$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft File: A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft (raw, json) Hash identifier: yGKIAkp4KkL6b05uoN7mKYXV7UMyZGxOD/4Ut+iwLa0= Subject key identifier: D2:B1:EC:55:A0:4E:B9:E8:4E:BC:21:0E:45:8A:04:0B:3A:0A:CE:B9 Authority key identifier: A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 Certificate issuer: /CN=A2FD93BDD3ED305B969E95936A9FCD4829DE6398 Certificate serial: 6DAD242957F847DA13B36851AF780704CCB96E0E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft Manifest number: 99 Signing time: Wed 14 Oct 2026 03:48:30 +0000 Manifest this update: Wed 14 Oct 2026 03:43:30 +0000 Manifest next update: Sat 17 Oct 2026 09:22:30 +0000 Files and hashes: 1: A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl (hash: peeRZioOc0uByNEF9Jk7PSRiBO542eToCAOpu35wQ3k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 09:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ad:24:29:57:f8:47:da:13:b3:68:51:af:78:07:04:cc:b9:6e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2FD93BDD3ED305B969E95936A9FCD4829DE6398 Validity Not Before: Oct 14 03:43:30 2026 GMT Not After : Oct 17 09:22:30 2026 GMT Subject: CN=D2B1EC55A04EB9E84EBC210E458A040B3A0ACEB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ee:70:a3:af:c6:37:56:6f:23:96:8f:21:c0: 02:ec:72:80:90:38:52:68:15:41:57:97:45:4a:6a: bf:5f:ec:56:cf:cd:b8:50:36:80:ec:ed:7a:84:08: c0:f4:a4:64:10:04:24:85:7f:a8:0e:01:72:95:0b: 2b:ac:52:46:78:ab:37:32:52:52:31:c5:29:f1:f5: 4e:d6:41:f2:ac:38:51:90:a5:48:ec:33:a7:5c:41: c6:68:54:14:b7:63:09:9d:31:98:77:52:f2:17:d8: ad:b4:5d:f9:58:4e:3a:37:6d:68:e3:0a:f9:5d:8b: e7:2a:ed:f1:ea:38:91:ff:05:5a:70:f5:89:c6:1f: f4:13:41:88:1f:5b:df:40:e9:1f:16:76:98:88:d0: da:8a:01:e7:59:37:a9:e5:6b:17:0f:53:08:13:3b: 94:46:8c:14:9f:9f:69:4c:6d:74:99:95:d1:a7:98: 9d:1c:62:cb:07:66:a0:c8:47:71:97:29:61:f0:5f: 28:3a:43:5e:70:4b:ed:d7:96:e1:db:69:3c:7b:12: a2:e1:5b:a9:88:4e:88:ef:5b:e4:e8:be:23:e8:05: 53:cb:9d:a0:f5:4f:d3:6d:4d:be:41:7a:bd:76:77: e8:5c:29:1c:cd:7f:3a:ec:d3:17:4f:63:01:bf:d4: 42:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B1:EC:55:A0:4E:B9:E8:4E:BC:21:0E:45:8A:04:0B:3A:0A:CE:B9 X509v3 Authority Key Identifier: keyid:A2:FD:93:BD:D3:ED:30:5B:96:9E:95:93:6A:9F:CD:48:29:DE:63:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109747161056215059/0/A2FD93BDD3ED305B969E95936A9FCD4829DE6398.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f7:48:7e:4f:77:cf:4e:5f:15:30:e2:80:49:d4:f9:9c:ea: 3d:33:42:ba:27:a4:08:11:bb:d6:44:f5:59:6c:01:74:c2:fd: ed:5a:bd:6d:ea:4e:aa:14:a3:50:6f:dd:8c:8b:49:db:cc:7f: fd:fb:d5:86:fa:6e:42:44:1d:73:6e:e5:b2:76:96:05:9e:97: 82:ea:69:68:f5:1e:ac:1c:bd:4c:0e:57:6a:e0:6f:51:c8:2d: e4:94:80:05:c5:5c:1b:52:72:07:f2:64:8f:22:8f:bf:e6:6a: 6c:e7:0e:c7:f5:c7:e5:59:c5:6f:17:4a:e4:80:48:b6:78:4f: 84:e3:11:96:82:fe:77:83:d3:e2:6a:78:a5:cb:31:c9:ec:bf: 7e:05:a5:88:6b:8a:fb:f5:32:2c:10:d8:82:65:e2:d5:8d:64: 00:56:67:91:b6:d4:28:3d:08:32:a6:03:64:26:72:f8:e9:80: 50:93:4a:bf:ef:b0:e6:4e:cd:3f:8a:ff:c5:7d:92:fa:28:b9: 8a:68:ae:c9:e2:21:01:8f:88:b6:b7:c4:b3:ac:4f:c0:02:fc: a3:74:be:65:8a:2d:1b:bf:eb:3e:17:9a:b7:83:0f:ad:20:e5: 96:92:a2:e9:11:d0:f1:36:55:c2:64:42:a6:09:f6:24:3e:3d: d3:8b:70:c9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUba0kKVf4R9oTs2hRr3gHBMy5bg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGRDkzQkREM0VEMzA1Qjk2OUU5NTkzNkE5RkNENDgy OURFNjM5ODAeFw0yNjEwMTQwMzQzMzBaFw0yNjEwMTcwOTIyMzBaMDMxMTAvBgNV BAMTKEQyQjFFQzU1QTA0RUI5RTg0RUJDMjEwRTQ1OEEwNDBCM0EwQUNFQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv7nCjr8Y3Vm8jlo8hwALscoCQ OFJoFUFXl0VKar9f7FbPzbhQNoDs7XqECMD0pGQQBCSFf6gOAXKVCyusUkZ4qzcy UlIxxSnx9U7WQfKsOFGQpUjsM6dcQcZoVBS3YwmdMZh3UvIX2K20XflYTjo3bWjj Cvldi+cq7fHqOJH/BVpw9YnGH/QTQYgfW99A6R8WdpiI0NqKAedZN6nlaxcPUwgT O5RGjBSfn2lMbXSZldGnmJ0cYssHZqDIR3GXKWHwXyg6Q15wS+3XluHbaTx7EqLh W6mITojvW+ToviPoBVPLnaD1T9NtTb5Ber12d+hcKRzNfzrs0xdPYwG/1ELPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0rHsVaBOuehOvCEORYoECzoKzrkwHwYDVR0j BBgwFoAUov2TvdPtMFuWnpWTap/NSCneY5gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTc0NzE2MTA1NjIxNTA1OS8wL0EyRkQ5M0JERDNFRDMwNUI5NjlFOTU5MzZBOUZD RDQ4MjlERTYzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTJGRDkzQkREM0VEMzA1Qjk2OUU5NTkzNkE5RkNENDgyOURFNjM5OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDk3NDcxNjEwNTYyMTUwNTkvMC9BMkZEOTNCREQzRUQz MDVCOTY5RTk1OTM2QTlGQ0Q0ODI5REU2Mzk4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/dIfk93z05f FTDigEnU+ZzqPTNCuiekCBG71kT1WWwBdML97Vq9bepOqhSjUG/djItJ28x//fvV hvpuQkQdc27lsnaWBZ6XguppaPUerBy9TA5XauBvUcgt5JSABcVcG1JyB/JkjyKP v+ZqbOcOx/XH5VnFbxdK5IBItnhPhOMRloL+d4PT4mp4pcsxyey/fgWliGuK+/Uy LBDYgmXi1Y1kAFZnkbbUKD0IMqYDZCZy+OmAUJNKv++w5k7NP4r/xX2S+ii5imiu yeIhAY+ItrfEs6xPwAL8o3S+ZYotG7/rPheat4MPrSDllpKi6RHQ8TZVwmRCpgn2 JD4904twyQ== -----END CERTIFICATE-----Generated at Thu Oct 15 13:23:09 2026 by rpki-client