$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft File: 786588C287D0F949A379F4D51335F9423A0E03E3.mft (raw, json) Hash identifier: gXEaX6Hlb64ryiLQOg4n5CoK0zHAOt9/PovkUxlDBLg= Subject key identifier: FA:61:61:27:5C:0A:52:3E:DD:C1:B9:76:A4:6B:7F:C3:AA:77:B3:B9 Authority key identifier: 78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 Certificate issuer: /CN=786588C287D0F949A379F4D51335F9423A0E03E3 Certificate serial: 4D9C2750562ACDCFC1FAFF26244E8A37BF8ABC94 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft Manifest number: D2 Signing time: Fri 09 Oct 2026 22:38:55 +0000 Manifest this update: Fri 09 Oct 2026 22:33:55 +0000 Manifest next update: Mon 12 Oct 2026 22:42:55 +0000 Files and hashes: 1: 34322e3139352e302e302f31362d3136203d3e2030.roa (hash: 5gRW1Df9Uq+sI2cmGzcRRVxv+KqMVQ6+l+oBi0X5thE=) 2: 323430333a323734303a3a2f33322d3332203d3e2030.roa (hash: IdESYc0jNy5xZfS2MZLEfR1UMTQVz96JSTDcxEWLvUo=) 3: 3130312e3132352e3235332e302f32342d3234203d3e20313337373032.roa (hash: opKyhsmS++FYHtfTnj/kaqOGfgLAE1EmtkYwGMmQCYc=) 4: 786588C287D0F949A379F4D51335F9423A0E03E3.crl (hash: bDypiX9T/paPWPBEUfFnho03Pj5iVspKR2aP5oKLAts=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 22:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9c:27:50:56:2a:cd:cf:c1:fa:ff:26:24:4e:8a:37:bf:8a:bc:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=786588C287D0F949A379F4D51335F9423A0E03E3 Validity Not Before: Oct 9 22:33:55 2026 GMT Not After : Oct 12 22:42:55 2026 GMT Subject: CN=FA6161275C0A523EDDC1B976A46B7FC3AA77B3B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:bc:3d:cc:44:0d:77:9a:9d:b5:ca:e1:22: e5:e9:9a:fc:2f:e4:27:36:26:18:32:cd:8e:08:cc: be:49:24:c3:01:92:12:90:f7:bf:1b:30:49:77:50: bc:7a:36:d0:00:92:d6:e5:16:f0:e9:e1:db:42:5b: 1f:bf:a5:1b:98:50:60:21:7d:71:0d:03:1b:b9:0d: c2:3c:03:98:29:7d:db:1a:47:3d:3a:67:1e:c1:09: de:9a:cb:13:ee:2a:e4:33:b8:af:96:c4:27:e4:0d: e2:e0:c2:72:e3:dd:eb:c7:dd:46:ad:02:9c:bd:c9: b0:ea:20:ec:89:4d:07:2e:a2:19:90:fc:16:d0:cf: c0:03:84:1b:29:0c:58:2b:95:57:9a:6d:d8:ae:b7: 63:fa:6b:98:bf:30:7a:83:52:75:4c:ec:7f:bc:41: bf:bf:d4:dd:a5:8c:48:c4:a8:3d:cf:e5:ae:b1:b8: 37:55:92:78:b5:19:39:d0:b7:b8:8c:8b:96:49:be: bd:e0:d8:98:5a:ec:7e:6d:36:73:bc:9e:08:ad:e3: a3:4e:88:39:38:b9:b6:f0:77:87:2a:a2:14:fd:68: 94:21:06:7b:63:e1:c1:31:87:12:9b:3d:00:3f:42: 7a:30:05:85:f6:b3:91:61:70:69:b6:e4:c5:9e:f2: 65:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:61:61:27:5C:0A:52:3E:DD:C1:B9:76:A4:6B:7F:C3:AA:77:B3:B9 X509v3 Authority Key Identifier: keyid:78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:36:b0:89:72:1a:00:08:08:19:28:e8:5c:5e:75:30:3f:f8: c3:20:2d:5e:ef:b2:ea:a0:29:03:c1:b0:ee:d7:20:27:44:97: c5:36:46:44:58:73:b9:e8:e1:6e:e6:19:63:88:2a:3b:28:60: 9f:9c:ed:77:ac:55:c5:d0:3a:2c:d3:8d:4f:3a:bf:f4:b8:36: f0:bc:d4:45:c3:ba:c6:24:79:80:ea:c2:a7:c1:a8:98:76:9d: e1:b3:ca:b0:e6:c7:72:3e:37:18:c6:bd:70:93:ad:58:04:f8: 3a:64:cc:e8:04:6c:d2:07:da:41:90:21:61:5a:5a:38:d0:28: 57:52:67:74:9e:9e:bb:7c:0b:c5:6e:89:58:96:39:60:9c:ad: 8f:88:f3:9b:ad:aa:92:cb:1a:cf:e4:88:d9:e4:ce:c1:3e:bb: 96:10:2f:a8:49:0f:ab:3e:fd:78:84:1f:97:10:58:91:7f:da: a9:1f:fa:44:e9:2b:71:e5:e6:6e:ca:69:31:04:19:f3:26:13: b0:68:36:62:64:a6:76:c9:c1:5b:d0:f2:5d:55:7c:5e:57:79: c7:1f:95:31:ac:bc:b3:6b:0d:bc:aa:71:97:c7:13:bc:1b:e1: ad:3e:ba:fb:a0:21:e2:b9:bf:88:fe:18:15:50:58:ec:d8:75: 6f:96:0b:2b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTZwnUFYqzc/B+v8mJE6KN7+KvJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg2NTg4QzI4N0QwRjk0OUEzNzlGNEQ1MTMzNUY5NDIz QTBFMDNFMzAeFw0yNjEwMDkyMjMzNTVaFw0yNjEwMTIyMjQyNTVaMDMxMTAvBgNV BAMTKEZBNjE2MTI3NUMwQTUyM0VEREMxQjk3NkE0NkI3RkMzQUE3N0IzQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClgrw9zEQNd5qdtcrhIuXpmvwv 5Cc2JhgyzY4IzL5JJMMBkhKQ978bMEl3ULx6NtAAktblFvDp4dtCWx+/pRuYUGAh fXENAxu5DcI8A5gpfdsaRz06Zx7BCd6ayxPuKuQzuK+WxCfkDeLgwnLj3evH3Uat Apy9ybDqIOyJTQcuohmQ/BbQz8ADhBspDFgrlVeabdiut2P6a5i/MHqDUnVM7H+8 Qb+/1N2ljEjEqD3P5a6xuDdVkni1GTnQt7iMi5ZJvr3g2Jha7H5tNnO8ngit46NO iDk4ubbwd4cqohT9aJQhBntj4cExhxKbPQA/QnowBYX2s5FhcGm25MWe8mXJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+mFhJ1wKUj7dwbl2pGt/w6p3s7kwHwYDVR0j BBgwFoAUeGWIwofQ+UmjefTVEzX5QjoOA+MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUxOTg3Njc4NzEwOTg4OS8xLzc4NjU4OEMyODdEMEY5NDlBMzc5RjRENTEzMzVG OTQyM0EwRTAzRTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzg2NTg4QzI4N0QwRjk0OUEzNzlGNEQ1MTMzNUY5NDIzQTBFMDNFMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MTk4NzY3ODcxMDk4ODkvMS83ODY1ODhDMjg3RDBG OTQ5QTM3OUY0RDUxMzM1Rjk0MjNBMEUwM0UzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjawiXIaAAgI GSjoXF51MD/4wyAtXu+y6qApA8Gw7tcgJ0SXxTZGRFhzuejhbuYZY4gqOyhgn5zt d6xVxdA6LNONTzq/9Lg28LzURcO6xiR5gOrCp8GomHad4bPKsObHcj43GMa9cJOt WAT4OmTM6ARs0gfaQZAhYVpaONAoV1JndJ6eu3wLxW6JWJY5YJytj4jzm62qkssa z+SI2eTOwT67lhAvqEkPqz79eIQflxBYkX/aqR/6ROkrceXmbsppMQQZ8yYTsGg2 YmSmdsnBW9DyXVV8Xld5xx+VMay8s2sNvKpxl8cTvBvhrT66+6Ah4rm/iP4YFVBY 7Nh1b5YLKw== -----END CERTIFICATE-----Generated at Sat Oct 10 13:57:49 2026 by rpki-client