$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft File: D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft (raw, json) Hash identifier: F/QHkEAa/+yi1xm81F24xCVDCx1A1desRX4d0gAzWxg= Subject key identifier: 71:9D:17:5F:84:40:8A:BF:D0:9C:FA:5B:C9:F0:DC:E9:94:25:25:B7 Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 Certificate issuer: /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Certificate serial: 4080786EDF8128CEDD70F200F5C9016D85941BC3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft Manifest number: 8A Signing time: Tue 08 Sep 2026 17:39:36 +0000 Manifest this update: Tue 08 Sep 2026 17:34:36 +0000 Manifest next update: Fri 11 Sep 2026 20:54:36 +0000 Files and hashes: 1: 312e3131392e3230302e302f32322d3232203d3e2034383437.roa (hash: qRM/rUEf2jUT1lNqFq/3JzZa+DiqzhCpFL+qfMX/rIo=) 2: 34332e3234382e3233322e302f32332d3233203d3e2034383038.roa (hash: q4QXAKyEiqyt6O8tYhJdmHeUcXIERGW2oDuSUPsRrZc=) 3: 312e3131392e3231302e302f32332d3233203d3e2034383038.roa (hash: 1L3U0/60sLZS+Z/pNTWWOqpvnPhUaI1f6HMrDfzGSv0=) 4: 312e3131392e3137332e302f32342d3234203d3e2034383437.roa (hash: HbFyMoodAskaRNCh2kXRS6Up+3CDAyVItYsT7reY8YE=) 5: 312e3131392e3232342e302f31392d3139203d3e2030.roa (hash: X68ruCb/zx9ahPmcBocKLSDV43P/iv5lanXlT9cxWHU=) 6: 312e3131392e3230302e302f32322d3232203d3e2034383038.roa (hash: l079AkrDWFxI4eAQTFopAzvAJmBHsfxSaw+sOcgslvw=) 7: 34332e3232342e34342e302f32322d3232203d3e2030.roa (hash: Lx4hWOfEA8dPjMZmg7VTKIrqr+5fWjYAkvHCD6HvbxQ=) 8: 312e3131392e3231362e302f32312d3231203d3e2030.roa (hash: d/Q0+w2Ahk9b0UcKv/1FydpOmWor6aLsadLAnHi6P1g=) 9: 312e3131392e3132382e302f31382d3138203d3e203538383531.roa (hash: gRQ8UnKwxW4nSnM0kQO9qQplqAvz5EjFBnc60Im7DNs=) 10: 312e3131392e3139322e302f32312d3231203d3e2034383437.roa (hash: XNtjIRUgY4fS8N3i0nW4IwHop43Mi2F8n9L+lEuBp6g=) 11: 312e3131392e3139322e302f32302d3230203d3e203538383531.roa (hash: Eokuq4TYzmQLPSN0aKa4rtzDxlWJS6GW4rq/4K/orew=) 12: 312e3131392e3137382e302f32332d3233203d3e203538383531.roa (hash: 6D4zUFftIzxux5xyxQnqsUVB4Ncy6yBZORWBbQpPLyA=) 13: 312e3131392e3231322e302f32322d3232203d3e2030.roa (hash: +HKaT/JYu9OdbtkKLylMRvfLIjfMgH4tlTzH+mamNA0=) 14: 312e3131392e3230342e302f32342d3234203d3e203539303334.roa (hash: ryffUH5sItQ5u/2cZTafP/5cIQookKPBUWWSsQm2ekA=) 15: D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl (hash: +AIfhgFdwjcPFW2h1mykd/Sxe5wGO6Znu+kiu2D9jsI=) 16: 312e3131392e3132382e302f31392d3139203d3e2034383437.roa (hash: 2kyjMu3BHpV1xaJsxUyiNwF2qVNY2TtqCTgdxT3w1oE=) 17: 312e3131392e3231302e302f32332d3233203d3e2034383437.roa (hash: KxQ4soVFF8Uw/0kkpUVXmsMtrX9Dh7hktb6dFTadp1o=) 18: 312e3131392e3136302e302f31392d3139203d3e2034383437.roa (hash: /OVYaMewqwOZAGpYc8hZIoHYpTVSYT2ngt37uNP2oOU=) 19: 34332e3234382e3233322e302f32322d3232203d3e203538383531.roa (hash: AJLCIJLGsS5OOuU5jN56Qp6er6qsS4GHKNdr18oyEv4=) 20: 312e3131392e3139322e302f32312d3231203d3e2034383038.roa (hash: Ga6IokCcRDj3nBYCTXoXV6+8A0MVTAWFIPsVjF2HhLQ=) 21: 312e3131392e3230382e302f32332d3233203d3e2034383038.roa (hash: 4UpCjNnzbejh26AeDnjuO8fstcEOgtGPyAagMXPv8M8=) 22: 312e3131392e3230382e302f32332d3233203d3e2034383437.roa (hash: cPjBBV7B+42pHSYNp4q2pDOt3/fb3nX6CBhaGrDUBeE=) 23: 312e3131392e3137382e302f32332d3233203d3e2034383437.roa (hash: VpnallqfNTOiP4zIbWOvVBh8IEO8CDYe7vkPD1X7T9I=) 24: 312e3131392e3137382e302f32332d3233203d3e2034383038.roa (hash: 9uICLXjLL9j8/OlDDXwfnK1gqfcoptnJdxpfe0b2r04=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 20:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:80:78:6e:df:81:28:ce:dd:70:f2:00:f5:c9:01:6d:85:94:1b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23 Validity Not Before: Sep 8 17:34:36 2026 GMT Not After : Sep 11 20:54:36 2026 GMT Subject: CN=719D175F84408ABFD09CFA5BC9F0DCE9942525B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:63:01:81:db:df:6f:6c:cb:51:a2:5d:3c: 2f:f6:49:f0:7e:82:0a:77:7a:e0:cb:a9:05:71:2a: 73:44:74:b8:38:98:e6:5d:01:1c:b2:9a:30:87:55: 94:5b:56:5e:31:93:1f:28:8f:10:e3:d3:bf:73:4a: 0e:1b:54:98:88:62:4e:2b:1e:63:97:03:e7:88:09: 17:6d:a4:2e:17:6d:fe:4f:3c:06:5b:87:11:ae:62: 7c:b9:f4:dd:c3:a9:cf:82:46:48:88:a9:66:eb:72: eb:c3:3d:ed:f1:82:a7:6d:60:96:53:21:84:47:6a: 2e:42:53:41:26:60:b1:fa:f5:89:e8:59:51:99:0a: 0a:b5:82:58:1e:54:dd:c6:1d:37:8c:bc:4c:e9:b9: 1e:9b:79:dd:71:6a:e7:8a:64:28:ce:03:47:0a:2e: 1f:99:89:7d:c8:d2:df:a5:97:6f:02:35:5e:6b:17: 64:43:22:8f:d2:df:53:ff:85:45:48:df:7a:26:c0: b0:98:de:ff:2c:c7:dd:d9:c3:53:11:93:e2:4f:6f: ed:fb:e3:e1:5b:bd:60:c1:a1:46:97:9c:d3:21:ca: f5:21:58:2b:4d:8b:f4:0c:a2:98:ae:be:08:d0:bb: 42:84:f3:d7:a2:23:25:7b:9e:3e:e4:4b:2e:e4:ef: 3a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9D:17:5F:84:40:8A:BF:D0:9C:FA:5B:C9:F0:DC:E9:94:25:25:B7 X509v3 Authority Key Identifier: keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:31:5f:20:c1:66:af:49:e3:1f:3d:4a:2e:62:16:72:cd:5b: a7:c4:dd:8f:58:47:bb:35:e0:55:0c:dc:d2:64:49:dd:d7:3f: 89:df:42:ed:5b:04:4d:85:41:d4:3d:78:5b:5f:91:d7:39:b9: c4:33:51:4a:8a:bc:4a:86:27:cb:be:81:71:79:5b:84:a6:35: 07:37:ce:18:ca:2d:37:e3:4b:f6:0d:50:98:28:d0:44:ef:91: 4b:37:2d:c8:0b:4c:b9:d2:ee:db:1e:12:f3:ce:80:e2:14:07: 6f:aa:56:f0:88:b6:a4:74:29:f7:b2:57:14:6c:62:d3:c9:70: 98:62:19:7c:f9:85:3b:42:74:60:53:ba:6d:82:64:d7:c4:6c: 1d:78:45:e3:d6:4f:a3:9a:b7:2e:c9:82:b3:5c:97:d7:c2:f7: 6e:66:ee:e9:ad:74:e3:fb:cf:ce:61:b0:97:24:8f:39:6d:d0: a8:d9:8b:06:4b:c2:83:47:ff:d0:cc:c7:26:1a:cb:ab:d3:58: ce:9a:2d:ba:34:db:24:4d:0c:95:9e:58:58:64:e4:f4:05:2a: 8f:45:6c:24:ff:de:cf:2e:28:58:0e:26:01:4e:91:4f:d9:8a: 6a:d5:71:40:9b:43:cb:d3:99:78:0a:95:ac:d1:d8:49:ba:c9: 26:d6:25:4e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQIB4bt+BKM7dcPIA9ckBbYWUG8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMw NDNBQ0IyMzAeFw0yNjA5MDgxNzM0MzZaFw0yNjA5MTEyMDU0MzZaMDMxMTAvBgNV BAMTKDcxOUQxNzVGODQ0MDhBQkZEMDlDRkE1QkM5RjBEQ0U5OTQyNTI1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJGMBgdvfb2zLUaJdPC/2SfB+ ggp3euDLqQVxKnNEdLg4mOZdARyymjCHVZRbVl4xkx8ojxDj079zSg4bVJiIYk4r HmOXA+eICRdtpC4Xbf5PPAZbhxGuYny59N3Dqc+CRkiIqWbrcuvDPe3xgqdtYJZT IYRHai5CU0EmYLH69YnoWVGZCgq1glgeVN3GHTeMvEzpuR6bed1xaueKZCjOA0cK Lh+ZiX3I0t+ll28CNV5rF2RDIo/S31P/hUVI33omwLCY3v8sx93Zw1MRk+JPb+37 4+FbvWDBoUaXnNMhyvUhWCtNi/QMopiuvgjQu0KE89eiIyV7nj7kSy7k7zp7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcZ0XX4RAir/QnPpbyfDc6ZQlJbcwHwYDVR0j BBgwFoAU1D38QTvIT6GL0bjgeiNGLAQ6yyMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg1MjY3NTI1OTcyNzg5NS8wL0Q0M0RGQzQxM0JDODRGQTE4QkQxQjhFMDdBMjM0 NjJDMDQzQUNCMjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDQzREZDNDEzQkM4NEZBMThCRDFCOEUwN0EyMzQ2MkMwNDNBQ0IyMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NTI2NzUyNTk3Mjc4OTUvMC9ENDNERkM0MTNCQzg0 RkExOEJEMUI4RTA3QTIzNDYyQzA0M0FDQjIzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzFfIMFmr0nj Hz1KLmIWcs1bp8Tdj1hHuzXgVQzc0mRJ3dc/id9C7VsETYVB1D14W1+R1zm5xDNR Soq8SoYny76BcXlbhKY1BzfOGMotN+NL9g1QmCjQRO+RSzctyAtMudLu2x4S886A 4hQHb6pW8Ii2pHQp97JXFGxi08lwmGIZfPmFO0J0YFO6bYJk18RsHXhF49ZPo5q3 LsmCs1yX18L3bmbu6a104/vPzmGwlySPOW3QqNmLBkvCg0f/0MzHJhrLq9NYzpot ujTbJE0MlZ5YWGTk9AUqj0VsJP/ezy4oWA4mAU6RT9mKatVxQJtDy9OZeAqVrNHY SbrJJtYlTg== -----END CERTIFICATE-----Generated at Thu Sep 10 18:14:28 2026 by rpki-client