$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft File: A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft (raw, json) Hash identifier: qkq+d1vCRwE5PM4A1BxRluBqGlJzeGIH3ROYs6gaQE4= Subject key identifier: 11:12:76:D7:EA:9B:64:97:84:4E:A8:0C:65:38:12:61:0D:48:37:3F Authority key identifier: A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7 Certificate issuer: /CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7 Certificate serial: 3BCF3FA39F9B49513E20F7A9BCDAC8E5F46E86B2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft Manifest number: 95 Signing time: Tue 13 Oct 2026 19:53:13 +0000 Manifest this update: Tue 13 Oct 2026 19:48:13 +0000 Manifest next update: Sat 17 Oct 2026 06:39:13 +0000 Files and hashes: 1: 3130332e3133352e3139322e302f32342d3234203d3e20313337373436.roa (hash: puuonvkoXFubi0tBYC2XwgRxgwoUip6QzSM8w3ogrhU=) 2: 3130332e3133352e3139342e302f32342d3234203d3e2030.roa (hash: tNE2sE5td1Glu+aUyjN/xEKrnS8pe0d3FhptniluBys=) 3: 3130332e3133352e3139332e302f32342d3234203d3e20313337373436.roa (hash: 6GTJttgnXcncDO46u6D953/FNcSOT1iYi07RRqhihIc=) 4: A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl (hash: DlDebfi99/l5s6prmRQWGQhOIdWEOOVHDM3tqxMRtBQ=) 5: 3130332e3133352e3139352e302f32342d3234203d3e20313337373436.roa (hash: f5TeL2PmYZzcfkLz1OIr3FDUXdxfbFHFxYiszVWK0Yk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 06:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:cf:3f:a3:9f:9b:49:51:3e:20:f7:a9:bc:da:c8:e5:f4:6e:86:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7 Validity Not Before: Oct 13 19:48:13 2026 GMT Not After : Oct 17 06:39:13 2026 GMT Subject: CN=111276D7EA9B6497844EA80C653812610D48373F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:72:66:a7:08:b8:9d:54:4c:8c:f9:b6:3d:51: f2:2a:56:39:17:dd:1b:af:7c:4e:ce:e1:f0:e7:fb: 4f:79:68:b4:ec:ce:ee:a8:33:d0:c1:ed:eb:e6:b0: 4e:47:3f:77:69:86:34:32:5e:c9:83:dc:b1:15:04: 8d:9a:c3:d3:ff:8f:1a:17:ca:c1:5a:96:af:28:ab: a9:06:23:e9:4b:8d:13:12:b7:6a:99:10:d4:a0:ad: 11:bc:5a:7b:6e:43:83:0c:3d:9c:ef:46:89:a1:8c: 5f:fb:3a:c9:85:59:95:3e:45:06:ae:b6:0a:ad:0f: 40:62:a3:85:9d:51:8c:16:63:ac:b0:0a:bb:cf:8c: 6d:fb:18:c4:4e:81:0e:bf:97:18:22:c8:48:6f:76: 2a:63:da:01:fe:d2:15:22:e4:1b:b3:66:ef:1c:2d: a7:9f:8c:d6:50:34:9e:ed:e8:ae:d6:a1:bc:a0:ea: d8:a6:5b:58:de:7f:45:a8:57:46:91:a5:9e:36:ac: 7c:f7:fd:df:86:9f:3c:cf:10:77:66:1f:7b:3c:b5: cf:c9:32:2b:25:d4:9d:f0:0e:a4:cb:39:4a:74:34: bc:82:53:da:f4:b5:19:2b:4d:4a:f5:ec:93:5f:9e: d4:49:9f:a1:c5:56:a2:6b:b2:49:a7:b6:dc:07:93: c4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:12:76:D7:EA:9B:64:97:84:4E:A8:0C:65:38:12:61:0D:48:37:3F X509v3 Authority Key Identifier: keyid:A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:10:9a:b2:af:2b:c3:79:81:04:6c:20:aa:ae:80:9f:d8:3b: ba:8a:c6:5c:46:6b:2f:99:28:9c:11:e5:57:d0:db:54:32:50: 4b:95:fc:c4:47:5e:a9:55:a4:32:4c:e3:3c:a4:3f:c6:07:48: d7:e5:16:85:07:1e:3f:1e:99:44:72:f4:a9:6d:6c:7a:28:60: 77:0a:35:82:de:c2:14:4c:37:f2:d9:a0:87:43:76:80:0a:0a: 2a:4a:7f:39:98:1d:aa:67:4e:23:cd:8a:95:7e:dc:ac:3d:2a: 89:5c:a0:c3:e3:0a:55:de:1c:4e:6c:75:84:0a:f1:04:21:7f: 23:80:fa:e2:4d:b8:0d:37:fd:fb:5e:85:2b:d8:c4:55:bc:ee: 63:f5:01:8b:38:c1:42:28:0e:b5:3c:50:69:26:fc:1b:d1:fe: 1f:0b:71:44:d2:a7:72:83:1f:f6:a5:ee:99:32:b0:6e:0e:6a: 66:1c:3c:00:0b:c6:55:93:3d:c6:c6:aa:64:f0:f5:cb:90:21: bd:b8:d0:d8:55:c8:af:aa:a2:92:2f:ba:ff:5a:61:8d:b6:a6: 56:54:da:b1:bc:3f:17:07:95:61:29:41:2f:4c:4b:7d:71:6b: 99:1c:88:ed:bb:22:cb:a9:a1:2f:44:66:94:b5:bf:69:2e:1d: c0:ae:03:1c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO88/o5+bSVE+IPepvNrI5fRuhrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4N0VBMzBGRDlFOTVCMEJCNDY2REFERjBFMjdBRjk4 RjIxN0NGNzAeFw0yNjEwMTMxOTQ4MTNaFw0yNjEwMTcwNjM5MTNaMDMxMTAvBgNV BAMTKDExMTI3NkQ3RUE5QjY0OTc4NDRFQTgwQzY1MzgxMjYxMEQ0ODM3M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgcmanCLidVEyM+bY9UfIqVjkX 3RuvfE7O4fDn+095aLTszu6oM9DB7evmsE5HP3dphjQyXsmD3LEVBI2aw9P/jxoX ysFalq8oq6kGI+lLjRMSt2qZENSgrRG8WntuQ4MMPZzvRomhjF/7OsmFWZU+RQau tgqtD0Bio4WdUYwWY6ywCrvPjG37GMROgQ6/lxgiyEhvdipj2gH+0hUi5BuzZu8c LaefjNZQNJ7t6K7Wobyg6timW1jef0WoV0aRpZ42rHz3/d+GnzzPEHdmH3s8tc/J Misl1J3wDqTLOUp0NLyCU9r0tRkrTUr17JNfntRJn6HFVqJrskmnttwHk8RdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUERJ21+qbZJeETqgMZTgSYQ1INz8wHwYDVR0j BBgwFoAUpofqMP2elbC7Rm2t8OJ6+Y8hfPcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTU1MjQzMzIyMzQzNDI1OS8wL0E2ODdFQTMwRkQ5RTk1QjBCQjQ2NkRBREYwRTI3 QUY5OEYyMTdDRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTY4N0VBMzBGRDlFOTVCMEJCNDY2REFERjBFMjdBRjk4RjIxN0NGNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTE1NTI0MzMyMjM0MzQyNTkvMC9BNjg3RUEzMEZEOUU5 NUIwQkI0NjZEQURGMEUyN0FGOThGMjE3Q0Y3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRCasq8rw3mB BGwgqq6An9g7uorGXEZrL5konBHlV9DbVDJQS5X8xEdeqVWkMkzjPKQ/xgdI1+UW hQcePx6ZRHL0qW1seihgdwo1gt7CFEw38tmgh0N2gAoKKkp/OZgdqmdOI82KlX7c rD0qiVygw+MKVd4cTmx1hArxBCF/I4D64k24DTf9+16FK9jEVbzuY/UBizjBQigO tTxQaSb8G9H+HwtxRNKncoMf9qXumTKwbg5qZhw8AAvGVZM9xsaqZPD1y5AhvbjQ 2FXIr6qiki+6/1phjbamVlTasbw/FweVYSlBL0xLfXFrmRyI7bsiy6mhL0RmlLW/ aS4dwK4DHA== -----END CERTIFICATE-----Generated at Thu Oct 15 03:10:17 2026 by rpki-client