$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft File: D8E9745B505CCD7D22105CB89D5574E599B45E13.mft (raw, json) Hash identifier: o/E4BHcOVthTAuQRe4Yu89m64/bP5hVkqanlVaFIaKM= Subject key identifier: 1F:29:57:7D:BB:4D:C7:23:5A:25:DC:62:70:76:DE:EC:91:19:87:32 Authority key identifier: D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 Certificate issuer: /CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Certificate serial: 343235778CFB4D63189BBDADCB13009DF731463A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft Manifest number: C0 Signing time: Sun 18 Oct 2026 05:59:30 +0000 Manifest this update: Sun 18 Oct 2026 05:54:30 +0000 Manifest next update: Wed 21 Oct 2026 16:07:30 +0000 Files and hashes: 1: 3130332e3139382e3132342e302f32322d3332203d3e2034383132.roa (hash: l20mQBMrYLf5Wq5MznRX5BSW2+IC0U4zBJVGZ6jKOmY=) 2: 35392e3135332e39322e302f32322d3332203d3e2034383132.roa (hash: lt4KWknfUObH/qHkUtN+btOyemHSMksphdlyLLyfK/g=) 3: 35392e3135332e39322e302f32332d3332203d3e2034383131.roa (hash: dQ5nqVgh7GWsz4jiy9GRchNyAdjxpS1QTiS+gB82vlM=) 4: D8E9745B505CCD7D22105CB89D5574E599B45E13.crl (hash: 8je1eJJiBNGDVKhFsEw/U3hfXwhkEPlbEZO5Ywhzc/s=) 5: 3130332e3139382e3132362e302f32332d3332203d3e2034383131.roa (hash: 8k9/tekmwF3559V6Wcf5Uxlvz6BnhN1MfJB76I2YrfM=) 6: 3130332e3139382e3132342e302f32332d3332203d3e2034383131.roa (hash: wk9jpnIOd1FAN50M4ySLha6bwCfuT83y/6P2aFIHliw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 16:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:32:35:77:8c:fb:4d:63:18:9b:bd:ad:cb:13:00:9d:f7:31:46:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Validity Not Before: Oct 18 05:54:30 2026 GMT Not After : Oct 21 16:07:30 2026 GMT Subject: CN=1F29577DBB4DC7235A25DC627076DEEC91198732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7a:a6:35:00:1d:0c:3e:1d:6f:4a:1a:4f:21: 27:3b:84:9e:da:ca:f5:1a:b9:02:66:78:5f:b4:e6: 83:f2:1e:45:cd:5c:da:6e:68:78:2b:97:66:90:99: 1b:ee:8d:0f:9a:71:56:78:04:00:b0:45:ef:7b:44: 43:80:da:6f:3c:80:b9:57:23:34:ed:b4:40:79:4e: 50:86:e9:1e:a2:b8:8e:4a:d6:df:2a:96:ac:07:0c: ed:70:c1:cb:a0:ee:03:10:2e:20:5e:07:ac:a4:26: bd:1b:79:b8:fa:c9:9f:5d:ea:a3:f3:c6:e7:9b:59: 36:50:10:94:c2:0f:53:df:9a:7c:3c:b6:c4:cf:d0: 80:3f:0f:76:22:db:6f:43:45:26:46:b9:33:9a:0f: 51:d9:50:3a:a2:ca:58:60:e2:8f:9d:ca:82:7f:88: eb:66:7a:b0:a0:02:f8:c7:13:d2:8d:04:83:e8:94: 1c:33:9d:75:20:87:5b:fd:d2:e9:14:6b:e9:d8:58: 2d:7d:48:5b:cf:82:c9:66:fc:db:0b:5b:05:11:c6: 99:ba:8f:0f:1f:e7:5c:4d:e0:d3:fd:8f:16:f9:c2: c1:e0:07:b2:8d:a9:27:29:71:63:3f:15:0b:28:de: 36:f0:12:f9:c4:e4:e2:a4:0d:83:21:22:0e:50:29: f8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:29:57:7D:BB:4D:C7:23:5A:25:DC:62:70:76:DE:EC:91:19:87:32 X509v3 Authority Key Identifier: keyid:D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:fa:95:e5:29:6c:ba:1c:59:3c:43:ed:5f:3e:a4:0a:20:d8: e7:a2:97:a8:8b:f7:a0:ae:a8:eb:1b:5a:e6:1d:f6:ea:14:e2: 59:f4:08:0b:eb:ab:cd:62:9a:6e:16:f5:73:1c:4e:2e:c2:a0: 23:bc:25:2e:27:31:7a:23:4a:08:db:9a:f6:6d:54:51:53:4e: 02:5f:2e:e0:65:f7:ae:9f:68:e5:6e:66:08:fa:bd:c8:aa:cd: c9:e1:1a:16:e7:17:d3:1a:a1:81:78:0e:b8:b0:4c:73:e9:62: f7:74:24:84:54:0b:78:65:5d:bc:15:c8:c8:d8:7e:50:0a:4e: e0:6f:c5:42:80:bb:5f:12:ca:7f:20:da:81:e9:52:5f:99:a9: 2e:5a:da:2b:2c:c3:24:ea:48:7d:4d:1c:f2:b5:6b:d2:51:73: 2d:f3:05:0c:49:11:6d:9e:39:99:0c:47:15:39:ce:16:c8:88: f9:0b:9e:75:67:59:ba:f2:c9:e1:59:d0:b1:29:2f:7a:89:39: 41:f0:eb:7d:90:28:96:7e:1c:b0:c1:01:9b:c4:bd:40:27:44: 76:cd:85:ba:7c:b3:79:a9:80:91:42:c7:76:a7:a7:c4:79:42: 89:b1:23:ee:c4:2b:1a:31:f9:ec:da:27:93:89:12:d8:c8:9e: ff:1e:ad:51 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNDI1d4z7TWMYm72tyxMAnfcxRjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5 OUI0NUUxMzAeFw0yNjEwMTgwNTU0MzBaFw0yNjEwMjExNjA3MzBaMDMxMTAvBgNV BAMTKDFGMjk1NzdEQkI0REM3MjM1QTI1REM2MjcwNzZERUVDOTExOTg3MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKeqY1AB0MPh1vShpPISc7hJ7a yvUauQJmeF+05oPyHkXNXNpuaHgrl2aQmRvujQ+acVZ4BACwRe97REOA2m88gLlX IzTttEB5TlCG6R6iuI5K1t8qlqwHDO1wwcug7gMQLiBeB6ykJr0bebj6yZ9d6qPz xuebWTZQEJTCD1Pfmnw8tsTP0IA/D3Yi229DRSZGuTOaD1HZUDqiylhg4o+dyoJ/ iOtmerCgAvjHE9KNBIPolBwznXUgh1v90ukUa+nYWC19SFvPgslm/NsLWwURxpm6 jw8f51xN4NP9jxb5wsHgB7KNqScpcWM/FQso3jbwEvnE5OKkDYMhIg5QKfjXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHylXfbtNxyNaJdxicHbe7JEZhzIwHwYDVR0j BBgwFoAU2Ol0W1BczX0iEFy4nVV05Zm0XhMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTA1OTE2ODczMjcwODg2NS8wL0Q4RTk3NDVCNTA1Q0NEN0QyMjEwNUNCODlENTU3 NEU1OTlCNDVFMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5OUI0NUUxMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEwNTkxNjg3MzI3MDg4NjUvMC9EOEU5NzQ1QjUwNUND RDdEMjIxMDVDQjg5RDU1NzRFNTk5QjQ1RTEzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvqV5SlsuhxZ PEPtXz6kCiDY56KXqIv3oK6o6xta5h326hTiWfQIC+urzWKabhb1cxxOLsKgI7wl LicxeiNKCNua9m1UUVNOAl8u4GX3rp9o5W5mCPq9yKrNyeEaFucX0xqhgXgOuLBM c+li93QkhFQLeGVdvBXIyNh+UApO4G/FQoC7XxLKfyDagelSX5mpLlraKyzDJOpI fU0c8rVr0lFzLfMFDEkRbZ45mQxHFTnOFsiI+QuedWdZuvLJ4VnQsSkveok5QfDr fZAoln4csMEBm8S9QCdEds2FunyzeamAkULHdqenxHlCibEj7sQrGjH57Nonk4kS 2Mie/x6tUQ== -----END CERTIFICATE-----Generated at Tue Oct 20 15:07:00 2026 by rpki-client