$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft File: D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft (raw, json) Hash identifier: pb4gBZdp8BrRl5kN8P4WQIfac5EuBfdoEUUY5XrlNlc= Subject key identifier: 8E:AD:0B:22:7D:94:8A:41:81:15:67:E2:CF:33:92:8B:66:DD:2E:3D Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 Certificate issuer: /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Certificate serial: 18B8CE3A9A2FD59E4B70AF9493F590EE8F85062A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft Manifest number: A0 Signing time: Tue 27 Oct 2026 13:04:44 +0000 Manifest this update: Tue 27 Oct 2026 12:59:44 +0000 Manifest next update: Fri 30 Oct 2026 23:36:44 +0000 Files and hashes: 1: 312e3131392e3231362e302f32312d3231203d3e2030.roa (hash: d/Q0+w2Ahk9b0UcKv/1FydpOmWor6aLsadLAnHi6P1g=) 2: 312e3131392e3230342e302f32342d3234203d3e203539303334.roa (hash: ryffUH5sItQ5u/2cZTafP/5cIQookKPBUWWSsQm2ekA=) 3: 34332e3232342e34342e302f32322d3232203d3e2030.roa (hash: Lx4hWOfEA8dPjMZmg7VTKIrqr+5fWjYAkvHCD6HvbxQ=) 4: 312e3131392e3132382e302f31382d3138203d3e203538383531.roa (hash: gRQ8UnKwxW4nSnM0kQO9qQplqAvz5EjFBnc60Im7DNs=) 5: 312e3131392e3231322e302f32322d3232203d3e2030.roa (hash: +HKaT/JYu9OdbtkKLylMRvfLIjfMgH4tlTzH+mamNA0=) 6: 312e3131392e3139322e302f32302d3230203d3e203538383531.roa (hash: Eokuq4TYzmQLPSN0aKa4rtzDxlWJS6GW4rq/4K/orew=) 7: 312e3131392e3230302e302f32322d3232203d3e2034383437.roa (hash: qRM/rUEf2jUT1lNqFq/3JzZa+DiqzhCpFL+qfMX/rIo=) 8: 312e3131392e3231302e302f32332d3233203d3e2034383437.roa (hash: KxQ4soVFF8Uw/0kkpUVXmsMtrX9Dh7hktb6dFTadp1o=) 9: 312e3131392e3231302e302f32332d3233203d3e2034383038.roa (hash: 1L3U0/60sLZS+Z/pNTWWOqpvnPhUaI1f6HMrDfzGSv0=) 10: 312e3131392e3230302e302f32322d3232203d3e2034383038.roa (hash: l079AkrDWFxI4eAQTFopAzvAJmBHsfxSaw+sOcgslvw=) 11: 312e3131392e3232342e302f31392d3139203d3e2030.roa (hash: X68ruCb/zx9ahPmcBocKLSDV43P/iv5lanXlT9cxWHU=) 12: 312e3131392e3139322e302f32312d3231203d3e2034383437.roa (hash: XNtjIRUgY4fS8N3i0nW4IwHop43Mi2F8n9L+lEuBp6g=) 13: D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl (hash: UhSCcQCKOnUM/tmAmocT49pTSZlDuM3D+x8eblbE31o=) 14: 312e3131392e3230382e302f32332d3233203d3e2034383437.roa (hash: cPjBBV7B+42pHSYNp4q2pDOt3/fb3nX6CBhaGrDUBeE=) 15: 312e3131392e3132382e302f31392d3139203d3e2034383437.roa (hash: 2kyjMu3BHpV1xaJsxUyiNwF2qVNY2TtqCTgdxT3w1oE=) 16: 34332e3234382e3233322e302f32332d3233203d3e2034383038.roa (hash: q4QXAKyEiqyt6O8tYhJdmHeUcXIERGW2oDuSUPsRrZc=) 17: 312e3131392e3137382e302f32332d3233203d3e2034383038.roa (hash: 9uICLXjLL9j8/OlDDXwfnK1gqfcoptnJdxpfe0b2r04=) 18: 312e3131392e3230382e302f32332d3233203d3e2034383038.roa (hash: 4UpCjNnzbejh26AeDnjuO8fstcEOgtGPyAagMXPv8M8=) 19: 34332e3234382e3233322e302f32322d3232203d3e203538383531.roa (hash: AJLCIJLGsS5OOuU5jN56Qp6er6qsS4GHKNdr18oyEv4=) 20: 312e3131392e3137382e302f32332d3233203d3e203538383531.roa (hash: 6D4zUFftIzxux5xyxQnqsUVB4Ncy6yBZORWBbQpPLyA=) 21: 312e3131392e3136302e302f31392d3139203d3e2034383437.roa (hash: /OVYaMewqwOZAGpYc8hZIoHYpTVSYT2ngt37uNP2oOU=) 22: 312e3131392e3137332e302f32342d3234203d3e2034383437.roa (hash: HbFyMoodAskaRNCh2kXRS6Up+3CDAyVItYsT7reY8YE=) 23: 312e3131392e3139322e302f32312d3231203d3e2034383038.roa (hash: Ga6IokCcRDj3nBYCTXoXV6+8A0MVTAWFIPsVjF2HhLQ=) 24: 312e3131392e3137382e302f32332d3233203d3e2034383437.roa (hash: VpnallqfNTOiP4zIbWOvVBh8IEO8CDYe7vkPD1X7T9I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 11:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b8:ce:3a:9a:2f:d5:9e:4b:70:af:94:93:f5:90:ee:8f:85:06:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Validity Not Before: Oct 27 12:59:44 2026 GMT Not After : Oct 30 23:36:44 2026 GMT Subject: CN=8EAD0B227D948A41811567E2CF33928B66DD2E3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bc:9a:3e:0c:a1:9a:02:57:c8:0a:19:c6:0d: cc:08:81:5d:5d:76:d6:9b:19:2f:48:87:b4:ab:94: 86:29:f4:26:ac:dc:51:1d:22:6c:64:00:4f:6d:2d: 00:02:21:68:a9:7b:1c:d3:08:55:49:b5:b8:42:cc: 44:fa:d6:ca:e3:70:92:87:d2:f0:fb:4c:3a:ea:40: 2e:d5:bb:38:a4:3d:ad:73:ed:20:48:ae:69:c0:d0: cf:82:2c:7a:f5:03:cc:08:1b:ae:65:09:25:97:c3: 9a:48:dd:c5:0f:c7:78:b2:f8:c2:db:77:22:2b:72: 34:fb:42:20:8d:95:67:c1:1d:5f:c5:ae:22:b3:91: 3f:f8:72:09:29:9d:fd:70:a9:13:fe:a4:fe:82:b2: 8c:78:4f:c4:d4:db:ba:93:0a:57:13:33:70:73:58: 59:3f:f9:14:bb:85:b0:cd:9f:4f:b0:27:c6:ce:3b: 88:a0:51:6f:6b:e7:a3:1a:9a:99:26:31:b4:8b:ec: ce:3b:49:ff:42:11:4d:bf:24:07:b9:33:c1:f2:2b: 67:13:1d:c2:e1:ff:be:7e:0a:e6:e6:93:69:87:eb: 27:73:0b:86:d3:0a:c7:54:35:80:a6:4c:e0:42:af: 6f:ad:20:eb:5e:b8:82:00:33:d3:eb:89:9f:d2:9f: fe:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AD:0B:22:7D:94:8A:41:81:15:67:E2:CF:33:92:8B:66:DD:2E:3D X509v3 Authority Key Identifier: keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:25:96:bd:c2:f3:cc:6c:18:1b:00:d8:f9:ea:39:e9:67:fc: b5:f5:49:4a:e1:02:8a:d3:3a:db:02:db:15:33:10:2c:61:30: 4d:17:3c:61:43:ff:25:68:73:4a:be:5d:03:de:73:7c:d0:88: fd:1d:1a:eb:f1:e4:d3:20:7e:15:7e:8e:13:d2:bf:fc:81:1a: 1f:b4:e8:94:5f:7c:2d:85:7d:cb:55:7e:c7:4b:69:18:98:aa: ce:76:44:84:89:3b:59:e5:6c:c6:3b:f7:c6:f4:c3:40:3a:d8: 0d:25:36:da:5d:8a:37:8d:2d:de:7d:68:79:4e:f6:89:4f:fd: 5c:cf:cb:d7:77:e5:41:dd:6b:3d:14:33:69:aa:34:0b:f8:86: 75:31:5c:ad:2e:0f:fc:13:23:1e:cd:8f:34:52:9e:a8:f7:03: 05:6c:08:40:a7:ae:3b:1d:23:13:fa:f8:96:b9:10:7a:db:85: dd:ab:73:e1:b7:05:f1:51:68:47:26:ab:fe:29:c6:f3:3a:7e: f7:f0:45:9c:35:53:3e:1c:65:52:af:4e:e0:1c:a5:f1:72:7a: ef:4a:24:55:4f:98:a7:61:71:84:3d:c7:95:d1:88:b6:22:a6: 09:d8:2b:11:fd:8e:94:04:5a:53:cc:99:6f:04:1b:0d:53:4f: 62:35:aa:99 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGLjOOpov1Z5LcK+Uk/WQ7o+FBiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMw NDNBQ0IyMzAeFw0yNjEwMjcxMjU5NDRaFw0yNjEwMzAyMzM2NDRaMDMxMTAvBgNV BAMTKDhFQUQwQjIyN0Q5NDhBNDE4MTE1NjdFMkNGMzM5MjhCNjZERDJFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZvJo+DKGaAlfIChnGDcwIgV1d dtabGS9Ih7SrlIYp9Cas3FEdImxkAE9tLQACIWipexzTCFVJtbhCzET61srjcJKH 0vD7TDrqQC7VuzikPa1z7SBIrmnA0M+CLHr1A8wIG65lCSWXw5pI3cUPx3iy+MLb dyIrcjT7QiCNlWfBHV/FriKzkT/4cgkpnf1wqRP+pP6Csox4T8TU27qTClcTM3Bz WFk/+RS7hbDNn0+wJ8bOO4igUW9r56MampkmMbSL7M47Sf9CEU2/JAe5M8HyK2cT HcLh/75+Cubmk2mH6ydzC4bTCsdUNYCmTOBCr2+tIOteuIIAM9PriZ/Sn/7ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjq0LIn2UikGBFWfizzOSi2bdLj0wHwYDVR0j BBgwFoAU1D38QTvIT6GL0bjgeiNGLAQ6yyMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg1MjY3NTI1OTcyNzg5NS8wL0Q0M0RGQzQxM0JDODRGQTE4QkQxQjhFMDdBMjM0 NjJDMDQzQUNCMjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMwNDNBQ0IyMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NTI2NzUyNTk3Mjc4OTUvMC9ENDNERkM0MTNCQzg0 RkExOEJEMUI4RTA3QTIzNDYyQzA0M0FDQjIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwSWWvcLzzGwY GwDY+eo56Wf8tfVJSuECitM62wLbFTMQLGEwTRc8YUP/JWhzSr5dA95zfNCI/R0a 6/Hk0yB+FX6OE9K//IEaH7TolF98LYV9y1V+x0tpGJiqznZEhIk7WeVsxjv3xvTD QDrYDSU22l2KN40t3n1oeU72iU/9XM/L13flQd1rPRQzaao0C/iGdTFcrS4P/BMj Hs2PNFKeqPcDBWwIQKeuOx0jE/r4lrkQetuF3atz4bcF8VFoRyar/inG8zp+9/BF nDVTPhxlUq9O4Byl8XJ670okVU+Yp2FxhD3HldGItiKmCdgrEf2OlARaU8yZbwQb DVNPYjWqmQ== -----END CERTIFICATE-----Generated at Tue Oct 27 17:35:14 2026 by rpki-client