$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft File: 5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft (raw, json) Hash identifier: gjOncj30OpeUAndawHQt9EKovzPFYDawysdtCoTBusc= Subject key identifier: 33:69:C4:C6:95:A0:0F:21:B4:1B:21:E7:16:BF:09:F4:D3:08:DF:E0 Authority key identifier: 5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9 Certificate issuer: /CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9 Certificate serial: 414E049CB27471485B174A00EE525ED301A835A0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft Manifest number: 8F Signing time: Mon 12 Oct 2026 04:21:29 +0000 Manifest this update: Mon 12 Oct 2026 04:16:29 +0000 Manifest next update: Thu 15 Oct 2026 12:05:29 +0000 Files and hashes: 1: 3130332e382e33342e302f32332d3233203d3e2034383337.roa (hash: JWCpOL58jnfjNneX9gL3amLDhbCleye0c+pPylUKcKI=) 2: 3130332e382e33342e302f32342d3234203d3e20313430373236.roa (hash: JCGd1C1Wf1E9+GLgPxZv3lXwNa0mqdnQIY/nBaByWFc=) 3: 3130332e382e33332e302f32342d3234203d3e2034383337.roa (hash: YN2Z3o5Y7Gs1S7UHATzST6JGQAtD++MguSN4QeeZ6+Q=) 4: 5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl (hash: u614DNFM/SRIu3nWJ6vfl5QfctYYWFRnpDizv03ZPds=) 5: 3130332e382e33322e302f32342d3234203d3e2034313334.roa (hash: wNOnwlciSCkgqRaqEPPKB6JorJz54eTYd07doS61EyM=) 6: 323430343a363530303a646362333a3a2f34382d3438203d3e2034383337.roa (hash: tHPg+UAtakOXb2bI4+bicsHKTUKZvXIfQ1aMjcpe3+E=) 7: 3130332e382e33352e302f32342d3234203d3e2034383337.roa (hash: GF8R9y/TBmc5cxAi05epTBCcdlrps0l6xAqDYhmKV9Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 12:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:4e:04:9c:b2:74:71:48:5b:17:4a:00:ee:52:5e:d3:01:a8:35:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9 Validity Not Before: Oct 12 04:16:29 2026 GMT Not After : Oct 15 12:05:29 2026 GMT Subject: CN=3369C4C695A00F21B41B21E716BF09F4D308DFE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ab:ae:ed:ce:dc:9b:7d:bf:1c:f6:dd:a7:6a: 14:b3:bc:5b:e7:ae:37:e2:1b:a2:43:85:b5:b7:8c: 3c:80:d3:37:8d:dd:06:2f:f8:15:7f:b3:30:c8:1a: 8e:e5:4a:43:c6:15:ff:32:7d:af:f8:b9:3e:07:2c: 13:4d:59:c1:8a:d1:7e:30:f4:56:7b:82:80:3d:06: ff:9b:aa:83:c1:fe:ff:b3:55:e1:29:6e:18:39:e7: 5c:2e:d9:d8:4f:39:44:be:ee:c0:23:a1:4c:1e:7d: 25:e8:4f:12:a0:66:26:86:3b:ff:48:97:9b:73:e6: 6e:b0:a0:38:fa:77:b0:de:a3:1d:e9:7d:1c:fd:39: cf:35:53:fc:22:32:80:b0:8b:21:17:cf:86:c5:20: 96:53:48:31:bc:e9:9c:c6:e4:f8:d0:c9:b9:cd:5a: 85:1d:25:1f:c9:00:3a:c2:e3:76:c0:d6:b9:81:55: 50:74:61:a3:62:2d:ca:62:d6:e2:18:47:49:c6:74: 5d:e8:d3:ad:f6:63:52:f0:07:e4:49:05:76:7d:3a: a7:7a:7e:d6:96:65:85:49:3f:1c:b5:78:78:09:b7: cf:8f:9e:47:84:59:d9:af:68:71:b3:c5:f6:5b:0e: 18:ec:9c:a9:e9:1c:71:9d:c6:ac:21:18:8b:32:b4: e0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:69:C4:C6:95:A0:0F:21:B4:1B:21:E7:16:BF:09:F4:D3:08:DF:E0 X509v3 Authority Key Identifier: keyid:5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:f7:78:97:31:08:a9:cc:85:44:46:96:5a:43:78:7f:75:bf: d8:65:52:be:8a:ec:be:72:85:4d:6f:e0:4f:c3:a9:9e:80:b8: f1:7c:0c:c2:b1:df:40:73:3f:f4:ed:82:be:d1:e5:40:1e:99: c8:55:2a:96:d7:7f:7d:d8:c6:3d:b3:2b:86:9e:19:d1:43:91: e4:81:7c:4b:c7:1a:91:a7:da:90:69:4e:e7:6f:cd:a9:cd:66: df:50:d0:52:ed:6b:91:9f:c0:ea:6b:18:56:e1:a7:1b:26:e2: c7:f3:fe:26:d8:da:fe:a3:28:b9:4e:a7:c8:a0:17:38:55:08: c6:30:6d:0c:76:85:8e:d7:38:34:c9:67:dc:d9:ed:21:83:2a: d1:18:14:77:af:23:af:f1:f8:54:4b:5b:53:d6:6c:d3:4e:21: 51:65:9d:17:a6:2f:bd:31:1a:fc:48:ed:3c:8f:99:89:a8:4e: 2e:01:82:c5:61:d7:25:3a:88:ba:5f:62:fb:d9:e8:a4:04:e9: ec:b5:c2:ba:a8:b8:79:8c:3c:57:da:8b:0c:bf:5b:fc:a1:36: a0:8a:d9:88:e1:7e:58:4c:6f:a5:cd:24:ab:15:d4:11:ce:9b: 0f:00:ed:e8:44:05:58:0c:2d:dd:a6:fb:48:73:97:cf:8c:e2: be:c8:7a:0c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQU4EnLJ0cUhbF0oA7lJe0wGoNaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE4MTAxNzNBNDcyMTdFQkI2MEM5RkQ5NUM4MzNCMDEy QUQ4RDNEOTAeFw0yNjEwMTIwNDE2MjlaFw0yNjEwMTUxMjA1MjlaMDMxMTAvBgNV BAMTKDMzNjlDNEM2OTVBMDBGMjFCNDFCMjFFNzE2QkYwOUY0RDMwOERGRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1q67tztybfb8c9t2nahSzvFvn rjfiG6JDhbW3jDyA0zeN3QYv+BV/szDIGo7lSkPGFf8yfa/4uT4HLBNNWcGK0X4w 9FZ7goA9Bv+bqoPB/v+zVeEpbhg551wu2dhPOUS+7sAjoUwefSXoTxKgZiaGO/9I l5tz5m6woDj6d7Deox3pfRz9Oc81U/wiMoCwiyEXz4bFIJZTSDG86ZzG5PjQybnN WoUdJR/JADrC43bA1rmBVVB0YaNiLcpi1uIYR0nGdF3o0632Y1LwB+RJBXZ9Oqd6 ftaWZYVJPxy1eHgJt8+PnkeEWdmvaHGzxfZbDhjsnKnpHHGdxqwhGIsytOAXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUM2nExpWgDyG0GyHnFr8J9NMI3+AwHwYDVR0j BBgwFoAUWoEBc6RyF+u2DJ/ZXIM7ASrY09kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjYyNDE3NzgzNzI0NDQzNS8wLzVBODEwMTczQTQ3MjE3RUJCNjBDOUZEOTVDODMz QjAxMkFEOEQzRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUE4MTAxNzNBNDcyMTdFQkI2MEM5RkQ5NUM4MzNCMDEyQUQ4RDNEOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTI2MjQxNzc4MzcyNDQ0MzUvMC81QTgxMDE3M0E0NzIx N0VCQjYwQzlGRDk1QzgzM0IwMTJBRDhEM0Q5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefd4lzEIqcyF REaWWkN4f3W/2GVSvorsvnKFTW/gT8OpnoC48XwMwrHfQHM/9O2CvtHlQB6ZyFUq ltd/fdjGPbMrhp4Z0UOR5IF8S8cakafakGlO52/Nqc1m31DQUu1rkZ/A6msYVuGn Gybix/P+Jtja/qMouU6nyKAXOFUIxjBtDHaFjtc4NMln3NntIYMq0RgUd68jr/H4 VEtbU9Zs004hUWWdF6YvvTEa/EjtPI+ZiahOLgGCxWHXJTqIul9i+9nopATp7LXC uqi4eYw8V9qLDL9b/KE2oIrZiOF+WExvpc0kqxXUEc6bDwDt6EQFWAwt3ab7SHOX z4zivsh6DA== -----END CERTIFICATE-----Generated at Wed Oct 14 06:32:16 2026 by rpki-client