$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft File: D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft (raw, json) Hash identifier: 198MDjxL6ppt48YULmKYSQfQXePmcbNscvcPGS3ihyY= Subject key identifier: 85:DE:43:83:80:B4:FF:CA:6B:A6:3D:09:A9:0E:FB:99:B6:B5:E0:2B Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 Certificate issuer: /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Certificate serial: 40DF745095E70DFB0AD1BC14142528180DABA0CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft Manifest number: 9F Signing time: Sun 25 Oct 2026 13:02:35 +0000 Manifest this update: Sun 25 Oct 2026 12:57:35 +0000 Manifest next update: Wed 28 Oct 2026 13:04:35 +0000 Files and hashes: 1: 312e3131392e3136302e302f31392d3139203d3e2034383437.roa (hash: /OVYaMewqwOZAGpYc8hZIoHYpTVSYT2ngt37uNP2oOU=) 2: 312e3131392e3132382e302f31392d3139203d3e2034383437.roa (hash: 2kyjMu3BHpV1xaJsxUyiNwF2qVNY2TtqCTgdxT3w1oE=) 3: 312e3131392e3230302e302f32322d3232203d3e2034383437.roa (hash: qRM/rUEf2jUT1lNqFq/3JzZa+DiqzhCpFL+qfMX/rIo=) 4: 312e3131392e3139322e302f32312d3231203d3e2034383437.roa (hash: XNtjIRUgY4fS8N3i0nW4IwHop43Mi2F8n9L+lEuBp6g=) 5: 312e3131392e3139322e302f32302d3230203d3e203538383531.roa (hash: Eokuq4TYzmQLPSN0aKa4rtzDxlWJS6GW4rq/4K/orew=) 6: 312e3131392e3137332e302f32342d3234203d3e2034383437.roa (hash: HbFyMoodAskaRNCh2kXRS6Up+3CDAyVItYsT7reY8YE=) 7: 312e3131392e3230302e302f32322d3232203d3e2034383038.roa (hash: l079AkrDWFxI4eAQTFopAzvAJmBHsfxSaw+sOcgslvw=) 8: 312e3131392e3231362e302f32312d3231203d3e2030.roa (hash: d/Q0+w2Ahk9b0UcKv/1FydpOmWor6aLsadLAnHi6P1g=) 9: 312e3131392e3230382e302f32332d3233203d3e2034383038.roa (hash: 4UpCjNnzbejh26AeDnjuO8fstcEOgtGPyAagMXPv8M8=) 10: 312e3131392e3232342e302f31392d3139203d3e2030.roa (hash: X68ruCb/zx9ahPmcBocKLSDV43P/iv5lanXlT9cxWHU=) 11: 312e3131392e3132382e302f31382d3138203d3e203538383531.roa (hash: gRQ8UnKwxW4nSnM0kQO9qQplqAvz5EjFBnc60Im7DNs=) 12: 34332e3234382e3233322e302f32322d3232203d3e203538383531.roa (hash: AJLCIJLGsS5OOuU5jN56Qp6er6qsS4GHKNdr18oyEv4=) 13: 312e3131392e3230342e302f32342d3234203d3e203539303334.roa (hash: ryffUH5sItQ5u/2cZTafP/5cIQookKPBUWWSsQm2ekA=) 14: 312e3131392e3231322e302f32322d3232203d3e2030.roa (hash: +HKaT/JYu9OdbtkKLylMRvfLIjfMgH4tlTzH+mamNA0=) 15: 312e3131392e3137382e302f32332d3233203d3e2034383038.roa (hash: 9uICLXjLL9j8/OlDDXwfnK1gqfcoptnJdxpfe0b2r04=) 16: 34332e3232342e34342e302f32322d3232203d3e2030.roa (hash: Lx4hWOfEA8dPjMZmg7VTKIrqr+5fWjYAkvHCD6HvbxQ=) 17: 312e3131392e3231302e302f32332d3233203d3e2034383437.roa (hash: KxQ4soVFF8Uw/0kkpUVXmsMtrX9Dh7hktb6dFTadp1o=) 18: 312e3131392e3230382e302f32332d3233203d3e2034383437.roa (hash: cPjBBV7B+42pHSYNp4q2pDOt3/fb3nX6CBhaGrDUBeE=) 19: 34332e3234382e3233322e302f32332d3233203d3e2034383038.roa (hash: q4QXAKyEiqyt6O8tYhJdmHeUcXIERGW2oDuSUPsRrZc=) 20: D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl (hash: /dEmK0OPLkDJA8jHizqFFWv6d2pk88Gbz1A8w54z7NA=) 21: 312e3131392e3137382e302f32332d3233203d3e203538383531.roa (hash: 6D4zUFftIzxux5xyxQnqsUVB4Ncy6yBZORWBbQpPLyA=) 22: 312e3131392e3231302e302f32332d3233203d3e2034383038.roa (hash: 1L3U0/60sLZS+Z/pNTWWOqpvnPhUaI1f6HMrDfzGSv0=) 23: 312e3131392e3137382e302f32332d3233203d3e2034383437.roa (hash: VpnallqfNTOiP4zIbWOvVBh8IEO8CDYe7vkPD1X7T9I=) 24: 312e3131392e3139322e302f32312d3231203d3e2034383038.roa (hash: Ga6IokCcRDj3nBYCTXoXV6+8A0MVTAWFIPsVjF2HhLQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 13:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:df:74:50:95:e7:0d:fb:0a:d1:bc:14:14:25:28:18:0d:ab:a0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Validity Not Before: Oct 25 12:57:35 2026 GMT Not After : Oct 28 13:04:35 2026 GMT Subject: CN=85DE438380B4FFCA6BA63D09A90EFB99B6B5E02B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:ef:ff:da:82:ad:1c:8b:9d:a0:f1:b3:59: 72:10:3c:b0:1c:c2:5e:20:f4:ae:34:15:3a:74:53: 2a:0c:00:d0:dc:7b:b5:91:7a:93:46:bd:d0:1a:dc: 8c:26:e7:b0:8e:fb:01:b2:4b:54:7e:59:e5:3e:23: f4:a7:67:8a:e5:44:16:07:9f:25:3e:76:31:72:81: a6:9f:7b:a3:80:a0:13:ed:62:1c:3c:a6:fc:a3:fe: 57:c5:ff:9c:76:4e:54:fb:1b:ee:e2:49:9c:3e:47: d6:97:4e:20:e4:f5:78:32:5a:31:06:51:91:fb:e2: c4:73:eb:8a:30:e9:2f:1d:0c:20:32:79:50:45:bc: 8a:74:2b:08:de:d4:b1:1b:df:83:a7:f9:8c:8f:73: cb:4c:65:64:47:03:50:18:5b:5b:b7:89:ae:76:5a: 8e:91:fb:d3:ba:b7:60:56:8e:2d:26:c6:1d:4a:bb: d9:e8:17:69:aa:64:3d:09:d2:ee:17:ac:d5:2a:cd: 76:74:1d:ff:53:37:82:4b:cd:73:4b:42:01:b7:5c: da:52:80:7a:ff:bd:ad:da:5b:d7:f4:11:41:53:85: fc:81:b7:c9:7f:35:93:9d:6c:62:80:5d:c8:78:63: f9:44:be:63:28:f2:39:3e:64:de:f6:20:be:72:2d: 64:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DE:43:83:80:B4:FF:CA:6B:A6:3D:09:A9:0E:FB:99:B6:B5:E0:2B X509v3 Authority Key Identifier: keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:c4:91:64:8a:af:01:05:a7:9c:9b:b8:82:5a:15:a0:4e:38: 17:33:ef:25:4f:c2:36:0d:2d:49:dd:3c:9c:80:99:2a:d6:5b: df:2d:d5:48:fd:2a:6d:19:ff:7c:d2:04:bb:b3:ae:6f:1a:99: f9:29:f8:30:a8:5f:ff:15:1a:85:8f:7e:b1:ac:0c:bc:37:8e: c3:33:8f:e5:0e:54:5c:34:01:37:8e:b8:ab:6e:16:b3:26:70: cd:70:d3:0c:7b:10:4a:6a:d9:a6:30:a9:83:ca:c5:c6:a1:9e: 61:6a:3b:df:09:6e:2f:86:1f:69:d3:87:a7:0f:4e:31:d9:74: 6d:64:c3:c8:aa:c0:51:a7:b8:9d:1b:99:f6:0a:35:8c:5e:d1: 8c:a3:26:ee:f2:7b:ee:1c:16:38:4a:32:4f:97:02:48:df:cd: d7:e4:a3:bf:4c:cf:48:b8:21:7b:98:50:1a:2e:25:07:fe:7e: b4:97:70:44:33:8b:c4:3a:f9:7e:0f:c9:d3:20:00:e2:51:c2: 1d:f7:2e:5b:fd:9f:97:66:8a:2c:5e:24:b8:c4:e2:e6:c4:a5: 82:c3:28:e8:29:99:df:e6:e8:b9:2f:c2:95:e1:6d:60:18:11: 56:f7:ac:ca:61:11:50:98:b7:ba:92:05:1c:9b:8e:84:1f:3b: 85:d3:2d:f4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQN90UJXnDfsK0bwUFCUoGA2roMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMw NDNBQ0IyMzAeFw0yNjEwMjUxMjU3MzVaFw0yNjEwMjgxMzA0MzVaMDMxMTAvBgNV BAMTKDg1REU0MzgzODBCNEZGQ0E2QkE2M0QwOUE5MEVGQjk5QjZCNUUwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVu//2oKtHIudoPGzWXIQPLAc wl4g9K40FTp0UyoMANDce7WRepNGvdAa3Iwm57CO+wGyS1R+WeU+I/SnZ4rlRBYH nyU+djFygaafe6OAoBPtYhw8pvyj/lfF/5x2TlT7G+7iSZw+R9aXTiDk9XgyWjEG UZH74sRz64ow6S8dDCAyeVBFvIp0Kwje1LEb34On+YyPc8tMZWRHA1AYW1u3ia52 Wo6R+9O6t2BWji0mxh1Ku9noF2mqZD0J0u4XrNUqzXZ0Hf9TN4JLzXNLQgG3XNpS gHr/va3aW9f0EUFThfyBt8l/NZOdbGKAXch4Y/lEvmMo8jk+ZN72IL5yLWR3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhd5Dg4C0/8prpj0JqQ77mba14CswHwYDVR0j BBgwFoAU1D38QTvIT6GL0bjgeiNGLAQ6yyMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg1MjY3NTI1OTcyNzg5NS8wL0Q0M0RGQzQxM0JDODRGQTE4QkQxQjhFMDdBMjM0 NjJDMDQzQUNCMjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMwNDNBQ0IyMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NTI2NzUyNTk3Mjc4OTUvMC9ENDNERkM0MTNCQzg0 RkExOEJEMUI4RTA3QTIzNDYyQzA0M0FDQjIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcSRZIqvAQWn nJu4gloVoE44FzPvJU/CNg0tSd08nICZKtZb3y3VSP0qbRn/fNIEu7OubxqZ+Sn4 MKhf/xUahY9+sawMvDeOwzOP5Q5UXDQBN464q24WsyZwzXDTDHsQSmrZpjCpg8rF xqGeYWo73wluL4YfadOHpw9OMdl0bWTDyKrAUae4nRuZ9go1jF7RjKMm7vJ77hwW OEoyT5cCSN/N1+Sjv0zPSLghe5hQGi4lB/5+tJdwRDOLxDr5fg/J0yAA4lHCHfcu W/2fl2aKLF4kuMTi5sSlgsMo6CmZ3+bouS/CleFtYBgRVvesymERUJi3upIFHJuO hB87hdMt9A== -----END CERTIFICATE-----Generated at Tue Oct 27 11:07:22 2026 by rpki-client