$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft File: E893434A32058DAFE9758FDA7B36659444C9EF8E.mft (raw, json) Hash identifier: 8/CEqFO9tvkNMoQsJhpkZ7tOYFT8f49Rjf9hwvJ0YH8= Subject key identifier: 82:67:B6:50:AB:19:1A:CA:21:45:6B:82:EF:FF:77:84:9A:51:55:A4 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 14B248E766D4AFD971C714F8102005451FBEA042 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft Manifest number: 0250 Signing time: Sun 11 Oct 2026 01:40:07 +0000 Manifest this update: Sun 11 Oct 2026 01:35:07 +0000 Manifest next update: Wed 14 Oct 2026 03:18:07 +0000 Files and hashes: 1: 3130312e3233322e3235322e302f32322d3234203d3e20323034373635.roa (hash: Jf0nSP1QjgiNIQhdrUFTjytdDY0TmEhyfIpVa+7R0NI=) 2: 3231312e3134392e35362e302f32322d3234203d3e20323034373635.roa (hash: VhRwOwc2/6uy/9jZXno2xQ/IEWxs3AJLgM3zUgVetRc=) 3: 3231312e3134392e38382e302f32322d3234203d3e20323034373635.roa (hash: re30P74Bbm0hmGv2RhIcziLM8r3Wt2LJElxw1K1ooLg=) 4: 3130312e3233322e3234382e302f32322d3234203d3e20323034373635.roa (hash: 5SXjckLKgvKsrKMfCX5zCQiw9HEgb8VVY5iiv+S/LGU=) 5: E893434A32058DAFE9758FDA7B36659444C9EF8E.crl (hash: gNJCt2PXbpd7HzWT79kM8fgE31BaVuwk97twPtk1tRg=) 6: 3130312e3233322e3232382e302f32322d3234203d3e20323034373635.roa (hash: ELull7wYpAhnMMP1UUEW0JriulkO97jfKNOmPBLe3Ao=) 7: 3131392e35392e3132392e302f32342d3234203d3e20313938393639.roa (hash: dNjRVPUi8SeJi6wfWA5kpGRV6M0Yhi+9BNbX7d5K6RM=) 8: 3231312e3134392e37322e302f32322d3234203d3e20323034373635.roa (hash: zXlo1VA9iQTDPz3KGS73pe5bQ11qgiCZzBV45rhkKNM=) 9: 3231312e3134392e33332e302f32342d3234203d3e20313937363436.roa (hash: R0/2iTeh2DLPcz2gqCFDzilBADOZ6v71FJD7uxFPFJQ=) 10: 3231312e3134392e33362e302f32322d3234203d3e20323133373035.roa (hash: vHWiz6x+VBqj0f9UFCYPCsW1JK5bYID4vJQiFZNMWjU=) 11: 3130312e3233322e3139362e302f32322d3234203d3e20323034373635.roa (hash: 3MZhZdqFlGUXrs41Ixg9lETuk2pcfcfoIp+5TjNL/f0=) 12: 3131392e35392e3133302e302f32342d3234203d3e20313938343836.roa (hash: sCJBIczjSjKHwYg4tr7Vt4b9W/CSWx+cTZb6kw5fUgI=) 13: 3231312e3134392e39322e302f32322d3234203d3e20323034373635.roa (hash: zu7A0YqOUsStSCL9XmMvV8JI6as35lqa/fkbIpxCsuU=) 14: 3231312e3134392e37362e302f32322d3234203d3e20323034373635.roa (hash: Jh9N6MjH+92KExvSY1br25KQHKZt03whAcPmQQtTsZM=) 15: 3130312e3233322e3230382e302f32322d3234203d3e20323034373635.roa (hash: zL0Dm0mURydYd7+TsCOqL5DQfpsmBMxpHIw7pKf+HsM=) 16: 3231312e3134392e34302e302f32322d3234203d3e20323034373635.roa (hash: cTF/1P0hKocHB9czSD+ya7E09e6MNaALbBW1WrMk3qw=) 17: 3231312e3134392e33342e302f32342d3234203d3e20313937363436.roa (hash: 5x/Vxtm5m5rkP6zFckDqlG3l/AjZ13Z5TGq14rxe+2s=) 18: 3130312e3233322e3234342e302f32322d3234203d3e20323034373635.roa (hash: j47sMbHM1m2pa9sdXpdOqe2ulNU6K+ubDOp951xAJ40=) 19: 3131392e35392e3133312e302f32342d3234203d3e20313938393639.roa (hash: Igedmkrmmt6w/coBrWoPE5I/S4pHWuUb36wo85gMF2M=) 20: 3130312e3233322e3139322e302f32322d3234203d3e20323034373635.roa (hash: /0sg8ccLTkO3g1ldJzbTiAFtKDlkkCPb7uCa7Ysudpo=) 21: 3231312e3134392e36302e302f32322d3234203d3e20323034373635.roa (hash: 7V36+GTIj9SXQJg7tLFnRoq+tkYB8vWy1KKimX7T6e4=) 22: 3132332e39382e302e302f32342d3234203d3e20313937353430.roa (hash: f8C6VLPJ6OvFB09dBz6mz+VP2ro/1UGGvxqqWBCcEq8=) 23: 3231312e3134392e33322e302f32342d3234203d3e20313937363436.roa (hash: E1+jSIF+26ZCWmYBRLcZrk43sgfcRZnSJXfTb4Ao+zI=) 24: 3231312e3134392e33352e302f32342d3234203d3e20313937363436.roa (hash: Im2H24Yr/6b3QfJrulqbSm/zgWvML9X71XNr/4p53L0=) 25: 3130312e3233322e3231362e302f32322d3234203d3e20323034373635.roa (hash: Idjjoy5317eBYu+nyDOXXCnOhaPQ4lKa05rCZCo6iv0=) 26: 3231312e3134392e34342e302f32322d3234203d3e20323034373635.roa (hash: JOuDarRFxX6hedZ9d+aM+Mp8ReI4i452AlyZanVV94A=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b2:48:e7:66:d4:af:d9:71:c7:14:f8:10:20:05:45:1f:be:a0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Oct 11 01:35:07 2026 GMT Not After : Oct 14 03:18:07 2026 GMT Subject: CN=8267B650AB191ACA21456B82EFFF77849A5155A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:b7:7e:3e:e3:ff:84:02:44:96:28:41:93: 2b:31:e3:9f:96:fe:16:78:62:d4:e6:bb:0d:90:b4: 5d:dd:db:b1:14:7b:a6:ca:e9:40:32:64:9d:bd:34: 07:f0:eb:88:77:c2:65:a1:c0:5f:de:90:a1:fc:85: 3b:10:a6:48:9e:66:da:21:b6:2a:dc:ba:ac:7b:0a: 9c:26:5d:54:69:41:5d:e6:f9:4e:0e:bc:81:72:a5: 83:80:39:5d:c6:1c:08:9d:3d:35:e8:c7:5a:89:13: 20:7e:3d:6b:b6:d4:84:60:a7:17:b4:57:cd:5c:5d: 18:92:ae:30:93:cc:53:b3:24:58:dd:fc:3e:f9:ac: f1:61:15:c1:71:2a:bd:86:06:b4:e6:fe:40:d4:3b: 33:a1:93:7a:17:2d:73:6e:eb:d2:a6:d9:f3:d6:43: ff:0d:71:44:f0:cb:0e:18:95:5e:e3:f3:ed:d2:6c: ba:92:ae:c0:42:db:9a:81:be:da:4c:0d:9e:92:50: e2:cf:94:48:67:72:f8:ee:f8:9a:8b:4a:9a:78:d4: 5b:00:0c:0d:26:8a:95:5f:ec:97:14:ee:ee:5f:25: 22:93:fb:98:e0:25:de:95:9e:2e:a2:05:eb:e4:ea: 18:8c:98:fc:22:02:18:ca:ef:08:48:cc:40:d8:70: ae:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:67:B6:50:AB:19:1A:CA:21:45:6B:82:EF:FF:77:84:9A:51:55:A4 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:68:c2:0a:4e:5f:53:8c:9f:76:8d:6d:a8:38:0b:f5:38:98: 3e:1f:f0:af:46:d7:a6:c0:96:63:68:bb:b4:d9:bb:49:3d:23: 4f:9c:cb:cb:f0:94:8c:50:f9:12:ab:fb:66:b0:06:e0:07:a5: fe:cf:5a:25:9b:d6:8e:ff:5e:73:72:1d:45:b9:a1:09:f5:49: 6f:41:13:99:7c:b7:97:f1:fa:1b:99:d9:0e:38:de:36:c3:a8: be:57:7e:f4:45:71:23:01:9a:ad:d4:55:a6:4c:f3:6e:08:54: b1:03:6a:4f:7c:e5:2d:d4:4d:31:0f:3b:93:f6:9c:93:7c:28: 67:d5:02:5a:46:d9:01:d5:a1:1e:bd:45:2c:e4:73:cc:db:72: 77:1e:2b:ed:e0:a9:c7:74:8b:7c:98:69:db:94:cd:1f:c7:22: 63:c5:17:f0:4d:cc:51:65:b4:ca:46:15:92:be:af:14:cf:e1: c6:9b:1c:ff:30:29:78:d9:43:c5:9a:48:78:61:2a:49:f9:9e: d1:77:9d:36:1d:5f:45:26:5b:9e:b1:88:2d:1c:e2:b5:9e:f6: 12:45:ef:c9:3d:71:68:37:f5:b5:db:35:dc:d8:b8:67:85:b8: 7e:ca:ca:d2:7e:e5:a4:15:cd:70:66:ea:ac:08:b5:8d:0b:e5: f1:47:4c:8a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFLJI52bUr9lxxxT4ECAFRR++oEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjEwMTEwMTM1MDdaFw0yNjEwMTQwMzE4MDdaMDMxMTAvBgNV BAMTKDgyNjdCNjUwQUIxOTFBQ0EyMTQ1NkI4MkVGRkY3Nzg0OUE1MTU1QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VLd+PuP/hAJElihBkysx45+W /hZ4YtTmuw2QtF3d27EUe6bK6UAyZJ29NAfw64h3wmWhwF/ekKH8hTsQpkieZtoh tircuqx7CpwmXVRpQV3m+U4OvIFypYOAOV3GHAidPTXox1qJEyB+PWu21IRgpxe0 V81cXRiSrjCTzFOzJFjd/D75rPFhFcFxKr2GBrTm/kDUOzOhk3oXLXNu69Km2fPW Q/8NcUTwyw4YlV7j8+3SbLqSrsBC25qBvtpMDZ6SUOLPlEhncvju+JqLSpp41FsA DA0mipVf7JcU7u5fJSKT+5jgJd6Vni6iBevk6hiMmPwiAhjK7whIzEDYcK7ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgme2UKsZGsohRWuC7/93hJpRVaQwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC9FODkzNDM0QTMyMDU4 REFGRTk3NThGREE3QjM2NjU5NDQ0QzlFRjhFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWjCCk5fU4yf do1tqDgL9TiYPh/wr0bXpsCWY2i7tNm7ST0jT5zLy/CUjFD5Eqv7ZrAG4Ael/s9a JZvWjv9ec3IdRbmhCfVJb0ETmXy3l/H6G5nZDjjeNsOovld+9EVxIwGardRVpkzz bghUsQNqT3zlLdRNMQ87k/ack3woZ9UCWkbZAdWhHr1FLORzzNtydx4r7eCpx3SL fJhp25TNH8ciY8UX8E3MUWW0ykYVkr6vFM/hxpsc/zApeNlDxZpIeGEqSfme0Xed Nh1fRSZbnrGILRzitZ72EkXvyT1xaDf1tds13Ni4Z4W4fsrK0n7lpBXNcGbqrAi1 jQvl8UdMig== -----END CERTIFICATE-----Generated at Mon Oct 12 01:00:06 2026 by rpki-client