$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft File: 1A5D93C2B21C390D054872B547EF671BC1112ED5.mft (raw, json) Hash identifier: iUGN+BgYsE1tYd6ITZw5QmQXezNc+HGbNDrnkJwBzY8= Subject key identifier: 03:38:9B:E0:33:09:99:65:BE:5B:1C:90:D2:38:BB:E4:43:63:E6:D0 Authority key identifier: 1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 Certificate issuer: /CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Certificate serial: 564890F4CF3419EEC19C71B253FC81AC9D5A565D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft Manifest number: 013A Signing time: Fri 09 Oct 2026 12:23:22 +0000 Manifest this update: Fri 09 Oct 2026 12:18:22 +0000 Manifest next update: Mon 12 Oct 2026 20:33:22 +0000 Files and hashes: 1: 1A5D93C2B21C390D054872B547EF671BC1112ED5.crl (hash: yUGDzsfVAZGNiv8+HA8WV00QaZ+XI/dUnsl9kefF1bI=) 2: 3130332e32332e382e302f32322d3232203d3e20313334373635.roa (hash: ln972wvrzSBEORo9DPPeJbIXLsmgp1iIG1BgLmdr5+g=) 3: 3130332e3230332e3134302e302f32322d3232203d3e20313334373635.roa (hash: ZjwDDfmeHi1TdKdCeuuvzyOYx2ipxq03Vh0SPR2jC34=) 4: 34332e3232382e37362e302f32322d3232203d3e20313334373635.roa (hash: 0QQ3acV5OGPw111O9u72jjimK1i0jbUIJPcTkw6FNnE=) 5: 3130332e34372e38302e302f32322d3232203d3e20313334373635.roa (hash: kU8ZpTrXY6JeDmKQWJ4S005IDbAoloAT2cFKH9NDoa4=) 6: 34332e3235342e3235322e302f32322d3232203d3e20313334373635.roa (hash: YBGoT8mUzeyt/JC8Sh5jlyNBlqC5ecvmhtvHHC0j9gM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 20:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:48:90:f4:cf:34:19:ee:c1:9c:71:b2:53:fc:81:ac:9d:5a:56:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A5D93C2B21C390D054872B547EF671BC1112ED5 Validity Not Before: Oct 9 12:18:22 2026 GMT Not After : Oct 12 20:33:22 2026 GMT Subject: CN=03389BE033099965BE5B1C90D238BBE44363E6D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:77:35:0f:cd:8d:8d:82:17:dd:f5:71:a7: 54:b1:a9:44:1b:06:81:de:04:53:8a:01:a1:b9:17: 39:a3:4e:f9:23:27:c7:c1:4f:b2:95:f0:87:f5:0c: a4:2d:40:ed:db:0a:a5:7c:f1:41:03:c5:f2:7f:22: 95:59:5d:7c:b0:9a:33:f3:00:45:77:0d:df:5a:0e: 1f:35:47:21:e4:6e:40:27:17:20:81:35:dd:a0:43: a6:ac:ff:ad:ba:c5:17:23:ec:e5:a3:98:ef:52:ae: 7a:e9:9d:0e:e7:00:ab:a4:b4:d8:02:e6:02:d6:08: b8:4d:a4:7c:4b:a2:4c:44:7d:75:c7:a0:aa:a2:f3: cb:c5:ad:ab:78:1d:b3:71:0c:66:da:e9:d8:46:a7: c1:a2:46:3a:ec:0e:ea:e7:74:a9:e7:85:5b:c3:c2: f7:ab:84:75:bd:96:93:69:05:7a:26:e5:22:78:69: 41:81:90:08:4b:45:63:72:61:f2:9d:73:a1:c4:0d: ba:8f:84:a4:f9:be:2e:02:7d:8c:75:e8:53:6e:c6: b8:be:c8:10:f6:80:42:98:f2:8f:8f:e9:21:6d:f2: 07:bf:62:76:28:3d:2f:d3:c1:96:c0:40:0a:40:03: 2a:eb:1c:a0:74:6a:a1:5f:55:e8:7e:ba:77:c9:32: 74:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:38:9B:E0:33:09:99:65:BE:5B:1C:90:D2:38:BB:E4:43:63:E6:D0 X509v3 Authority Key Identifier: keyid:1A:5D:93:C2:B2:1C:39:0D:05:48:72:B5:47:EF:67:1B:C1:11:2E:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1A5D93C2B21C390D054872B547EF671BC1112ED5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548353538/0/1A5D93C2B21C390D054872B547EF671BC1112ED5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:07:6d:b0:c4:db:b0:e9:be:c8:73:44:ec:c6:4e:dd:a8:eb: 27:7c:5b:0a:1f:4b:0b:b9:b0:47:bd:d2:27:d9:df:48:7e:54: d2:2d:65:5d:a0:33:b0:bc:0d:91:2e:a6:c2:ef:95:17:9a:d7: 61:37:40:62:2f:f6:0a:07:a5:e9:0c:3f:b5:18:2a:e8:2d:6b: 8e:91:9e:d7:53:90:4f:68:2e:71:f0:c8:5e:9c:82:12:1c:6f: 32:59:13:73:fd:c4:4a:96:d5:de:e9:fa:a3:ba:1b:c3:a4:25: c6:69:9f:64:3b:31:03:32:cd:4e:61:39:b7:62:48:2b:08:65: 53:7b:7d:c7:a4:7e:d5:7f:a7:b5:7c:fa:1f:71:a2:c2:ca:0f: 3c:ce:59:8d:d6:c5:59:bb:27:b6:96:47:26:3c:1b:41:08:4d: c3:7b:22:0e:f5:11:06:0a:0e:b4:b1:a6:2b:0d:bf:bc:ef:35: 7a:4c:a6:60:be:81:c9:fe:b6:5c:6c:27:73:cc:39:76:e3:84: d8:89:4d:9a:35:ad:9e:ec:6a:98:a7:93:b6:8e:21:17:e5:ca: 7b:30:83:32:6c:9d:29:c6:77:c1:76:9b:20:a7:f4:60:e7:51: 88:ef:e7:44:94:e4:ad:8f:8a:85:a5:5a:a0:f7:29:7f:5a:cf: 78:38:dc:e2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVkiQ9M80Ge7BnHGyU/yBrJ1aVl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJD MTExMkVENTAeFw0yNjEwMDkxMjE4MjJaFw0yNjEwMTIyMDMzMjJaMDMxMTAvBgNV BAMTKDAzMzg5QkUwMzMwOTk5NjVCRTVCMUM5MEQyMzhCQkU0NDM2M0U2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDHc1D82NjYIX3fVxp1SxqUQb BoHeBFOKAaG5FzmjTvkjJ8fBT7KV8If1DKQtQO3bCqV88UEDxfJ/IpVZXXywmjPz AEV3Dd9aDh81RyHkbkAnFyCBNd2gQ6as/626xRcj7OWjmO9SrnrpnQ7nAKuktNgC 5gLWCLhNpHxLokxEfXXHoKqi88vFrat4HbNxDGba6dhGp8GiRjrsDurndKnnhVvD wverhHW9lpNpBXom5SJ4aUGBkAhLRWNyYfKdc6HEDbqPhKT5vi4CfYx16FNuxri+ yBD2gEKY8o+P6SFt8ge/YnYoPS/TwZbAQApAAyrrHKB0aqFfVeh+unfJMnTVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAzib4DMJmWW+WxyQ0ji75ENj5tAwHwYDVR0j BBgwFoAUGl2TwrIcOQ0FSHK1R+9nG8ERLtUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODM1MzUzOC8wLzFBNUQ5M0MyQjIxQzM5MEQwNTQ4NzJCNTQ3RUY2 NzFCQzExMTJFRDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUE1RDkzQzJCMjFDMzkwRDA1NDg3MkI1NDdFRjY3MUJDMTExMkVENS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgzNTM1MzgvMC8xQTVEOTNDMkIyMUMz OTBEMDU0ODcyQjU0N0VGNjcxQkMxMTEyRUQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQdtsMTbsOm+ yHNE7MZO3ajrJ3xbCh9LC7mwR73SJ9nfSH5U0i1lXaAzsLwNkS6mwu+VF5rXYTdA Yi/2Cgel6Qw/tRgq6C1rjpGe11OQT2gucfDIXpyCEhxvMlkTc/3ESpbV3un6o7ob w6QlxmmfZDsxAzLNTmE5t2JIKwhlU3t9x6R+1X+ntXz6H3GiwsoPPM5ZjdbFWbsn tpZHJjwbQQhNw3siDvURBgoOtLGmKw2/vO81ekymYL6Byf62XGwnc8w5duOE2IlN mjWtnuxqmKeTto4hF+XKezCDMmydKcZ3wXabIKf0YOdRiO/nRJTkrY+KhaVaoPcp f1rPeDjc4g== -----END CERTIFICATE-----Generated at Sun Oct 11 16:25:54 2026 by rpki-client