$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft File: 04CFDCD1650DD854FF0F6840232427716459F9F6.mft (raw, json) Hash identifier: GGRui9i7bnuEXHeisJQ+GUl9a797bOkBy9hbHNyfJ3s= Subject key identifier: 44:63:69:D6:DE:C8:78:40:EA:16:7A:BC:3C:46:B2:73:38:17:0F:D2 Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6 Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6 Certificate serial: 12E7B629FE110B1BBA44EB71F8F99B7A0BA09922 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft Manifest number: 87 Signing time: Thu 08 Oct 2026 09:47:28 +0000 Manifest this update: Thu 08 Oct 2026 09:42:28 +0000 Manifest next update: Sun 11 Oct 2026 11:30:28 +0000 Files and hashes: 1: 34352e3234392e3231352e302f32342d3234203d3e20313334353433.roa (hash: UWm2lEscXePQ9xWxmXherZFoyJG6dcvQ2KwTIX+Ed3Y=) 2: 3130332e3231382e3231362e302f32322d3232203d3e20313334353433.roa (hash: SG8F3t1LIRMtRaW+hlTV2zYNbHKsNNtdl9bUzA/tf2U=) 3: 34352e3234392e3231322e302f32322d3232203d3e20313334373732.roa (hash: 9pIY5q7sFsiwAGKhyXR1XA+RgTgJavOC56GPQRIpshc=) 4: 34352e3234392e3231342e302f32342d3234203d3e203633363535.roa (hash: FjpSMjlWaCKn4Ptz2//2ywMsZCamiRqirl04dheae5c=) 5: 3130332e3231382e3231362e302f32322d3232203d3e20313334373732.roa (hash: qJvTHeXEIs4Vdls12BNbPtiipv+CuWwX/mjYv5JIrAk=) 6: 34352e3234392e3231322e302f32322d3232203d3e20313334353433.roa (hash: UcuGXuPb0hXyj0b7YXGKUEIL6kjhnor7fhftIIHVK9k=) 7: 34352e3234392e3231332e302f32342d3234203d3e203633363535.roa (hash: afjN7HVsTkBDFALMizH5frvoP1K7UkE1HOatng2gxcA=) 8: 34352e3234392e3231332e302f32342d3234203d3e20313334353433.roa (hash: jzCGGkLFQm34ItGKVukkr/wAEXg4rSDR9Fl7iCV+EJQ=) 9: 04CFDCD1650DD854FF0F6840232427716459F9F6.crl (hash: 8Oq4zHNtVd2WBCk1CiSq3xESRzis/Fjkg3AeL6vU3kI=) 10: 34352e3234392e3231322e302f32322d3232203d3e203633363535.roa (hash: XRF+yXRb2uPY0v2bR7ngxvXurDM+P+M+esd6vmyMemI=) 11: 34352e3234392e3231322e302f32342d3234203d3e203633363535.roa (hash: zkuxppiZoNATV/cOEox1oUDTUtUjB9UKsr/kxX0NfaY=) 12: 34352e3234392e3231342e302f32342d3234203d3e20313334353433.roa (hash: X1XBrJsS49WZ6bG4bL3EOgaPFPPikSE/xQlm1+RZYr8=) 13: 3130332e3231382e3231392e302f32342d3234203d3e20313334353433.roa (hash: t+s8cW3HPIKJCf9/nR81HoUAb+qDT9KrGZa7/yuD7V4=) 14: 3130332e3231382e3231392e302f32342d3234203d3e203633363535.roa (hash: nU2jzAeiN/92z2BG9zCpXjlNOqpVV/DCkixw34ocyuk=) 15: 3130332e3231382e3231382e302f32342d3234203d3e20313334353433.roa (hash: Y2RcLQFb18CnjFCnAzsTkcgykGHRf54pkJISu/gd7vI=) 16: 3130332e3231382e3231362e302f32342d3234203d3e20313334353433.roa (hash: PGXKTXEEgB01/oMdHmVj8Ba/lbAwPh/9HRJVhWFWz9s=) 17: 3130332e3231382e3231362e302f32322d3232203d3e203633363535.roa (hash: NOCAwtWZsIhBry+SBX5iaq88IXE9NM5A/dmXDriT5aI=) 18: 3130332e3231382e3231372e302f32342d3234203d3e203633363535.roa (hash: 94s2hwgbMojMwRg7h2m9126e5r0Y2FKlshIP8UZtHs8=) 19: 34352e3234392e3231322e302f32342d3234203d3e20313334353433.roa (hash: pvuKH/rUh97ZR1blQ/bfkvTRwEcW2fCe7fof21hZ8z4=) 20: 3130332e3231382e3231382e302f32342d3234203d3e203633363535.roa (hash: 5wmK/uIuxQ0abi5TfiuORpuZfYiXyqRFjvRirnqi+Sg=) 21: 3130332e3231382e3231362e302f32342d3234203d3e203633363535.roa (hash: 39DI5mk35xVvXoo1KjCL0GI8uV8MuiAuacUAFvY7Wng=) 22: 34352e3234392e3231352e302f32342d3234203d3e203633363535.roa (hash: +YWRVjrDc5zzP9fHkR+jpRnZsjSCEDVKovunc5w7VCA=) 23: 3130332e3231382e3231372e302f32342d3234203d3e20313334353433.roa (hash: nq92FnvfjRR84whnQXauF9ipzblRAvFLjaxaZSTK0jo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 11:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e7:b6:29:fe:11:0b:1b:ba:44:eb:71:f8:f9:9b:7a:0b:a0:99:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6 Validity Not Before: Oct 8 09:42:28 2026 GMT Not After : Oct 11 11:30:28 2026 GMT Subject: CN=446369D6DEC87840EA167ABC3C46B27338170FD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b7:b7:bf:00:7b:16:dc:3f:e2:71:43:61:fe: be:96:6e:5c:c2:2e:b8:9c:2f:2b:72:2b:bb:f8:d8: 28:05:ef:85:d6:42:bd:7e:fe:c7:cb:4b:08:37:86: 76:74:c4:12:bc:65:f1:5e:25:15:98:09:04:79:b6: 8a:4b:24:cb:63:4c:b1:b6:95:f4:d3:22:b9:b0:05: 51:93:bd:96:0d:a4:5c:28:d0:ac:1e:48:b4:14:12: 2c:74:5d:ef:18:c1:e0:38:9c:2b:8d:92:55:07:10: f3:5f:b0:45:29:05:05:32:96:69:b1:a8:53:df:0f: 5d:95:74:06:6a:f3:ca:a0:d5:46:4c:4b:fd:8f:fe: 64:b2:72:b2:30:cb:38:c3:80:ea:2e:6d:e6:c1:43: ca:9b:be:6a:e3:97:c5:5e:3b:a2:bd:eb:f4:9b:01: 7e:0c:b1:d2:eb:4b:10:54:73:d2:cd:a8:84:68:7b: e3:04:03:81:85:24:f1:bb:4e:89:a5:3c:10:51:ae: 76:9e:a5:8c:66:cd:23:15:84:f7:cb:10:c9:6d:78: 6b:d0:11:ad:42:d9:c3:c0:ae:66:98:56:70:05:cb: 3d:b7:06:2c:46:69:72:f1:a4:ed:cb:2b:0e:3a:97: f7:cd:03:42:43:0f:f7:fb:ca:fb:67:6b:df:08:b9: 9e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:63:69:D6:DE:C8:78:40:EA:16:7A:BC:3C:46:B2:73:38:17:0F:D2 X509v3 Authority Key Identifier: keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e7:a7:07:e7:49:f9:22:13:b6:70:05:80:12:c9:c2:cb:3c: ba:2a:b2:21:8a:d5:2f:98:76:f6:3e:f7:85:1b:5a:a0:11:11: f3:30:40:cf:22:0e:4c:27:bc:e6:29:8e:04:13:5c:0a:90:a4: 40:a2:78:04:a7:45:35:37:bf:30:e2:5a:f9:f5:de:0d:b5:0c: 62:6a:e3:51:fe:74:27:e5:bd:8d:af:a5:31:47:6c:38:25:11: aa:b5:52:51:8e:4a:86:d7:9d:e6:55:44:e9:9a:e4:30:93:20: fc:02:f8:93:a7:bb:af:3f:d3:77:8e:b5:de:d5:ff:0e:ed:a3: 6d:8b:32:e8:60:11:b3:42:2f:1b:e5:4b:93:31:19:47:97:36: a3:8f:e1:65:a8:fb:1c:76:32:e1:ea:dd:25:61:24:db:86:70: ff:af:16:5d:63:a2:c9:8f:28:dd:e8:c2:ef:7a:fe:d4:83:8d: 33:5a:99:2a:b1:d9:3a:43:63:6e:d4:a5:8c:1d:4e:fe:34:87: aa:49:cb:49:45:0b:68:18:4c:db:ca:b4:28:f6:df:64:10:50: ed:ea:f0:40:ed:15:d0:2d:53:6f:04:ba:43:67:c5:77:f6:c3: 82:75:ef:81:02:36:bc:bf:20:6c:1a:39:7a:e0:d5:f1:4e:24: e3:49:86:52 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEue2Kf4RCxu6ROtx+PmbegugmSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2 NDU5RjlGNjAeFw0yNjEwMDgwOTQyMjhaFw0yNjEwMTExMTMwMjhaMDMxMTAvBgNV BAMTKDQ0NjM2OUQ2REVDODc4NDBFQTE2N0FCQzNDNDZCMjczMzgxNzBGRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbt7e/AHsW3D/icUNh/r6WblzC LricLytyK7v42CgF74XWQr1+/sfLSwg3hnZ0xBK8ZfFeJRWYCQR5topLJMtjTLG2 lfTTIrmwBVGTvZYNpFwo0KweSLQUEix0Xe8YweA4nCuNklUHEPNfsEUpBQUylmmx qFPfD12VdAZq88qg1UZMS/2P/mSycrIwyzjDgOoubebBQ8qbvmrjl8VeO6K96/Sb AX4MsdLrSxBUc9LNqIRoe+MEA4GFJPG7TomlPBBRrnaepYxmzSMVhPfLEMlteGvQ Ea1C2cPArmaYVnAFyz23BixGaXLxpO3LKw46l/fNA0JDD/f7yvtna98IuZ6VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURGNp1t7IeEDqFnq8PEayczgXD9IwHwYDVR0j BBgwFoAUBM/c0WUN2FT/D2hAIyQncWRZ+fYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDExMzA0OTk2MDEyMDMzOS8wLzA0Q0ZEQ0QxNjUwREQ4NTRGRjBGNjg0MDIzMjQy NzcxNjQ1OUY5RjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2NDU5RjlGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQxMTMwNDk5NjAxMjAzMzkvMC8wNENGRENEMTY1MERE ODU0RkYwRjY4NDAyMzI0Mjc3MTY0NTlGOUY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOenB+dJ+SIT tnAFgBLJwss8uiqyIYrVL5h29j73hRtaoBER8zBAzyIOTCe85imOBBNcCpCkQKJ4 BKdFNTe/MOJa+fXeDbUMYmrjUf50J+W9ja+lMUdsOCURqrVSUY5Khted5lVE6Zrk MJMg/AL4k6e7rz/Td4613tX/Du2jbYsy6GARs0IvG+VLkzEZR5c2o4/hZaj7HHYy 4erdJWEk24Zw/68WXWOiyY8o3ejC73r+1IONM1qZKrHZOkNjbtSljB1O/jSHqknL SUULaBhM28q0KPbfZBBQ7erwQO0V0C1TbwS6Q2fFd/bDgnXvgQI2vL8gbBo5euDV 8U4k40mGUg== -----END CERTIFICATE-----Generated at Sat Oct 10 11:19:07 2026 by rpki-client