$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft File: A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft (raw, json) Hash identifier: LWc9oMqSNSyCB+lnr548hg7k98v7MarAw4ojdFK8A44= Subject key identifier: 22:28:CA:44:FB:1A:C1:88:C6:2D:76:D6:D7:26:76:DE:A6:50:D8:56 Authority key identifier: A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F Certificate issuer: /CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F Certificate serial: 3AF98529F92DB510D6C0A7384B3948FAFF1F6C96 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft Manifest number: C4 Signing time: Mon 12 Oct 2026 15:17:05 +0000 Manifest this update: Mon 12 Oct 2026 15:12:05 +0000 Manifest next update: Thu 15 Oct 2026 22:31:05 +0000 Files and hashes: 1: 3132312e34362e3139322e302f32322d3232203d3e20313430323932.roa (hash: wc58+9s0xCI5qy0srFHch4c3xXfPOj0QoS2Uy2hNKzo=) 2: 3132312e34362e3139362e302f32322d3232203d3e20313430373137.roa (hash: r1OrvrQbOG3CWpMBVfsfGJEW6xW4KGBKQR94p3XbtMs=) 3: A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl (hash: AV2uXs4IukDq4gXlBqN32NW/wHs8wA12A9nAmhn7Vrs=) 4: 3132312e34362e3230302e302f32322d3232203d3e203536303436.roa (hash: ctS4EHMva7f1SKBENENSA56WVaEq0k2ByBGUs33Z5FA=) 5: 3132312e34362e3139322e302f32322d3232203d3e20313430373137.roa (hash: 5wawcPsM5m80HU28KarQtD66H36M4Wp3DiAa4Kkd7FM=) 6: 3132312e34362e3139362e302f32322d3232203d3e20313430323932.roa (hash: O/AD3qSU6wTIgj4hkNfIn+Jeen/941RJSXGvoa481lc=) 7: 3132312e34362e3230302e302f32322d3232203d3e20313430323932.roa (hash: 8xs+dUd+uQdNQZJjuvb+nFvO1wt2heC5dsLAy2/mChI=) 8: 3132312e34362e3230302e302f32322d3232203d3e20313430373137.roa (hash: EEb5FwKgW5dHQUxB859/L0aDnU2++rdkRtR6F19ReF8=) 9: 3132312e34362e3139362e302f32322d3232203d3e203536303436.roa (hash: aodd28e8U9PHDKWSm11EB6EZp6VbHVm/MuILVwyonvk=) 10: 3132312e34362e3139322e302f32322d3232203d3e203536303436.roa (hash: eS3fIU3qyAFP/R9AYBNjmWcu/ek4BsGa+9vz4CrGdkE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 22:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f9:85:29:f9:2d:b5:10:d6:c0:a7:38:4b:39:48:fa:ff:1f:6c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F Validity Not Before: Oct 12 15:12:05 2026 GMT Not After : Oct 15 22:31:05 2026 GMT Subject: CN=2228CA44FB1AC188C62D76D6D72676DEA650D856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:25:ad:4f:cd:ab:43:0c:48:b0:93:e3:5a:04: be:d0:de:8b:76:a9:c2:31:85:30:d8:53:44:80:9e: 3f:78:88:19:63:98:1a:b5:c0:bc:ce:5b:67:35:ed: 16:09:6a:cc:01:de:89:30:57:16:2d:49:dd:2f:31: 76:ef:4e:8c:38:62:ff:00:48:14:70:a1:34:9c:90: 47:ce:c4:7d:e8:5f:fd:57:88:8a:ef:77:28:e0:67: 8c:24:7d:5a:df:ba:cd:a0:92:c1:fb:ff:6a:80:f2: 14:4c:e6:f2:40:de:92:df:16:ac:ee:5c:58:89:00: f1:86:9e:f8:cb:6f:9f:cc:80:d0:57:b8:73:cb:5b: 22:a6:f8:0e:88:98:bf:ae:48:9b:2e:59:20:04:1b: 0e:b1:db:cc:fc:26:d3:4a:1b:3c:84:48:4c:e5:a6: fd:4a:e5:2b:ed:8b:e4:a7:59:35:1b:3a:08:05:46: e7:79:25:24:c7:cf:f5:49:3e:35:11:27:07:5d:ff: a2:0e:0f:e1:f4:bc:2d:06:cd:1e:1a:76:a0:39:06: b4:0f:ac:54:05:27:d3:5b:09:39:22:c0:28:69:f7: 93:36:17:05:65:80:1b:28:e6:f1:91:e3:3a:d3:db: 0f:ee:57:31:1d:aa:d8:8d:91:be:ce:6e:cf:80:cf: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:28:CA:44:FB:1A:C1:88:C6:2D:76:D6:D7:26:76:DE:A6:50:D8:56 X509v3 Authority Key Identifier: keyid:A5:F5:79:FD:3B:40:DB:BD:E4:0D:F6:2D:7A:EC:71:5C:0E:93:37:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101324342530146307/0/A5F579FD3B40DBBDE40DF62D7AEC715C0E93373F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7c:f6:b4:34:6e:f8:0a:28:c4:9e:9b:c0:b1:44:58:db:91: 95:bb:1d:dc:fd:c9:4c:c9:05:72:c0:2f:32:1a:db:f8:db:85: f6:0c:75:66:c9:09:55:16:d4:16:d7:b8:86:74:6c:95:83:0c: bb:16:e4:b6:b2:b4:24:84:78:a7:d4:a0:b7:3c:a6:57:f9:b8: 36:42:2f:01:43:2d:7d:33:1a:9d:2d:bc:2c:f4:aa:91:98:c6: 7c:57:db:7b:20:ca:85:f9:59:f8:2d:01:da:fa:b4:ca:aa:95: 31:4a:17:5b:50:45:f8:57:15:d7:92:d6:45:f9:f7:83:19:d0: fd:84:de:de:3e:4c:34:a0:30:f5:0f:f1:f1:9e:7d:6f:07:78: 58:ed:47:c4:42:18:05:81:2f:f2:b8:2b:65:07:a4:6b:9f:f0: 8b:75:d5:4a:d1:1a:7b:3f:6c:d3:b7:3b:17:e1:b4:96:51:16: fb:4a:1b:1b:51:34:26:21:0d:a3:c9:fa:43:be:35:bb:f3:1f: f7:94:f9:a0:09:25:42:96:78:93:5d:93:16:03:02:e0:4c:bc: d3:f8:b7:9d:5b:24:66:33:31:95:60:bd:9f:ed:01:67:ef:a0: 10:27:76:3f:ee:ad:8a:da:4b:e3:bc:ad:2b:e9:f6:24:0f:c9: 40:d2:5e:82 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOvmFKfkttRDWwKc4SzlI+v8fbJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVGNTc5RkQzQjQwREJCREU0MERGNjJEN0FFQzcxNUMw RTkzMzczRjAeFw0yNjEwMTIxNTEyMDVaFw0yNjEwMTUyMjMxMDVaMDMxMTAvBgNV BAMTKDIyMjhDQTQ0RkIxQUMxODhDNjJENzZENkQ3MjY3NkRFQTY1MEQ4NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPJa1PzatDDEiwk+NaBL7Q3ot2 qcIxhTDYU0SAnj94iBljmBq1wLzOW2c17RYJaswB3okwVxYtSd0vMXbvTow4Yv8A SBRwoTSckEfOxH3oX/1XiIrvdyjgZ4wkfVrfus2gksH7/2qA8hRM5vJA3pLfFqzu XFiJAPGGnvjLb5/MgNBXuHPLWyKm+A6ImL+uSJsuWSAEGw6x28z8JtNKGzyESEzl pv1K5Svti+SnWTUbOggFRud5JSTHz/VJPjURJwdd/6IOD+H0vC0GzR4adqA5BrQP rFQFJ9NbCTkiwChp95M2FwVlgBso5vGR4zrT2w/uVzEdqtiNkb7Obs+Az4rdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIijKRPsawYjGLXbW1yZ23qZQ2FYwHwYDVR0j BBgwFoAUpfV5/TtA273kDfYteuxxXA6TNz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTMyNDM0MjUzMDE0NjMwNy8wL0E1RjU3OUZEM0I0MERCQkRFNDBERjYyRDdBRUM3 MTVDMEU5MzM3M0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTVGNTc5RkQzQjQwREJCREU0MERGNjJEN0FFQzcxNUMwRTkzMzczRi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDEzMjQzNDI1MzAxNDYzMDcvMC9BNUY1NzlGRDNCNDBE QkJERTQwREY2MkQ3QUVDNzE1QzBFOTMzNzNGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHz2tDRu+Aoo xJ6bwLFEWNuRlbsd3P3JTMkFcsAvMhrb+NuF9gx1ZskJVRbUFte4hnRslYMMuxbk trK0JIR4p9SgtzymV/m4NkIvAUMtfTManS28LPSqkZjGfFfbeyDKhflZ+C0B2vq0 yqqVMUoXW1BF+FcV15LWRfn3gxnQ/YTe3j5MNKAw9Q/x8Z59bwd4WO1HxEIYBYEv 8rgrZQeka5/wi3XVStEaez9s07c7F+G0llEW+0obG1E0JiENo8n6Q741u/Mf95T5 oAklQpZ4k12TFgMC4Ey80/i3nVskZjMxlWC9n+0BZ++gECd2P+6titpL47ytK+n2 JA/JQNJegg== -----END CERTIFICATE-----Generated at Wed Oct 14 11:50:53 2026 by rpki-client