$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft File: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft (raw, json) Hash identifier: c/C8SRFBfEcjpqvm1vPxJVRFlgdplq1Y32XSxha0RDg= Subject key identifier: 41:BA:AD:1E:13:58:8A:F5:AB:A7:A0:79:F2:CD:C8:47:90:7F:FF:13 Authority key identifier: CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E Certificate issuer: /CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E Certificate serial: 2E6F7EB3A651EA4226DD503B845838D6847249C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft Manifest number: 92 Signing time: Mon 26 Oct 2026 21:54:05 +0000 Manifest this update: Mon 26 Oct 2026 21:49:05 +0000 Manifest next update: Fri 30 Oct 2026 00:42:05 +0000 Files and hashes: 1: 3130332e35372e3133372e302f32342d3234203d3e203539303634.roa (hash: EhkLMd2zDyYJ51w/Sy0gxXGPOF2SNni4GumU+NZ9Ag0=) 2: 3130332e35372e3133362e302f32342d3234203d3e203539303634.roa (hash: 9xsJXOdXAuZCp2S7dPdlIF9LfPtLX/1I2u7JF+Qm/7s=) 3: 34352e3131372e37312e302f32342d3234203d3e203539303634.roa (hash: 1Y+Dh612RaqOJd6pDXHDbAj4lmDdl16U1NldnrDPKCw=) 4: 34352e3131372e36382e302f32342d3234203d3e203539303634.roa (hash: tYxUjp3xtdPTVjkycWWXB9adnoLWLKlyWFGDfc/+/pQ=) 5: 34352e3131372e36392e302f32342d3234203d3e203539303634.roa (hash: KEOsUrMYTo7UB6tINn+uRJdhpQQWUcZgNgXhs7+3qhI=) 6: 3130332e35372e3133392e302f32342d3234203d3e2034383437.roa (hash: cbxFaZtA0DoxRicp7QpsnTBUTzztA//mwgrvHEC1oqY=) 7: 34352e3131372e37302e302f32342d3234203d3e203539303634.roa (hash: GolnmXyy2lhajh4DhEErHiZTYtdA+C7MnLTJ8QR+h00=) 8: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl (hash: tFh1bdkLdPW5ReO0ijIbPh2gzd1JED4CnvdOHkHGsz4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 00:42:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6f:7e:b3:a6:51:ea:42:26:dd:50:3b:84:58:38:d6:84:72:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E Validity Not Before: Oct 26 21:49:05 2026 GMT Not After : Oct 30 00:42:05 2026 GMT Subject: CN=41BAAD1E13588AF5ABA7A079F2CDC847907FFF13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3d:22:cf:3f:ba:1f:1f:b7:8d:59:51:fc:ee: fb:5c:5f:66:da:59:3c:84:18:3e:eb:69:c9:7d:48: 97:36:8e:a0:1b:6a:fe:06:e6:bf:9b:b7:10:69:03: f4:c9:60:af:33:33:51:5a:03:24:fe:2a:7c:de:92: 3e:30:9c:3a:d6:06:69:41:0b:25:b8:e6:bd:8e:4a: 0c:32:27:35:d9:0d:4a:c3:27:c8:34:1c:cd:3c:76: 31:47:29:0e:44:6a:67:7f:cd:e9:9e:0c:ab:68:54: b2:c7:05:81:b0:92:cc:34:96:22:f6:01:6f:d2:55: aa:5c:e3:9f:1e:77:2c:dd:85:10:94:ce:ee:78:6c: 25:0b:bd:d0:77:cc:4b:b0:b9:2d:fc:b3:1c:ab:37: 05:ec:c7:e8:02:79:ed:85:7d:68:f1:03:94:6d:f4: 03:f0:11:53:8a:fc:7d:d7:53:48:ec:ac:51:c8:f3: 40:25:27:ea:df:a0:20:c3:37:66:cb:93:2b:5f:3c: 6b:33:0f:e8:33:fe:58:91:b9:69:bc:51:5a:d1:8e: 60:35:ab:a9:87:be:09:d6:36:3d:c8:75:8f:32:74: 6e:db:9b:eb:ae:78:5d:df:bc:fa:dc:27:06:0e:db: 24:e5:ee:17:93:2c:d5:56:dc:5a:69:cf:18:d0:28: 7c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BA:AD:1E:13:58:8A:F5:AB:A7:A0:79:F2:CD:C8:47:90:7F:FF:13 X509v3 Authority Key Identifier: keyid:CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:df:ad:e1:3d:bb:bb:f5:a5:f1:5a:76:65:a4:2b:c2:1e:a9: e1:69:75:f6:5c:58:17:bb:8c:b6:5c:25:53:1d:5b:9c:d0:70: 4c:ea:2e:2d:c2:99:29:20:5f:b8:2f:bb:18:d6:6e:b6:e4:f4: 03:f5:ea:f9:14:50:84:44:e2:30:87:23:59:69:50:bc:17:ec: 09:9f:dc:5e:4d:16:ca:2a:2d:90:f2:c7:62:e7:72:86:c7:df: 59:ba:95:e4:27:02:92:96:c3:df:f9:d8:28:d7:b1:72:dc:1c: 87:7e:b5:ad:3c:e1:a1:79:69:4c:4e:5c:3e:5d:69:d5:f3:21: 52:e1:bc:18:73:9c:cf:7f:b6:21:d3:37:87:0d:3d:2f:63:00: 13:e5:12:a7:54:0c:6f:d4:9e:bb:40:00:0c:5f:fd:b3:b8:30: 3f:4b:4b:34:54:c4:35:dc:c7:82:5e:4d:49:9e:32:fd:7a:86: e6:f0:69:df:94:8c:32:2a:21:2b:89:ea:f6:a3:bd:62:29:1f: a5:c7:99:84:49:6c:b5:6a:9f:5f:8e:8e:83:29:1a:70:e7:97: 04:fe:aa:e7:0c:52:c2:da:8f:a6:4b:b6:97:89:08:74:ed:5a: 76:03:0a:e6:b0:25:d7:6f:a1:1e:d6:1c:e2:6b:04:ba:a4:52: 68:bb:65:7b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULm9+s6ZR6kIm3VA7hFg41oRyScAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDNDNFN0REOTY0QjE3MjI2N0JEOThCNkQ4MkQ1MjRB REU5MUUxRTAeFw0yNjEwMjYyMTQ5MDVaFw0yNjEwMzAwMDQyMDVaMDMxMTAvBgNV BAMTKDQxQkFBRDFFMTM1ODhBRjVBQkE3QTA3OUYyQ0RDODQ3OTA3RkZGMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPSLPP7ofH7eNWVH87vtcX2ba WTyEGD7racl9SJc2jqAbav4G5r+btxBpA/TJYK8zM1FaAyT+Knzekj4wnDrWBmlB CyW45r2OSgwyJzXZDUrDJ8g0HM08djFHKQ5Eamd/zemeDKtoVLLHBYGwksw0liL2 AW/SVapc458edyzdhRCUzu54bCULvdB3zEuwuS38sxyrNwXsx+gCee2FfWjxA5Rt 9APwEVOK/H3XU0jsrFHI80AlJ+rfoCDDN2bLkytfPGszD+gz/liRuWm8UVrRjmA1 q6mHvgnWNj3IdY8ydG7bm+uueF3fvPrcJwYO2yTl7heTLNVW3FppzxjQKHx7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQbqtHhNYivWrp6B58s3IR5B//xMwHwYDVR0j BBgwFoAUysQ+fdlksXIme9mLbYLVJK3pHh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDA5MjA4MTAyMzgxMTYwMy8wL0NBQzQzRTdERDk2NEIxNzIyNjdCRDk4QjZEODJE NTI0QURFOTFFMUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FDNDNFN0REOTY0QjE3MjI2N0JEOThCNkQ4MkQ1MjRBREU5MUUxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQwOTIwODEwMjM4MTE2MDMvMC9DQUM0M0U3REQ5NjRC MTcyMjY3QkQ5OEI2RDgyRDUyNEFERTkxRTFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQd+t4T27u/Wl 8Vp2ZaQrwh6p4Wl19lxYF7uMtlwlUx1bnNBwTOouLcKZKSBfuC+7GNZutuT0A/Xq +RRQhETiMIcjWWlQvBfsCZ/cXk0WyiotkPLHYudyhsffWbqV5CcCkpbD3/nYKNex ctwch361rTzhoXlpTE5cPl1p1fMhUuG8GHOcz3+2IdM3hw09L2MAE+USp1QMb9Se u0AADF/9s7gwP0tLNFTENdzHgl5NSZ4y/XqG5vBp35SMMiohK4nq9qO9YikfpceZ hElstWqfX46OgykacOeXBP6q5wxSwtqPpku2l4kIdO1adgMK5rAl12+hHtYc4msE uqRSaLtlew== -----END CERTIFICATE-----Generated at Tue Oct 27 09:24:40 2026 by rpki-client