$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft File: 44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft (raw, json) Hash identifier: 6ZOcHinGnAQB+HKd14TXSJi17QHFC3HI8s4as/lD5bw= Subject key identifier: BB:88:E1:40:A6:15:C8:B1:83:C8:B5:B9:51:AB:98:54:9E:90:0E:8C Authority key identifier: 44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98 Certificate issuer: /CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098 Certificate serial: 16B61A96F371DAC90B90BD22F932B20CB8A57000 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft Manifest number: CD Signing time: Mon 26 Oct 2026 12:38:42 +0000 Manifest this update: Mon 26 Oct 2026 12:33:42 +0000 Manifest next update: Thu 29 Oct 2026 20:30:42 +0000 Files and hashes: 1: 3232332e32372e3138342e302f32322d3234203d3e203137363232.roa (hash: EZct4Zms1fr5Cv5AHLRYsjjpW0LFyhDM8Nq7/BMcOeA=) 2: 44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl (hash: viSD0mg/b2H29oXR8EO6cTZQ81OG2BEdWY8Eps3IsYo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 20:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b6:1a:96:f3:71:da:c9:0b:90:bd:22:f9:32:b2:0c:b8:a5:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44094948C6E3D32A1A59BE6795CD8A2A3A528098 Validity Not Before: Oct 26 12:33:42 2026 GMT Not After : Oct 29 20:30:42 2026 GMT Subject: CN=BB88E140A615C8B183C8B5B951AB98549E900E8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:a7:4e:41:a2:ea:58:39:3e:b9:3a:70:c7: ec:f4:d8:b0:47:c8:8e:26:54:7d:56:3d:9f:4b:d6: 3c:33:0e:4d:33:3c:0f:27:91:6f:68:da:58:4a:73: 81:3b:c5:88:0c:cd:71:aa:a1:e6:a5:27:78:ee:f2: 30:b8:71:31:45:a6:20:89:42:5a:05:98:a9:ae:99: 80:77:46:a6:8b:0e:11:74:39:d2:79:2b:01:e4:a8: 2f:f7:70:e7:34:db:1a:4e:67:07:8f:1c:29:89:a7: b9:04:71:a0:89:26:9e:6f:03:99:1c:4c:62:45:b9: d9:e8:76:c8:52:da:ee:5f:24:0e:b2:af:ec:a1:33: cb:5a:0f:fc:31:1a:1e:80:40:08:80:b5:84:16:27: bd:10:3a:91:8b:68:08:6e:c6:b3:e2:45:54:eb:3d: 8c:a5:38:01:4a:8c:e5:78:8a:8d:23:02:d8:d6:d1: 15:02:3e:c7:ce:1a:ed:7b:af:ec:81:51:b6:e2:bb: d4:71:27:a7:81:a8:c7:85:3e:30:5e:64:30:76:6c: 9b:d1:63:9a:03:8f:97:08:a5:70:44:bc:70:96:9b: b5:9f:e2:72:bb:bc:78:75:81:11:18:a4:d3:e1:b3: 21:06:1f:8f:a5:84:27:d0:54:47:bc:ba:77:ef:c0: f8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:88:E1:40:A6:15:C8:B1:83:C8:B5:B9:51:AB:98:54:9E:90:0E:8C X509v3 Authority Key Identifier: keyid:44:09:49:48:C6:E3:D3:2A:1A:59:BE:67:95:CD:8A:2A:3A:52:80:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/44094948C6E3D32A1A59BE6795CD8A2A3A528098.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099892075173773315/0/44094948C6E3D32A1A59BE6795CD8A2A3A528098.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:8d:80:ee:26:e2:3b:0c:68:6a:36:87:fc:70:67:4f:b6:ca: ea:11:ab:90:64:b4:ee:34:01:5c:2d:a3:b2:7c:c0:8f:b6:28: 04:0a:2b:4a:a8:f5:e1:31:b1:f1:90:17:00:5a:59:19:b2:b4: b2:39:f4:c4:02:f8:84:56:38:98:de:75:76:c5:19:fc:8c:fd: ea:7f:10:7d:ef:33:48:4b:ce:25:a6:8a:f8:5b:1e:02:df:de: c2:e8:32:a9:7c:fd:e6:07:71:b3:84:36:28:82:46:a7:aa:f5: b7:eb:cf:be:38:d8:21:f7:b9:31:44:c6:7f:46:5d:ed:0d:aa: e6:fa:97:46:5c:ba:7f:d6:73:47:e6:b0:60:24:d3:19:af:8a: a4:05:8c:ba:17:e0:0c:7c:c5:48:6d:5d:14:a1:f6:3e:44:bd: ff:8e:48:d7:00:46:64:c2:72:a3:9b:67:8c:38:b5:99:b6:5b: fb:a1:c8:9e:db:d2:98:1c:82:9c:19:bb:4a:e0:24:60:d7:33: 88:24:e0:d0:11:5d:c0:40:5c:11:33:75:c4:98:02:59:96:21: b0:97:5a:14:74:a4:da:b1:df:02:49:c9:28:75:fd:0d:c7:5e: c4:62:8f:b3:6d:a1:a5:27:b3:93:a6:7a:86:3d:3c:03:98:d1: 6b:5e:92:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFrYalvNx2skLkL0i+TKyDLilcAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwOTQ5NDhDNkUzRDMyQTFBNTlCRTY3OTVDRDhBMkEz QTUyODA5ODAeFw0yNjEwMjYxMjMzNDJaFw0yNjEwMjkyMDMwNDJaMDMxMTAvBgNV BAMTKEJCODhFMTQwQTYxNUM4QjE4M0M4QjVCOTUxQUI5ODU0OUU5MDBFOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIH6dOQaLqWDk+uTpwx+z02LBH yI4mVH1WPZ9L1jwzDk0zPA8nkW9o2lhKc4E7xYgMzXGqoealJ3ju8jC4cTFFpiCJ QloFmKmumYB3RqaLDhF0OdJ5KwHkqC/3cOc02xpOZwePHCmJp7kEcaCJJp5vA5kc TGJFudnodshS2u5fJA6yr+yhM8taD/wxGh6AQAiAtYQWJ70QOpGLaAhuxrPiRVTr PYylOAFKjOV4io0jAtjW0RUCPsfOGu17r+yBUbbiu9RxJ6eBqMeFPjBeZDB2bJvR Y5oDj5cIpXBEvHCWm7Wf4nK7vHh1gREYpNPhsyEGH4+lhCfQVEe8unfvwPh3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUu4jhQKYVyLGDyLW5UauYVJ6QDowwHwYDVR0j BBgwFoAURAlJSMbj0yoaWb5nlc2KKjpSgJgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5MjA3NTE3Mzc3MzMxNS8wLzQ0MDk0OTQ4QzZFM0QzMkExQTU5QkU2Nzk1Q0Q4 QTJBM0E1MjgwOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDQwOTQ5NDhDNkUzRDMyQTFBNTlCRTY3OTVDRDhBMkEzQTUyODA5OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTIwNzUxNzM3NzMzMTUvMC80NDA5NDk0OEM2RTNE MzJBMUE1OUJFNjc5NUNEOEEyQTNBNTI4MDk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAI2A7ibiOwxo ajaH/HBnT7bK6hGrkGS07jQBXC2jsnzAj7YoBAorSqj14TGx8ZAXAFpZGbK0sjn0 xAL4hFY4mN51dsUZ/Iz96n8Qfe8zSEvOJaaK+FseAt/ewugyqXz95gdxs4Q2KIJG p6r1t+vPvjjYIfe5MUTGf0Zd7Q2q5vqXRly6f9ZzR+awYCTTGa+KpAWMuhfgDHzF SG1dFKH2PkS9/45I1wBGZMJyo5tnjDi1mbZb+6HIntvSmByCnBm7SuAkYNcziCTg 0BFdwEBcETN1xJgCWZYhsJdaFHSk2rHfAknJKHX9DcdexGKPs22hpSezk6Z6hj08 A5jRa16SGA== -----END CERTIFICATE-----Generated at Wed Oct 28 04:54:47 2026 by rpki-client