$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft File: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft (raw, json) Hash identifier: TK3BOinM8OKffYeLk9Jh7N220jA6B+2HrJ9TAFkzkeo= Subject key identifier: 62:36:C8:2A:64:33:B7:CF:DE:24:F7:22:C1:85:6B:B8:AF:FC:56:5B Authority key identifier: CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E Certificate issuer: /CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E Certificate serial: 69BBBDBE5AC1EFF717EF81A635727BEBBFEF6D90 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft Manifest number: 7D Signing time: Thu 10 Sep 2026 07:15:56 +0000 Manifest this update: Thu 10 Sep 2026 07:10:56 +0000 Manifest next update: Sun 13 Sep 2026 12:09:56 +0000 Files and hashes: 1: 34352e3131372e36392e302f32342d3234203d3e203539303634.roa (hash: KEOsUrMYTo7UB6tINn+uRJdhpQQWUcZgNgXhs7+3qhI=) 2: 34352e3131372e37312e302f32342d3234203d3e203539303634.roa (hash: 1Y+Dh612RaqOJd6pDXHDbAj4lmDdl16U1NldnrDPKCw=) 3: 34352e3131372e36382e302f32342d3234203d3e203539303634.roa (hash: tYxUjp3xtdPTVjkycWWXB9adnoLWLKlyWFGDfc/+/pQ=) 4: CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl (hash: Q44Dia7ngzYgRnR4MIx287qVeGohWARRv6JouSUryAQ=) 5: 3130332e35372e3133392e302f32342d3234203d3e2034383437.roa (hash: cbxFaZtA0DoxRicp7QpsnTBUTzztA//mwgrvHEC1oqY=) 6: 34352e3131372e37302e302f32342d3234203d3e203539303634.roa (hash: GolnmXyy2lhajh4DhEErHiZTYtdA+C7MnLTJ8QR+h00=) 7: 3130332e35372e3133362e302f32342d3234203d3e203539303634.roa (hash: 9xsJXOdXAuZCp2S7dPdlIF9LfPtLX/1I2u7JF+Qm/7s=) 8: 3130332e35372e3133372e302f32342d3234203d3e203539303634.roa (hash: EhkLMd2zDyYJ51w/Sy0gxXGPOF2SNni4GumU+NZ9Ag0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:bb:bd:be:5a:c1:ef:f7:17:ef:81:a6:35:72:7b:eb:bf:ef:6d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E Validity Not Before: Sep 10 07:10:56 2026 GMT Not After : Sep 13 12:09:56 2026 GMT Subject: CN=6236C82A6433B7CFDE24F722C1856BB8AFFC565B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1c:2b:e8:20:f9:d8:3e:4c:57:34:6e:c7:35: ae:5f:aa:80:38:9b:ee:89:50:70:87:b5:a6:c6:5c: 89:cf:dc:fe:c6:54:42:9a:a2:c4:8b:27:8f:ec:1e: 5d:88:8c:9d:6d:48:e4:59:95:d1:8a:93:d2:33:7a: d1:2c:08:c1:16:96:bc:63:91:23:52:ea:93:d9:59: 25:b3:d3:86:dd:c4:12:e1:ab:fe:ce:dc:09:68:4d: 13:57:55:54:f0:87:6d:82:e5:fb:15:04:bc:2a:2f: cd:ce:e5:ab:62:85:8a:c1:83:18:12:89:a8:fd:25: e0:85:af:ec:97:10:b9:ac:6e:3c:00:b8:ea:8c:ef: 01:a7:3c:75:56:94:45:8f:78:06:a3:1f:6f:91:9a: 96:ff:f1:16:9c:cf:3a:79:05:c3:9d:63:4e:b1:10: ba:e0:04:fc:50:6a:cf:c7:28:cb:d7:6b:63:12:92: c4:03:eb:89:72:bd:b5:14:bf:ba:8c:07:fc:6e:b3: 7a:37:d4:d6:7a:30:21:9a:82:82:35:51:cb:62:3e: 3b:e6:06:32:92:52:65:5e:a8:34:18:e1:04:01:cf: c4:86:d0:37:98:90:ed:0e:b0:5e:81:b9:68:62:76: 01:68:ea:24:cb:96:9a:1f:15:bf:01:05:02:b7:80: f2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:36:C8:2A:64:33:B7:CF:DE:24:F7:22:C1:85:6B:B8:AF:FC:56:5B X509v3 Authority Key Identifier: keyid:CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c5:de:8b:a8:fc:9d:20:19:67:8b:35:0d:18:d5:08:e8:58: 82:e0:94:30:ac:4e:f0:23:9c:5f:f3:bd:23:03:38:8f:0c:3f: cd:3d:a7:d3:2d:5a:fe:aa:7a:90:ed:06:85:02:2f:d1:a7:eb: 5e:04:01:64:03:89:e2:71:61:7e:43:67:dd:f8:b0:3e:9a:2f: 29:d8:44:27:04:93:0c:00:78:f2:95:4c:e5:f9:43:87:d9:62: 59:89:34:a5:4f:9d:1e:95:49:68:cf:58:7b:c5:8b:7d:be:33: 60:73:bf:a8:94:ec:50:dc:dc:94:75:39:2b:dd:0e:02:c5:3c: 01:f1:f1:6b:95:33:c5:3b:03:59:4d:d0:a2:fd:06:19:b9:50: 9d:ca:26:d0:68:2b:6e:62:f2:a4:1d:12:f6:c5:da:50:4d:db: 34:04:11:03:c1:fa:f0:16:48:a6:6b:67:5f:15:c7:7c:d1:b9: 0b:1d:65:64:5d:7d:06:0e:f1:f6:ba:73:73:ac:31:fc:f6:b6: bc:b6:5d:81:16:7a:82:fb:db:27:37:d7:fe:25:b9:8e:ce:88: e9:77:22:fa:ed:fb:1a:db:32:0b:2a:83:63:e7:d5:8b:ef:48: d3:5f:42:af:9b:ed:f3:58:6b:08:af:8b:5b:72:38:90:1a:24: 07:83:6a:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUabu9vlrB7/cX74GmNXJ767/vbZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FDNDNFN0REOTY0QjE3MjI2N0JEOThCNkQ4MkQ1MjRB REU5MUUxRTAeFw0yNjA5MTAwNzEwNTZaFw0yNjA5MTMxMjA5NTZaMDMxMTAvBgNV BAMTKDYyMzZDODJBNjQzM0I3Q0ZERTI0RjcyMkMxODU2QkI4QUZGQzU2NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgHCvoIPnYPkxXNG7HNa5fqoA4 m+6JUHCHtabGXInP3P7GVEKaosSLJ4/sHl2IjJ1tSORZldGKk9IzetEsCMEWlrxj kSNS6pPZWSWz04bdxBLhq/7O3AloTRNXVVTwh22C5fsVBLwqL83O5atihYrBgxgS iaj9JeCFr+yXELmsbjwAuOqM7wGnPHVWlEWPeAajH2+Rmpb/8Raczzp5BcOdY06x ELrgBPxQas/HKMvXa2MSksQD64lyvbUUv7qMB/xus3o31NZ6MCGagoI1UctiPjvm BjKSUmVeqDQY4QQBz8SG0DeYkO0OsF6BuWhidgFo6iTLlpofFb8BBQK3gPIvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYjbIKmQzt8/eJPciwYVruK/8VlswHwYDVR0j BBgwFoAUysQ+fdlksXIme9mLbYLVJK3pHh4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDA5MjA4MTAyMzgxMTYwMy8wL0NBQzQzRTdERDk2NEIxNzIyNjdCRDk4QjZEODJE NTI0QURFOTFFMUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0FDNDNFN0REOTY0QjE3MjI2N0JEOThCNkQ4MkQ1MjRBREU5MUUxRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQwOTIwODEwMjM4MTE2MDMvMC9DQUM0M0U3REQ5NjRC MTcyMjY3QkQ5OEI2RDgyRDUyNEFERTkxRTFFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMXei6j8nSAZ Z4s1DRjVCOhYguCUMKxO8COcX/O9IwM4jww/zT2n0y1a/qp6kO0GhQIv0afrXgQB ZAOJ4nFhfkNn3fiwPpovKdhEJwSTDAB48pVM5flDh9liWYk0pU+dHpVJaM9Ye8WL fb4zYHO/qJTsUNzclHU5K90OAsU8AfHxa5UzxTsDWU3Qov0GGblQncom0GgrbmLy pB0S9sXaUE3bNAQRA8H68BZIpmtnXxXHfNG5Cx1lZF19Bg7x9rpzc6wx/Pa2vLZd gRZ6gvvbJzfX/iW5js6I6Xci+u37GtsyCyqDY+fVi+9I019Cr5vt81hrCK+LW3I4 kBokB4NqhQ== -----END CERTIFICATE-----Generated at Fri Sep 11 01:19:15 2026 by rpki-client