$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft File: A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft (raw, json) Hash identifier: dYXDJJgfdOqppQRHCU1TiCI4JfmQNpf6Ab1HtpgeANU= Subject key identifier: EA:85:4E:31:00:04:70:E4:75:8B:15:99:90:20:59:A6:A5:67:7B:70 Authority key identifier: A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 Certificate issuer: /CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Certificate serial: 617E34C10B7B39BC3D4B8A2E7869ABD5A5E3B19B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft Manifest number: 01EB Signing time: Sat 26 Sep 2026 11:48:45 +0000 Manifest this update: Sat 26 Sep 2026 11:43:45 +0000 Manifest next update: Tue 29 Sep 2026 12:03:45 +0000 Files and hashes: 1: AS45090.roa (hash: Av2ZX7t33Xg0taWsYCm0lcTG3scBZ1h+SzWX8W5uoPk=) 2: A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl (hash: ZGk/EryqSCSQN4fbZMC4/3DPGxWMsu9nWCS7g5V21yY=) 3: AS132203.roa (hash: MGh7geS9q7/6iNL2Np6bgBq+89E2Xke7QjRB3yPNdgk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 12:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7e:34:c1:0b:7b:39:bc:3d:4b:8a:2e:78:69:ab:d5:a5:e3:b1:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A92B819A2CD5CB1359B70776B58E2CFDEE46AF64 Validity Not Before: Sep 26 11:43:45 2026 GMT Not After : Sep 29 12:03:45 2026 GMT Subject: CN=EA854E31000470E4758B1599902059A6A5677B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cd:2c:09:96:d9:1f:9e:dc:6b:7f:c0:dc:ae: 40:98:82:cb:9b:fb:11:dc:ca:af:fc:11:f6:ab:0c: 32:24:7f:c6:bf:d8:8e:36:65:df:34:c4:63:f8:d4: 9a:f8:bf:92:c3:5c:5e:34:0e:9b:19:53:a9:d2:fe: 21:70:ad:b8:86:18:62:e9:f0:85:c6:a5:91:f0:56: 18:70:6f:99:22:a0:43:01:45:6b:59:9a:80:f2:23: b8:c5:39:f7:06:84:16:7a:fb:71:8d:c0:41:92:c4: 63:93:53:a7:8c:b7:69:d0:29:b2:32:40:31:3d:50: 92:b4:2e:84:48:3d:e8:6d:6e:94:b5:8b:26:48:1e: 24:3e:44:04:39:8a:d2:fe:93:58:32:74:9a:f3:3e: e0:bd:2a:fa:a7:a2:e8:58:a7:ca:67:31:8e:83:fb: 4b:39:60:74:29:d1:26:3f:29:f4:44:e3:6c:eb:d3: 15:a3:d3:54:1d:5e:2e:7a:19:83:fa:95:4c:f7:f2: 34:eb:7e:aa:b1:d0:85:d5:ab:d7:a5:78:c2:c8:a1: 8f:a0:dc:13:9c:33:bd:76:96:28:df:a4:75:4b:6b: 8d:6e:fc:14:92:d3:62:76:58:28:f3:81:01:0d:39: 3a:f1:5d:33:eb:c3:ee:26:f8:9c:04:d9:8c:c3:8b: 96:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:85:4E:31:00:04:70:E4:75:8B:15:99:90:20:59:A6:A5:67:7B:70 X509v3 Authority Key Identifier: keyid:A9:2B:81:9A:2C:D5:CB:13:59:B7:07:76:B5:8E:2C:FD:EE:46:AF:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372310530/0/A92B819A2CD5CB1359B70776B58E2CFDEE46AF64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:6c:74:e8:59:85:c1:c7:a2:b6:9c:c7:a8:d5:88:fd:86:f1: 9e:58:ee:23:f7:7e:55:62:bd:87:9b:6a:70:e9:4e:7d:53:fd: 76:2a:43:39:05:3f:46:59:9c:04:56:ec:cb:ea:46:fb:db:a0: f2:1d:db:46:bd:bc:39:d1:68:8d:0a:2c:2a:21:ec:7b:7c:af: 28:b3:27:ac:29:d1:cb:93:1b:4d:e1:11:4f:ba:c1:61:3c:4d: 4f:94:5c:b6:bf:65:ba:24:46:3f:d7:c0:f0:ca:fd:33:48:3e: 80:66:44:6d:57:96:fc:bf:2f:f9:78:1f:49:65:b3:11:d4:56: 72:15:1d:0c:7f:10:4b:46:91:05:67:2f:15:df:b6:a0:9d:13: 20:f9:ab:ff:d5:d1:09:17:8a:61:4b:bb:f1:c3:a7:05:20:83: 6b:59:ec:e6:16:a7:c9:a1:e9:6c:7c:7b:6c:07:79:30:a8:a3: c5:f9:f2:c8:e0:3f:04:43:ce:de:3b:67:8a:79:52:7d:62:6f: e3:47:90:9b:b3:a0:a3:71:35:04:dd:76:48:a2:9f:81:34:0e: 54:20:77:fc:1f:bd:0a:9c:fc:70:75:4d:05:f4:d4:c6:9d:de: fa:7d:14:4f:7f:c1:c2:f4:f4:72:ee:ca:00:d6:64:22:c1:f3: 1d:c4:68:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYX40wQt7Obw9S4oueGmr1aXjsZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRF RTQ2QUY2NDAeFw0yNjA5MjYxMTQzNDVaFw0yNjA5MjkxMjAzNDVaMDMxMTAvBgNV BAMTKEVBODU0RTMxMDAwNDcwRTQ3NThCMTU5OTkwMjA1OUE2QTU2NzdCNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChzSwJltkfntxrf8DcrkCYgsub +xHcyq/8EfarDDIkf8a/2I42Zd80xGP41Jr4v5LDXF40DpsZU6nS/iFwrbiGGGLp 8IXGpZHwVhhwb5kioEMBRWtZmoDyI7jFOfcGhBZ6+3GNwEGSxGOTU6eMt2nQKbIy QDE9UJK0LoRIPehtbpS1iyZIHiQ+RAQ5itL+k1gydJrzPuC9KvqnouhYp8pnMY6D +0s5YHQp0SY/KfRE42zr0xWj01QdXi56GYP6lUz38jTrfqqx0IXVq9eleMLIoY+g 3BOcM712lijfpHVLa41u/BSS02J2WCjzgQENOTrxXTPrw+4m+JwE2YzDi5b/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6oVOMQAEcOR1ixWZkCBZpqVne3AwHwYDVR0j BBgwFoAUqSuBmizVyxNZtwd2tY4s/e5Gr2QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjMxMDUzMC8wL0E5MkI4MTlBMkNENUNCMTM1OUI3MDc3NkI1OEUy Q0ZERUU0NkFGNjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTkyQjgxOUEyQ0Q1Q0IxMzU5QjcwNzc2QjU4RTJDRkRFRTQ2QUY2NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIzMTA1MzAvMC9BOTJCODE5QTJDRDVD QjEzNTlCNzA3NzZCNThFMkNGREVFNDZBRjY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt2x06FmFwcei tpzHqNWI/YbxnljuI/d+VWK9h5tqcOlOfVP9dipDOQU/RlmcBFbsy+pG+9ug8h3b Rr28OdFojQosKiHse3yvKLMnrCnRy5MbTeERT7rBYTxNT5Rctr9luiRGP9fA8Mr9 M0g+gGZEbVeW/L8v+XgfSWWzEdRWchUdDH8QS0aRBWcvFd+2oJ0TIPmr/9XRCReK YUu78cOnBSCDa1ns5hanyaHpbHx7bAd5MKijxfnyyOA/BEPO3jtninlSfWJv40eQ m7Ogo3E1BN12SKKfgTQOVCB3/B+9Cpz8cHVNBfTUxp3e+n0UT3/BwvT0cu7KANZk IsHzHcRoBw== -----END CERTIFICATE-----Generated at Mon Sep 28 00:28:13 2026 by rpki-client