$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft File: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft (raw, json) Hash identifier: MTKve2oibtS8F6Z3R6/3XgX4EEEoq5vNHH1J/KsnOSg= Subject key identifier: 9B:06:63:B2:54:09:EF:FD:3C:5E:86:9B:1A:AD:58:02:16:79:72:18 Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Certificate serial: 1E3D3C16340B6CB3114F1C10FA574F4EC8BE7B7D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft Manifest number: 0139 Signing time: Mon 05 Oct 2026 00:53:25 +0000 Manifest this update: Mon 05 Oct 2026 00:48:25 +0000 Manifest next update: Thu 08 Oct 2026 12:32:25 +0000 Files and hashes: 1: 3138332e38312e3137332e302f32342d3234203d3e20313334373030.roa (hash: lC9BH/8Dkc5XyJPt1hnvPrCRZqXceORZdULnSdFi0Yk=) 2: 3138332e38312e3137322e302f32342d3234203d3e20313334373030.roa (hash: pP2HsBw8GbLJ8b/HmmvEmloPtB3FX7UWLbclVHLtD/Q=) 3: 3131342e3131322e332e302f32342d3234203d3e20313334373030.roa (hash: pMkr4NT6GJvyZexXjysfHkprjU2pT3si++sOJw16JLE=) 4: 3130332e32302e34342e302f32342d3234203d3e20313334373030.roa (hash: X2zulMdAN7rsvwTgL+Vh9cmDskH+HpHFJbGbdH5qCL8=) 5: 3138332e38312e3137342e302f32342d3234203d3e20313334373030.roa (hash: gmGr7tb+LJTZbz2XvRkEJr+CEAbCgnv2Ur01noSTdE8=) 6: 3138322e35302e362e302f32342d3234203d3e20313334373030.roa (hash: ytyDh9Lr8tKa9QM9mNvELKanc8jjPZxpn6X8jbNKF7o=) 7: 3131362e3139362e31352e302f32342d3234203d3e20313334373030.roa (hash: 6lUh4H/tWfmt6Eo7IJApDXDqi/4+5MMSqK6+ovuN2NY=) 8: 3230322e36392e372e302f32342d3234203d3e20313334373030.roa (hash: 4n0Qyy7FcC7jUzGPnq9KSZS09KYvJ+E8IYZo+rkyA38=) 9: 3138322e35302e352e302f32342d3234203d3e20313334373030.roa (hash: Hc6qPVaMuIOmLxt0qBk9KufKDt6pDV+7wig6bn4hjro=) 10: 3131342e3131322e31352e302f32342d3234203d3e20313334373030.roa (hash: qGGN9z1v3J7blrnZfsZh1ZYNPqm6d1dGjMNkeBUwoBw=) 11: 3131342e3131322e312e302f32342d3234203d3e20313334373030.roa (hash: AxAmAqNBGwbgJ1KIWPX8PWjqXDXzngLGjooerBZTBeM=) 12: 3131342e3131322e31342e302f32342d3234203d3e20313334373030.roa (hash: UhMCkMnvGroSwQ7ia+m7IKuB2v4mMQqHNofiuVYxCx0=) 13: FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl (hash: zIFNABxMReB2PnnodYFY9oARrLEzm19NGu4Kt3y/+wU=) 14: 3130332e32302e34352e302f32342d3234203d3e20313334373030.roa (hash: rIstrkT87fdp0wtxjRupmhJeeERGmKAjq11MMup2jig=) 15: 3138322e35302e372e302f32342d3234203d3e20313334373030.roa (hash: HJEdqcX2Jt3b2ii8CCL6/rg/TVCpvfDAV+WX25IkB3E=) 16: 3138332e38312e3137352e302f32342d3234203d3e20313334373030.roa (hash: uGrRlKYLTK/sFUT1l1tlQ69aFEKSWWPVInTfU1ROs+c=) 17: 3230322e36392e362e302f32342d3234203d3e20313334373030.roa (hash: CYP2YPEp8Kc9YlJ9Nuiwh9AIGy11PgG48aHgzQAQudM=) 18: 3130332e32302e34372e302f32342d3234203d3e20313334373030.roa (hash: +O7jCarcVhvkxjOG9WOSwYElZHlomMQOH8c2i2+MVfc=) 19: 3131342e3131322e302e302f32342d3234203d3e20313334373030.roa (hash: tjD/TrqFoZzLIuXKc0gCp7+vVTuql9sVd0NTSQ+0eac=) 20: 3131342e3131322e322e302f32342d3234203d3e20313334373030.roa (hash: +2G6erfa1rLR6JGdLwaEKJTHVZA9qtqDhBJ39tqXT1I=) 21: 3138322e35302e342e302f32342d3234203d3e20313334373030.roa (hash: 7CecH3wQQhP3mriuWVbByAow+9bSvF5UFIWjRKR4SNQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Oct 2026 14:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3d:3c:16:34:0b:6c:b3:11:4f:1c:10:fa:57:4f:4e:c8:be:7b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Validity Not Before: Oct 5 00:48:25 2026 GMT Not After : Oct 8 12:32:25 2026 GMT Subject: CN=9B0663B25409EFFD3C5E869B1AAD580216797218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:74:b5:d7:d7:b3:0e:c0:5d:9f:08:7b:4b:ca: e5:7a:01:dd:ca:26:5f:3e:98:f5:ac:b5:29:24:6c: 1e:01:a1:2c:a4:b4:b0:99:d4:ac:a9:0e:95:dc:df: 4e:42:24:f2:45:e6:a0:6f:32:f9:aa:53:93:38:ef: 0d:10:40:3d:de:b7:31:42:e3:fa:9e:d3:dd:fe:70: 5e:cc:b0:d6:bc:54:3f:39:21:f5:bf:b9:89:3d:e3: a4:3d:d6:c7:3f:18:78:f3:16:85:fc:f4:95:b7:1c: 8d:92:36:0d:ea:36:ff:3b:15:dc:64:3e:55:1f:86: ff:c3:ab:e9:ae:b0:23:d9:9d:e4:f3:cd:35:6c:b7: dd:31:87:b9:9c:fd:e4:e8:b9:a1:21:e1:d3:ab:02: 70:2d:4e:4e:6e:cc:51:03:41:8c:e3:38:6e:64:18: fa:44:b2:89:8d:b4:9d:53:00:0e:60:22:71:a1:c3: 50:0b:bb:a1:45:09:04:0c:4c:15:52:23:b0:c0:aa: 29:13:b1:91:cf:91:4c:9c:26:a0:80:97:5d:1a:cc: 59:9b:5b:91:a9:65:9d:e1:6c:c1:9a:f6:03:81:29: 81:2f:21:da:31:b3:0f:79:30:c9:a9:a6:97:4c:53: a7:d4:50:f8:e2:c5:ef:f3:27:1c:13:12:4c:45:ef: 50:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:06:63:B2:54:09:EF:FD:3C:5E:86:9B:1A:AD:58:02:16:79:72:18 X509v3 Authority Key Identifier: keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:02:99:55:f6:e5:58:5f:13:f4:09:0d:bd:d7:d0:a3:e1:f5: 4c:de:11:39:82:13:0e:33:d1:75:7f:12:bd:6a:5d:4c:e7:a4: 68:83:1f:63:f6:c2:88:d1:f0:4c:ee:a0:c8:84:cb:84:bc:3f: b1:91:fd:d2:f7:95:4d:20:b6:28:50:3f:15:b5:9f:bb:82:c7: e7:aa:11:fa:cf:0b:57:02:bf:0c:dc:47:78:dd:90:c9:e9:07: 25:85:56:19:05:40:4f:36:15:1c:cb:4d:ed:73:2a:a3:d9:2c: 72:f6:1b:2c:3c:82:31:65:9d:d8:2f:f3:69:b3:e8:ef:d2:fd: c6:ce:ee:e3:95:2d:bd:85:b6:e9:fd:21:98:c1:bb:7e:17:89: 66:cd:4d:be:72:6f:73:c8:cb:72:f6:99:0a:44:2c:18:0b:64: c4:da:a7:47:40:cf:0f:57:54:e9:0c:ae:59:ca:1b:b1:90:5e: 1c:d4:b5:5f:57:49:bd:af:04:fa:01:ca:59:67:00:9c:47:1c: 4f:f4:b9:6a:b6:7c:6e:1a:04:b9:bb:d1:2c:c3:05:bf:77:7f: 57:da:80:35:e8:8b:69:c6:9d:1b:9e:20:f5:56:8f:53:a9:0e: 2c:5c:90:15:ea:0c:ce:8c:36:ec:ab:85:40:79:7a:86:08:f5: 63:26:4e:0b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHj08FjQLbLMRTxwQ+ldPTsi+e30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1 M0Y5MzdFMTAeFw0yNjEwMDUwMDQ4MjVaFw0yNjEwMDgxMjMyMjVaMDMxMTAvBgNV BAMTKDlCMDY2M0IyNTQwOUVGRkQzQzVFODY5QjFBQUQ1ODAyMTY3OTcyMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMdLXX17MOwF2fCHtLyuV6Ad3K Jl8+mPWstSkkbB4BoSyktLCZ1KypDpXc305CJPJF5qBvMvmqU5M47w0QQD3etzFC 4/qe093+cF7MsNa8VD85IfW/uYk946Q91sc/GHjzFoX89JW3HI2SNg3qNv87Fdxk PlUfhv/Dq+musCPZneTzzTVst90xh7mc/eTouaEh4dOrAnAtTk5uzFEDQYzjOG5k GPpEsomNtJ1TAA5gInGhw1ALu6FFCQQMTBVSI7DAqikTsZHPkUycJqCAl10azFmb W5GpZZ3hbMGa9gOBKYEvIdoxsw95MMmpppdMU6fUUPjixe/zJxwTEkxF71D9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmwZjslQJ7/08XoabGq1YAhZ5chgwHwYDVR0j BBgwFoAU/05o7RCqsH2PTuwF/QNFeVP5N+EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTU5MDc4Ny8wL0ZGNEU2OEVEMTBBQUIwN0Q4RjRFRUMwNUZEMDM0 NTc5NTNGOTM3RTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1OTA3ODcvMC9GRjRFNjhFRDEwQUFC MDdEOEY0RUVDMDVGRDAzNDU3OTUzRjkzN0UxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAKZVfblWF8T 9AkNvdfQo+H1TN4ROYITDjPRdX8SvWpdTOekaIMfY/bCiNHwTO6gyITLhLw/sZH9 0veVTSC2KFA/FbWfu4LH56oR+s8LVwK/DNxHeN2QyekHJYVWGQVATzYVHMtN7XMq o9kscvYbLDyCMWWd2C/zabPo79L9xs7u45UtvYW26f0hmMG7fheJZs1NvnJvc8jL cvaZCkQsGAtkxNqnR0DPD1dU6QyuWcobsZBeHNS1X1dJva8E+gHKWWcAnEccT/S5 arZ8bhoEubvRLMMFv3d/V9qANeiLacadG54g9VaPU6kOLFyQFeoMzow27KuFQHl6 hgj1YyZOCw== -----END CERTIFICATE-----Generated at Mon Oct 5 19:25:54 2026 by rpki-client