72:b3: 0a:6b:31:5b:ed:9c:11:43:7a:ce:8f:64:37:4f:f9: f4:83:36:e8:52:f3:6c:10:28:3d:9e:b5:c3:10:e9: 20:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B2:0A:3B:C7:C7:8C:A0:85:4D:79:9D:6E:8D:9A:AB:22:71:18:3E X509v3 Authority Key Identifier: keyid:15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:51:5c:d1:bb:af:a0:3f:7b:37:e5:5d:d0:c8:7e:04:78:53: 7a:2f:7b:bd:cb:4a:06:73:42:5b:26:d4:23:0e:05:38:5b:03: 14:57:ae:ec:cb:0a:a4:19:57:ae:43:d4:60:f7:fb:06:0e:b1: c2:d2:72:a3:b2:ee:ef:66:d5:72:be:cd:ab:3b:5e:85:25:51: c6:b7:d0:38:68:e5:f7:7e:90:12:fe:ed:c0:df:2f:75:71:d1: 8c:47:6c:59:78:68:cb:cc:69:33:67:db:65:a5:70:cc:2f:03: 39:19:54:18:35:d9:ad:3f:92:be:f0:9f:45:2d:fc:13:ef:48: 08:e7:9e:5f:7a:4f:aa:a1:b4:a5:2a:79:d8:d1:4e:a4:a7:25: db:9f:bf:5a:ef:c2:dc:40:eb:25:c3:cb:d4:2c:33:ae:d4:8b: 67:99:e8:2f:e8:97:2b:49:09:f1:33:e7:bb:9f:8f:d5:5a:04: d7:29:da:98:98:af:7d:c4:08:17:5e:c2:28:d9:d5:8e:4c:58: 0f:4f:34:81:af:9f:88:9d:c0:fe:1f:f8:85:67:11:34:3e:29: 43:bf:82:31:84:73:20:b2:ca:80:d4:5c:27:2e:52:27:8d:9b: fb:a2:51:01:9b:b5:f6:8a:29:67:df:55:79:91:8e:dd:1b:4d: e7:10:db:a0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBK/I/nTj0kSHr7guuaqZIEpb5L4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU4Qjk1RjU1RDU0OEIwNzJCNDJDMkMyODIwQUNFN0Q5 OTA4RTYwRjAeFw0yNjA5MTAxMjA2MzJaFw0yNjA5MTMxNzQ0MzJaMDMxMTAvBgNV BAMTKDkwQjIwQTNCQzdDNzhDQTA4NTRENzk5RDZFOEQ5QUFCMjI3MTE4M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ8hpSA9ell6Bp4ciDdXf7UKt6 iELH1lSRX9H9HoBJUq78RuwSaYWxepHKCeM3lutNvLkeuKVy7UqcFFaAGonKS+g6 aOXK5HwMUSrkayA8MHYErdsTcaIvSM510mtbUnpWngScp/JC14p2zL2MgvC4wYcR 9SS2Mu5Vs96gWGx9pqg8lhtasQWOgFjiw/A8MxeSICY9cjO5PFZFhbQAQ9eYJ2VY uLzv+RCCA/oGDAPXVynGsjmvcXZmmYpXLRgMxjsQtyniVcEXYqszrrlW/iQnGzQ2 dUtW0oYPQudYFdlyswprMVvtnBFDes6PZDdP+fSDNuhS82wQKD2etcMQ6SDTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkLIKO8fHjKCFTXmdbo2aqyJxGD4wHwYDVR0j BBgwFoAUFYuV9V1UiwcrQsLCggrOfZkI5g8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTIxNjM2NjQxMTQ0ODMyMS8wLzE1OEI5NUY1NUQ1NDhCMDcyQjQyQzJDMjgyMEFD RTdEOTkwOEU2MEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTU4Qjk1RjU1RDU0OEIwNzJCNDJDMkMyODIwQUNFN0Q5OTA4RTYwRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTkyMTYzNjY0MTE0NDgzMjEvMC8xNThCOTVGNTVENTQ4 QjA3MkI0MkMyQzI4MjBBQ0U3RDk5MDhFNjBGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFFc0buvoD97 N+Vd0Mh+BHhTei97vctKBnNCWybUIw4FOFsDFFeu7MsKpBlXrkPUYPf7Bg6xwtJy o7Lu72bVcr7NqztehSVRxrfQOGjl936QEv7twN8vdXHRjEdsWXhoy8xpM2fbZaVw zC8DORlUGDXZrT+SvvCfRS38E+9ICOeeX3pPqqG0pSp52NFOpKcl25+/Wu/C3EDr JcPL1CwzrtSLZ5noL+iXK0kJ8TPnu5+P1VoE1ynamJivfcQIF17CKNnVjkxYD080 ga+fiJ3A/h/4hWcRND4pQ7+CMYRzILLKgNRcJy5SJ42b+6JRAZu19oopZ99VeZGO 3RtN5xDboA== -----END CERTIFICATE-----Generated at Thu Sep 10 19:12:06 2026 by rpki-client