$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft File: FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft (raw, json) Hash identifier: uDFku71aqhJGOnKJQS5FYt4s6nX7A/BWXeKicqlMGFs= Subject key identifier: 8A:AC:6D:55:AE:8D:1D:58:2E:34:C5:63:5B:EA:A6:E8:F3:90:AB:43 Authority key identifier: FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E Certificate issuer: /CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E Certificate serial: 5A11A37A08664BDF143FBCE778E537F0B66E50C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft Manifest number: 90 Signing time: Sat 24 Oct 2026 22:47:00 +0000 Manifest this update: Sat 24 Oct 2026 22:42:00 +0000 Manifest next update: Wed 28 Oct 2026 08:38:00 +0000 Files and hashes: 1: 3230322e39312e3138342e302f32332d3332203d3e2034383038.roa (hash: x5BW1+RlHPJ1eIaJoW8xLLmvZjNlyPZpGHm7mjrN2v4=) 2: 3230322e39312e3137362e302f32312d3332203d3e2034383038.roa (hash: PIwjB7Cm/PHG2yK99D3XAoIfIN92y706TJvBiQ2oqzs=) 3: FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl (hash: advNH7owEHEljcUXNNgmZRPo3+DveWTAXmG5MWU2ia8=) 4: 3230322e39332e3235322e302f32322d3332203d3e2034383038.roa (hash: kK/ACVhxw+EM5uNXfp+kpIl6rn/PuCSg8zqiCgwErdA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 08:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:11:a3:7a:08:66:4b:df:14:3f:bc:e7:78:e5:37:f0:b6:6e:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FFF96F8B13C936AC197ADB438E27C4E998F8642E Validity Not Before: Oct 24 22:42:00 2026 GMT Not After : Oct 28 08:38:00 2026 GMT Subject: CN=8AAC6D55AE8D1D582E34C5635BEAA6E8F390AB43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:55:99:48:f3:65:e3:39:36:36:f9:44:92:da: ec:39:fd:6c:a3:87:6f:79:30:f7:81:bb:cf:03:a5: 32:f2:ac:b8:65:0c:bc:04:e2:43:2c:93:ec:c0:d4: 45:b5:9f:17:6b:25:08:92:86:16:ad:65:c3:05:96: 58:08:2d:37:1d:06:9a:cb:dd:8c:08:cc:c5:4e:bf: 4d:d8:ba:33:8f:ee:d7:c1:97:8d:24:b1:c7:e1:27: 72:ed:ce:bd:e3:6c:64:1b:d6:aa:ae:6f:7b:ac:7a: e4:f4:20:1a:12:06:2c:90:d4:3c:ef:20:9c:ed:12: 6d:e7:bc:fc:2e:d8:aa:b6:c6:ee:56:3a:cb:81:43: a2:c8:95:0e:f4:05:ff:e1:a7:08:66:4e:ab:eb:47: 51:d1:e6:0e:45:82:e9:13:4b:a2:29:d1:1c:75:c6: 66:a7:dc:3b:9a:39:a0:e2:b0:fa:34:fb:16:94:76: 51:51:b8:b6:0f:d5:7b:3f:48:d5:85:3f:38:c1:08: 1f:90:4a:80:76:64:ee:86:ca:0b:ce:d0:00:7e:66: 69:f4:c5:1f:c9:b5:0d:1e:b1:77:79:ce:ce:8d:f7: 22:fc:f5:52:ad:11:e8:77:8e:ca:fd:e3:09:ba:32: 44:52:f6:c3:93:be:30:b1:a5:65:c9:93:78:6f:c1: bd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AC:6D:55:AE:8D:1D:58:2E:34:C5:63:5B:EA:A6:E8:F3:90:AB:43 X509v3 Authority Key Identifier: keyid:FF:F9:6F:8B:13:C9:36:AC:19:7A:DB:43:8E:27:C4:E9:98:F8:64:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FFF96F8B13C936AC197ADB438E27C4E998F8642E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114457741306429463/0/FFF96F8B13C936AC197ADB438E27C4E998F8642E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5d:a4:37:fb:3a:ee:d8:15:5a:9e:da:ba:70:c5:0d:a1:e6: 84:f2:c8:d0:6d:a2:9c:fb:8d:96:d2:7d:e4:a7:46:d9:92:e2: e0:56:12:7b:77:02:3b:f4:d4:4f:47:f7:47:77:54:25:88:fd: 64:d6:40:7f:ec:22:bc:21:79:96:87:91:dc:7b:b7:2c:bc:cf: f7:c1:6e:99:a5:f0:55:10:73:3c:bd:9f:4b:e1:0f:cf:43:d1: ee:8b:41:ed:60:6e:a1:97:55:aa:54:e3:eb:5b:a3:9e:8a:52: 57:41:d0:a0:08:e3:5b:65:06:e7:3c:79:7a:96:ce:56:92:63: 48:10:ce:77:cc:01:e8:7d:c5:27:be:86:26:40:e9:3c:76:45: 36:95:b0:43:d8:45:ce:f1:78:46:72:45:cb:fd:c6:00:6c:74: e5:ba:ca:cd:45:c1:04:2f:83:27:ce:50:07:19:8b:23:ae:e2: 30:32:8c:40:85:a7:85:f6:bc:e5:f3:9f:9a:c8:c2:e7:0a:4e: 7b:15:fd:6f:dc:59:ce:2f:9f:f3:5b:bd:db:b5:d2:a1:94:aa: e6:61:3b:c6:83:e6:f5:be:e8:12:96:dd:46:38:2c:7c:eb:24: ae:67:bd:dc:0e:5d:9e:a8:5c:5d:db:0b:43:15:da:8b:52:15: 96:11:44:e3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWhGjeghmS98UP7zneOU38LZuUMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkZGOTZGOEIxM0M5MzZBQzE5N0FEQjQzOEUyN0M0RTk5 OEY4NjQyRTAeFw0yNjEwMjQyMjQyMDBaFw0yNjEwMjgwODM4MDBaMDMxMTAvBgNV BAMTKDhBQUM2RDU1QUU4RDFENTgyRTM0QzU2MzVCRUFBNkU4RjM5MEFCNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUVZlI82XjOTY2+USS2uw5/Wyj h295MPeBu88DpTLyrLhlDLwE4kMsk+zA1EW1nxdrJQiShhatZcMFllgILTcdBprL 3YwIzMVOv03YujOP7tfBl40kscfhJ3Ltzr3jbGQb1qqub3useuT0IBoSBiyQ1Dzv IJztEm3nvPwu2Kq2xu5WOsuBQ6LIlQ70Bf/hpwhmTqvrR1HR5g5FgukTS6Ip0Rx1 xman3DuaOaDisPo0+xaUdlFRuLYP1Xs/SNWFPzjBCB+QSoB2ZO6GygvO0AB+Zmn0 xR/JtQ0esXd5zs6N9yL89VKtEeh3jsr94wm6MkRS9sOTvjCxpWXJk3hvwb3ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiqxtVa6NHVguNMVjW+qm6POQq0MwHwYDVR0j BBgwFoAU//lvixPJNqwZettDjifE6Zj4ZC4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDQ1Nzc0MTMwNjQyOTQ2My8wL0ZGRjk2RjhCMTNDOTM2QUMxOTdBREI0MzhFMjdD NEU5OThGODY0MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkZGOTZGOEIxM0M5MzZBQzE5N0FEQjQzOEUyN0M0RTk5OEY4NjQyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ0NTc3NDEzMDY0Mjk0NjMvMC9GRkY5NkY4QjEzQzkz NkFDMTk3QURCNDM4RTI3QzRFOTk4Rjg2NDJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAil2kN/s67tgV Wp7aunDFDaHmhPLI0G2inPuNltJ95KdG2ZLi4FYSe3cCO/TUT0f3R3dUJYj9ZNZA f+wivCF5loeR3Hu3LLzP98FumaXwVRBzPL2fS+EPz0PR7otB7WBuoZdVqlTj61uj nopSV0HQoAjjW2UG5zx5epbOVpJjSBDOd8wB6H3FJ76GJkDpPHZFNpWwQ9hFzvF4 RnJFy/3GAGx05brKzUXBBC+DJ85QBxmLI67iMDKMQIWnhfa85fOfmsjC5wpOexX9 b9xZzi+f81u927XSoZSq5mE7xoPm9b7oEpbdRjgsfOskrme93A5dnqhcXdsLQxXa i1IVlhFE4w== -----END CERTIFICATE-----Generated at Tue Oct 27 04:59:02 2026 by rpki-client