$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft File: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft (raw, json) Hash identifier: LJik3WtzXOnhTBOV0OFk/1pryuXIRr1Nfg+E3Opger8= Subject key identifier: BC:DD:C3:3C:77:8A:17:F3:10:6D:84:66:36:61:21:28:C3:6D:96:81 Authority key identifier: 2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 Certificate issuer: /CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Certificate serial: 0BA093EA5F23950AB36DFB730613219B4085105B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft Manifest number: 8F Signing time: Mon 26 Oct 2026 05:13:26 +0000 Manifest this update: Mon 26 Oct 2026 05:08:26 +0000 Manifest next update: Thu 29 Oct 2026 07:23:26 +0000 Files and hashes: 1: 2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl (hash: mAnJUPY/iD3xr6f7gf1ys6aH7hKPz/98okvynpKw5Gg=) 2: 312e3131392e3132342e302f32322d3232203d3e203538383531.roa (hash: cZFuiOH6cyFkDGUgid52B5+rCCUk1Je7maMmKWVlJrI=) 3: 3131342e3131322e3134342e302f32312d3231203d3e203538383531.roa (hash: iYYYGCpOqt0aQJSSD8PSpzbRMdT6sgK2gSOfuxf7KWY=) 4: 3231312e3130322e3230382e302f32302d3230203d3e203538383531.roa (hash: j5Rdo2Js55PNYoidEZ9f2WJvO7iSzLGP5wKzIv/CRG8=) 5: 312e3131392e302e302f31372d3137203d3e203538383531.roa (hash: JS3bNo89jFxRPcoUjJ2KW3+dlS5F8ZfPoJOwJABerhE=) 6: 3131342e3131322e3133362e302f32312d3231203d3e203538383531.roa (hash: +jDDG9chHRqcyqWLGG+Yj0uT75vd7evZ1ioSDSj0JtM=) 7: 3130332e3234342e36342e302f32322d3232203d3e203538383531.roa (hash: bF8lXwImti0G2C5h9HUFWEwJAQE60tR62Vp1rdSFMcU=) 8: 3130332e3235342e3131322e302f32322d3232203d3e203538383531.roa (hash: UzOtHYzkQbEQuGwE/udN6JYGU4x59h6zYKuWNYSyF5g=) 9: 3130332e31362e3132342e302f32322d3232203d3e203538383531.roa (hash: J03Bd745xFUmekCrtUpll59JIIiIgF2WNL6PFFMPGcc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 07:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a0:93:ea:5f:23:95:0a:b3:6d:fb:73:06:13:21:9b:40:85:10:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2 Validity Not Before: Oct 26 05:08:26 2026 GMT Not After : Oct 29 07:23:26 2026 GMT Subject: CN=BCDDC33C778A17F3106D846636612128C36D9681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:a8:13:e0:68:08:1b:97:b1:d3:0f:b2:aa: 7d:14:7e:5c:b7:e6:1a:60:8d:75:96:e8:88:1b:fb: 94:04:76:11:f7:e0:3e:32:6f:9e:70:13:39:63:e2: 83:27:7b:d2:23:58:6a:a7:fa:15:b2:25:22:07:63: 4b:4f:f1:9b:8d:55:50:e4:00:55:45:71:55:73:05: c1:d5:10:d4:eb:e6:1e:00:cd:2f:84:58:56:14:05: b2:26:df:00:d9:ba:1f:b9:6d:87:31:56:99:84:86: 5c:f1:28:bd:1c:68:35:4b:c9:09:5c:4a:5a:04:9e: c3:49:9a:e6:c8:05:11:67:f5:1e:aa:32:d5:e2:04: ec:97:1a:83:5b:ce:41:e2:07:b6:52:c7:89:01:06: 96:9b:65:89:b9:dc:42:b5:c7:ba:c1:a2:83:03:38: b2:b0:5e:1d:63:c1:bb:b1:85:19:59:bd:e2:a7:1e: 0f:f4:6d:bf:bc:ba:2c:91:3b:b5:fb:4e:65:17:0f: f6:76:25:bf:4c:de:49:8a:91:0f:78:fa:e4:de:f0: ab:3d:4e:7a:72:2a:de:67:03:50:21:e0:a3:ea:f1: 70:62:6a:f7:88:ee:05:e6:9d:89:0e:c8:39:88:81: f1:13:4a:98:bb:cb:36:55:f5:7b:14:77:5e:6c:2c: 22:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DD:C3:3C:77:8A:17:F3:10:6D:84:66:36:61:21:28:C3:6D:96:81 X509v3 Authority Key Identifier: keyid:2D:E7:8C:94:5E:2B:53:37:4B:86:C0:A7:BD:E5:AD:E6:90:4C:5E:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114861900895617051/0/2DE78C945E2B53374B86C0A7BDE5ADE6904C5EC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6c:c4:bf:24:b1:cc:3d:cf:98:cf:c8:e4:f5:4a:48:93:8e: 1c:6c:c7:4b:61:1c:86:de:61:d3:d5:bb:d6:4f:93:18:28:ef: 09:0c:8d:f0:fe:2c:22:1c:d8:d7:14:8a:9a:55:07:9c:88:79: 29:19:79:79:6e:47:c0:01:da:ad:68:be:7a:4d:d1:b5:30:04: 58:8b:22:22:3a:5d:1b:0f:54:44:2e:2b:6c:5c:90:b8:5c:f7: d5:22:32:e8:f5:bb:69:d7:d0:bc:b4:ef:4b:23:9e:3e:b0:ff: 36:80:a7:6c:5b:55:dc:f6:4e:6b:8d:40:26:39:ae:73:13:ad: de:1d:b7:ec:62:df:d4:21:22:7d:37:e8:86:04:9c:8c:36:4a: ed:cc:75:56:09:83:04:61:67:1f:a7:73:6b:ab:49:0f:8b:5c: 8c:f2:8a:ff:bd:29:be:eb:5f:dc:de:5a:0e:3e:05:93:95:9e: 5f:49:bc:45:f4:01:8e:5f:60:ac:83:40:74:71:30:df:8a:21: b9:4e:ac:c8:5e:6a:22:e9:56:cb:d5:85:e0:51:27:e5:5a:9d: 92:bc:42:0d:cd:88:66:12:0e:ff:6f:d8:89:9c:ca:81:6c:48: dd:ea:89:3a:80:bd:95:30:0b:75:ae:da:6f:10:08:45:d3:f9: 49:75:09:d6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUC6CT6l8jlQqzbftzBhMhm0CFEFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5 MDRDNUVDMjAeFw0yNjEwMjYwNTA4MjZaFw0yNjEwMjkwNzIzMjZaMDMxMTAvBgNV BAMTKEJDRERDMzNDNzc4QTE3RjMxMDZEODQ2NjM2NjEyMTI4QzM2RDk2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3I6gT4GgIG5ex0w+yqn0Ufly3 5hpgjXWW6Igb+5QEdhH34D4yb55wEzlj4oMne9IjWGqn+hWyJSIHY0tP8ZuNVVDk AFVFcVVzBcHVENTr5h4AzS+EWFYUBbIm3wDZuh+5bYcxVpmEhlzxKL0caDVLyQlc SloEnsNJmubIBRFn9R6qMtXiBOyXGoNbzkHiB7ZSx4kBBpabZYm53EK1x7rBooMD OLKwXh1jwbuxhRlZveKnHg/0bb+8uiyRO7X7TmUXD/Z2Jb9M3kmKkQ94+uTe8Ks9 TnpyKt5nA1Ah4KPq8XBiaveI7gXmnYkOyDmIgfETSpi7yzZV9XsUd15sLCJFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvN3DPHeKF/MQbYRmNmEhKMNtloEwHwYDVR0j BBgwFoAULeeMlF4rUzdLhsCnveWt5pBMXsIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg2MTkwMDg5NTYxNzA1MS8wLzJERTc4Qzk0NUUyQjUzMzc0Qjg2QzBBN0JERTVB REU2OTA0QzVFQzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkRFNzhDOTQ1RTJCNTMzNzRCODZDMEE3QkRFNUFERTY5MDRDNUVDMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTQ4NjE5MDA4OTU2MTcwNTEvMC8yREU3OEM5NDVFMkI1 MzM3NEI4NkMwQTdCREU1QURFNjkwNEM1RUMyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2zEvySxzD3P mM/I5PVKSJOOHGzHS2Echt5h09W71k+TGCjvCQyN8P4sIhzY1xSKmlUHnIh5KRl5 eW5HwAHarWi+ek3RtTAEWIsiIjpdGw9URC4rbFyQuFz31SIy6PW7adfQvLTvSyOe PrD/NoCnbFtV3PZOa41AJjmucxOt3h237GLf1CEifTfohgScjDZK7cx1VgmDBGFn H6dza6tJD4tcjPKK/70pvutf3N5aDj4Fk5WeX0m8RfQBjl9grINAdHEw34ohuU6s yF5qIulWy9WF4FEn5VqdkrxCDc2IZhIO/2/YiZzKgWxI3eqJOoC9lTALda7abxAI RdP5SXUJ1g== -----END CERTIFICATE-----Generated at Wed Oct 28 02:21:46 2026 by rpki-client