$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft File: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft (raw, json) Hash identifier: O7TOrTrwQVEP++kNHUIeX/THBeXvo4Er+YASPB7g7MQ= Subject key identifier: 61:04:F4:7F:98:40:5E:9A:C1:F5:BE:B2:DA:FC:F3:56:89:26:E4:9F Authority key identifier: 89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC Certificate issuer: /CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Certificate serial: 09041FD3A02F3D4F90F7EA2A52FEA1D3021C7991 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft Manifest number: E5 Signing time: Sun 11 Oct 2026 09:35:27 +0000 Manifest this update: Sun 11 Oct 2026 09:30:27 +0000 Manifest next update: Wed 14 Oct 2026 09:41:27 +0000 Files and hashes: 1: AS0.roa (hash: KIHAu+71SBGOjZy0+m+b+9Y+nNYA3SsGqBm2BhYlMk0=) 2: 89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl (hash: MKnn4H3vIlYuPDmBooYTTzgYnxncc0n+hYT9jEv67Ow=) 3: AS4816.roa (hash: Iul7zwOvNaYW5khbgmnadlB8+QqgxtIUtvm4m1VptM8=) 4: AS134762.roa (hash: eSYTzkJ8JGMz0GlshaE/rwlFL4yUx+ZzZxHFoXYyPiw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:04:1f:d3:a0:2f:3d:4f:90:f7:ea:2a:52:fe:a1:d3:02:1c:79:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89EA1A4A8D747274C368553DCBDC64DF11309CAC Validity Not Before: Oct 11 09:30:27 2026 GMT Not After : Oct 14 09:41:27 2026 GMT Subject: CN=6104F47F98405E9AC1F5BEB2DAFCF3568926E49F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:01:29:46:b4:3f:20:af:14:37:83:8e:4c:5c: fb:a3:a1:96:63:b4:d5:ec:a5:73:29:cc:45:35:ea: 07:c3:0c:76:60:30:f7:f9:2e:7e:67:ab:4d:48:18: 81:90:ab:dd:02:09:eb:69:0c:be:58:fd:cd:9f:47: d3:40:49:f5:20:d3:f4:b7:00:87:ad:f2:52:f6:39: 5c:bf:d6:6a:f2:1f:4b:81:70:5a:60:b3:66:e4:fb: e6:91:71:85:92:ba:b4:13:5a:41:cd:6d:ac:46:b3: 7d:be:32:c3:2b:fd:30:df:1a:cf:8d:b6:21:0f:47: b2:52:17:42:53:02:7b:c7:82:bd:3d:63:52:f3:d2: 4b:f3:f9:d4:58:44:02:1a:5a:3a:75:fb:49:44:92: 30:3d:1e:79:35:e5:04:ec:f9:47:05:92:ab:5f:8b: 27:07:ca:46:e0:ac:2d:66:a2:1b:6b:fb:39:03:ea: 2d:d7:63:ab:5c:12:e9:81:9f:b6:49:af:c4:fd:1c: 22:26:90:e6:4e:36:32:a6:ab:a9:31:40:25:05:42: a6:3f:8b:64:a5:ad:f1:eb:04:52:d1:38:89:b9:93: 18:f6:ae:cf:02:45:ce:bd:c7:46:16:81:5e:51:96: f3:e8:cb:90:73:b5:e3:65:0c:57:ce:30:6c:86:04: 7b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:04:F4:7F:98:40:5E:9A:C1:F5:BE:B2:DA:FC:F3:56:89:26:E4:9F X509v3 Authority Key Identifier: keyid:89:EA:1A:4A:8D:74:72:74:C3:68:55:3D:CB:DC:64:DF:11:30:9C:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/89EA1A4A8D747274C368553DCBDC64DF11309CAC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091985366321201154/0/89EA1A4A8D747274C368553DCBDC64DF11309CAC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c0:98:ed:c7:9e:3b:44:1c:2b:2d:26:40:63:a6:83:b0:8e: c9:e0:78:3f:b2:9a:c1:b8:9e:6d:47:53:dc:c9:46:7f:b1:29: 11:f5:99:78:a1:e7:11:f9:27:12:4f:06:a0:37:47:0f:13:fd: 46:53:f0:2d:e7:61:75:30:37:19:10:94:db:7b:24:1f:59:94: 6f:78:44:78:a8:fd:b9:86:90:5e:a2:dd:8a:6b:ef:3b:c9:46: 12:25:91:24:49:60:9f:76:26:e1:43:80:db:6f:dc:90:93:57: d4:24:a7:16:c8:e8:72:7b:eb:e4:a1:29:5a:53:a1:48:9c:69: 28:16:aa:c9:9f:62:2a:36:34:cf:54:b8:a3:5a:1e:ff:b1:a2: 7f:d5:53:29:bb:50:ec:46:ed:c8:5d:06:af:ab:3b:62:37:82: 4c:3f:0a:0f:b1:95:33:bc:a9:62:db:a8:71:20:fe:f2:7a:30: b3:cc:08:fa:82:44:c9:64:43:58:b1:b3:30:c6:0f:d3:1f:08: 9c:ef:7b:48:4e:97:bc:1c:b7:1f:42:f3:e5:3e:84:cf:1d:17: 6b:2f:78:59:dc:67:70:07:2e:95:e0:17:6b:8f:69:a7:da:c8: 77:4c:8b:cf:49:78:0f:ef:8f:f0:f7:a8:ba:e0:68:d6:93:32: ee:bf:b1:4d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCQQf06AvPU+Q9+oqUv6h0wIceZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYx MTMwOUNBQzAeFw0yNjEwMTEwOTMwMjdaFw0yNjEwMTQwOTQxMjdaMDMxMTAvBgNV BAMTKDYxMDRGNDdGOTg0MDVFOUFDMUY1QkVCMkRBRkNGMzU2ODkyNkU0OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeASlGtD8grxQ3g45MXPujoZZj tNXspXMpzEU16gfDDHZgMPf5Ln5nq01IGIGQq90CCetpDL5Y/c2fR9NASfUg0/S3 AIet8lL2OVy/1mryH0uBcFpgs2bk++aRcYWSurQTWkHNbaxGs32+MsMr/TDfGs+N tiEPR7JSF0JTAnvHgr09Y1Lz0kvz+dRYRAIaWjp1+0lEkjA9Hnk15QTs+UcFkqtf iycHykbgrC1mohtr+zkD6i3XY6tcEumBn7ZJr8T9HCImkOZONjKmq6kxQCUFQqY/ i2SlrfHrBFLROIm5kxj2rs8CRc69x0YWgV5RlvPoy5BzteNlDFfOMGyGBHurAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYQT0f5hAXprB9b6y2vzzVokm5J8wHwYDVR0j BBgwFoAUieoaSo10cnTDaFU9y9xk3xEwnKwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTk4NTM2NjMyMTIwMTE1NC8wLzg5RUExQTRBOEQ3NDcyNzRDMzY4NTUzRENCREM2 NERGMTEzMDlDQUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODlFQTFBNEE4RDc0NzI3NEMzNjg1NTNEQ0JEQzY0REYxMTMwOUNBQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTE5ODUzNjYzMjEyMDExNTQvMC84OUVBMUE0QThENzQ3 Mjc0QzM2ODU1M0RDQkRDNjRERjExMzA5Q0FDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccCY7ceeO0Qc Ky0mQGOmg7COyeB4P7KawbiebUdT3MlGf7EpEfWZeKHnEfknEk8GoDdHDxP9RlPw LedhdTA3GRCU23skH1mUb3hEeKj9uYaQXqLdimvvO8lGEiWRJElgn3Ym4UOA22/c kJNX1CSnFsjocnvr5KEpWlOhSJxpKBaqyZ9iKjY0z1S4o1oe/7Gif9VTKbtQ7Ebt yF0Gr6s7YjeCTD8KD7GVM7ypYtuocSD+8nows8wI+oJEyWRDWLGzMMYP0x8InO97 SE6XvBy3H0Lz5T6Ezx0Xay94WdxncAculeAXa49pp9rId0yLz0l4D++P8PeouuBo 1pMy7r+xTQ== -----END CERTIFICATE-----Generated at Sun Oct 11 18:29:10 2026 by rpki-client