$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft File: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft (raw, json) Hash identifier: pbVwhMHQQx0QKOSU/MgSo2ot5eb6ZYEEaUp7kUuYOpY= Subject key identifier: C8:99:8B:A9:13:1C:BC:ED:1B:CE:1F:2F:DF:A0:6E:81:B3:E7:3D:7D Authority key identifier: A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B Certificate issuer: /CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Certificate serial: 4A35E48ABDB953B5EA93FC37290F622C7A700B09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft Manifest number: 013D Signing time: Sun 18 Oct 2026 00:29:20 +0000 Manifest this update: Sun 18 Oct 2026 00:24:20 +0000 Manifest next update: Wed 21 Oct 2026 04:58:20 +0000 Files and hashes: 1: 3130332e39362e382e302f32322d3234203d3e20313331353637.roa (hash: RRfn9znroWn83L6Zt/QdAjEnXBoq/bRT2SS7Mwx1mqQ=) 2: 323430313a373234303a3a2f33322d3634203d3e20313331353637.roa (hash: iBmDc/4IvOxm/4BQlvwaTe4rS7w0LABcNoLyOa7+8X0=) 3: 3130332e39362e31312e302f32342d3234203d3e20313331353637.roa (hash: zJnhEvryvN/z3Rk6z04eq1KS6BH9KbRM3R7MzDobnYc=) 4: A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl (hash: 2TJCKNAC5/iFQPIEjs25vydsHCmC3FUoy1BV18k3B6w=) 5: 3130332e39362e382e302f32342d3234203d3e20313331353637.roa (hash: b+gYOwGiVr48N6B4aubz7OTISZ1HUMqOe7UJxxSY10A=) 6: 3130332e39362e31302e302f32342d3234203d3e20313331353637.roa (hash: tIncU4XHWF2+6RbwAjAU6t/8WIsnC0rjxMNrY8kMdlQ=) 7: 3130332e39362e392e302f32342d3234203d3e20313331353637.roa (hash: /emODslGCR6HaebEqDKWxEZx9lzbuH4rfeIWwSH0boc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:35:e4:8a:bd:b9:53:b5:ea:93:fc:37:29:0f:62:2c:7a:70:0b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A59FB55F8B3E4069427878BD5BA7FF41A1691B5B Validity Not Before: Oct 18 00:24:20 2026 GMT Not After : Oct 21 04:58:20 2026 GMT Subject: CN=C8998BA9131CBCED1BCE1F2FDFA06E81B3E73D7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3a:b4:89:18:40:28:80:7a:d6:56:ee:68:f7: 4b:38:fc:f2:1b:6d:df:fd:49:c9:d5:98:74:b6:9b: 1d:eb:f8:b1:9c:76:da:ae:03:d5:00:5f:c1:54:ac: 8d:a0:ce:59:35:ae:4e:35:15:28:35:3f:ff:c1:4d: ed:74:ea:4b:e2:f5:0e:55:81:b9:f3:c1:ce:58:f7: 5e:83:10:f6:47:9a:75:aa:fd:9b:0a:e0:75:dd:d3: 5c:52:ce:a0:d9:e5:70:bc:c3:85:d5:dd:78:b2:bd: 3d:3e:1c:d3:bb:07:97:82:d2:48:95:d7:63:1a:4b: ed:5f:14:97:9b:f6:4a:a7:7c:39:d8:49:e3:54:fe: 1c:40:13:3e:cc:74:4d:df:20:3a:2d:6c:fa:e4:4c: ab:ca:50:6f:5a:e0:c3:2d:c8:ac:86:4f:de:4d:7a: bd:04:2b:ac:d7:b8:c2:03:22:ac:33:01:54:37:02: d3:94:86:24:9f:b3:32:b6:8a:61:85:75:4b:94:bb: e3:98:c8:94:28:8b:22:d8:e6:67:1d:8b:c5:ce:1d: 1e:68:4b:85:a7:0d:fa:07:74:0a:c3:d1:00:43:6f: 3c:d0:83:67:dd:46:37:d1:84:ee:9d:89:0d:9c:8d: ff:71:8a:24:14:5c:bf:11:58:41:56:3b:f9:57:78: fd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:99:8B:A9:13:1C:BC:ED:1B:CE:1F:2F:DF:A0:6E:81:B3:E7:3D:7D X509v3 Authority Key Identifier: keyid:A5:9F:B5:5F:8B:3E:40:69:42:78:78:BD:5B:A7:FF:41:A1:69:1B:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577465858/0/A59FB55F8B3E4069427878BD5BA7FF41A1691B5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:fc:78:06:9a:75:1b:9d:06:99:e7:e3:9f:b0:69:d3:78:79: 24:90:f9:66:ad:e5:37:1d:0b:9d:f6:55:98:2d:2b:30:f2:d8: f7:d7:c9:e5:85:f9:69:7b:f4:fb:79:78:a4:d3:e0:83:45:da: 83:18:82:f0:5e:c7:4a:bc:00:82:12:75:f3:68:17:02:33:53: 4b:31:64:55:3c:79:71:ba:f1:2b:a0:1b:93:c3:8b:0c:23:cd: 31:4f:ca:3c:9f:bd:2f:ae:e2:7d:53:e1:e9:f3:4d:70:5e:2a: 33:f6:84:a2:ee:f7:da:97:04:c0:1b:1c:4e:11:93:a5:12:df: 76:d6:e2:63:f0:c7:7c:c4:18:37:a9:9b:12:48:f5:1f:5b:02: 6f:4c:22:b0:67:be:e0:58:2e:0c:2b:74:f0:f5:52:11:0c:06: ac:e8:56:15:3e:63:78:4d:9c:ee:7d:c7:9e:0a:e9:3b:7e:38: 65:ad:79:8d:8f:38:e7:05:54:e8:5f:cb:a9:22:94:9a:7f:55: 04:33:28:12:3c:ad:05:49:80:e5:47:da:68:f4:bc:da:bc:a1: ab:17:b5:8f:2d:09:4c:61:b2:77:fa:53:c9:38:43:4c:59:54: db:41:17:92:f5:4d:11:40:31:30:c2:fd:46:1d:3e:44:65:16: b3:e5:19:0e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSjXkir25U7Xqk/w3KQ9iLHpwCwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFB MTY5MUI1QjAeFw0yNjEwMTgwMDI0MjBaFw0yNjEwMjEwNDU4MjBaMDMxMTAvBgNV BAMTKEM4OTk4QkE5MTMxQ0JDRUQxQkNFMUYyRkRGQTA2RTgxQjNFNzNEN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeOrSJGEAogHrWVu5o90s4/PIb bd/9ScnVmHS2mx3r+LGcdtquA9UAX8FUrI2gzlk1rk41FSg1P//BTe106kvi9Q5V gbnzwc5Y916DEPZHmnWq/ZsK4HXd01xSzqDZ5XC8w4XV3XiyvT0+HNO7B5eC0kiV 12MaS+1fFJeb9kqnfDnYSeNU/hxAEz7MdE3fIDotbPrkTKvKUG9a4MMtyKyGT95N er0EK6zXuMIDIqwzAVQ3AtOUhiSfszK2imGFdUuUu+OYyJQoiyLY5mcdi8XOHR5o S4WnDfoHdArD0QBDbzzQg2fdRjfRhO6diQ2cjf9xiiQUXL8RWEFWO/lXeP3BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyJmLqRMcvO0bzh8v36BugbPnPX0wHwYDVR0j BBgwFoAUpZ+1X4s+QGlCeHi9W6f/QaFpG1swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQ2NTg1OC8wL0E1OUZCNTVGOEIzRTQwNjk0Mjc4NzhCRDVCQTdG RjQxQTE2OTFCNUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTU5RkI1NUY4QjNFNDA2OTQyNzg3OEJENUJBN0ZGNDFBMTY5MUI1Qi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc0NjU4NTgvMC9BNTlGQjU1RjhCM0U0 MDY5NDI3ODc4QkQ1QkE3RkY0MUExNjkxQjVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafx4Bpp1G50G mefjn7Bp03h5JJD5Zq3lNx0LnfZVmC0rMPLY99fJ5YX5aXv0+3l4pNPgg0XagxiC 8F7HSrwAghJ182gXAjNTSzFkVTx5cbrxK6Abk8OLDCPNMU/KPJ+9L67ifVPh6fNN cF4qM/aEou732pcEwBscThGTpRLfdtbiY/DHfMQYN6mbEkj1H1sCb0wisGe+4Fgu DCt08PVSEQwGrOhWFT5jeE2c7n3HngrpO344Za15jY845wVU6F/LqSKUmn9VBDMo EjytBUmA5UfaaPS82ryhqxe1jy0JTGGyd/pTyThDTFlU20EXkvVNEUAxMML9Rh0+ RGUWs+UZDg== -----END CERTIFICATE-----Generated at Sun Oct 18 07:01:28 2026 by rpki-client