$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft File: 32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft (raw, json) Hash identifier: yNcwWU1iLtY81D2utdhPS7hnJmbxxbgpwuLVQhR35fQ= Subject key identifier: DD:9D:01:90:B3:55:E6:3C:62:94:23:B1:6A:EF:49:6C:60:81:C5:AD Authority key identifier: 32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 Certificate issuer: /CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Certificate serial: 7ABB5FC8E17C38775740DEF50A7DF376AE569DAE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft Manifest number: BF Signing time: Sat 10 Oct 2026 02:09:04 +0000 Manifest this update: Sat 10 Oct 2026 02:04:04 +0000 Manifest next update: Tue 13 Oct 2026 12:10:04 +0000 Files and hashes: 1: 3230322e34312e3135362e302f32322d3232203d3e203538383334.roa (hash: T+pvuiks6kPGPp4EB9NR96xMgNADrbCbZHwEyEfSpGU=) 2: 3231312e3135342e3137362e302f32302d3230203d3e203137383136.roa (hash: 9mhciqlhVNGj1pcFXF1OQGsR962WTBsnthesg/P07WQ=) 3: 3230322e34312e3135322e302f32312d3231203d3e203538383334.roa (hash: BNbF7LCHL9eJXgA/NHfhqhVICBytivhioqO9DDkr7Oc=) 4: 3230322e34312e3135322e302f32312d3231203d3e203137383136.roa (hash: 8TG6MQgO1lI3vkKTh0hsJ8yHBg2b506eCK0j3rcCfdM=) 5: 32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl (hash: JyIr9PmNJMBlG5/hajrgxO4cEnyLAOlubssYdBAp2XM=) 6: 3231312e3135342e3137362e302f32312d3231203d3e203538383334.roa (hash: tEDyLaYRb0pvyhNQEaIWXhzDwecCkMS3qTgzbIUEgJE=) 7: 3231312e3135342e3138342e302f32312d3231203d3e203538383334.roa (hash: y4mypuyrjE5FRM8LG/t2MR96fZhrvQ7pH4jlaPqJt30=) 8: 3231312e3135342e3137362e302f32302d3230203d3e203538383334.roa (hash: OpGVfeYU7LEL5azDcsFR3vJFp24QCQ50RK10N7hSA1A=) 9: 3230322e34312e3135322e302f32322d3232203d3e203538383334.roa (hash: XaJzJb9eUd+kmvH/ZQyTu8LXtqPHpbXPuRyXM039t3E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:bb:5f:c8:e1:7c:38:77:57:40:de:f5:0a:7d:f3:76:ae:56:9d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32A1B9CA0B4E1D345EF37542407653C6E58EBC53 Validity Not Before: Oct 10 02:04:04 2026 GMT Not After : Oct 13 12:10:04 2026 GMT Subject: CN=DD9D0190B355E63C629423B16AEF496C6081C5AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:9f:4d:34:5e:fb:97:55:1d:97:b9:34:99: 89:f5:e5:c5:2f:15:e9:01:f8:34:f8:05:c7:3d:2f: 19:f0:1d:7c:9c:8a:a4:82:b1:ae:b8:b4:a6:88:26: bd:5b:98:cf:db:82:74:13:50:40:3d:5d:22:0c:19: 02:22:19:37:72:ef:da:db:cc:35:46:32:67:63:bd: 0b:86:c0:5b:3c:78:62:e7:2a:65:29:79:99:b6:74: f4:bd:cc:74:59:2b:53:51:0b:9a:bc:0a:c5:11:ea: 4d:59:a2:67:a9:00:23:4e:1d:f5:9e:86:fd:91:09: 48:81:bb:a8:5b:18:1f:09:0d:54:89:6e:27:7d:fa: 54:da:a8:f7:ae:26:3a:f5:be:4a:36:1f:5b:77:2e: 43:5d:1d:bf:4a:2b:6a:8e:bb:9d:a8:c4:f3:cf:6c: 9d:17:7e:db:0a:c2:c3:5b:d0:f9:24:11:a8:fc:2d: 82:74:1d:16:a2:e4:78:9f:e8:db:1a:13:7f:58:c1: 64:df:c6:20:a7:be:ac:77:06:de:31:9e:25:08:7c: 65:a4:d0:92:95:d8:7c:06:85:32:37:ef:e6:f7:41: 50:f7:ad:fc:92:6f:af:12:68:f9:d5:6c:8a:78:98: 1b:3a:68:3a:9b:b3:3e:49:43:a7:bd:b0:ff:32:1f: 12:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9D:01:90:B3:55:E6:3C:62:94:23:B1:6A:EF:49:6C:60:81:C5:AD X509v3 Authority Key Identifier: keyid:32:A1:B9:CA:0B:4E:1D:34:5E:F3:75:42:40:76:53:C6:E5:8E:BC:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099898650089291777/0/32A1B9CA0B4E1D345EF37542407653C6E58EBC53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:58:21:01:03:22:5f:20:96:94:22:fe:f1:c4:b5:76:15:0d: 4f:33:04:ad:c4:32:03:76:59:64:ce:0a:89:c6:c5:97:a4:b6: 50:88:d8:df:0e:1c:7f:47:65:7a:69:a0:12:1f:a8:e8:4b:39: 6b:5b:5a:be:09:e2:14:0d:41:7b:24:98:7c:3a:3f:a4:79:0a: 9e:92:21:7d:d8:08:de:ba:79:7d:51:f5:f9:85:3c:44:71:66: 0e:da:1b:52:43:d1:3d:86:7c:8d:c1:0b:f4:17:78:22:d3:c8: 6a:7e:a1:b7:a0:ee:2a:bc:ac:67:46:f6:bc:d9:2c:b0:50:9d: 47:05:90:51:51:ec:bb:10:0b:3c:5f:bc:d8:38:d5:f6:59:8b: 56:53:55:db:d0:0f:3b:e4:e9:73:1c:ba:96:ff:24:f9:6c:a1: 53:4c:3e:c6:b1:38:38:7b:33:47:2c:f1:99:4e:07:11:54:d8: 89:e6:30:3a:cf:de:26:98:eb:0b:69:a7:9b:d7:c9:38:2e:77: 29:b3:17:05:77:76:84:97:8b:a3:30:e7:fa:14:1c:42:b1:c4: 9d:cb:69:ab:14:84:40:56:61:87:7e:39:11:20:e2:d4:05:8d: 9c:49:a9:0e:37:76:7b:c2:9a:50:18:3d:28:1f:7f:47:73:92: ae:a9:f3:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUertfyOF8OHdXQN71Cn3zdq5Wna4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZF NThFQkM1MzAeFw0yNjEwMTAwMjA0MDRaFw0yNjEwMTMxMjEwMDRaMDMxMTAvBgNV BAMTKEREOUQwMTkwQjM1NUU2M0M2Mjk0MjNCMTZBRUY0OTZDNjA4MUM1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9mZ9NNF77l1Udl7k0mYn15cUv FekB+DT4Bcc9LxnwHXyciqSCsa64tKaIJr1bmM/bgnQTUEA9XSIMGQIiGTdy79rb zDVGMmdjvQuGwFs8eGLnKmUpeZm2dPS9zHRZK1NRC5q8CsUR6k1ZomepACNOHfWe hv2RCUiBu6hbGB8JDVSJbid9+lTaqPeuJjr1vko2H1t3LkNdHb9KK2qOu52oxPPP bJ0XftsKwsNb0PkkEaj8LYJ0HRai5Hif6NsaE39YwWTfxiCnvqx3Bt4xniUIfGWk 0JKV2HwGhTI37+b3QVD3rfySb68SaPnVbIp4mBs6aDqbsz5JQ6e9sP8yHxJBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3Z0BkLNV5jxilCOxau9JbGCBxa0wHwYDVR0j BBgwFoAUMqG5ygtOHTRe83VCQHZTxuWOvFMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTg5ODY1MDA4OTI5MTc3Ny8wLzMyQTFCOUNBMEI0RTFEMzQ1RUYzNzU0MjQwNzY1 M0M2RTU4RUJDNTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzJBMUI5Q0EwQjRFMUQzNDVFRjM3NTQyNDA3NjUzQzZFNThFQkM1My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk4OTg2NTAwODkyOTE3NzcvMC8zMkExQjlDQTBCNEUx RDM0NUVGMzc1NDI0MDc2NTNDNkU1OEVCQzUzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlghAQMiXyCW lCL+8cS1dhUNTzMErcQyA3ZZZM4KicbFl6S2UIjY3w4cf0dlemmgEh+o6Es5a1ta vgniFA1BeySYfDo/pHkKnpIhfdgI3rp5fVH1+YU8RHFmDtobUkPRPYZ8jcEL9Bd4 ItPIan6ht6DuKrysZ0b2vNkssFCdRwWQUVHsuxALPF+82DjV9lmLVlNV29APO+Tp cxy6lv8k+WyhU0w+xrE4OHszRyzxmU4HEVTYieYwOs/eJpjrC2mnm9fJOC53KbMX BXd2hJeLozDn+hQcQrHEnctpqxSEQFZhh345ESDi1AWNnEmpDjd2e8KaUBg9KB9/ R3OSrqnz9g== -----END CERTIFICATE-----Generated at Sun Oct 11 19:35:41 2026 by rpki-client