$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft File: 04CFDCD1650DD854FF0F6840232427716459F9F6.mft (raw, json) Hash identifier: 8SyPrXKA16y8fPsFC9kvVChp7AnqBjqhfx9Wz8wFwpQ= Subject key identifier: BF:BA:0D:84:5E:D2:B6:23:46:CC:F6:34:2B:9F:86:67:9B:53:94:CC Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6 Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6 Certificate serial: 2CDA84654ECE7062F68DDEEE252637728727D4F9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft Manifest number: 88 Signing time: Sat 10 Oct 2026 11:34:38 +0000 Manifest this update: Sat 10 Oct 2026 11:29:38 +0000 Manifest next update: Tue 13 Oct 2026 16:03:38 +0000 Files and hashes: 1: 34352e3234392e3231342e302f32342d3234203d3e203633363535.roa (hash: FjpSMjlWaCKn4Ptz2//2ywMsZCamiRqirl04dheae5c=) 2: 34352e3234392e3231322e302f32322d3232203d3e20313334373732.roa (hash: 9pIY5q7sFsiwAGKhyXR1XA+RgTgJavOC56GPQRIpshc=) 3: 34352e3234392e3231322e302f32322d3232203d3e20313334353433.roa (hash: UcuGXuPb0hXyj0b7YXGKUEIL6kjhnor7fhftIIHVK9k=) 4: 3130332e3231382e3231362e302f32322d3232203d3e203633363535.roa (hash: NOCAwtWZsIhBry+SBX5iaq88IXE9NM5A/dmXDriT5aI=) 5: 34352e3234392e3231342e302f32342d3234203d3e20313334353433.roa (hash: X1XBrJsS49WZ6bG4bL3EOgaPFPPikSE/xQlm1+RZYr8=) 6: 34352e3234392e3231322e302f32322d3232203d3e203633363535.roa (hash: XRF+yXRb2uPY0v2bR7ngxvXurDM+P+M+esd6vmyMemI=) 7: 3130332e3231382e3231382e302f32342d3234203d3e203633363535.roa (hash: 5wmK/uIuxQ0abi5TfiuORpuZfYiXyqRFjvRirnqi+Sg=) 8: 34352e3234392e3231352e302f32342d3234203d3e203633363535.roa (hash: +YWRVjrDc5zzP9fHkR+jpRnZsjSCEDVKovunc5w7VCA=) 9: 3130332e3231382e3231382e302f32342d3234203d3e20313334353433.roa (hash: Y2RcLQFb18CnjFCnAzsTkcgykGHRf54pkJISu/gd7vI=) 10: 3130332e3231382e3231362e302f32342d3234203d3e203633363535.roa (hash: 39DI5mk35xVvXoo1KjCL0GI8uV8MuiAuacUAFvY7Wng=) 11: 3130332e3231382e3231372e302f32342d3234203d3e203633363535.roa (hash: 94s2hwgbMojMwRg7h2m9126e5r0Y2FKlshIP8UZtHs8=) 12: 04CFDCD1650DD854FF0F6840232427716459F9F6.crl (hash: uZEB3zOdKujtByqO0DE63nnK61g5cH6ZPlCujemsCxM=) 13: 3130332e3231382e3231392e302f32342d3234203d3e20313334353433.roa (hash: t+s8cW3HPIKJCf9/nR81HoUAb+qDT9KrGZa7/yuD7V4=) 14: 3130332e3231382e3231392e302f32342d3234203d3e203633363535.roa (hash: nU2jzAeiN/92z2BG9zCpXjlNOqpVV/DCkixw34ocyuk=) 15: 34352e3234392e3231332e302f32342d3234203d3e203633363535.roa (hash: afjN7HVsTkBDFALMizH5frvoP1K7UkE1HOatng2gxcA=) 16: 34352e3234392e3231332e302f32342d3234203d3e20313334353433.roa (hash: jzCGGkLFQm34ItGKVukkr/wAEXg4rSDR9Fl7iCV+EJQ=) 17: 3130332e3231382e3231372e302f32342d3234203d3e20313334353433.roa (hash: nq92FnvfjRR84whnQXauF9ipzblRAvFLjaxaZSTK0jo=) 18: 34352e3234392e3231322e302f32342d3234203d3e20313334353433.roa (hash: pvuKH/rUh97ZR1blQ/bfkvTRwEcW2fCe7fof21hZ8z4=) 19: 3130332e3231382e3231362e302f32342d3234203d3e20313334353433.roa (hash: PGXKTXEEgB01/oMdHmVj8Ba/lbAwPh/9HRJVhWFWz9s=) 20: 34352e3234392e3231322e302f32342d3234203d3e203633363535.roa (hash: zkuxppiZoNATV/cOEox1oUDTUtUjB9UKsr/kxX0NfaY=) 21: 3130332e3231382e3231362e302f32322d3232203d3e20313334373732.roa (hash: qJvTHeXEIs4Vdls12BNbPtiipv+CuWwX/mjYv5JIrAk=) 22: 3130332e3231382e3231362e302f32322d3232203d3e20313334353433.roa (hash: SG8F3t1LIRMtRaW+hlTV2zYNbHKsNNtdl9bUzA/tf2U=) 23: 34352e3234392e3231352e302f32342d3234203d3e20313334353433.roa (hash: UWm2lEscXePQ9xWxmXherZFoyJG6dcvQ2KwTIX+Ed3Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:da:84:65:4e:ce:70:62:f6:8d:de:ee:25:26:37:72:87:27:d4:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6 Validity Not Before: Oct 10 11:29:38 2026 GMT Not After : Oct 13 16:03:38 2026 GMT Subject: CN=BFBA0D845ED2B62346CCF6342B9F86679B5394CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:28:39:0f:e7:ce:fe:89:0a:d6:b1:c9:1b:6a: c9:49:8f:73:e6:26:0a:c9:91:45:1e:17:c7:3e:d9: eb:25:9b:5c:68:3e:dc:1a:f3:f6:ae:e9:38:75:f2: 32:69:51:25:46:01:17:cb:6e:0e:c8:5b:52:c9:a8: 10:06:a9:eb:a0:b2:03:bf:1a:59:22:d1:3d:c9:bc: 96:1e:2f:97:ab:8c:7f:d4:df:d8:5c:24:87:dd:df: 00:fe:20:c6:06:f9:db:b7:da:9a:7a:63:47:47:8e: 3e:4b:ec:2e:cc:0f:60:a5:4a:0c:02:05:f6:a3:f6: 53:36:9f:00:93:94:b4:f3:a1:3e:8a:ae:1d:f2:86: f1:3e:05:cd:7f:8a:2c:f4:39:45:3b:4e:19:d0:c6: 88:21:03:64:6d:fa:5f:49:b7:e1:6d:fd:0e:17:23: e6:66:7f:35:8f:6e:a6:ec:e8:c8:34:af:fd:46:b1: dd:29:c6:16:25:07:85:aa:8f:91:0f:5a:a7:a0:14: 66:35:59:09:1c:8f:c0:73:85:72:c1:de:dc:e2:c9: c5:52:b7:56:5d:6c:22:a1:e3:ec:f3:c8:87:fa:0b: 37:92:a8:5c:f3:31:4a:ec:7d:5f:46:ab:ae:d3:2b: c5:6b:ea:20:46:60:75:1e:88:31:20:b7:44:aa:2b: 15:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BA:0D:84:5E:D2:B6:23:46:CC:F6:34:2B:9F:86:67:9B:53:94:CC X509v3 Authority Key Identifier: keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:e6:21:2c:48:7e:79:e8:8b:31:9b:5e:4e:3d:55:0e:d2:4b: f1:06:95:dc:02:56:e9:a3:29:6b:2a:31:2e:13:9c:6e:88:52: c0:54:c1:db:46:2b:8a:9b:30:43:45:30:51:1c:97:8e:ca:f0: ea:17:1c:ee:c6:78:4b:ff:8d:43:d9:75:4c:57:3c:bd:62:a7: ed:60:c2:be:9b:32:d9:0a:5e:a1:bc:8e:83:78:c1:ef:45:19: 54:c8:7d:1b:bc:6d:a4:3d:90:04:cc:de:31:76:20:d5:5c:de: 81:a2:1c:9f:8d:c8:de:23:e2:12:b9:20:65:b3:73:22:c5:48: 7e:01:e4:6b:8a:7e:3e:26:da:da:8c:c0:67:bd:d1:09:bb:a5: b2:97:f3:02:69:58:ca:d8:ff:13:3e:7d:2a:3e:28:34:ad:c3: bf:04:35:45:17:d8:72:d5:86:7b:c2:f9:ce:fd:19:e8:e1:b3: 72:62:52:bb:39:e2:d4:d2:8e:6b:53:1d:13:ef:eb:35:83:1f: 76:86:7d:5d:15:f9:f5:17:d4:73:d5:4a:c8:12:02:b7:06:cd: 12:6f:5f:09:8d:cd:88:37:52:44:92:11:45:4d:5d:17:40:be: 0b:a3:19:b5:f0:3b:c9:91:98:4d:90:10:3a:4a:ef:74:79:57: 40:27:f9:d3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULNqEZU7OcGL2jd7uJSY3cocn1PkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2 NDU5RjlGNjAeFw0yNjEwMTAxMTI5MzhaFw0yNjEwMTMxNjAzMzhaMDMxMTAvBgNV BAMTKEJGQkEwRDg0NUVEMkI2MjM0NkNDRjYzNDJCOUY4NjY3OUI1Mzk0Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtKDkP587+iQrWsckbaslJj3Pm JgrJkUUeF8c+2eslm1xoPtwa8/au6Th18jJpUSVGARfLbg7IW1LJqBAGqeugsgO/ Glki0T3JvJYeL5erjH/U39hcJIfd3wD+IMYG+du32pp6Y0dHjj5L7C7MD2ClSgwC Bfaj9lM2nwCTlLTzoT6Krh3yhvE+Bc1/iiz0OUU7ThnQxoghA2Rt+l9Jt+Ft/Q4X I+ZmfzWPbqbs6Mg0r/1Gsd0pxhYlB4Wqj5EPWqegFGY1WQkcj8BzhXLB3tziycVS t1ZdbCKh4+zzyIf6CzeSqFzzMUrsfV9Gq67TK8Vr6iBGYHUeiDEgt0SqKxUHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUv7oNhF7StiNGzPY0K5+GZ5tTlMwwHwYDVR0j BBgwFoAUBM/c0WUN2FT/D2hAIyQncWRZ+fYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDExMzA0OTk2MDEyMDMzOS8wLzA0Q0ZEQ0QxNjUwREQ4NTRGRjBGNjg0MDIzMjQy NzcxNjQ1OUY5RjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDRDRkRDRDE2NTBERDg1NEZGMEY2ODQwMjMyNDI3NzE2NDU5RjlGNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQxMTMwNDk5NjAxMjAzMzkvMC8wNENGRENEMTY1MERE ODU0RkYwRjY4NDAyMzI0Mjc3MTY0NTlGOUY2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApeYhLEh+eeiL MZteTj1VDtJL8QaV3AJW6aMpayoxLhOcbohSwFTB20YripswQ0UwURyXjsrw6hcc 7sZ4S/+NQ9l1TFc8vWKn7WDCvpsy2QpeobyOg3jB70UZVMh9G7xtpD2QBMzeMXYg 1VzegaIcn43I3iPiErkgZbNzIsVIfgHka4p+Piba2ozAZ73RCbulspfzAmlYytj/ Ez59Kj4oNK3DvwQ1RRfYctWGe8L5zv0Z6OGzcmJSuzni1NKOa1MdE+/rNYMfdoZ9 XRX59RfUc9VKyBICtwbNEm9fCY3NiDdSRJIRRU1dF0C+C6MZtfA7yZGYTZAQOkrv dHlXQCf50w== -----END CERTIFICATE-----Generated at Sat Oct 10 21:23:10 2026 by rpki-client