$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft File: A0C998BFCCAE8946353EA73912CB7156A19A818C.mft (raw, json) Hash identifier: WnzrtwqwcF9Ndmd49ltuZpmao7BnTj2jyQJn9M9fJWo= Subject key identifier: 29:6D:BE:F7:F8:5D:32:0F:02:38:AD:58:51:FB:B3:B6:0D:57:EB:18 Authority key identifier: A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C Certificate issuer: /CN=A0C998BFCCAE8946353EA73912CB7156A19A818C Certificate serial: 2A90F832C46667C2291AB75F53341D9187A3205D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft Manifest number: 86 Signing time: Wed 07 Oct 2026 16:16:27 +0000 Manifest this update: Wed 07 Oct 2026 16:11:27 +0000 Manifest next update: Sat 10 Oct 2026 18:03:27 +0000 Files and hashes: 1: 3130332e34332e3130302e302f32322d3232203d3e2030.roa (hash: Zb/Yg48+x4Z5AdQJry8Ao1d91TJrxggZPUisKeQCA1w=) 2: A0C998BFCCAE8946353EA73912CB7156A19A818C.crl (hash: ArINyhkPpXjoVTBKZNZbfDYGV7n6hqJeAUCyEYBJa0c=) 3: 34332e3232342e37322e302f32322d3232203d3e2030.roa (hash: Z7n2GETvz6qdxJjD+2JtNEFlMdPoKyod/n6PeMXops8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 18:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:90:f8:32:c4:66:67:c2:29:1a:b7:5f:53:34:1d:91:87:a3:20:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0C998BFCCAE8946353EA73912CB7156A19A818C Validity Not Before: Oct 7 16:11:27 2026 GMT Not After : Oct 10 18:03:27 2026 GMT Subject: CN=296DBEF7F85D320F0238AD5851FBB3B60D57EB18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5f:ea:49:3d:ad:eb:67:b0:b1:85:f0:f6:f9: 9b:3e:c0:7d:bf:6f:a1:dc:cb:29:99:9f:e8:61:7b: 78:17:66:aa:34:09:f9:da:4f:99:f8:d6:75:51:b6: 28:6f:b5:e5:68:28:46:2f:5f:e9:1f:1e:b7:eb:14: de:96:47:04:48:b4:6a:e6:44:56:f0:30:7a:6e:e9: 42:88:7a:c2:f4:39:65:20:59:3c:42:f5:db:bb:69: 49:6b:e1:a9:99:bb:69:83:11:7b:31:ef:7c:ef:da: 66:12:f7:7c:f6:71:c5:07:f4:45:67:59:55:9c:80: c1:30:61:4f:bc:49:b1:a1:fc:61:8e:be:f6:38:ef: 4a:c7:3e:57:0c:21:cc:b9:53:f5:bd:8b:8b:75:b0: b4:07:d3:ce:33:7f:2c:e2:ff:21:d0:93:92:bb:f4: f3:3b:55:83:53:b7:6f:3a:4b:9e:df:52:ba:6d:1e: b5:0e:c6:b3:a1:e9:31:d4:6b:ff:25:21:31:49:b7: fb:0b:a7:3e:a4:4e:7d:4b:d7:93:1f:15:f9:a3:d3: 94:7b:fa:1c:82:1d:9e:92:4e:27:16:cd:78:8d:99: a2:09:b3:a5:5c:2c:87:e1:46:c6:db:e3:db:99:81: 10:fc:69:82:33:a1:50:3b:68:98:e0:67:ad:71:70: c4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6D:BE:F7:F8:5D:32:0F:02:38:AD:58:51:FB:B3:B6:0D:57:EB:18 X509v3 Authority Key Identifier: keyid:A0:C9:98:BF:CC:AE:89:46:35:3E:A7:39:12:CB:71:56:A1:9A:81:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0C998BFCCAE8946353EA73912CB7156A19A818C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114859310908768281/0/A0C998BFCCAE8946353EA73912CB7156A19A818C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:97:ff:f0:d3:b8:56:16:e8:08:2c:e9:69:26:40:a7:fe:b7: 6a:39:e7:15:cc:ed:88:50:19:25:b8:7d:e4:e3:2b:2e:97:19: 6e:e8:9c:c2:4f:b4:80:35:4c:9a:32:34:11:d5:19:c5:8b:f8: bb:aa:aa:a2:47:18:54:76:26:be:21:11:75:88:0c:3b:8d:33: 4a:96:a9:59:e5:bb:17:9c:51:d0:aa:8e:7e:dd:b3:49:73:50: 70:8a:0d:57:36:fa:98:06:d1:31:38:32:08:c0:ac:34:79:71: e9:87:ca:e7:17:72:e6:6b:ed:9d:51:b2:93:bc:fc:1d:94:6c: 77:78:76:a0:ab:26:3a:5a:8a:e0:95:8e:cf:55:89:0e:95:b2: f0:89:7c:80:8d:b1:71:fa:08:ac:6f:2f:69:27:b8:07:4c:0a: b2:88:fd:13:27:60:59:19:7d:f0:3e:14:65:66:53:41:ad:bc: 85:d2:40:75:a8:bc:09:e2:52:9f:83:25:b2:c7:76:44:42:9d: 3c:6f:a7:38:06:51:a4:f2:5d:19:03:ca:30:a4:68:81:ea:de: c8:ec:eb:67:c0:c8:c7:89:37:7e:5a:40:af:f6:cf:87:8e:86: 91:6d:ca:75:b4:04:6f:af:62:a2:93:80:de:b4:98:9d:a7:76: be:ac:e4:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKpD4MsRmZ8IpGrdfUzQdkYejIF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBDOTk4QkZDQ0FFODk0NjM1M0VBNzM5MTJDQjcxNTZB MTlBODE4QzAeFw0yNjEwMDcxNjExMjdaFw0yNjEwMTAxODAzMjdaMDMxMTAvBgNV BAMTKDI5NkRCRUY3Rjg1RDMyMEYwMjM4QUQ1ODUxRkJCM0I2MEQ1N0VCMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIX+pJPa3rZ7CxhfD2+Zs+wH2/ b6HcyymZn+hhe3gXZqo0CfnaT5n41nVRtihvteVoKEYvX+kfHrfrFN6WRwRItGrm RFbwMHpu6UKIesL0OWUgWTxC9du7aUlr4amZu2mDEXsx73zv2mYS93z2ccUH9EVn WVWcgMEwYU+8SbGh/GGOvvY470rHPlcMIcy5U/W9i4t1sLQH084zfyzi/yHQk5K7 9PM7VYNTt286S57fUrptHrUOxrOh6THUa/8lITFJt/sLpz6kTn1L15MfFfmj05R7 +hyCHZ6STicWzXiNmaIJs6VcLIfhRsbb49uZgRD8aYIzoVA7aJjgZ61xcMSrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKW2+9/hdMg8COK1YUfuztg1X6xgwHwYDVR0j BBgwFoAUoMmYv8yuiUY1Pqc5EstxVqGagYwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg1OTMxMDkwODc2ODI4MS8wL0EwQzk5OEJGQ0NBRTg5NDYzNTNFQTczOTEyQ0I3 MTU2QTE5QTgxOEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTBDOTk4QkZDQ0FFODk0NjM1M0VBNzM5MTJDQjcxNTZBMTlBODE4Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NTkzMTA5MDg3NjgyODEvMC9BMEM5OThCRkNDQUU4 OTQ2MzUzRUE3MzkxMkNCNzE1NkExOUE4MThDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZf/8NO4Vhbo CCzpaSZAp/63ajnnFcztiFAZJbh95OMrLpcZbuicwk+0gDVMmjI0EdUZxYv4u6qq okcYVHYmviERdYgMO40zSpapWeW7F5xR0KqOft2zSXNQcIoNVzb6mAbRMTgyCMCs NHlx6YfK5xdy5mvtnVGyk7z8HZRsd3h2oKsmOlqK4JWOz1WJDpWy8Il8gI2xcfoI rG8vaSe4B0wKsoj9EydgWRl98D4UZWZTQa28hdJAdai8CeJSn4Mlssd2REKdPG+n OAZRpPJdGQPKMKRogereyOzrZ8DIx4k3flpAr/bPh46GkW3KdbQEb69iopOA3rSY nad2vqzkKg== -----END CERTIFICATE-----Generated at Thu Oct 8 14:25:44 2026 by rpki-client