$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft File: 848188DBA8D369CB93B918182269D397DE354F44.mft (raw, json) Hash identifier: PVeOc2xA0mYJCPeScpn3HjTAdB6Hxa64uKGksJxYcog= Subject key identifier: CA:2F:ED:F9:F2:80:35:A7:FC:67:FE:A7:34:8A:A9:F3:28:61:71:67 Authority key identifier: 84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 Certificate issuer: /CN=848188DBA8D369CB93B918182269D397DE354F44 Certificate serial: 11E8814B4B078507D7DCC373468001E355C200A8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft Manifest number: 0137 Signing time: Sat 26 Sep 2026 15:54:02 +0000 Manifest this update: Sat 26 Sep 2026 15:49:02 +0000 Manifest next update: Tue 29 Sep 2026 21:19:02 +0000 Files and hashes: 1: 3130332e36302e33322e302f32322d3332203d3e20313039.roa (hash: MzSW+d1QZG9GRLvksmbq6oNyDTlfux+PnhU3TrTlXko=) 2: 3131312e3232332e382e302f32322d3332203d3e20313039.roa (hash: zQZ+GZ/PmnZiTYYUgL8WbnnthSRy3dbcLyqydGTq64o=) 3: 848188DBA8D369CB93B918182269D397DE354F44.crl (hash: 687ArH7HeE7VfHaYF2qSEIruESuFKNXbrrfsjXjyHeI=) 4: 3131312e3232332e382e302f32322d3234203d3e203234343039.roa (hash: S/Wh/JVPJO7YKvn1vwUqixNT3YF0XjGX3yFXKcclN04=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e8:81:4b:4b:07:85:07:d7:dc:c3:73:46:80:01:e3:55:c2:00:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848188DBA8D369CB93B918182269D397DE354F44 Validity Not Before: Sep 26 15:49:02 2026 GMT Not After : Sep 29 21:19:02 2026 GMT Subject: CN=CA2FEDF9F28035A7FC67FEA7348AA9F328617167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:42:ab:70:c5:33:07:0e:d6:5c:7c:ff:9e:81: 62:ce:54:49:e8:9d:eb:b8:53:ba:8a:3d:f7:f2:9c: bd:b0:2e:21:9c:f5:68:ad:eb:a4:5b:3a:b8:51:9f: 05:20:b5:a4:bf:b6:76:74:95:db:86:da:5f:9f:18: bf:cf:f4:24:d9:0a:6e:1f:00:ec:fe:72:3a:de:75: c7:cf:90:4b:f4:67:2e:ea:29:fe:20:d3:c3:a1:f5: e3:29:61:8c:6f:6b:09:3c:40:f3:e2:5b:ab:e4:a9: c5:7f:8a:7f:b7:2e:3d:8e:47:42:5f:90:bc:73:9a: 66:99:13:30:5e:db:32:38:ba:6f:f9:a5:c6:c2:b6: 0a:d7:a3:c9:44:5c:bc:a8:1a:74:17:a0:2b:fe:5f: 21:14:2f:72:54:f3:cc:97:dd:7f:88:a8:0a:6f:df: 64:36:63:b1:9f:8c:11:52:71:49:3e:f6:b2:33:38: 72:de:03:02:c5:d6:ef:8c:85:34:6a:43:60:3d:98: dc:6b:ba:53:40:0f:df:4d:b4:a7:c0:f1:a0:9a:8b: 88:17:42:42:14:f1:41:e2:69:e3:2c:79:e1:9f:9f: 7b:5e:0b:48:0d:b0:6e:be:4c:d7:a9:02:53:9d:b8: 17:00:08:6a:a5:77:02:c7:86:a3:0e:e1:6b:75:d7: 28:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:2F:ED:F9:F2:80:35:A7:FC:67:FE:A7:34:8A:A9:F3:28:61:71:67 X509v3 Authority Key Identifier: keyid:84:81:88:DB:A8:D3:69:CB:93:B9:18:18:22:69:D3:97:DE:35:4F:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/848188DBA8D369CB93B918182269D397DE354F44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345757186/0/848188DBA8D369CB93B918182269D397DE354F44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:22:1f:aa:2e:45:de:f0:8e:16:6e:2c:eb:ed:9a:e4:30:7f: 36:0f:4f:8c:d7:53:7f:d7:0d:49:21:25:81:2f:6d:cb:d1:57: 81:5b:52:31:85:6a:5e:f1:f7:5e:35:61:52:06:3b:d5:71:86: 3a:d8:83:54:f9:3b:af:08:80:cf:6c:56:93:33:12:63:89:95: 01:65:cb:e6:ff:89:c2:b6:8c:08:3e:c6:4d:68:86:4c:e6:34: d3:7c:fe:c6:26:8e:4c:ca:a6:b3:ba:ad:16:cc:0c:b9:62:ab: c3:1d:15:ab:f2:4f:63:54:29:96:49:b2:f7:22:45:ce:b4:a4: 5a:0d:87:fa:10:1b:82:32:ca:40:62:28:e6:c5:d2:7c:68:3f: db:b8:4f:1b:b0:ba:59:cd:c9:55:ea:e6:fc:0b:1b:36:73:f1: f3:a4:fa:dc:b9:8d:0c:a8:8c:58:0f:1b:7a:39:b1:aa:0e:0d: 3a:4b:4a:00:ce:d3:ab:9f:d9:9e:f1:b5:c0:0f:ff:82:ea:37: 61:a0:90:ea:e9:a8:0b:36:40:00:1d:2a:6c:c9:16:61:7a:1f: 0b:21:9f:cf:03:30:ce:4b:7a:ed:47:93:8a:2d:cb:1f:83:91: a4:27:6f:81:f3:74:f6:d1:4e:39:0d:77:e6:88:f0:83:21:e4: e7:7d:18:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEeiBS0sHhQfX3MNzRoAB41XCAKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdE RTM1NEY0NDAeFw0yNjA5MjYxNTQ5MDJaFw0yNjA5MjkyMTE5MDJaMDMxMTAvBgNV BAMTKENBMkZFREY5RjI4MDM1QTdGQzY3RkVBNzM0OEFBOUYzMjg2MTcxNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQqtwxTMHDtZcfP+egWLOVEno neu4U7qKPffynL2wLiGc9Wit66RbOrhRnwUgtaS/tnZ0lduG2l+fGL/P9CTZCm4f AOz+cjredcfPkEv0Zy7qKf4g08Oh9eMpYYxvawk8QPPiW6vkqcV/in+3Lj2OR0Jf kLxzmmaZEzBe2zI4um/5pcbCtgrXo8lEXLyoGnQXoCv+XyEUL3JU88yX3X+IqApv 32Q2Y7GfjBFScUk+9rIzOHLeAwLF1u+MhTRqQ2A9mNxrulNAD99NtKfA8aCai4gX QkIU8UHiaeMseeGfn3teC0gNsG6+TNepAlOduBcACGqldwLHhqMO4Wt11yiTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUyi/t+fKANaf8Z/6nNIqp8yhhcWcwHwYDVR0j BBgwFoAUhIGI26jTacuTuRgYImnTl941T0QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTc1NzE4Ni8wLzg0ODE4OERCQThEMzY5Q0I5M0I5MTgxODIyNjlE Mzk3REUzNTRGNDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQ4MTg4REJBOEQzNjlDQjkzQjkxODE4MjI2OUQzOTdERTM1NEY0NC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU3NTcxODYvMC84NDgxODhEQkE4RDM2 OUNCOTNCOTE4MTgyMjY5RDM5N0RFMzU0RjQ0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSIfqi5F3vCO Fm4s6+2a5DB/Ng9PjNdTf9cNSSElgS9ty9FXgVtSMYVqXvH3XjVhUgY71XGGOtiD VPk7rwiAz2xWkzMSY4mVAWXL5v+JwraMCD7GTWiGTOY003z+xiaOTMqms7qtFswM uWKrwx0Vq/JPY1Qplkmy9yJFzrSkWg2H+hAbgjLKQGIo5sXSfGg/27hPG7C6Wc3J Verm/AsbNnPx86T63LmNDKiMWA8bejmxqg4NOktKAM7Tq5/ZnvG1wA//guo3YaCQ 6umoCzZAAB0qbMkWYXofCyGfzwMwzkt67UeTii3LH4ORpCdvgfN09tFOOQ135ojw gyHk530YGA== -----END CERTIFICATE-----Generated at Sun Sep 27 08:51:24 2026 by rpki-client